ac44 Privacy Policy

01 Introduction

ac44 ("we", "us", "our") operates the online casino and sports betting platform accessible at ac44.io, serving players in Bangladesh. This Privacy Policy sets out in detail how ac44 collects, uses, stores, shares, and protects the personal information of individuals ("you", "your") who visit, register on, or otherwise interact with the ac44 platform.

We recognise that privacy is a fundamental right. The purpose of this document is to give you clear, honest, and accessible information about our data practices so you can make informed decisions about sharing your personal information with us. We are committed to being transparent, and to handling your data in accordance with applicable data protection principles.

This Privacy Policy should be read alongside the ac44 Terms and Conditions and the ac44 Responsible Gaming Policy, both of which form part of your overall agreement with ac44. By registering an Account or by continuing to use the ac44 platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective as of 1 January 2026. We will notify registered players of any material changes via the email address associated with their account.

02 Data We Collect

ac44 collects personal data in the following categories, depending on your interaction with the platform:

We collect this data directly from you when you register, make transactions, or contact our support team. We also collect Technical Data and Usage Data automatically when you access the platform, using cookies and server-side logging. We do not collect sensitive personal data such as medical history, racial or ethnic origin, or political opinions, except where you voluntarily provide health-related information in the context of a responsible gaming self-exclusion request.

03 How We Use Your Data

ac44 uses the personal data it collects for the following purposes:

• Account Management: To create and maintain your registered Account, verify your identity at registration and during KYC reviews, and manage your Account settings and preferences.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels denominated in BDT, and to maintain accurate financial records.
• Platform Operations: To deliver casino games, live sports betting markets (including BPL and IPL cricket), and all other platform features to you during your sessions.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and any other conduct that breaches our Terms and Conditions or applicable law.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to administer deposit limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your queries, complaints, and data requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Marketing & Promotions: To send you promotional communications about bonuses, seasonal offers (such as BPL season promotions or Eid special offers), and platform updates, where you have provided your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyse aggregated usage data in order to improve the performance, usability, and content of the ac44 platform, and to develop new features for our Bangladeshi player base.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including anti-money laundering obligations, and to respond to lawful requests from competent authorities.

04 Legal Basis for Processing

ac44 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions, including account management, payment processing, and game delivery.
• Legitimate Interests: Processing carried out in pursuit of ac44's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, KYC requirements, and responses to lawful authority requests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing & Third Parties

ac44 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We share your personal data only in the following circumstances and only to the extent necessary:

• Game Providers: Third-party game suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive technical session data necessary to deliver games. These providers operate their own data protection frameworks and are contractually obligated to handle data securely.
• Payment Processors: Mobile Financial Services providers (bKash, Nagad, Rocket, Upay) and card processors (Visa, Mastercard) receive only the transaction data necessary to process your deposit or withdrawal in BDT. ac44 does not store full card or MFS account numbers on its own servers.
• Identity Verification Partners: Where ac44 uses third-party KYC services to verify NID documents or other identity records, those providers receive only the data strictly required for verification purposes and are bound by data processing agreements.
• Analytics Providers: Aggregated and anonymised usage data may be shared with analytics service providers for the purpose of improving platform performance. No individually identifiable data is shared for analytics purposes.
• Legal & Regulatory Authorities: ac44 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect the rights or safety of ac44, its players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of ac44's business assets, personal data held by ac44 may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

06 Cookies & Tracking

ac44 uses cookies — small text files stored on your browser or device — and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your ac44 Account and using core platform features. Disabling optional cookies will not affect your ability to play games or make transactions, but may reduce the personalisation of your experience.

ac44 does not use cookies to serve third-party advertising or to build profiling data sold to external parties. Analytics cookies, where used, produce only aggregated reports that do not identify individual players.

07 Data Retention

ac44 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your Account being active on the platform, plus a minimum of five (5) years following account closure, in line with standard financial compliance requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable anti-money laundering regulations.
• Transaction Records: All deposit and withdrawal records in BDT are retained for a minimum of five (5) years following the transaction date.
• Support Communications: Chat transcripts and email records are retained for three (3) years from the date of the communication, or until a related dispute is resolved, whichever is later.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, plus a reasonable period thereafter to record your opt-out preference.
• Technical & Usage Logs: Server logs and session data are retained for up to twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

08 Data Security

ac44 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and ac44 servers is encrypted using Transport Layer Security (TLS), preventing interception in transit.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing. ac44 staff cannot access your password in plain text, and ac44 will never ask you to provide your password via email or chat.
• Access Controls: Internal access to personal data is restricted to ac44 staff and contractors who have a legitimate business need to access it, and is governed by role-based access controls and audit logging.
• Secure Infrastructure: ac44 servers are hosted in facilities with physical security controls, redundant backups, and monitoring systems. Regular security assessments are conducted to identify and remediate vulnerabilities.
• Fraud Detection Systems: Automated systems monitor account activity for suspicious patterns, including unusual login locations, rapid deposit/withdrawal cycles, and potential multi-account behaviour.

09 Your Rights

As a player on the ac44 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your Account username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data that ac44 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain Account details directly within your Account settings.
• Right to Erasure: You may request that ac44 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restriction: You may request that ac44 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interests, including profiling for direct marketing purposes. You may opt out of marketing communications at any time through your Account settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ac44 will respond to all data rights requests within 30 calendar days. In cases of complexity or high volume, we may extend this period by a further 30 days, and will notify you accordingly. There is no charge for exercising your rights, except in cases of manifestly unfounded or repetitive requests.

10 Children & Minors

ac44 does not intentionally collect, process, or store personal data belonging to minors. Our registration process includes age verification steps designed to prevent underage access. If ac44 becomes aware that personal data belonging to a person under 21 has been collected — whether through a false age declaration at registration or any other means — we will promptly close the associated Account, void all associated bets and transactions, and securely delete the personal data in question.

If you are a parent or guardian and believe that your child has registered on ac44, please contact us immediately at [email protected] with the subject line "Underage Account" and we will take immediate action.

11 International Transfers

ac44 is a platform designed primarily for players in Bangladesh. However, the operation of the platform may involve the transfer of personal data to third-party service providers — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — whose servers and processing infrastructure may be located outside Bangladesh.

Where personal data is transferred internationally, ac44 takes steps to ensure that an appropriate level of protection is maintained. This includes entering into data processing agreements with service providers that incorporate standard contractual clauses or equivalent safeguards, and conducting due diligence on the security practices of receiving parties.

By registering an Account and using the ac44 platform, you acknowledge that your data may be processed in countries outside Bangladesh as described in this section. ac44 will always ensure that any such transfer is governed by appropriate contractual protections and that your data is handled securely.

12 Changes to This Policy

ac44 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The current version of this Privacy Policy will always be accessible at ac44.io/privacy-policy and will display the effective date at the top of the document.

Where changes to this Privacy Policy are material — meaning they affect how we collect, use, or share your data in a way that may impact your rights — we will notify registered players by sending a notification to the email address associated with their Account prior to the changes taking effect. Your continued use of the ac44 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how ac44 protects your personal information.

13 Contact & Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, please contact the ac44 data support team:

We aim to acknowledge all privacy-related queries within 48 hours and to provide a full response within 30 calendar days. For requests involving large volumes of data or complex legal questions, we may require up to 60 days and will inform you of any extension in advance.

This Privacy Policy was last updated on 1 January 2026 and is effective from that date. Thank you for trusting ac44 with your personal information. We take that responsibility seriously and remain committed to protecting your privacy at every step of your gaming experience.