aec678 Privacy Policy

This Privacy Policy ("Policy") describes how aec678 ("aec678", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", or "Player") who access or use the aec678 online gambling platform, including the website at aec678.vip and any related services (collectively, the "Platform").

By registering an account on the aec678 Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

aec678 takes its data protection obligations seriously. We apply industry-standard technical and organisational safeguards to protect all personal data we hold. We do not sell your personal data to third parties for their own marketing purposes. We collect only the data that is genuinely necessary for the lawful operation of our Platform and the delivery of our services to players in Bangladesh.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together these three documents govern your relationship with aec678.

1.1 Registration and Account Data

When you create an aec678 account, we collect the following information that you provide directly to us:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh) and postcode.
• Mobile phone number registered in Bangladesh.
• Email address.
• Username and encrypted password (we never store passwords in plain text).
• Currency preference (Bangladeshi Taka, BDT).

1.2 Identity Verification Documents

To comply with our Know Your Customer (KYC) obligations and to verify your age and identity, we may collect copies of:

• National Identity Card (NID) or Smart NID issued by the Bangladesh Election Commission.
• Passport (photo page).
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days).
• Selfie photograph or live video verification image used to confirm that the submitted documents belong to the account holder.

Identity documents are handled with the highest level of care and are stored in an encrypted format with access restricted to authorised compliance personnel only.

1.3 Financial and Transaction Data

When you make deposits or withdrawals on the aec678 Platform, we collect transaction records including:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Mobile wallet number or masked card number associated with each transaction.
• Transaction amounts in BDT (৳).
• Transaction timestamps and reference numbers.
• Deposit and withdrawal history for your account lifetime.

We do not store full card numbers or mobile banking PINs. Payment processing is handled via secure third-party payment gateways, and aec678 receives only the tokenised or masked reference data necessary to reconcile your account transactions.

1.4 Usage and Technical Data

When you use the Platform, certain technical data is collected automatically, including:

• IP address and approximate geographic location (country and city level).
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and features used.
• Game history, bet amounts, wins, losses, and wagering patterns.
• Cookies and similar tracking technologies (see Section 5 below).

1.5 Communications Data

If you contact aec678 through our support channels, we will retain a record of your communications, including the content of your messages, the date and time of contact, and any resolution notes. This data is used to manage your support queries and to improve our service quality.

aec678 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis for each processing activity.

2.1 Marketing Communications

With your prior consent, aec678 may send you promotional communications by email or SMS about new games, bonuses, seasonal promotions (such as Eid, Pohela Boishakh, or BPL tournament offers), and other offers relevant to your interests as a player. You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected] or by following the unsubscribe link included in any marketing email. Opting out of marketing will not affect transactional notifications related to your account activity.

2.2 Responsible Gaming Monitoring

aec678 uses your gameplay data, transaction history, and self-reported information to monitor for patterns that may indicate problem gambling behaviour. This processing is conducted in your interest as a player and forms part of our responsible gaming commitment. If our monitoring identifies potential concern, we may contact you proactively to offer support tools or to suggest a review of your deposit limits.

3.1 Service Providers

aec678 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processing partners (such as bKash, Nagad, Rocket, and card payment gateways), identity verification service providers, cloud infrastructure and hosting providers, email and SMS communication platforms, fraud detection services, and customer support tooling providers. All third-party service providers are contractually obligated to process your personal data only on our documented instructions and to maintain appropriate security measures.

3.2 Game Providers

Certain technical data (such as player session tokens and game result data) is shared with our third-party game studio partners, including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming, solely for the purpose of delivering and recording gameplay. These providers operate under data processing agreements that restrict further use of your data.

3.3 Legal and Regulatory Disclosure

aec678 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are required to do so by applicable law, court order, or regulatory directive. We may also disclose data where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the safety of our players, staff, or third parties.

3.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of aec678's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and the privacy practices that will apply to your data going forward.

3.5 No Sale of Personal Data

aec678 does not and will not sell, rent, or lease your personal data to any unaffiliated third party for that party's own marketing or commercial purposes. This commitment applies regardless of any change in ownership or business model.

aec678 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, accounting, or reporting obligations.

As a general principle, aec678 applies the following retention periods:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in order to meet anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Game history and wagering records: Retained for a minimum of two years from the date of each session.
• Support communications: Retained for two years from the date of last contact, or longer if the communication relates to an unresolved dispute.
• Marketing consent records: Retained for the duration of your consent plus two years, to allow us to demonstrate compliance with consent requirements.

When personal data is no longer required, aec678 ensures that it is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised and aggregated data that cannot be re-linked to any individual may be retained indefinitely for analytical and reporting purposes.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. aec678 uses cookies and similar technologies (including local storage and session storage) to ensure the Platform functions correctly, to remember your preferences, to keep your session secure, and to gather analytics data that helps us improve the player experience.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the Platform to operate. They include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these cookies without ceasing to use the Platform.
• Functional Cookies: These remember your preferences such as language setting, preferred payment method, and display options. Disabling them may affect your experience but will not prevent access.
• Analytics Cookies: These collect anonymised or pseudonymised data about how players navigate the Platform, which pages are most visited, and how long sessions last. This data helps us understand usage patterns and improve our services.
• Marketing Cookies: With your consent, these cookies allow aec678 to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. You may opt out of marketing cookies through your browser settings.

5.3 Managing Cookies

Most browsers allow you to control cookies through their settings. You can instruct your browser to refuse all cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of certain features on the aec678 Platform. Instructions for managing cookies in common browsers are available in each browser's help documentation.

As a user of the aec678 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data that aec678 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections to contact details can be made directly through your account settings.
• Right to Erasure: Also known as the "right to be forgotten", you may request that aec678 delete your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, in which case we will assess whether our legitimate interests override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

aec678 will respond to all verified data rights requests within 30 calendar days. In complex or high-volume cases, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

aec678 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between player devices and our servers.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Strict role-based access controls ensuring that only authorised personnel can access specific categories of personal data.
• Regular security assessments and penetration testing by qualified security professionals.
• Multi-factor authentication requirements for all internal systems that process personal data.
• Comprehensive logging and monitoring of all access events on systems holding personal data.
• Data minimisation practices ensuring that personal data is only accessible to staff members whose job functions require it.

While aec678 takes all reasonable precautions to safeguard your personal data, no method of electronic storage or transmission is completely secure. Players also play an important role in keeping their own data safe — always use a strong, unique password for your aec678 account and never share your login credentials with any third party.

8.1 Age Restriction

The aec678 Platform is strictly for adults aged 21 and above. aec678 does not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a person who was under 21 at the time of collection, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform, please contact us immediately at [email protected].

8.2 Contact Details

For any questions, concerns, or requests relating to this Privacy Policy or to aec678's data protection practices, please contact our Data Protection team:

Email: [email protected]
Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, BST UTC+6)
Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them within 30 calendar days.