Privacy Policy for as67

as67 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable online gaming and cricket betting experience. We collect information in three principal ways: information you provide to us directly, information we collect automatically when you use the Platform, and information we receive from trusted third-party sources such as payment providers and identity verification services.

1.1 Information You Provide Directly

When you register an account or interact with our customer support team, you provide us with:

• Identity data: your full legal name, date of birth, gender, and nationality as it appears on your government-issued identification document (e.g., National Identity Card, passport, or driving licence).
• Contact data: your email address, mobile phone number, and residential address including city, district, and postcode within Bangladesh.
• Account credentials: your chosen username and a hashed version of your password. as67 never stores your password in plain text.
• Payment data: your bKash, Nagad, Rocket, or Upay mobile account number; card details (card number, expiry date, cardholder name) if you deposit via Visa or Mastercard. Full card numbers are never stored on as67 servers — they are tokenised by our payment gateway partner.
• Verification documents: scanned or photographed copies of your NID, passport, or utility bill submitted during the Know Your Customer (KYC) verification process.
• Support communications: the content of any live chat conversation, email, or feedback form you submit to the as67 support team.

1.2 Information Collected Automatically

When you access the as67 platform via browser or mobile device, the following data is collected automatically by our systems:

• Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: pages viewed, games played, bets placed, session duration, click paths, and feature interactions.
• Location data: approximate geographic location derived from your IP address. We use this for fraud detection and to ensure regulatory compliance.
• Transaction data: a full record of all deposits, withdrawals, wagers, bonuses claimed, and game results associated with your account.
• Cookie data: session identifiers, preference cookies, and analytics cookies as described in Section 4 of this Policy.

1.3 Information from Third Parties

We may receive supplementary data about you from the following third-party sources to validate information you have provided and to meet our legal obligations:

• Identity verification partners who confirm the authenticity of your NID or passport.
• Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status of deposit and withdrawal transactions.
• Anti-fraud and AML screening services that cross-reference your identity details against publicly available sanctions lists and politically exposed persons (PEP) databases.
• Analytics providers who help us understand aggregate Platform usage trends (data is received in anonymised or pseudonymised form).

as67 processes your personal data only for the specific, legitimate purposes described in this Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your data are as follows:

2.1 Account Administration & Service Delivery

Your identity and contact data are used to create and maintain your player account, authenticate your login sessions, process deposits and withdrawals via your registered payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and communicate important account-related information such as security alerts, deposit confirmations, and withdrawal status updates. Without this processing, the as67 platform cannot function as an online gaming and cricket betting service.

2.2 Identity Verification & Regulatory Compliance

as67 is obligated to verify the identity and age of all registered players. Your identity documents, date of birth, and address details are processed to confirm that you are at least 18 years of age and to satisfy Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements. This processing is not optional — it is a prerequisite for accessing real-money features on the Platform.

2.3 Fraud Prevention & Platform Security

Your device data, IP address, login patterns, and transaction history are analysed by automated fraud detection systems to identify suspicious activity, prevent duplicate account registration, detect bonus abuse, and protect the financial integrity of the Platform. Where suspicious activity is detected, your account may be temporarily suspended pending a manual investigation by our security team.

2.4 Responsible Gaming Monitoring

As part of our commitment to player welfare, as67 monitors gameplay patterns, session frequency, and deposit behaviour for signs of potentially problematic gambling activity. Where our systems or support team identify such patterns, we may contact you to offer responsible gaming tools such as deposit limits, session time-outs, or self-exclusion. This processing is carried out in your legitimate interest and in fulfilment of our player protection obligations.

2.5 Personalisation & Platform Improvement

Usage data and gameplay history are used in aggregate and pseudonymised form to improve the as67 platform — for example, to prioritise popular cricket betting markets during BPL and T20 World Cup seasons, to optimise the lobby layout for players in Dhaka and Chittagong, and to identify technical issues affecting the player experience. Where we personalise promotional communications based on your game preferences, we will ask for your consent separately before doing so.

2.6 Customer Support

Records of your live chat and email interactions with our support team are retained to enable continuity of service — so that when you contact us about an unresolved issue, our agents have the context needed to assist you effectively. Support records are also reviewed periodically for quality assurance purposes.

as67 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are set out below, matched to the processing activities described in Section 2.

Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. Where we rely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications does not affect your ability to use the Platform.

as67 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device by the as67 web server when you visit the Platform.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These are required for the Platform to function. They maintain your login session, remember your account authentication state, and ensure that game sessions remain active. These cookies cannot be disabled without rendering the Platform inoperable.
• Functional cookies: These remember your preferences such as your preferred language, display settings, and recently viewed game categories. Disabling them will not prevent you from using the Platform, but certain personalisation features will not be available.
• Analytics cookies: We use anonymised analytics data to understand which pages and features are most popular, how players navigate the lobby, and where technical errors occur. Analytics cookies do not contain personally identifiable information and are processed in aggregated form.
• Fraud detection cookies: These cookies support our security infrastructure by storing device fingerprint data that helps identify suspicious login attempts or duplicate account registrations across sessions.

4.2 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser's privacy settings. Please note that disabling cookies may affect the functionality of the Platform. Specifically, disabling strictly necessary cookies will prevent you from logging into your account. Instructions for managing cookies in popular browsers are available through the browser's own help documentation.

as67 does not use third-party advertising networks or behavioural targeting cookies. No cookie data collected on the as67 Platform is shared with advertising platforms or social media networks for retargeting purposes.

4.3 Local Storage & Session Tokens

In addition to standard cookies, the as67 Platform uses browser local storage to maintain application state during an active gaming session — for example, to preserve your bet slip contents while navigating between cricket markets. Session tokens stored in local storage are invalidated when you log out and are never transmitted to third parties.

as67 does not sell your personal data to any third party. We share your data only with carefully selected service providers and partners who help us deliver the Platform, and only to the extent necessary for those services to be provided. All third-party data processors are contractually bound to process your data in accordance with this Privacy Policy and applicable data protection standards.

5.1 Categories of Third-Party Processors

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive the minimum transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and are regulated financial institutions.
• Identity verification providers: Our KYC partner receives copies of your identity documents and biographical data in order to confirm your identity and age on behalf of as67. Verification data is processed in a secure, encrypted environment and is not retained by the provider beyond the period necessary to complete the verification.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and transaction data related to game sessions in order to operate their game software, calculate RTP, and resolve game disputes. They do not receive your full name, contact details, or payment information.
• Analytics providers: Aggregated and anonymised usage data is shared with analytics platforms to support Platform performance monitoring. No personally identifiable information is included in these data transfers.
• Cloud infrastructure providers: The as67 Platform is hosted on cloud infrastructure managed by enterprise-grade data centre operators. These providers store and process Platform data under strict contractual data processing agreements.

5.2 Disclosure Required by Law

as67 may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where we are legally required to do so — for example, in response to a lawfully issued court order, a request from a financial intelligence unit in connection with an AML investigation, or where disclosure is necessary to prevent imminent harm. In such cases, we will disclose the minimum data required to comply with the legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of as67's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material change to how your data is processed via email or a prominent notice on the Platform.

as67 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. When the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with any individual player.

Following account closure, as67 will retain the minimum data required by applicable law and will delete all other personal data within 90 days of the closure date. Where a legal hold is in place — for example, where the account is subject to an ongoing AML investigation or a pending dispute — data will be retained until the hold is lifted and then deleted in accordance with the schedule above.

If you request deletion of your data before the applicable retention period has expired, we will delete all data that we are not legally required to retain, and will clearly communicate to you which categories of data must be kept and the legal basis for retaining them.

as67 respects your right to control your personal data. Regardless of where you are located within Bangladesh, you hold the following rights in relation to the personal information we hold about you. To exercise any of these rights, contact our support team at [email protected] or submit a request through your account dashboard. We will respond to all verified requests within 30 days.

7.1 How to Submit a Data Rights Request

To exercise any of the rights listed above, please contact our Data Protection team using one of the following methods:

• Email: Send a written request to [email protected] with the subject line "Data Rights Request". Include your registered account username and a description of the right you wish to exercise.
• Account Dashboard: Log into your as67 account and navigate to Account Settings > Privacy & Data to submit a self-service request for data access or deletion.

We may need to verify your identity before processing a data rights request to ensure we do not disclose personal data to an unauthorised person. Verification typically requires you to confirm details associated with your registered account. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we will notify you before proceeding.

as67 applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme encompasses technical controls, organisational measures, and ongoing monitoring. Below we outline the key safeguards in place.

8.1 Technical Safeguards

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the as67 platform is encrypted in transit using TLS 1.3, the current industry standard for secure web communications.
• Encryption at rest: Sensitive data fields — including identity document images, payment method tokens, and account credentials — are encrypted at rest using AES-256 encryption.
• Password hashing: Passwords are never stored in plain text. We use a modern cryptographic hashing algorithm with unique per-account salting to store password data securely.
• Access controls: Access to production systems containing player data is restricted to authorised personnel on a strict need-to-know basis. All privileged access is logged and subject to periodic review.
• Intrusion detection: Our infrastructure is monitored 24/7 by automated systems that detect and alert on anomalous access patterns, unauthorised login attempts, and potential data exfiltration activity.
• Regular penetration testing: as67 commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.

8.2 Organisational Measures

• All as67 staff with access to personal data undergo mandatory data protection training as part of their onboarding and on an annual basis thereafter.
• Our data protection and security policies are reviewed and updated at least annually or whenever a significant change in processing activities occurs.
• We maintain a formal data breach response plan. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and, where required by applicable law, report the breach to the relevant authority.

8.3 Your Role in Keeping Your Account Secure

While as67 takes extensive measures to protect your data, the security of your account also depends on the steps you take. We strongly recommend that you:

• Use a strong, unique password for your as67 account that you do not reuse on other websites.
• Enable two-factor authentication (2FA) on your account if you have not already done so.
• Never share your account credentials, OTP codes, or payment details with anyone — including individuals claiming to represent as67 support. Our staff will never ask for your password.
• Log out of your account when using shared or public devices, and avoid accessing your as67 account over unsecured public Wi-Fi networks.
• Contact our support team immediately at [email protected] if you suspect your account has been accessed without your authorisation.

as67 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending an email notification to your registered address at least 14 days before the changes take effect.

The date this Privacy Policy was last revised is stated at the top of the document. We encourage you to review this Policy periodically. Your continued use of the as67 Platform after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the Platform and contact our support team to request account closure.

Historic versions of this Privacy Policy are available upon request by contacting [email protected].

Contact Our Data Protection Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how as67 processes your personal data, please contact us:

• Email: [email protected] — subject line: "Privacy Policy Enquiry"
• Live chat: Available 24/7 on the as67 Platform (Bangladesh Standard Time, UTC+6)

We are committed to resolving all privacy-related enquiries promptly and transparently. If you feel your concern has not been adequately addressed after contacting us, you may escalate the matter to the relevant data protection authority in your jurisdiction.