Privacy Policy — avc8

01. Information We Collect

Data You Provide Directly

When you register an account with avc8 or interact with our services, you provide us with information that may include the following:

• Identity data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact data: Email address, mobile number registered in Bangladesh, and residential address.
• Identity documents: Copies of your National Identity Card (NID), passport, driving licence, or other government-issued documents submitted for KYC verification purposes.
• Financial data: Payment method details including bKash wallet numbers, Nagad account references, bank account identifiers, and partial card numbers. Full card numbers are processed exclusively by our PCI-DSS compliant payment processors and are never stored on avc8 systems.
• Account credentials: Username and hashed password. Your plaintext password is never stored.
• Communications data: Messages you send to our support team via email or live chat, including the content of those communications and any attachments.

Data Collected Automatically

When you use avc8.bet, our systems automatically record certain technical and behavioural data:

• Device and connection data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Session data: Login timestamps, session duration, pages visited, features used, and actions taken during each visit.
• Gaming data: Game sessions played, wagers placed, outcomes, bonus claims, and wagering progress records.
• Transaction logs: A complete record of all deposits, withdrawals, bonus credits, and account balance changes.
• Geolocation data: Approximate geographic location derived from your IP address, used to apply appropriate access controls and to comply with jurisdictional requirements.

Data From Third Parties

avc8 may receive limited data about you from the following categories of third-party sources:

• Payment service providers (bKash, Nagad, Rocket, Upay, and banking partners): Transaction confirmation references and status data to verify the success or failure of deposit and withdrawal operations.
• Identity verification services: Results of identity document checks conducted by our KYC verification partners, including match confidence scores.
• Fraud prevention services: Risk scores and flagging data where our security partners have identified patterns associated with fraudulent activity.
• Game studio providers (Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi, etc.): Game session logs, round IDs, and outcome data relevant to dispute resolution and fairness audits.

02. How We Use Your Data

avc8 processes your personal data only for lawful, specified, and legitimate purposes. The table below sets out the primary purposes for which your data is used and the lawful basis on which each processing activity rests.

Marketing Communications

avc8 will only send you promotional emails, SMS messages, or push notifications relating to bonuses, tournaments, and seasonal offers — such as Eid promotions, Pohela Boishakh bonuses, or BPL cricket season offers — if you have actively opted in to receive such communications. You may withdraw your consent and opt out at any time by updating your notification preferences in Account Settings or by contacting [email protected]. Withdrawing consent for marketing does not affect the lawfulness of any processing carried out prior to withdrawal.

Automated Decision-Making

avc8 uses automated systems for certain fraud and security assessments, including IP-based access controls and pattern detection for bonus abuse. Where an automated decision materially affects your account — such as a temporary deposit block or a withdrawal hold — you have the right to request human review of that decision by contacting our support team.

03. Data Sharing & Disclosure

avc8 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

Service Providers and Data Processors

We engage carefully selected third-party service providers who process data on our behalf under binding contractual data protection agreements. These categories include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals.
• KYC and identity verification partners: To verify the authenticity of identity documents submitted during account registration.
• Cloud hosting and infrastructure providers: To store and serve the avc8 platform on secure, geographically appropriate server infrastructure.
• Game studio providers: Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi, and others — to deliver game content and record game session data for fairness and dispute purposes.
• Analytics providers: Anonymised or pseudonymised session data may be shared with analytics tools to help us understand platform usage patterns and improve the user experience.
• Email and communications platforms: To deliver transactional emails, account notifications, and (where you have opted in) promotional communications.

Legal and Regulatory Disclosures

avc8 may disclose personal data to law enforcement agencies, courts, or government authorities where we are required to do so by applicable law, court order, or in connection with the investigation and prevention of financial crime, fraud, or money laundering. We will notify you of any such disclosure to the extent we are legally permitted to do so.

Business Transfers

In the event that avc8 undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to privacy practices that result from it before the transfer takes effect.

04. Cookies & Tracking Technologies

avc8.bet uses cookies and similar client-side storage technologies to make the platform function correctly, to keep you securely logged in, and to gather anonymised usage data that helps us improve the experience for all players.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status, preferred language, and session state — so that you do not need to re-enter details on every page load. Cookies do not execute code and cannot access other files on your device.

Categories of Cookies We Use

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block all third-party cookies, clear cookies on exit, or view and delete stored cookies on a site-by-site basis. Please note that disabling functional or analytics cookies may affect your experience on avc8.bet — for example, you may need to re-enter preferences on each visit. Disabling strictly necessary or security cookies may prevent you from logging in or using certain platform features.

Local Storage and Session Storage

In addition to cookies, avc8.bet may use browser local storage and session storage to hold temporary data such as your active game state, shopping cart equivalent (pending bets), and UI preferences. This data is stored locally on your device and is not transmitted to avc8 servers independently of your normal browsing actions. Session storage data is automatically cleared when you close your browser tab.

05. Data Security

avc8 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• Transport security: All connections to avc8.bet are encrypted using TLS 1.3, ensuring that data in transit between your device and our servers cannot be intercepted or read by third parties.
• Encryption at rest: Sensitive data fields — including identity documents, payment references, and account credentials — are stored using AES-256 encryption.
• Password hashing: Passwords are stored exclusively as salted cryptographic hashes using an industry-standard algorithm. No member of the avc8 team can view your plaintext password.
• Access controls: Access to production systems and player data is restricted to authorised personnel on a strict need-to-know basis and is governed by role-based access control policies. All administrative access is logged and audited.
• Two-factor authentication: avc8 offers optional two-factor authentication (2FA) on player accounts to provide an additional layer of protection against unauthorised login. We strongly encourage all players to enable 2FA in Account Settings.
• Network security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability scanning and penetration testing conducted by independent security professionals.
• Incident response: In the event of a confirmed data security incident that poses a risk to your personal data, avc8 will notify affected players as promptly as possible, describing the nature of the incident, the data affected, and the steps taken to contain and remediate it.

06. Data Retention

avc8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as general guidelines:

When personal data reaches the end of its applicable retention period, avc8 will either securely delete it or anonymise it in such a way that it can no longer be linked to any individual player. Anonymised data derived from player records may be retained indefinitely for statistical and analytical purposes without restriction.

Where you request deletion of your data and avc8 is legally required to retain certain records (for example, financial transaction records required for AML purposes), we will retain only the minimum data necessary to satisfy that legal obligation and will delete all other personal data associated with your account.

07. Your Data Rights

As a player using the avc8 platform, you hold the following rights in relation to the personal data we hold about you. These rights may be exercised by contacting us at [email protected] with the subject line "Data Rights Request".

Right of Access

You have the right to request a copy of all personal data that avc8 holds about you, together with information about how that data is used, where it came from, and with whom it has been shared. We will respond to access requests within 30 calendar days of receipt.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Minor corrections — such as updating your contact email or phone number — can be made directly through Account Settings. For corrections to identity or KYC data, documentary evidence of the correct information will be required.

Right to Erasure

You may request that avc8 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. Erasure requests are subject to avc8's legal obligations to retain certain categories of data as described in the Data Retention section above.

Right to Restrict Processing

You may request that avc8 restrict the processing of your personal data — meaning we continue to store it but cease active use — in certain circumstances, such as while the accuracy of the data is contested or while an objection to processing is being evaluated.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on avc8's legitimate interests. If you object, avc8 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another provider if you wish.

Right to Withdraw Consent

Where avc8 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

08. Contact & Data Protection

avc8 takes its data protection responsibilities seriously. If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact us using the details below.

General Privacy Enquiries

For general questions about privacy practices, marketing preferences, or cookie settings, contact our customer support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry"
• Response time: Within 2 business days (Bangladesh Standard Time, UTC+6)

Formal Data Rights Requests

To formally exercise any of the data rights described in Section 07 above, please email [email protected] with the subject line "Data Rights Request". Include your registered account username and a clear description of the right you wish to exercise. We will acknowledge receipt within 5 business days and provide a full written response within 30 calendar days.

Changes to This Privacy Policy

avc8 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, legal requirements, or operational practices. When material changes are made, we will notify registered players by email at the address on file and by displaying a prominent notice on avc8.bet for a minimum of 30 days before the revised policy takes effect. The "Last updated" date at the top of this page always reflects the most recent revision. Your continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms.