acd8 Privacy Policy
— How We Handle Your Data

1. Information We Collect

acd8 collects personal information through several channels: directly from you when you register an account or make a transaction, automatically as you interact with the platform, and in limited cases from third-party verification providers. The categories of data we collect are described below.

1.1 Registration Data

When you create an acd8 account, we collect the following information that you provide voluntarily:

• Full legal name
• Date of birth (used to verify that you are 18 years of age or older)
• Email address
• Mobile phone number (used for account verification and security alerts)
• Country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Preferred currency (Bangladeshi Taka — ৳ BDT)
• Username and password (password is stored in hashed form and is never readable by staff)

1.2 Identity Verification Data (KYC)

To comply with our Know Your Customer obligations and to protect the platform from fraud and underage gambling, acd8 may request the following verification documents:

• Government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or government correspondence dated within 3 months)
• Proof of payment method ownership (screenshot of bKash, Nagad, Rocket, or Upay account, or bank statement confirming account holder name)
• A selfie photograph for identity matching purposes (where required)

KYC documents are processed by trained acd8 compliance staff and, where applicable, by our third-party identity verification partner operating under a strict data processing agreement. Documents are not shared with any other party.

1.3 Transaction Data

Every deposit, withdrawal, bonus claim, and bet placed on acd8 generates a transaction record. This record includes the transaction type, amount in ৳ BDT, timestamp (Bangladesh Standard Time, UTC+6), payment method used (e.g., bKash, Nagad, Visa), and the transaction reference number assigned by the payment processor. Transaction records are retained for a minimum of five years to satisfy financial record-keeping obligations.

1.4 Usage and Behavioural Data

When you interact with the acd8 platform, our systems automatically collect technical and behavioural data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session start and end times, session duration
• Pages and game categories viewed
• Games launched, bets placed, and outcomes (game log data)
• Clickstream data (navigation path through the site)

This data is used primarily to operate and improve the platform, to detect fraud and responsible gaming signals, and to personalise your experience where you have provided consent for personalisation.

1.5 Communications Data

When you contact acd8 support via live chat or email, we retain a record of the conversation, including the date and time, the channel used, and the content of the exchange. This allows us to maintain continuity of service and to review complaint-handling quality. Support conversation records are retained for 24 months from the date of the last interaction.

2. How We Use Your Information

acd8 uses the personal data it collects for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

2.1 Marketing Communications

acd8 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, game launches, or seasonal offers (such as those tied to Eid, Pohela Boishakh, BPL, or IPL) if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by emailing [email protected] with the subject line "Unsubscribe".

2.2 Automated Decision-Making

acd8 uses automated systems to flag accounts for responsible gaming intervention and to detect potentially fraudulent behaviour. These systems analyse transaction patterns, session lengths, and other behavioural signals. Where an automated system flags an account for a consequential action (such as payment suspension or account restriction), a qualified member of the acd8 compliance team will review the case before any action is finalised. You have the right to request human review of any automated decision that affects your account.

3. Legal Basis for Processing

acd8 processes personal data on the following legal grounds, consistent with recognised data protection principles:

• Contract performance: Processing is necessary to provide the services you have signed up for — including account management, game access, deposits, and withdrawals. Without this processing, acd8 cannot deliver the contracted service.
• Legal obligation: Certain processing activities — particularly identity verification (KYC), transaction record-keeping, and responsible gaming monitoring — are required by applicable law. acd8 must carry out this processing regardless of your preferences.
• Legitimate interest: acd8 has a legitimate interest in operating a secure, fair, and commercially sustainable platform. This covers fraud detection, platform analytics, security logging, and abuse prevention, provided these interests do not override your fundamental rights.
• Consent: Where processing is not required by contract or law — most notably for marketing communications and optional personalisation features — acd8 will request your explicit consent before proceeding. You may withdraw consent at any time without affecting the legality of any processing carried out before withdrawal.

4. Sharing and Disclosure

acd8 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Processors

To process your deposits and withdrawals, acd8 shares transaction-relevant data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these providers operates under its own privacy policy and data protection obligations. acd8 shares only the minimum data required to initiate and confirm each transaction.

4.2 Identity Verification Partners

Where identity verification is required, acd8 may share KYC documents with a trusted third-party verification service provider. This provider is contractually bound to process the data solely for identity verification purposes and is prohibited from retaining or using the data for any other purpose.

4.3 Game Providers

Games hosted on the acd8 platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO. These studios receive a pseudonymous session token when you launch a game — they do not receive your name, contact details, or payment information. Game session logs are retained by the studio under their own data retention policies.

4.4 Legal and Regulatory Disclosure

acd8 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or in response to a formally issued legal demand. acd8 will, where legally permitted, notify the affected account holder of such a disclosure request before complying.

4.5 Business Transfers

In the event that acd8 undergoes a merger, acquisition, or sale of all or part of its business assets, account holder data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the same protections described in this Privacy Policy, and affected account holders will be notified in advance where practicable.

5. Cookies and Tracking

5.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. acd8 uses cookies and similar tracking technologies (such as local storage and session storage) to operate the platform correctly, remember your preferences, and gather analytics data that helps us improve the service.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to your acd8 account and using core platform features. Instructions for managing cookies in the most common browsers are available through the browser's own help documentation. acd8 does not use third-party advertising cookies or cross-site tracking technologies.

6. Data Retention

acd8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The table below summarises our standard retention periods by data category.

When a retention period expires, the relevant data is either permanently deleted from acd8's systems or irreversibly anonymised so that it can no longer be linked to any individual. Account closure by the account holder does not automatically trigger immediate deletion where a legal retention obligation applies — in such cases, data is restricted from active use and held only for the legally required period before deletion.

7. Your Data Rights

As a user of the acd8 platform, you hold the following rights over your personal data. These rights can be exercised at any time by contacting the acd8 privacy team at [email protected] with the subject line "Data Rights Request".

7.1 Right of Access

You have the right to request a copy of all personal data that acd8 holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid access request. There is no charge for a first access request in any 12-month period.

7.2 Right to Rectification

If any personal data held by acd8 is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or mobile number) can be made directly through your account settings dashboard. Corrections to identity-verified data (such as your name or date of birth on file) require supporting documentation.

7.3 Right to Erasure

You have the right to request deletion of your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw consent and no other legal basis applies; or the data was processed unlawfully. This right is not absolute — acd8 may retain data where a legal retention obligation overrides the erasure request (for example, transaction records subject to a five-year financial record-keeping requirement).

7.4 Right to Restriction

You may request that acd8 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to legitimate-interest processing is being assessed.

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider if you choose.

7.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interest — including profiling for responsible gaming monitoring and platform analytics. acd8 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment or defence of legal claims.

7.7 Rights Related to Automated Decision-Making

As noted in Section 2.2, acd8 uses automated systems for fraud detection and responsible gaming monitoring. You have the right not to be subject to a decision based solely on automated processing that produces a significant effect on you. Where an automated flag leads to an account restriction, you may request human review of that decision by contacting [email protected].

8. Security Measures

acd8 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our key security measures include:

• TLS/SSL encryption in transit: All data exchanged between your browser or mobile device and the acd8 platform is encrypted using TLS 1.2 or higher. Our SSL certificate is kept current and monitored continuously.
• Encryption at rest: Sensitive personal data — including identity documents and hashed passwords — is stored using AES-256 encryption. Payment card details (where applicable) are handled exclusively by PCI-DSS compliant payment partners and are never stored on acd8 servers.
• Access control: Access to personal data within acd8's internal systems is restricted on a strict need-to-know basis. Staff with data access undergo background screening and receive regular data protection training. Access logs are maintained and reviewed periodically.
• Two-factor authentication: acd8 offers two-factor authentication (2FA) on player accounts and enforces 2FA for all internal staff accounts with data access privileges.
• Penetration testing: The acd8 platform undergoes regular security assessments by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response: acd8 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, acd8 will notify affected account holders promptly and without undue delay, providing details of the nature of the breach and the steps being taken to address it.

While acd8 takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. You are encouraged to protect your account by using a strong, unique password and by enabling 2FA. If you suspect that your account has been compromised, contact [email protected] immediately.

9. Third-Party Services

The acd8 platform integrates with several categories of third-party service providers to deliver a complete gaming and betting experience. Each integration is governed by a data processing agreement that restricts the third party to using shared data only for the specific purpose of their service engagement with acd8.

9.1 Game Studio Integrations

Games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi are embedded within the acd8 platform via secure API integrations. These studios receive pseudonymised session identifiers and game interaction data but do not receive personally identifiable registration or payment information. Each studio maintains its own data security standards consistent with their operating licences.

9.2 Payment Gateway Partners

Payment processing for bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating bank transfer services is handled by the respective payment providers' own secure gateways. acd8 does not store full card numbers or mobile wallet PINs. Payment data flows directly between your payment provider and its secure gateway; acd8 receives only a transaction confirmation token and the associated amount and timestamp.

9.3 Platform Analytics

acd8 uses internal analytics tooling to monitor platform performance, identify technical issues, and understand aggregate usage patterns. Where any third-party analytics tools are used, they are configured to anonymise IP addresses and to operate under data processing agreements that prohibit the use of acd8 user data for the tool provider's own purposes.

9.4 No Third-Party Advertising Networks

acd8 does not integrate third-party advertising networks, social media tracking pixels, or retargeting scripts on the platform. You will not be tracked across other websites as a result of visiting acd8, and acd8 does not purchase data from third-party audience platforms to profile users.

10. Policy Updates

acd8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — acd8 will notify registered account holders via the email address on file at least 14 days before the revised policy takes effect. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), notification will not be sent, but the updated policy will be published on this page immediately.

Your continued use of the acd8 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account before the effective date and request deletion of your data in accordance with Section 7.3 (Right to Erasure), subject to applicable legal retention obligations.

11. Contact for Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or to how acd8 handles your personal data, please contact the acd8 privacy team using the details below. We are committed to responding to all privacy enquiries promptly and transparently.

• Email: [email protected] — use subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal data subject requests
• Live Chat: Available 24/7 via your acd8 account dashboard — for faster, informal privacy questions
• Response time: Within 5 business days for email; typically under 3 minutes for live chat

All privacy correspondence is handled by acd8's compliance and data protection team. For formal data rights requests (access, erasure, portability, rectification), please include your registered email address and a brief description of your request so we can verify your identity and process the request efficiently.