ac99 Privacy Policy

1. Information We Collect

When you register an account with ac99, use our platform, or contact our support team, we collect certain personal information about you. The categories of information we collect, and the circumstances in which we collect them, are set out below.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and a chosen username and password when you create your ac99 account.
• Identity verification documents: Copies of your National Identity Card (NID), passport, or driving licence when requested as part of the account verification process.
• Financial information: The mobile financial service account numbers (bKash, Nagad, Rocket, or Upay) you use for deposits and withdrawals. ac99 does not store full payment credentials — transaction references are processed securely through the respective payment provider APIs.
• Communications data: Records of any messages, emails, or live chat interactions you have with the ac99 support team, including the content of those communications and metadata such as timestamps.
• Self-reported information: Any information you voluntarily provide through responsible gaming tools, account settings, or promotional opt-in forms, such as deposit limits or preferred notification preferences.

1.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage and behavioural data: Pages visited on ac99.club, games launched, bet amounts, session duration, click patterns, and navigation paths through the platform.
• Session and cookie data: Session identifiers, authentication tokens, and cookie values used to maintain your logged-in state and preferences. See the Cookies section below for full detail.
• Transaction logs: Records of every deposit, withdrawal, bet placement, game round result, bonus credit, and account balance change, including timestamps and transaction reference numbers.

2. How We Use Your Information

ac99 uses the personal data we collect for the following purposes:

ac99 does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated systems are used for fraud detection, any account action resulting from an automated flag is reviewed by a member of the ac99 compliance team before enforcement.

3. Legal Basis for Processing

ac99 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to provide the services you have requested, including account creation, game play, and payment processing. Without this data, ac99 cannot fulfil its obligations to you as a registered player.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests do not override your fundamental privacy rights.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements, court orders, or law enforcement directions.
• Consent: Processing for optional activities such as promotional email communications and certain non-essential cookies, where you have given explicit, freely revocable consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification settings.

4. Sharing Your Information

ac99 does not sell your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Game and Technology Providers

To deliver the games and services available on ac99, we share necessary technical data (such as session tokens and bet transaction identifiers) with our integrated game providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers act as data processors under contractual obligations that prohibit them from using your data for any purpose other than delivering their services to you through ac99.

4.2 Payment Service Providers

Transaction data is passed to your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay) to process deposits and withdrawals. The data shared is limited to what the payment provider requires to complete the transaction, such as the transaction amount, reference number, and your registered payment account number.

4.3 Legal and Regulatory Disclosures

ac99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or where disclosure is necessary to protect the safety of players or the public. ac99 will notify the affected player of any such disclosure request to the extent permitted by law.

4.4 Business Transfers

In the event that ac99 undergoes a merger, acquisition, or sale of all or part of its assets, personal data held on the platform may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the email address registered to their account, and the acquiring entity will be bound by privacy obligations no less protective than those set out in this Policy.

5. Cookies and Tracking Technologies

ac99 uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your session, and understand how players use our services. The table below describes the categories of cookies we use.

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. All other cookie categories may be managed through your browser settings. Note that disabling functional or analytics cookies may affect your experience on ac99.club. ac99 does not use advertising or retargeting cookies to track your behaviour across third-party websites.

6. Data Retention

ac99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. The key retention periods applied by ac99 are as follows:

• Active account data: Retained for the full duration of your account's active life.
• Post-closure account data: Following account closure for any reason, core account and transaction records are retained for a minimum of five (5) years to meet financial audit and anti-money-laundering obligations.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification, or from the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as a record of the consent history.
• Anonymised analytics data: May be retained indefinitely as it cannot be used to identify any individual.

When data is no longer required, it is securely deleted or anonymised in accordance with industry-standard data destruction procedures.

7. Data Security

ac99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• Transport-layer encryption: All data transmitted between your browser and ac99.club is encrypted using TLS 1.2 or higher (256-bit SSL certificate).
• Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. ac99 staff cannot view your plain-text password under any circumstances.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who access player data are bound by confidentiality obligations and undergo regular security awareness training.
• Network security: The ac99 platform is hosted behind enterprise-grade firewalls with intrusion detection and prevention systems monitoring for anomalous traffic patterns around the clock.
• Regular security audits: ac99 conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in its infrastructure before they can be exploited.

While ac99 employs all reasonable measures to secure your data, no method of transmission over the internet is completely infallible. In the event of a data breach that poses a risk to your rights and freedoms, ac99 will notify affected players as promptly as possible and take immediate steps to contain and remediate the incident.

8. Your Privacy Rights

As a player registered with ac99, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the ac99 support team at [email protected]. We will respond to your request within a reasonable timeframe and in any case within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data ac99 holds about you and information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held on your account.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ac99's legal retention obligations. Note that certain data must be retained for regulatory compliance reasons and cannot be deleted on request.
• Right to restriction of processing: You may request that ac99 restrict the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests. ac99 will review all such objections and cease processing where your interests override those of ac99, unless a compelling legal basis exists to continue.

9. Third-Party Services

The ac99 platform integrates with third-party game providers and payment services to deliver a complete gaming experience. While ac99 selects its service partners carefully and requires them to maintain adequate data protection standards, please be aware that third-party services operate under their own privacy policies. ac99 is not responsible for the privacy practices of external providers, and this Policy does not cover data processed independently by those providers in their own capacity as data controllers.

The game providers integrated with ac99 — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — are internationally recognised providers who maintain their own data protection frameworks. The payment providers bKash, Nagad, Rocket, and Upay are regulated mobile financial services operating under the oversight of Bangladesh Bank and maintain their own published privacy policies.

ac99 does not embed third-party advertising networks, social media tracking pixels, or external analytics services that profile players across unrelated websites. Any analytics tools used by ac99 operate exclusively within the ac99.club domain.

10. Updates to This Policy

ac99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, ac99 will notify registered players via the email address on their account and display a prominent notice on ac99.club, providing a reasonable period for review before the updated Policy takes effect.

The "Last updated" date displayed at the top of this page reflects the most recent revision. The current version of this Policy is always available at ac99.club/privacy-policy. We encourage you to review this Policy periodically to stay informed of how ac99 protects your personal information.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ac99 handles your personal information, please contact us in English at [email protected]. Our support team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6).