acr44 Privacy Policy

1 Information We Collect

acr44 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

Registration and account data:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to confirm you are aged 18 or above);
• Residential address, including city and division (e.g., Dhaka, Chittagong, Sylhet, Khulna);
• Email address and mobile phone number;
• Mobile financial service account number (bKash, Nagad, Rocket, or Upay) or bank account details for payment processing;
• Username and hashed/encrypted password.

Identity verification data:

• Copies of identity documents such as your National Identity Card (NID), passport, or birth certificate, where requested for age and identity verification;
• Proof of address documents such as utility bills or bank statements, where required.

Transaction data:

• Deposit and withdrawal amounts, timestamps, and payment method references;
• Wagering history including game type, stake amounts, outcomes, and session durations;
• Bonus and promotion history.

Technical and device data:

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Session data including login timestamps and platform navigation patterns;
• Cookie identifiers and analytics data (see Section 3).

Communications data:

• The content of messages you send to our support team via live chat or email;
• Records of any complaints or disputes submitted to acr44.

2 How We Use Your Data

acr44 uses the personal data it collects for the following purposes. We process your data only where a lawful basis exists — typically because processing is necessary to perform our contract with you, to comply with a legal obligation, or because it serves our legitimate interests in operating a safe and compliant gaming platform.

• Account management: Creating and maintaining your acr44 account, verifying your identity and age, and enabling you to log in securely.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels. Payment data is shared with your chosen provider only to the extent necessary to complete the transaction.
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other fraudulent activity. This includes automated pattern analysis of transaction and wagering behaviour.
• Responsible gaming compliance: Monitoring player activity to identify indicators of problem gambling and, where identified, applying responsible gaming interventions such as deposit limit suggestions or cooling-off notifications in accordance with our Responsible Gaming policy.
• Legal and regulatory compliance: Retaining records to satisfy anti-money-laundering (AML) obligations and responding to lawful requests from law enforcement or other competent authorities.
• Customer support: Responding to queries, complaints, and disputes submitted via live chat or email.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to improve our products, features, and user experience.
• Promotional communications: Sending you information about bonuses, promotions, and platform updates by email or in-platform notification, where you have not opted out of such communications. You can opt out at any time by contacting [email protected] or by updating your communication preferences in your account settings.

acr44 does not use your personal data to make solely automated decisions that produce significant legal effects on you without a human review stage. Where automated fraud detection flags your account for investigation, a member of our compliance team will review the case before any action is taken.

3 Cookies & Tracking Technologies

acr44 uses cookies and similar technologies (such as local storage and session tokens) on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. The cookies we use fall into the following categories:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery. These cookies cannot be disabled without preventing the platform from working correctly.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the acr44 platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve platform performance. We use privacy-respecting analytics tools and do not share this data with advertising networks.
• Functional cookies: These remember choices you have made (such as your preferred game category or display settings) so that we can provide a more personalised experience on your next visit.

acr44 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not share cookie-derived data with social media platforms or external advertising networks.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that blocking strictly necessary cookies will impair your ability to log in and use the platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

4 Data Sharing & Disclosure

acr44 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: When you make a deposit or request a withdrawal, we share the minimum necessary payment information with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard) to complete the transaction. These providers are bound by their own privacy policies and applicable financial regulation.
• Identity verification providers: Where we use third-party identity verification services to validate your age and identity documents, we share the relevant data with that provider under a data processing agreement that restricts its use to the verification purpose only.
• Game providers and platform technology partners: Certain casino and slot games on the acr44 platform are provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These providers may receive your anonymised session data for game performance and fairness auditing purposes. They do not receive your name, payment details, or contact information.
• Law enforcement and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of acr44's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transition.

In all cases where data is shared with third parties, we apply contractual safeguards to ensure that your data is handled securely and used only for the purposes for which it was shared. acr44 remains responsible for the data it shares and takes all reasonable steps to ensure that partner organisations treat your data with the same standard of care that we apply internally.

5 Data Retention

acr44 retains your personal data for as long as your account remains active and for a defined period following account closure. The retention periods we apply reflect our legal obligations, operational needs, and responsible gaming commitments.

Once the applicable retention period expires, acr44 will securely delete or anonymise your personal data so that it can no longer be attributed to you. If you request account closure, we will cease active processing of your data immediately while retaining records only to the extent required by our legal obligations as described above.

6 Data Security

acr44 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• SSL/TLS encryption: All data transmitted between your device and the acr44 servers is encrypted using current Transport Layer Security (TLS) protocols. Our platform enforces HTTPS across all pages.
• Password hashing: Passwords are never stored in plain text. We use a modern, salted cryptographic hashing algorithm. Even in the unlikely event of a data breach, your plaintext password would not be exposed.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who handle player data are required to complete data protection training and are bound by confidentiality obligations.
• Infrastructure security: Our platform infrastructure is hosted in secure data centres with physical access controls, continuous monitoring, and regular security audits.
• Fraud detection systems: Automated systems monitor for unusual account activity, including atypical login locations, rapid transaction patterns, and other indicators of account compromise or fraud.
• Incident response: acr44 maintains a data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

While acr44 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials secure and for logging out of your account on shared or public devices. If you believe your account has been compromised, contact us immediately at [email protected].

7 Your Privacy Rights

As a registered player on acr44, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will verify your identity before processing any data rights request and aim to respond within 30 days.

• Right of access: You have the right to request a copy of all personal data acr44 holds about you. We will provide this in a structured, commonly used format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For most account details, you can update information directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent was the lawful basis), or where you object to processing and no overriding legitimate interest exists. Note that this right is subject to our legal retention obligations — for example, transaction records required for AML compliance cannot be deleted on request.
• Right to restriction of processing: You may request that we restrict processing of your data — for example, while we investigate a rectification request or a dispute about our use of your data.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your data in a machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to processing based on our legitimate interests, including profiling for fraud detection purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

acr44 does not discriminate against players who exercise their privacy rights. Exercising any of the rights above will not affect your ability to use the platform, subject to the note on retention obligations stated in the Right to Erasure section.

8 Policy Updates & Contact

acr44 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes, we will notify registered players by email and display a prominent notice on the platform for a reasonable period before the changes take effect. The effective date at the top of this page will be updated accordingly.

We encourage you to review this Privacy Policy periodically. Continued use of the acr44 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you disagree with any change to this policy, you should cease using the platform and contact us to request account closure.

If you have any questions about this Privacy Policy, about how acr44 processes your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live chat: Available 24/7 from your acr44 account dashboard
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

acr44 takes all privacy enquiries seriously and aims to acknowledge receipt within 24 hours and provide a substantive response within 30 calendar days of receiving a verified request.