Privacy Policy — aca444
Your privacy matters to us. This Privacy Policy explains exactly what personal data aca444 collects from players in Bangladesh, why we collect it, how we use and protect it, and what rights you hold over your information. We are committed to handling your data with transparency, security, and respect.
How aca444 Treats Your Personal Data
The cards below highlight the most important aspects of our privacy practices. These are summaries only — the full legally binding policy text follows in the sections beneath. Where any summary conflicts with the full text, the full text governs.
We Collect Only What We Need
aca444 collects personal data strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data for sale to third-party marketers and do not build advertising profiles based on your gaming activity.
Your Data Is Securely Stored
All data transmitted between your device and aca444 is encrypted using TLS 1.3. Account data at rest is protected by AES-256 encryption. Our servers are hosted in secure, access-controlled data centres with continuous intrusion monitoring.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within 30 days. Account closure includes the right to request data erasure subject to our legal retention obligations.
Cookies Used Minimally
aca444 uses only essential session cookies required for platform functionality and analytics cookies to improve user experience. We do not use third-party advertising cookies. You can manage cookie preferences at any time through your browser settings.
Limited Third-Party Sharing
Your data is shared only with essential service partners — payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game content providers, and identity verification services — strictly on a need-to-know basis under binding data processing agreements.
Clear Retention Periods
Account and transaction records are retained for a minimum of 5 years following account closure to satisfy anti-money laundering obligations. Marketing consent data is retained only for as long as consent remains active. All other data is deleted promptly when no longer required.
Information We Collect
When you register an account, use the aca444 platform, or contact our support team, we may collect the following categories of personal data:
Registration and Identity Data
- Full legal name as it appears on your government-issued identification document.
- Date of birth (for mandatory age verification — aca444 is an 18+ platform).
- Residential address, including city, district, and postcode within Bangladesh.
- Email address used to register your aca444 account.
- Mobile phone number, including country code (+880 for Bangladesh).
- Username and encrypted password credentials for account access.
Identity Verification Documents
To comply with our know-your-customer (KYC) obligations and to process withdrawal requests, we collect copies of:
- Bangladeshi National Identity Card (NID) — front and back.
- Valid Bangladeshi passport (bio data page).
- Bangladesh Road Transport Authority (BRTA) driving licence where used as an alternative verification document.
- Proof of address documentation such as a utility bill or bank statement dated within the last three months.
Financial and Transaction Data
- bKash, Nagad, Rocket, or Upay mobile wallet account numbers associated with your deposits and withdrawals.
- Visa or Mastercard details (card number masked — we store only the last four digits and card expiry).
- Deposit and withdrawal transaction history including amounts in BDT, timestamps, and method used.
- Wagering history including game titles, bet amounts, outcomes, and session timestamps.
Technical and Device Data
- IP address at the time of each login and significant account action.
- Device type, operating system, and browser version.
- Geolocation data at the country and city level derived from your IP address.
- Session duration, page views, and in-platform navigation patterns (collected via analytics cookies).
Communications Data
When you contact aca444 via live chat, email, or WhatsApp, we retain a record of the communication — including the content of messages, timestamps, and the identity of the support agent — for quality assurance, dispute resolution, and regulatory compliance purposes.
How We Use Your Data
aca444 uses your personal data exclusively for the purposes described below. We do not use your data for any purpose incompatible with the original reason it was collected without first seeking your consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, phone, username, password | Contract performance |
| Age and identity verification (KYC) | NID / passport, date of birth, address | Legal obligation |
| Processing deposits and withdrawals | Payment method details, transaction records | Contract performance |
| Anti-money laundering checks | Transaction history, source of funds documentation | Legal obligation |
| Responsible gaming monitoring | Wagering patterns, session data, deposit frequency | Legitimate interest / Legal obligation |
| Fraud detection and platform security | IP address, device data, login history | Legitimate interest |
| Customer support and dispute resolution | Communications data, account history | Contract performance / Legitimate interest |
| Platform analytics and improvement | Session data, navigation patterns, device type | Legitimate interest |
| Promotional communications (where opted in) | Email address, phone number | Consent |
Marketing Communications
aca444 will only send you promotional emails, SMS messages, or WhatsApp notifications if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by updating your communication preferences in your aca444 account dashboard or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.
Automated Decision-Making
aca444 uses automated systems to monitor wagering patterns for responsible gaming indicators and to flag potentially fraudulent activity. Where an automated system triggers an account restriction or review, a human member of our team will review the flagged case before any final decision affecting your account is made. You have the right to request human review of any automated decision that significantly affects you.
Data Sharing and Disclosure
aca444 does not sell, rent, or trade your personal data to third parties. We share your data only in the following strictly defined circumstances:
Essential Service Providers
To deliver our services, we engage the following categories of third-party data processors, each of which is bound by a data processing agreement requiring them to handle your data securely and only for the purpose specified:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa payment network, Mastercard payment network — to authenticate and process financial transactions in BDT.
- Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studio partners — limited session token data is shared to authenticate your game session; no full profile data is transmitted.
- Identity verification services: Third-party KYC providers used to verify the authenticity of identity documents submitted during account verification.
- Cloud infrastructure providers: Secure hosting and database services used to store account and transaction data under strict access controls.
- Analytics providers: Aggregated, anonymised platform usage data may be processed by analytics tools to improve site performance. No personally identifiable data is included in these analytics streams.
Legal and Regulatory Disclosure
aca444 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are compelled to do so by a lawful order, subpoena, or applicable legal obligation. We will notify you of any such disclosure request to the extent that we are legally permitted to do so.
Business Transfers
In the event of a merger, acquisition, or full or partial sale of aca444's business assets, personal data held by aca444 may form part of the transferred assets. In such circumstances, you will be notified by email at least 30 days prior to any transfer of your personal data to a new data controller, and you will be given the opportunity to request deletion of your data before the transfer is completed.
Data Security Measures
aca444 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction:
- Transport encryption: All data transmitted between your device and aca444 servers is encrypted using TLS 1.3, the current industry standard for secure web communications. Our SSL certificate is renewed continuously and monitored for validity.
- Data at rest encryption: Account and personal data stored on aca444 servers is encrypted using AES-256 encryption.
- Password security: User passwords are never stored in plaintext. They are hashed using a strong one-way hashing algorithm (bcrypt with a high cost factor) before being stored. aca444 staff cannot read or recover your password.
- Access controls: Access to personal data within aca444 is restricted to staff who require it for their specific job function, governed by a role-based access control (RBAC) policy. All internal access to personal data is logged and audited.
- Two-factor authentication (2FA): 2FA is available and strongly recommended for all aca444 player accounts. Internal staff accounts that have access to player data require mandatory 2FA.
- Infrastructure security: aca444 servers are hosted in ISO-certified data centres with physical access controls, CCTV monitoring, and continuous network intrusion detection systems (IDS/IPS).
- Penetration testing: The aca444 platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
Data Breach Response
In the event of a personal data breach that poses a risk to affected players, aca444 will notify the affected users via the email address registered to their account within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures aca444 has taken or proposes to take to address the breach and mitigate its effects.
Your Privacy Rights
As a user of aca444, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a verifiable request.
Right of Access
You have the right to request a copy of the personal data aca444 holds about you, together with information about how it is used, where it is stored, and with whom it has been shared. We will provide this information in a clear, structured format.
Right to Rectification
If any personal data aca444 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic account information (such as your email address or phone number) directly through your account settings. For corrections to identity documents or formal account records, contact our support team.
Right to Erasure
You may request the deletion of your personal data from aca444's systems. We will honour erasure requests where the data is no longer necessary for the purpose for which it was collected, and where no overriding legal obligation requires its retention. Please note that aca444 is required by anti-money laundering regulations to retain account and transaction records for a minimum period (see Data Retention section below), which means complete immediate erasure may not always be possible.
Right to Restrict Processing
In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and a determination is pending — you may request that we restrict the processing of your personal data to storage only while the matter is resolved.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you may transfer it to another service provider.
Right to Object
You have the right to object to aca444's processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring. Upon receipt of an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or where the processing is necessary for the establishment, exercise, or defence of legal claims.
Data Retention
aca444 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | 5 years after account closure | Anti-money laundering legal obligation |
| Transaction and wagering records | 5 years after account closure | Anti-money laundering legal obligation |
| Identity verification documents (KYC) | 5 years after account closure | Legal obligation |
| Customer support communications | 3 years after last interaction | Legitimate interest (dispute resolution) |
| Marketing consent records | Until consent is withdrawn | Consent |
| Analytics and session data (anonymised) | 12 months rolling | Legitimate interest |
| Device and IP log data | 12 months | Legitimate interest (fraud prevention) |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked to any identifiable individual.
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how aca444 has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled with priority and strict confidentiality.
Privacy Contact Details
- Email: [email protected] — use the subject line "Privacy Rights Request" or "Privacy Complaint" as appropriate.
- Live Chat: Available 24/7 via the aca444 platform. Request to speak with a Privacy team member.
- WhatsApp: +880 1700-000444 — available during Bangladesh Standard Time (BST, UTC+6) business hours.
- Response Time: We aim to acknowledge all privacy enquiries within 3 business days and provide a full response within 30 calendar days.
Updates to This Policy
aca444 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify active account holders by email at least 14 days before the changes take effect. The date of the most recent revision is displayed at the top of this page. Continued use of the aca444 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
Last Revised: January 2026. This Privacy Policy supersedes all previous versions published on aca444.net. 18+ only. Please gamble responsibly.
Have Questions About Your Privacy?
Our support team is available 24/7 to help. You can also explore our FAQ for quick answers, or review our full Terms and Conditions. 18+ only.