avc8 Privacy Policy — Your Data, Your Rights

1. Introduction

avc8 ("avc8", "we", "us", "our") is committed to protecting and respecting the privacy of all players who use our online betting and gaming platform (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It applies to all data processing activities carried out in connection with your use of the Platform, including registration, account management, sports betting, casino gaming, payment transactions, and customer support interactions.

This Privacy Policy should be read alongside, and forms part of, our Terms & Conditions. By registering an account on the avc8 Platform, you confirm that you have read and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not create an account or use the avc8 Platform.

We take a data-minimisation approach to all our processing activities: we collect only what is necessary, retain it only as long as required, and apply stringent security measures throughout the data lifecycle. Our commitment to player privacy is not a legal formality — it is a fundamental part of how avc8 operates as Bangladesh's trusted betting platform.

2. Data Controller

For the purposes of this Privacy Policy, avc8 is the data controller responsible for your personal information. As data controller, avc8 determines the purposes for which and the manner in which personal data is processed. All enquiries, requests, or complaints relating to the use of your personal data should be directed to our Privacy team at support@avc8.io.

The avc8 Platform is operated for and available to players residing in Bangladesh. All data processing activities relating to avc8 players are conducted in accordance with the principles set out in this Privacy Policy.

3. Data We Collect

Depending on how you interact with the avc8 Platform, we may collect the following categories of personal data:

3.1 Identity Data

Full legal name, date of birth, nationality, gender, and copies of government-issued identification documents (such as national ID card, passport, or driver's licence) provided during the KYC verification process.

3.2 Contact Data

Email address, mobile phone number, and residential address (including district, city, and postal code — for example, addresses in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).

3.3 Account Data

Username, encrypted password, account registration date, account status, preferred language, and any account preferences or settings you configure on the Platform.

3.4 Financial Data

Payment method details (such as bKash mobile wallet number, Nagad account reference, Rocket account reference, Upay reference, or the last four digits and expiry date of a Visa or Mastercard), deposit and withdrawal transaction history, account balance history, and bonus redemption records. avc8 does not store full card numbers; card data is processed and tokenised by our payment gateway partners.

3.5 Transactional Data

Records of all bets placed, games launched, wager amounts, outcomes, winnings, and losses on the avc8 Platform. This includes sports betting activity (cricket BPL, IPL, T20 World Cup, football, kabaddi) and casino game activity (live dealer, slots, Aviator, Exclusive games).

3.6 Technical Data

IP address, device type, device identifier, operating system, browser type and version, time zone, screen resolution, referring URL, and session duration. This data is collected automatically when you access the avc8 Platform.

3.7 Usage Data

Information about how you navigate and use the Platform, including pages visited, features accessed, search queries, click paths, error logs, and game interaction patterns.

3.8 Communications Data

Records of all communications between you and the avc8 support team, including live chat transcripts, email correspondence, and any feedback or complaint submissions.

3.9 Responsible Gaming Data

Records of any deposit limits, loss limits, session time limits, or self-exclusion instructions you have applied to your account, along with any responsible gaming assessments completed via the Platform.

4. How We Collect Your Data

avc8 collects personal data through the following channels:

• Direct Interactions: When you register an account, complete the KYC verification process, make a deposit or withdrawal, place a bet, contact support, or complete any form on the Platform, you provide personal data directly to avc8.
• Automated Technologies: When you access the avc8 Platform, our servers automatically collect technical and usage data via server logs, cookies, web beacons, and similar tracking technologies. See Section 10 for details on our cookie practices.
• Third-Party Payment Providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment gateway partners share transaction confirmation data and payment reference identifiers with avc8 to credit your account and process withdrawals.
• Identity Verification Partners: avc8 uses third-party KYC and AML service providers to verify the authenticity of identity documents submitted during the registration process. These providers may return verification status data and risk signals to avc8.
• Game Providers: Our casino game providers — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may share session data, game round results, and fair play verification data with avc8 for settlement and dispute resolution purposes.

5. How We Use Your Data

avc8 uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact, Account
Identity verification (KYC) and age verification	Identity, Contact
Processing deposits and withdrawals	Financial, Identity
Settling bets and awarding winnings	Transactional, Financial
Fraud prevention and AML monitoring	Identity, Financial, Technical, Transactional
Responsible gaming monitoring and intervention	Transactional, Responsible Gaming, Communications
Customer support and dispute resolution	Identity, Account, Communications, Transactional
Platform security and technical operations	Technical, Usage
Product improvement and analytics	Usage, Technical (anonymised or aggregated)
Marketing and promotional communications (with consent)	Contact, Transactional
Legal and regulatory compliance	All categories as required

avc8 will not use your personal data for any purpose that is incompatible with the purposes listed above. If we intend to process your data for a new purpose, we will update this Privacy Policy and, where required, seek your consent.

6. Legal Basis for Processing

avc8 processes personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and avc8 — specifically, to operate your account, process transactions, settle bets, and provide the services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification mandates, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of avc8 or third parties, including fraud prevention, platform security, responsible gaming monitoring, and product analytics — where those interests are not overridden by your data protection rights.
• Consent: Where avc8 processes data based on your consent — for example, sending you promotional emails or SMS marketing — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

7. Data Sharing

avc8 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection safeguards:

7.1 Payment Processors

bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners receive the minimum personal and financial data necessary to process deposit and withdrawal transactions on your behalf. These partners are bound by their own data protection standards and applicable financial regulations.

7.2 Identity Verification Providers

Third-party KYC and AML service providers receive identity documents and personal details for the sole purpose of verifying your identity and ensuring compliance with age verification and anti-money laundering requirements.

7.3 Game Providers

Casino and sports data providers — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — receive session identifiers and game-related data necessary to deliver game content and settle game outcomes. These providers do not receive full identity data.

7.4 Technology and Infrastructure Providers

Cloud hosting, platform infrastructure, and cybersecurity partners may process data on avc8's behalf as data processors, acting only under avc8's documented instructions and subject to strict confidentiality obligations.

7.5 Legal and Regulatory Authorities

avc8 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. avc8 will notify you of such disclosures where legally permitted to do so.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of avc8's business or assets, personal data may be transferred to the relevant acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications prior to its completion where reasonably practicable.

8. Data Retention

avc8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account's active lifetime and for a period of 5 years following account closure, to satisfy potential legal, regulatory, or dispute resolution requirements.
• Financial and Transaction Data: Retained for a minimum of 7 years from the date of the transaction in accordance with financial record-keeping obligations.
• KYC/Identity Documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable AML regulations.
• Communications Data: Support correspondence and live chat transcripts are retained for 3 years from the date of the interaction.
• Technical and Usage Data: Retained for up to 24 months from the date of collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for 3 years following withdrawal, to demonstrate compliance.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, avc8 will securely delete or anonymise it in accordance with our internal data disposal procedures.

9. Data Security

avc8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the avc8 Platform is encrypted using industry-standard TLS protocols. This protects your credentials, payment details, and session activity from interception.
• Data Encryption at Rest: Sensitive data stored in avc8's databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within avc8's systems is strictly limited to authorised personnel who require that access to perform their job functions. All internal access is logged and subject to regular audit review.
• Password Security: User passwords are stored as salted cryptographic hashes. avc8 never stores passwords in plaintext and cannot retrieve your original password; only a reset is possible if credentials are lost.
• Two-Factor Authentication (2FA): avc8 offers and encourages the use of two-factor authentication for all registered accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Audits: avc8's platform and infrastructure undergo regular internal and third-party security assessments to identify and remediate potential vulnerabilities.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, avc8 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10. Cookies & Tracking Technologies

avc8 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

Cookie Type	Purpose	Retention
Strictly Necessary	Enable core Platform functionality: session management, login state, security tokens, load balancing.	Session / up to 24 hours
Functional	Remember your preferences such as language selection, display settings, and responsible gaming choices.	Up to 12 months
Analytics	Collect anonymised usage and performance data to help avc8 understand how the Platform is used and improve navigation and features.	Up to 24 months
Marketing	Track interactions with promotional content to measure the effectiveness of avc8 marketing campaigns. Only placed with your consent.	Up to 12 months

You may control or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. avc8 does not use third-party advertising network cookies to serve behavioural advertising on external websites.

11. Your Data Rights

As an avc8 player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact us at support@avc8.io with your full name, registered email address, and a description of your request. avc8 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data avc8 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Minor account details such as contact information may be updated directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds to continue. This right is subject to legal retention obligations (see Section 8).
• Right to Restriction: You may request that avc8 restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to avc8 in a structured, commonly used, machine-readable format, and to request its transfer to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where avc8 relies on legitimate interests as its legal basis. avc8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support@avc8.io or updating your communication preferences in your account settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

12. Minors

The avc8 Platform is strictly for adults aged 21 years and above. avc8 does not knowingly collect personal data from individuals under the age of 21. If avc8 becomes aware that personal data has been collected from a person under 21 without appropriate parental consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to avc8, please contact us immediately at support@avc8.io. We will investigate and take appropriate action within 48 hours of receiving your report.

13. International Data Transfers

avc8's Platform infrastructure and operational systems may involve the transfer of personal data to, and storage of personal data in, countries outside Bangladesh. Where such transfers occur, avc8 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to third-party processors and partners who maintain equivalent or higher data protection standards to those applied by avc8.
• Implementing contractual data protection clauses in all agreements with third-party processors who handle personal data on avc8's behalf.
• Limiting data transfers to the minimum necessary for the relevant processing purpose.

By using the avc8 Platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section.

14. Changes to This Privacy Policy

avc8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. The "Last Updated" date at the top of this page and in the table of contents indicates when the most recent revision was made.

Where changes are material — for example, where we introduce a new category of data collection or a new processing purpose — avc8 will notify registered players by email to the address associated with their account, or via an in-Platform notification, at least 14 days before the changes take effect.

Your continued use of the avc8 Platform following notification of a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any change, you must discontinue use of the Platform and may request account closure in accordance with Section 12.2 of our Terms & Conditions.

We encourage all registered players to review this Privacy Policy periodically to remain informed about how avc8 protects and uses your personal information. Archived versions of previous Privacy Policy editions are available upon request from support@avc8.io.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way avc8 handles your personal data, please contact our Privacy and Data Protection team through the following channels:

• General Privacy Enquiries: support@avc8.io
• Responsible Gaming & Data Concerns: rg@avc8.io
• Response Time: avc8 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days of receipt.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, BST UTC+6).

When contacting us regarding a data rights request, please include your registered email address, full name, and a clear description of your request so that we can verify your identity and process your request efficiently.