aec65 Privacy Policy

This Privacy Policy describes how aec65 ("we", "our", or "us") collects, processes, stores, and protects the personal data of individuals ("you", "your", or "the player") who register for and use the aec65 online betting and gaming platform, accessible at https://aec65.io (the "Platform").

aec65 is committed to safeguarding the privacy and personal data of all registered players. We operate exclusively within the scope of this Privacy Policy and do not sell, rent, or trade your personal information to any third party for their own independent marketing purposes.

This Privacy Policy should be read alongside the aec65 Terms & Conditions, which govern the overall use of the Platform. In the event of any conflict between the two documents in matters specifically relating to personal data processing, this Privacy Policy shall take precedence.

This policy is written in English and applies to all players accessing aec65 from Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

aec65 collects personal data that is necessary for the provision of a safe, compliant, and fully functional online betting and gaming service. The categories of personal data we collect are set out below.

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless such data is incidentally provided in KYC documentation and is immediately rendered irrelevant to our processing purposes. Where such data is inadvertently received, it is not processed or stored beyond what is strictly required for identity verification.

aec65 collects personal data through several distinct channels during your interaction with the Platform:

• Direct Registration: When you create a new account on aec65, you voluntarily provide your name, date of birth, mobile number, email address, and any other information required to complete registration.
• KYC Verification: When you submit identity documents to verify your account and unlock withdrawal functionality, we collect and process the information contained within those documents.
• Deposits and Withdrawals: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, or a linked bank account, we receive transaction confirmation data from the relevant payment provider.
• Platform Interactions: As you navigate and use the Platform — browsing sports markets, placing bets on BPL, IPL, T20 World Cup, or other events, playing slot games or live casino titles — our systems automatically log your usage and transaction data.
• Cookies and Tracking Technologies: Our Platform uses cookies and similar tracking technologies to collect Technical Data and Usage Data. Full details are provided in Section 8 of this Privacy Policy.
• Customer Support Communications: When you contact our support team via email at [email protected], your communication and the data you provide within it are recorded and retained.
• Third-Party Verification Services: We may receive identity verification results from approved KYC service providers who process your submitted documents on our behalf.

aec65 uses the personal data it collects for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes listed below:

• Account Creation and Management: To register your account, verify your identity, maintain your account settings, and enable you to log in securely to the Platform.
• Service Delivery: To enable you to place bets on cricket, football, kabaddi, and other sports; to provide access to live casino games, slot titles from providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi; and to process your winnings and bonus credits.
• Payment Processing: To process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported payment channels.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and that the identity you have registered is accurate and not associated with fraud.
• Regulatory and Legal Compliance: To fulfil our anti-money-laundering (AML) obligations, maintain required transaction records, respond to lawful requests from competent authorities, and comply with applicable law.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling, to implement deposit limits and self-exclusion requests you have submitted, and to contact you proactively if our systems identify concerning patterns.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent registrations, multi-accounting, bonus abuse, unauthorised account access, and any other activity that violates our Terms & Conditions.
• Customer Support: To respond to your enquiries, handle complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregate usage patterns — anonymised where possible — in order to improve Platform performance, fix technical issues, and develop new features that better serve Bangladeshi players.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about upcoming events (such as BPL or Eid promotions), where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

aec65 processes your personal data on the following legal bases, depending on the specific purpose of processing:

Where we rely on your consent as the legal basis for processing (most notably for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

aec65 does not sell your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Providers: We share relevant financial and identity data with bKash, Nagad, Rocket, Upay, and our banking partners solely for the purpose of processing your deposit and withdrawal transactions. Each payment provider operates under its own privacy policy and data protection obligations.
• KYC Verification Partners: We engage approved third-party identity verification service providers to process the documents you submit during KYC. These providers act as data processors on our behalf and are bound by strict confidentiality and data security obligations.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive limited technical data (such as a session token and bet amount) necessary to facilitate gameplay. They do not receive your full identity data unless required for their own regulatory obligations.
• Legal and Regulatory Authorities: We may disclose your personal data to competent governmental or law enforcement authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to comply with a legal obligation, protect our rights, or prevent fraud or criminal activity.
• Professional Advisors: We may share data on a confidential basis with our legal advisors, auditors, or other professional service providers where necessary for the conduct of our business.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving aec65, your personal data may be transferred to the acquiring entity, provided that such entity agrees to process your data in accordance with a privacy policy no less protective than this one. We will notify registered players of any such transfer.

aec65 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:

• Active Account Data: Retained for the full duration of your registered account being active on the aec65 Platform.
• Account Closure / Inactive Accounts: Following account closure or a period of inactivity exceeding 24 consecutive months, we retain your core identity and transaction records for a minimum of five (5) years to comply with our AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction.
• KYC Documents: Retained for a minimum of five (5) years following account closure, or longer if required by a specific legal or regulatory obligation.
• Customer Support Communications: Retained for three (3) years from the date of the last communication in the relevant thread, unless the communication relates to a formal complaint or legal dispute, in which case it is retained for the duration of that dispute plus two (2) years thereafter.
• Marketing Consent Records: Retained for the duration of active consent plus two (2) years following withdrawal of consent, to demonstrate the lawful basis for any communications sent during the consent period.
• Technical and Usage Logs: Retained for twelve (12) months on a rolling basis, after which they are deleted or irreversibly anonymised.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that ensures it cannot be recovered or re-identified. aec65 reviews its data retention schedules annually to ensure they remain proportionate and compliant with applicable law.

The aec65 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and collect analytical data about Platform usage. A cookie is a small text file placed on your device by the Platform when you visit.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security token validation. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the Platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps us improve Platform performance. We use industry-standard analytics tools with IP anonymisation enabled.
• Functional Cookies: These cookies remember your preferences, such as your preferred language setting, display preferences, and responsible gaming reminder intervals, so you do not need to reconfigure them on each visit.
• Marketing Cookies: Where you have consented to receive marketing communications, these cookies help us track whether you have interacted with a promotional offer, so we can avoid sending redundant messages. Marketing cookies are only set with your prior consent.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the aec65 Platform from operating correctly and may result in your inability to log in or place bets. Detailed instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available through those browsers' respective help centres.

aec65 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the aec65 Platform is encrypted in transit using 256-bit SSL/TLS protocols, making it extremely difficult for any third party to intercept or read.
• Password Hashing: Account passwords are never stored in plain text. They are processed through an industry-standard one-way cryptographic hashing algorithm with a unique salt per user, ensuring that even in the unlikely event of a data breach, passwords cannot be reverse-engineered.
• Access Controls: Access to personal data within aec65's internal systems is restricted on a strict need-to-know basis. Staff members are granted data access only to the extent required to perform their specific job functions, and all access is logged and audited.
• Two-Factor Authentication (2FA): Where available, aec65 strongly encourages all registered players to enable two-factor authentication via OTP to their registered mobile number, providing an additional layer of account security beyond the password.
• Regular Security Reviews: aec65 conducts periodic internal security reviews and engages external security professionals for independent assessments of Platform infrastructure, with a focus on identifying and remediating vulnerabilities before they can be exploited.
• Secure Data Storage: All personal data at rest is stored on encrypted servers with access restricted by multi-layer authentication.

While aec65 takes every reasonable precaution to protect your data, it is important to understand that no digital platform can guarantee absolute security. You also play a vital role in keeping your data safe — please use a strong, unique password for your aec65 account and never share your credentials or OTPs with anyone, including individuals claiming to represent aec65 support.

In the event of a personal data breach that poses a significant risk to affected players, aec65 will notify affected individuals promptly and will take immediate steps to contain the breach and prevent further exposure.

As a registered aec65 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and mobile number for identity verification purposes. We will respond to all valid requests within 30 days.

aec65 implements mandatory age verification as part of the KYC process for all registered accounts. This includes document checks against a valid Bangladeshi National Identity Card, passport, or other acceptable government-issued identity document that displays the holder's date of birth.

If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has registered an account on the aec65 Platform, please contact us immediately at [email protected] with the subject line "Underage Account — Urgent". We will investigate and act promptly on all such reports.

aec65 reserves the right to update or revise this Privacy Policy at any time. When we make material changes to the way we collect, use, or protect your personal data, we will provide reasonable prior notice to registered players through the Platform's notification system and/or by email to your registered address, where practicable.

The "Effective Date" displayed at the top of this document and in the hero section of this page indicates when the current version of the Privacy Policy came into force. We recommend that you review this Privacy Policy periodically, particularly before making any significant use of the Platform following a period of inactivity.

Your continued use of the aec65 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material revision to this Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data protection issue, please contact the aec65 Data & Privacy team using the details below:

• Email: [email protected]
• Subject Line (for Data Rights Requests): "Data Rights Request – [Your Username] "
• Subject Line (for Underage Accounts): "Underage Account — Urgent"
• Subject Line (for Data Breaches): "Data Breach Report – Urgent"
• Response Time: We aim to respond to all data-related enquiries within 5 business days, and to formal data rights requests within 30 calendar days.
• Operating Hours: Our support team operates seven days a week, Bangladesh Standard Time (BST, UTC+6).

We are committed to resolving all privacy-related concerns promptly and fairly. If you feel that your concern has not been adequately addressed by our support team, you may escalate the matter in writing to our senior management via the same email address, clearly marked "Privacy Escalation".