as67 Privacy Policy

1 Introduction

as67 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our online betting and casino platform. This Privacy Policy sets out in clear, formal English the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which processing rests, the parties with whom data may be shared, how long we retain it, and the rights available to you as a data subject.

This policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and as67. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter of data privacy, this Privacy Policy shall prevail.

as67 primarily serves players based in Bangladesh. Our platform is operated in English and all communications, including privacy notices, are provided in English. If you require clarification on any aspect of this policy, please contact our support team using the details in Section 15.

2 Data Controller

For the purposes of applicable data protection law, as67 is the data controller in respect of personal data collected through the as67 platform. as67 operates under an international gaming licence and applies internationally recognised data protection standards to all personal data processing activities.

As data controller, as67 is responsible for determining the purposes and means of processing your personal data. Where as67 engages third-party processors — such as KYC verification providers, payment processors, or analytics platforms — those processors act on as67's documented instructions and are bound by data processing agreements that prohibit unauthorised use of your data.

Our designated point of contact for all privacy-related matters is our support team, reachable at [email protected]. All privacy enquiries, data subject requests, and complaints will be directed to the appropriate internal team for handling within the timescales specified in Section 15.

3 Data We Collect

as67 collects personal data across several categories depending on how you interact with our platform. The table below summarises the categories of data we collect and provides examples of the specific data points within each category.

4 How We Collect Data

as67 collects personal data through the following means:

4.1 Direct Collection

You provide data directly to as67 when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, use a bonus offer, submit a support request, respond to a survey, or update your account profile. All forms on the as67 platform require you to actively input your data; we do not pre-populate forms with data obtained from third parties without your knowledge.

4.2 Automated Collection

When you visit the as67 website or use the as67 mobile application, our servers automatically collect certain technical and usage data including your IP address, device identifiers, browser type, operating system version, referring URL, pages viewed, and session duration. This data is collected through server logs, session cookies, and analytics tools. Please refer to Section 8 for full details of our cookie usage.

4.3 Third-Party Sources

as67 may receive data about you from the following third-party sources in limited circumstances:

• KYC verification providers: Identity and age verification results from accredited third-party verification services used to confirm the accuracy of data you have provided at registration.
• Payment processors: Transaction status confirmations and fraud screening results from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and associated payment infrastructure providers.
• Fraud prevention databases: Risk signals from industry-shared fraud prevention databases used to detect and prevent financial crime on the platform.

In all cases, as67 validates that third-party data sources have a lawful basis for sharing your data with us before incorporating it into your account record.

5 Legal Basis for Processing

as67 processes your personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases we rely upon are as follows:

• Contractual necessity: Processing your identity, contact, financial, and gaming data is necessary to create and maintain your account, process transactions, and deliver the as67 service as described in our Terms & Conditions.
• Legal obligation: Processing for KYC verification, AML monitoring, fraud prevention, and regulatory reporting is required to comply with our obligations under our international gaming licence and applicable financial crime prevention laws.
• Legitimate interests: Processing technical and usage data for platform security, fraud detection, service improvement, and responsible gaming monitoring is carried out in furtherance of as67's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing your data for direct marketing communications (email, SMS) is carried out only where you have given explicit, freely given, specific, and informed consent. You may withdraw this consent at any time without detriment to your account status.

6 How We Use Your Data

as67 uses the personal data it collects for the following specific purposes:

6.1 Account Management

To create, maintain, and administer your as67 account; to verify your identity and age at registration; to process login authentication; to manage your responsible gaming settings; and to communicate account-related updates including changes to terms or service notifications.

6.2 Transaction Processing

To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other available payment methods; to maintain your Wallet balance accurately; to reconcile transaction records; and to investigate and resolve payment disputes.

6.3 Compliance & Legal Obligations

To conduct Know Your Customer (KYC) age and identity verification; to monitor transactions for anti-money laundering (AML) purposes; to maintain records required by our international gaming licence; to respond to lawful requests from regulatory, law enforcement, or judicial authorities; and to detect and prevent fraud, collusion, and other prohibited conduct as defined in our Terms & Conditions.

6.4 Platform Improvement

To analyse usage patterns and player behaviour in aggregate to improve the functionality, layout, and content of the as67 platform; to test new features; to identify and resolve technical errors; and to optimise platform performance across different devices and network conditions commonly used in Bangladesh.

6.5 Responsible Gaming

To monitor gaming behaviour for indicators of problem gambling; to apply deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion measures where requested by the player or where as67's responsible gaming protocols require intervention; and to communicate relevant support resources to players identified as at risk.

6.6 Marketing Communications

To send you promotional offers, bonus notifications, and platform news by email or SMS, but only where you have given explicit consent to receive such communications. as67 does not engage in unsolicited cold marketing and does not share your contact details with third-party marketing organisations for their own promotional use.

7 Data Sharing

as67 does not sell your personal data to third parties. Data may be shared only in the circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose:

7.1 Service Providers

as67 engages carefully vetted third-party service providers who process data on our behalf under binding data processing agreements. These providers include KYC and identity verification services, payment processing infrastructure providers, fraud prevention platforms, cloud hosting and data storage providers, and customer support software platforms. All processors are contractually prohibited from using your data for any purpose other than performing the contracted service.

7.2 Payment Partners

To process deposits and withdrawals, as67 shares the minimum necessary transaction data with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or their processing partners). This includes your account reference, transaction amount in BDT, and payment method identifier. Payment partners are subject to their own data protection and regulatory obligations.

7.3 Regulatory & Legal Authorities

as67 may disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts where required to do so by law, court order, or in connection with the exercise or defence of legal claims. Where possible and lawful, as67 will notify you of any such disclosure.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of as67's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to the data processing arrangements that apply to your account.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to remember user preferences, and to provide analytical information to website operators. as67 uses cookies strictly for the functional and analytical purposes described below.

8.2 Cookies We Use

The following categories of cookies are used on the as67 platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you securely logged in during a visit, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without impairing core platform functionality.
• Preference cookies: Used to remember your display settings, language preferences, and responsible gaming tool configurations so that they are applied consistently across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the as67 platform, including page views, session duration, and feature engagement rates. This data helps us improve the platform experience. as67 does not use third-party advertising analytics networks.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for the most common browsers are available via their respective support documentation. Please be aware that disabling strictly necessary cookies may prevent you from logging in to your as67 account or using certain platform features.

as67 does not use third-party advertising cookies, retargeting pixels, or behavioural profiling trackers of any kind. Your browsing behaviour on the as67 platform is not shared with advertising networks.

9 Data Retention

as67 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by our legal and regulatory obligations. The table below summarises our standard retention periods by data category:

Upon expiry of the applicable retention period, as67 will securely delete or irreversibly anonymise your personal data so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained for statistical and analytical purposes indefinitely.

10 Data Security

as67 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and as67 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage of all sensitive data fields at rest, including passwords (stored as salted cryptographic hashes — never in plain text) and identity document scans.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging of all access events.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals.
• Secure data centres with physical access controls, redundant power and connectivity, and continuous environmental monitoring.
• Incident response procedures that define clear steps for identifying, containing, and remediating any suspected data security incident, including timely notification to affected players where legally required.

While as67 employs industry-standard security practices, no online platform can guarantee absolute security against all conceivable threats. You are responsible for maintaining the security of your own device, keeping your as67 password confidential, and reporting any suspected unauthorised account access to us immediately at [email protected].

11 Your Rights

Subject to applicable data protection law and our legal retention obligations, you have the following rights in respect of your personal data held by as67:

• Right of access: You have the right to request a copy of the personal data that as67 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For routine account details (email address, phone number), you can update these directly from within your account dashboard.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to our obligation to retain certain data for the periods specified in Section 9.
• Right to restriction of processing: You have the right to request that as67 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: You have the right to receive a copy of the personal data you provided to as67 in a structured, commonly used, machine-readable format, where processing is based on your consent or on contractual necessity.
• Right to object: You have the right to object to processing of your personal data where that processing is based on as67's legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Rights related to automated decision-making: as67 does not make solely automated decisions that produce significant legal effects concerning you. Where automated tools are used to flag accounts for review (e.g., fraud detection, AML screening), human review is applied before any material action is taken against your account.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Subject Request". as67 will respond within 30 calendar days of receiving your request. We may require identity verification before processing certain requests to ensure we are responding to the genuine account holder.

12 Children and Minors

The as67 platform is strictly for adults aged 21 and above. as67 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the as67 account registration process, and additional documentary age verification may be requested prior to withdrawal processing.

If as67 becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, it will take immediate steps to delete that data, close the associated account, and if applicable, report the matter to the appropriate authorities. If you are a parent or guardian and believe that a minor under your supervision has registered an account on as67, please contact our support team immediately at [email protected].

13 Third-Party Links

The as67 platform may occasionally reference third-party services, such as payment method providers or game software studios, in informational content. as67 does not embed outbound links to third-party websites within its platform pages, and this Privacy Policy applies exclusively to data processed by as67 through the as67 website and mobile application.

If you navigate to any third-party website or application referenced in as67 content, that third party's own privacy policy will govern how your data is handled. as67 accepts no responsibility for the privacy practices of third-party operators. We encourage you to review the privacy policies of any external service you use in connection with your as67 account, including bKash, Nagad, Rocket, and Upay.

14 Policy Updates

as67 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When we make material changes to this policy, we will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the as67 platform for a period of at least 30 days prior to the changes taking effect.

The date of the most recent update to this Privacy Policy is displayed at the top of this page and in the "Updated" chip in the table of contents. Your continued use of the as67 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and may request account closure under Section 14 of our Terms & Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how as67 collects, uses, and protects your personal data. Archived versions of previous Privacy Policies are available on request by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to as67's handling of your personal data, please contact our dedicated privacy support team using the details below. We take all privacy enquiries seriously and aim to provide a substantive response within the timescales indicated.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Subject Request — [Your Name]"
• Subject Line for Privacy Enquiries: "Privacy Enquiry — [Your Name]"
• Response Time: Within 30 calendar days for formal data subject requests; within 5 business days for general privacy enquiries
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, BST UTC+6)

When contacting us regarding a data subject request, please include your registered email address, your as67 username, and a clear description of the right you wish to exercise or the concern you wish to raise. This will help us locate your account record and process your request efficiently.

as67 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to your privacy enquiry or data subject request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.