Privacy Policy — How acr444 Protects Your Personal Data

1 Information We Collect

acr444 collects personal information from members and visitors through several channels — directly from you during registration and account use, automatically through your device and browser when you access our platform, and occasionally from third-party verification and payment partners. We collect only the information that is reasonably necessary to deliver and improve our services, comply with applicable obligations, and ensure the security and integrity of our platform.

Information You Provide Directly

When you register an account or interact with acr444, you may provide the following categories of personal information:

• Identity Data: Full legal name, date of birth, gender, and national identity number (NID) or passport number for age and identity verification purposes.
• Contact Data: Email address, mobile phone number, and residential address including district (e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Financial Data: Mobile financial service details (bKash, Nagad, Rocket, Upay wallet numbers), bank account references (Dutch-Bangla Bank, BRAC Bank), and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored on our servers.
• Account Credentials: Username and hashed password. We never store passwords in plain text.
• Communications Data: Messages sent to our support team via email at [email protected], including any attachments or documents submitted in connection with KYC or dispute resolution.
• Verification Documents: Copies of government-issued identity documents, utility bills, or bank statements submitted as part of our Know Your Customer (KYC) process.

Information Collected Automatically

When you visit or use the acr444 platform, our systems automatically collect certain technical and behavioural data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited, game sessions played, betting history, session duration, click patterns, deposit and withdrawal activity, and promotional offer interactions.
• Cookie & Tracking Data: Data collected through cookies, local storage, and similar tracking technologies. See Section 5 (Cookies & Tracking) for full details.
• Log Data: Server-side logs recording platform interactions, error events, and security-related activity, retained for platform integrity and fraud prevention purposes.

Information from Third Parties

We may receive limited personal data about you from trusted third-party partners where this is lawful and necessary for our operations. This includes identity verification results from KYC service providers, fraud-scoring data from payment processors, and aggregate analytics from platform analytics tools. We do not purchase or receive marketing lists from third parties for the purpose of unsolicited outreach.

2 How We Use Your Data

acr444 uses the personal data we collect for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. Below is a summary of the primary purposes for which your data is processed:

Marketing Communications

acr444 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and new game releases — but only where you have given explicit consent to receive such communications at the time of registration or through your account preferences. You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected] or updating your notification preferences in your account settings. Opting out of marketing will not affect the delivery of transactional or account-related messages.

3 Legal Basis for Processing

acr444 processes your personal data only where we have a valid legal basis for doing so. The legal bases we rely upon are as follows:

• Contract Performance: Processing is necessary to deliver the services you have contracted with us to receive — including account management, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and obligations, including anti-money laundering (AML) requirements, age verification obligations, and fraud prevention measures.
• Legitimate Interests: Processing is carried out in pursuit of our legitimate business interests where these are not overridden by your privacy rights. This includes platform security, fraud detection, analytics, and service improvement. We apply a balancing test before relying on this basis.
• Consent: For processing activities where neither of the above bases applies — in particular, the sending of marketing communications and the use of non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4 Data Sharing & Disclosure

acr444 does not sell your personal data to third parties under any circumstances. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle your data securely and in accordance with applicable data protection standards.

Service Providers and Technology Partners

We share necessary data with third-party service providers who assist us in operating the acr444 platform. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment processors receive transaction data necessary to complete your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party verification services receive your identity documents and data to perform age and identity checks on our behalf.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and gameplay data necessary to deliver their game titles on the acr444 platform.
• Platform Analytics Tools: Aggregate, anonymised usage data may be shared with analytics providers to help us understand platform performance and improve user experience.
• Fraud Prevention and Security Services: We work with security technology partners to detect and prevent fraudulent activity, sharing device and session data where required.

Legal and Regulatory Disclosure

acr444 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to investigate suspected fraud, money laundering, or other unlawful activity. We will notify you of such disclosures where permitted by law.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of acr444's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account.

5 Cookies & Tracking

acr444 uses cookies and similar technologies (such as local storage and session tokens) to ensure the platform functions correctly, to keep you securely logged in, and to understand how members interact with the site. This section explains the types of cookies we use and how you can manage them.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your game state, and handle security tokens. The platform cannot operate without them, and they do not require your consent.
• Functional Cookies: These remember your preferences such as language settings, game lobby view preferences, and notification choices, enabling a more personalised experience on return visits.
• Performance and Analytics Cookies: These collect anonymised data on how users navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data helps us improve the platform experience.
• Marketing and Preference Cookies: With your consent, we use these cookies to serve relevant promotional content and to track the effectiveness of our campaigns. You may opt out of these at any time.

Managing Your Cookie Preferences

You can manage or disable cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, accept only certain types, or delete existing cookies. Note that disabling strictly necessary cookies will impair your ability to use the acr444 platform. Disabling functional or analytics cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

For details on managing cookies in commonly used browsers, refer to the help documentation for your specific browser. acr444 does not currently respond to browser-based "Do Not Track" signals, but we honour consent choices made explicitly through our platform preferences.

6 Data Retention

acr444 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Our standard data retention practices are as follows:

• Active Account Data: Retained for the full duration of your account membership.
• Closed Account Data: Following closure of your account, core identity and financial records are retained for a minimum of five years in compliance with anti-money laundering record-keeping obligations.
• Transaction Records: Individual transaction logs (deposits, withdrawals, game rounds) are retained for a minimum of five years.
• KYC Documents: Identity verification documents are retained for the duration of your account and for five years following closure.
• Support Communications: Email and support ticket records are retained for three years following the closure of the relevant support interaction.
• Marketing Consent Records: Consent logs are retained for the duration of membership and for two years following account closure, as evidence of lawful processing.
• Log and Security Data: Server and security logs are retained for up to 12 months unless required to be preserved in connection with an active investigation or legal proceeding.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymous aggregated data may be retained indefinitely for statistical and analytical purposes.

7 Your Privacy Rights

As a member of acr444, you hold a number of rights in relation to your personal data. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected. You can update basic profile information directly from your account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our obligations to retain data for legal and regulatory compliance purposes.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We aim to respond to all privacy rights requests within 30 days. Where a request is complex or numerous, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reason for it.

8 Data Security

acr444 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following key controls:

• SSL/TLS Encryption: All data transmitted between your device and acr444 servers is encrypted using industry-standard SSL/TLS technology. Look for the padlock icon in your browser's address bar when using the platform.
• Password Hashing: Account passwords are stored as one-way cryptographic hashes using modern hashing algorithms. We never store or transmit passwords in plain text.
• Access Controls: Strict role-based access controls govern which members of the acr444 team can access personal data, and only on a need-to-know basis relevant to their job function.
• Payment Security: Full payment card numbers are never stored on acr444 servers. Card transactions are processed through PCI-DSS compliant payment processors. Mobile wallet transactions via bKash, Nagad, and Rocket are handled through official API integrations with those providers.
• Two-Factor Authentication: Where available on the platform, we strongly encourage members to enable two-factor authentication (2FA) to add an additional layer of account security.
• Regular Security Reviews: Our platform undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.

While acr444 implements robust security measures, no digital platform can guarantee absolute security. You are also responsible for keeping your login credentials secure and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9 Third-Party Services

The acr444 platform integrates with a number of third-party services to deliver a complete gaming and payments experience to Bangladeshi players. When you interact with these third-party services through our platform, their own privacy policies may apply to the data they collect and process independently of acr444.

Third-party service categories include game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), identity verification and KYC providers, and platform analytics and security services.

acr444 takes reasonable steps to ensure that all third-party partners with whom we share personal data are bound by appropriate data processing agreements and maintain data protection standards consistent with our own obligations. However, acr444 is not responsible for the independent privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service you interact with directly.

The acr444 platform does not contain links to third-party websites for advertising or affiliate purposes. All links and navigation on acr444.net remain within the acr444 platform ecosystem.

10 Policy Updates

acr444 reserves the right to update, amend, or replace this Privacy Policy at any time. The most current version of the Policy will always be available at acr444.net/privacy-policy, and the effective date displayed at the top of this document will be updated to reflect when changes were last made.

Where changes to this Policy are material — for example, where we introduce a new purpose for processing your personal data or make significant changes to how we share your data — we will notify active members via the email address registered on their account at least 14 days prior to the change taking effect, where reasonably practicable.

Your continued use of the acr444 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with the updated terms, you should discontinue use of the platform and contact [email protected] to arrange closure of your account.

11 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way acr444 handles your personal data, our support team is available 24 hours a day, 7 days a week.

Email: [email protected]

Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

Response Time: General enquiries within 24 hours; privacy rights requests within 30 days.

Service Areas: Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all 64 districts of Bangladesh.

For responsible gaming concerns, please visit our dedicated Responsible Gaming page. For the full terms governing your use of the platform, please review our Terms & Conditions.