365acr Privacy Policy
Who Operates 365acr
365acr is an online casino and sports betting platform built for players in Bangladesh. When you create an account at 365acr.com, place a bet, or contact our support team, you share personal information with us. This Privacy Policy explains exactly what that information is, what we do with it, and what control you have over it.
For any privacy-related questions, write to us at [email protected]. Our 24/7 live chat is also available from your 365acr account dashboard.
Data We Collect From You
365acr collects only the information needed to run your account, process payments, and meet our compliance obligations. We group this data into four categories:
| Category | Examples | When Collected |
|---|---|---|
| Identity | Full name, date of birth, NID / Passport / Driving Licence number | During registration and KYC verification |
| Contact | Mobile number, email address | At registration |
| Financial | bKash / Nagad / Rocket / Bank account identifiers, transaction history | When you deposit or withdraw |
| Device & Usage | IP address, browser type, device model, pages visited, session duration | Automatically, throughout your visit |
Why We Use Your Data
365acr uses your personal information for the following specific purposes:
- Account management — creating your 365acr account, resetting passwords, and processing login requests.
- Payment processing — confirming deposits (arrives within 3 minutes) and processing withdrawals (target: 13 minutes) via bKash, Nagad, Rocket, Upay, and Bank Transfer.
- Identity verification (KYC) — confirming you are over 18 and preventing fraud or money laundering, as required before your first withdrawal.
- Responsible gaming — monitoring your play patterns so we can flag potential problem gambling and apply self-exclusion or deposit limits when you request them.
- Customer support — resolving your queries via 24/7 live chat or email at [email protected].
- Personalisation — showing you relevant game recommendations and promotions (such as the 365acr welcome bonus or reload offers) based on your activity.
- Security — detecting suspicious logins, fraud attempts, and account takeover attempts.
We do not sell your personal data to third-party marketers under any circumstances.
Legal Basis for Processing
365acr processes your data under the following legal grounds:
- Contract performance — processing is necessary to operate your account and fulfil the services described in our Terms & Conditions.
- Legal obligation — KYC checks and anti-money laundering (AML) records are required by applicable regulations.
- Legitimate interests — fraud prevention, platform security, and service improvement.
- Consent — where you have explicitly opted in, such as receiving promotional emails or push notifications from the 365acr app.
You may withdraw consent for marketing communications at any time by contacting [email protected] or updating your notification preferences inside your account.
When We Share Your Data
365acr does not share your personal information with any party except in these defined situations:
Payment processors
Transaction data is shared with bKash, Nagad, Rocket, Upay, and participating banks solely to complete your deposit or withdrawal. These processors have their own privacy policies and data security obligations.
Game providers
Providers such as Spribe, JILI, PG Soft, Red Tiger, FA Chai, and KA Gaming receive anonymised session identifiers to deliver their game engines. They do not receive your name, NID, or financial details.
Legal and regulatory requests
If a competent authority presents a lawful request, 365acr will disclose only the minimum data required to comply. We will notify you unless legally prohibited from doing so.
How Long We Keep Records
365acr retains different categories of data for different periods, based on legal requirements and operational need:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & identity records | 5 years after account closure | AML and regulatory compliance |
| Transaction logs | 5 years | Financial audit trail |
| KYC documents | 5 years after verification | Legal obligation |
| Device & session logs | 13 months | Security and fraud detection |
| Marketing preferences | Until you withdraw consent | Consent-based processing |
After these periods, your data is deleted or anonymised so it can no longer be linked back to you.
Security Measures at 365acr
365acr protects your data using industry-standard technical and organisational controls:
- TLS encryption for all data transmitted between your device and 365acr servers.
- Encrypted storage for KYC documents and financial identifiers at rest.
- Access controls: only staff with a verified operational need can access account data, and all access is logged.
- Automatic session timeout after a period of inactivity in the 365acr app or web platform.
- Regular security assessments and penetration testing of the platform infrastructure.
If a data breach occurs that is likely to put your rights at risk, 365acr will notify affected players without undue delay and report the incident to the relevant authority as required.
Cookies and Tracking at 365acr
365acr uses cookies and similar technologies on the web platform. The 365acr Android app (v2.7.12) uses local device storage rather than browser cookies.
Strictly necessary cookies
These keep you logged in, remember your session, and protect against cross-site request forgery. You cannot opt out of these while using the site.
Analytics cookies
We use first-party analytics to measure page performance, session depth, and feature usage. This data is aggregated and not linked to your identity.
Preference cookies
These remember your language setting, lobby tab selection, and other interface preferences between visits.
You can clear cookies through your browser settings at any time. Doing so will log you out of 365acr and reset your preferences.
Your Rights as a Player
As a 365acr player, you have the following rights over your personal data. To exercise any of them, email [email protected] from the address registered to your account:
- Access — request a copy of the personal data 365acr holds about you.
- Correction — ask us to fix inaccurate or incomplete information (for example, a misspelled name).
- Deletion — request erasure of your data where it is no longer needed for the purpose it was collected, subject to our legal retention obligations.
- Restriction — ask us to pause processing of your data while a dispute is resolved.
- Portability — receive a machine-readable copy of data you have provided to us.
- Objection — object to processing based on legitimate interests, including profiling for personalised promotions.
- Withdraw consent — stop receiving marketing messages at any time, with no effect on your 365acr account access.
We will respond to verified requests within 30 days. If the request is complex, we will notify you of an extension and the reason for it.
Players Under 18
365acr is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. Age is verified during the KYC process before your first withdrawal.
If you believe a person under 18 has registered at 365acr, please contact us immediately at [email protected]. We will suspend the account and delete the associated data promptly.
Changes to This Policy
365acr may update this Privacy Policy when our practices change, when we add new features, or when regulations require it. The "Last updated" date at the top of this page will always reflect the most recent revision.
For material changes that significantly affect how we use your data, we will send a notification to your registered email address at least 14 days before the new terms take effect. Continuing to use 365acr after that date means you accept the updated policy.
Get in Touch About Privacy
For any question, complaint, or request relating to your personal data at 365acr, reach our team through:
- Email: [email protected]
- Live chat: 24/7 from your 365acr account dashboard
We aim to acknowledge all privacy emails within one business day and resolve them within 30 days. If you are not satisfied with our response, you have the right to escalate to the relevant data protection authority in your jurisdiction.
Ready to play? Open your 365acr account