365ach Privacy Policy

• 👤
  Identity Data

  Full legal name, date of birth, national ID or passport number, and profile username as provided during registration.
• 📬
  Contact Data

  Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna).
• 💳
  Financial Data

  Payment method identifiers (e.g., bKash account number, Nagad number, Rocket number), transaction histories, deposit and withdrawal amounts in BDT (৳), and bank account details where applicable.
• 🎮
  Gaming Activity Data

  Bet history, game sessions, wager amounts, win/loss records, bonus usage, and preferred game categories (slots, cricket betting, live casino, etc.).
• 📱
  Technical Data

  IP address, device type and operating system, browser type and version, session timestamps, and referring URL.
• 🗣️
  Communications Data

  Records of correspondence with our support team, including the content of chat messages and emails sent to [email protected].
• 📋
  Verification Documents

  Copies of government-issued identification and proof of address submitted during the KYC (Know Your Customer) verification process.

The primary reason 365ach collects personal data is to create and manage your player account, process your deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment channels, and provide you with access to all casino games, live dealer tables, and sports betting markets available on the platform. Without this data, we cannot provide you with a functioning account or personalised experience.

365ach is required to verify the identity of all players as part of its Know Your Customer (KYC) obligations. We use identity data, financial data, and technical data to confirm that you are who you claim to be, that you meet the minimum age requirement of 21 years, that your payment methods belong to you, and that your account activity does not indicate fraud, money laundering, or other prohibited conduct. This processing is necessary for compliance with applicable regulations and for the protection of all users on the platform.

We use gaming activity data and behavioural patterns to monitor for signs of problem gambling. This includes tracking changes in deposit frequency, bet sizes, session lengths, and self-reported concerns. Where our monitoring identifies potential risks, we may proactively contact you to offer responsible gaming tools such as deposit limits, session time limits, cooling-off periods, or self-exclusion. This processing is carried out in the legitimate interests of player welfare and responsible operation of the platform.

When you contact the 365ach support team, we use your identity data, account data, and the content of your communications to investigate and resolve your query efficiently. Support records are retained for a period consistent with our data retention policy (see Section 7) and may be reviewed for quality assurance, training purposes, and dispute resolution.

Where you have opted in to marketing communications, we may use your contact data and gaming activity data to send you relevant promotional offers, bonus notifications, and platform updates. You may withdraw your marketing consent at any time by contacting our support team. Withdrawal of marketing consent has no effect on your account access or other rights under this policy.

We use aggregated and anonymised technical data and gaming activity data to analyse platform performance, identify areas for improvement, optimise game selection, and develop new features. Where analytics data is fully anonymised, it no longer constitutes personal data and falls outside the scope of this policy.

To process your deposits and withdrawals, we share necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers act as data processors under contractual obligations that require them to protect your data and use it only for payment processing purposes.

When you participate in games supplied by third-party studios — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — your gaming session data may be transmitted to those studios for the purpose of game delivery, fairness auditing, and technical support. Studio partners are contractually bound to handle this data in accordance with applicable data protection standards.

365ach may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, court order, or formal regulatory request. We will inform you of any such disclosure to the extent we are legally permitted to do so.

In the event that 365ach undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you in advance of any such transfer and ensure that the receiving entity is bound by data protection obligations no less stringent than those set out in this policy.

365ach uses cookies and similar tracking technologies to operate the platform and improve your experience. The categories of cookies we deploy are:

• Essential cookies: Required for core platform functionality including session management, login state, and security controls. These cannot be disabled without rendering the platform non-functional.
• Performance cookies: Used to collect anonymised data on how users navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps us optimise the platform experience.
• Preference cookies: Used to remember your platform settings and preferences across sessions, such as display preferences and notification choices.
• Analytics cookies: Used to generate aggregated reports on platform usage patterns. Data collected via analytics cookies is anonymised before analysis.

You may control and delete cookies through your browser settings. Please be aware that disabling non-essential cookies may affect certain platform features and your overall experience. Essential cookies cannot be disabled via browser settings while you remain logged in to your 365ach account, as they are required to maintain your session securely.

365ach implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction, and unlawful processing. Our technical safeguards include SSL/TLS encryption for all data in transit, encryption of sensitive data fields at rest within our database systems, role-based access controls that restrict internal access to personal data on a strict need-to-know basis, automated intrusion detection and monitoring systems, and regular third-party security audits of our platform infrastructure.

In addition to technical controls, 365ach maintains internal data protection policies that govern how our team members handle personal data. All personnel with access to player data receive data protection training and are bound by confidentiality obligations. Access to personal data is logged, audited, and reviewed periodically. In the event of a confirmed data breach that poses a risk to your rights, we will notify affected players without undue delay.

While 365ach takes every reasonable precaution to protect your data, the security of your account is also dependent on the strength and confidentiality of your login credentials. You are responsible for choosing a strong, unique password and for keeping it private. If you suspect your account has been compromised, contact our support team immediately at [email protected] (not a clickable link — please type this address manually into your email client).

365ach retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. As a general guide: active account data is retained for the full duration of your account relationship with 365ach; financial transaction records are retained for a minimum of five years following the date of the transaction, in compliance with anti-money-laundering regulations; KYC and identity verification documents are retained for a minimum of five years following account closure; support correspondence is retained for two years from the date of the interaction; and marketing preference records are retained until you withdraw consent or close your account.

Once the applicable retention period has expired and there is no outstanding legal basis for continued processing, your personal data will be securely deleted or irreversibly anonymised. Anonymised data — which can no longer be linked back to any individual — may be retained indefinitely for statistical and analytical purposes.

365ach may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes, we will post the updated policy on this page with a revised effective date and, where appropriate, notify active account holders via the email address registered to their account. We encourage you to review this policy periodically to stay informed about how 365ach protects your data.

Your continued use of the 365ach platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised terms, you should cease using the platform and contact our support team to request account closure and data deletion in accordance with your rights under Section 8 of this policy.