Privacy Policy — acr44

1 Introduction

acr44 ("we", "us", "our") operates the acr44 online casino and sports betting platform available at acr44.io (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, account applicants, and website visitors.

This Privacy Policy explains how acr44 collects, uses, stores, shares, and protects personal data in connection with the operation of the Platform. It also describes the rights available to you regarding your personal data and how you may exercise those rights. Please read this Policy carefully before using the Platform or creating an account.

By accessing the Platform or registering an account with acr44, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the acr44 Terms & Conditions. Where this Policy and the Terms & Conditions conflict on matters of data handling, this Privacy Policy shall take precedence.

2 Personal Data We Collect

acr44 collects personal data in several categories depending on your relationship with the Platform. The following table summarises the categories of data we may hold about you:

acr44 does not knowingly collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where explicitly required for identity verification purposes and where you have provided explicit consent.

3 How We Collect Your Data

acr44 collects personal data through the following channels and methods:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, session logs, web beacons, and similar tracking technologies. See Section 7 for full details of our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment confirmation data from payment processors including bKash, Nagad, Rocket, Upay, and banking partners. Data from these sources is used only to supplement or verify information you have already provided.
• Publicly Available Sources: In limited circumstances, acr44 may consult publicly available databases or registers to verify identity or detect prohibited conduct, such as checking against self-exclusion registers or sanctions lists.

4 How We Use Your Personal Data

acr44 uses the personal data we collect for the following purposes:

• Account Management: To register and maintain your player account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To provide access to casino games, sports betting markets, promotions, and all other features of the Platform.
• Payment Processing: To process deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, Mastercard, and other accepted payment methods.
• Legal & Regulatory Compliance: To meet our obligations under applicable law, including age verification (21+), anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations, and fraud prevention.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, multiple account creation, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour, identify potential problem gambling indicators, and apply responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where appropriate.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of communications for quality assurance purposes.
• Marketing Communications: To send you promotional offers, platform updates, and relevant information about acr44 services, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse usage patterns and technical performance data for the purpose of improving the Platform's functionality, user experience, and game offering.

5 Legal Basis for Processing

acr44 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and acr44, including account registration, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations, age verification, and fraud reporting duties.
• Legitimate Interests: Processing carried out for acr44's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that such interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, including the sending of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6 Sharing Your Personal Data

acr44 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard — solely to facilitate the processing of your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity documents and perform age verification checks in compliance with our legal obligations.
• Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their game software on the Platform.
• Fraud Prevention & Security Partners: Specialist anti-fraud and cybersecurity service providers engaged to protect the Platform and its users from fraudulent activity and security threats.
• Legal & Regulatory Authorities: Where required by law, acr44 may disclose personal data to regulatory bodies, law enforcement agencies, or courts in connection with legal proceedings, investigations, or compliance obligations.
• Professional Advisers: Lawyers, accountants, auditors, and insurers who require access to certain data in the course of providing professional services to acr44, subject to professional confidentiality obligations.

7 Cookies & Tracking Technologies

acr44 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core functionality such as user authentication, session management, and fraud prevention. These cookies cannot be disabled as the Platform cannot function without them.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how visitors use the Platform — such as which pages are visited most frequently and whether any error messages are encountered. This data is used to improve Platform performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember your preferences and settings (such as language preferences and responsible gaming settings) to provide a more personalised experience.
• Targeting & Marketing Cookies: Where you have given consent, these cookies track your browsing activity to enable relevant promotional communications. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled through browser settings without impacting your ability to use core Platform features.

8 Data Retention

acr44 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the lifetime of your registered account, plus a minimum of five years following account closure, to meet AML, KYC, and legal compliance obligations.
• Financial Transaction Data: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• Communications Data: Support correspondence and complaint records are retained for a minimum of three years from the date of the communication.
• Technical & Usage Data: Log files and session data are retained for up to 12 months for security and fraud prevention purposes, after which they are deleted or anonymised.
• Marketing Preferences: Retained for as long as you maintain an active account, or until you withdraw consent for marketing communications, whichever is earlier.

Where retention is required beyond these periods due to an ongoing legal dispute, investigation, or regulatory requirement, acr44 will retain relevant data until the matter is fully resolved. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9 Data Security

acr44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the acr44 Platform.
• Encrypted storage of sensitive personal data including identity documents and payment method details.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Firewall protection, intrusion detection systems, and continuous security monitoring of all Platform infrastructure.
• Regular penetration testing and security audits conducted by independent security specialists.
• Staff training and data protection awareness programmes to ensure that all personnel who handle personal data understand their obligations.

While acr44 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, acr44 will notify affected users in accordance with applicable legal requirements and take immediate steps to contain and mitigate the breach.

10 Your Rights

As a data subject, you have the following rights with respect to the personal data that acr44 holds about you. To exercise any of these rights, please contact our support team using the details provided in Section 14:

• Right of Access: You have the right to request a copy of the personal data that acr44 holds about you, along with information about how it is processed. We will respond to valid access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that we hold about you. You may also update certain account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Please note that we may be required by law to retain certain data even after an erasure request.
• Right to Restrict Processing: You have the right to request that acr44 restrict the processing of your personal data in certain circumstances, such as while we investigate a dispute about the accuracy of your data.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including for direct marketing purposes. We will cease processing your data for marketing purposes immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11 Children's Privacy

The acr44 Platform is strictly intended for adults aged 21 years or older. acr44 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Registration by or on behalf of a minor is a material breach of our Terms & Conditions and will result in immediate account closure and forfeiture of any associated funds.

If acr44 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data from our systems. If you have reason to believe that a minor has registered an account on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

12 Third-Party Links & Services

The acr44 Platform may contain references to game providers and payment services operated by third parties. While acr44 takes reasonable care in selecting its third-party partners, we are not responsible for the privacy practices or content of any third-party services. This Privacy Policy applies exclusively to data processed by acr44 in connection with the Platform.

Game content delivered via providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is subject to those providers' own privacy policies and terms of service. Similarly, payment transactions processed via bKash, Nagad, Rocket, Upay, and banking partners are subject to the respective providers' terms. We recommend that you review the privacy policies of any third-party services you interact with through the Platform.

13 Changes to This Privacy Policy

acr44 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Where material changes are made, we will provide advance notice to registered account holders via the Platform or by email to the address registered on your account.

The date of the most recent revision is displayed in the "Last Updated" banner at the top of this document. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how acr44 collects, uses, and protects your personal data. Previous versions of this Policy are available upon request.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way acr44 processes your personal data, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.