ak667 Privacy Policy

When you register for an account or use the Services, you provide us with certain personal information, including but not limited to:

• Full name and date of birth (used for identity verification and age confirmation in line with our 21+ policy).
• Bangladeshi mobile phone number (used as your account identifier and for transaction notifications via SMS).
• National Identity Card (NID) number and document image, collected during the mandatory KYC verification process before your first withdrawal.
• Payment method details sufficient to process transactions — for bKash, Nagad, and Rocket this means your registered mobile number; for bank transfers it means your account name and account number.

When you access the Platform, certain technical data is collected automatically from your device and browser, including:

• IP address and approximate geographic location (city/region level — not GPS or precise location data).
• Device type, operating system version, browser type and version, and screen resolution, used to optimise Platform rendering on your device.
• Session logs including pages visited, time spent on each page, games played, bets placed, and actions taken — used for fraud prevention, responsible gaming monitoring, and service improvement.

Your personal data is used for the following primary purposes:

• Account creation, management, and authentication — to establish, maintain, and secure your player account on the Platform.
• Identity verification (KYC) — to confirm that you are aged 21 or above and that the personal information you have provided is accurate, in compliance with responsible gaming obligations.
• Financial transaction processing — to process your deposits via bKash, Nagad, Rocket, Upay, and local bank transfers, and to process your withdrawal requests to your verified payment method.
• Customer support — to respond to your queries, complaints, and requests submitted through the live chat or email support channels.
• Fraud prevention and platform integrity — to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.

ak667 processes your personal data on the following legal grounds:

• Contractual necessity — processing required to fulfil the player account contract between you and ak667, including account management, transaction processing, and KYC verification.
• Legal obligation — processing required to comply with anti-money-laundering obligations, age verification requirements, and requests from law enforcement or regulatory authorities.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent — processing for marketing and promotional communications, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

ak667 does not sell your personal data. We may share your data with the following categories of recipients only where necessary and only for the purposes stated:

• Payment processors and financial service providers (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other local payment partners) — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity verification and KYC service providers — solely for the purpose of verifying the identity documents you submit as part of the KYC process.
• Game providers and platform technology partners — limited technical data (such as session tokens and game logs) may be shared with providers including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi to deliver game services and resolve disputes.
• Law enforcement, regulatory authorities, or legal proceedings — where ak667 is required by law or by a valid legal order to disclose your personal data. In such cases we will disclose only the minimum data required to satisfy the legal obligation.

ak667 does not transfer or sell your personal data to any third party located outside Bangladesh for commercial, marketing, or data-brokerage purposes. Where technical service providers (such as cloud hosting or fraud detection services) process data outside Bangladesh, ak667 requires those providers to maintain data protection standards at least equivalent to the protections described in this Policy, and to process your data only for the specific purpose for which it was shared.

ak667 does not store full payment credentials on its own servers. When you deposit via bKash, Nagad, Rocket, or Upay, only your registered mobile number associated with that payment account is retained in our records for transaction reconciliation purposes. For bank transfers, we retain your account name and account number solely for the purpose of processing withdrawals to the correct destination. Full card numbers, CVV codes, and mobile banking PINs are never collected or stored by ak667 under any circumstances.

Identity documents submitted during the KYC process — including copies of your National Identity Card (NID) — are stored in an encrypted format accessible only to authorised ak667 compliance staff and, where required, to our contracted KYC verification partner. KYC documents are not shared with any other third party, are not used for any purpose other than identity verification, and are retained for the minimum period required to satisfy our legal obligations. Players who have completed KYC verification and subsequently close their account may request deletion of their KYC documents after the legally mandated retention period has elapsed by contacting the support team.

ak667 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal obligations. As a general guide: active account data (profile information, transaction history, game logs) is retained for the duration of your account's active status plus a minimum of five years following account closure to meet anti-money-laundering record-keeping requirements. KYC identity documents are retained for a minimum of five years following account closure. Session and behavioural analytics data is aggregated and anonymised after 24 months. Marketing consent records are retained for as long as you hold an active account plus three years thereafter, to demonstrate compliance. When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you.

ak667 uses the following categories of cookies and similar tracking technologies on the Platform:

• Essential cookies — strictly necessary for the Platform to function. These include session cookies that keep you logged in during your visit, security tokens that prevent cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Analytical cookies — used to collect anonymous, aggregated data about how players navigate the Platform, which pages are visited most frequently, and where players encounter errors or drop off. This data helps us improve the Platform experience. These cookies do not identify you personally.
• Functional cookies — used to remember your preferences such as language selection, so you do not need to re-enter these on each visit. These are optional but improve your experience. You may disable them through your browser settings without affecting core Platform access.

Subject to applicable law, you have the following rights in relation to the personal data ak667 holds about you:

• Right of access — the right to request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe upon receipt of a verified request.
• Right to rectification — the right to request correction of any inaccurate personal data we hold about you. If you notice that your account information is incorrect, contact the support team to request a correction.
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to a mandatory legal retention period cannot be deleted until that period expires.
• Right to restrict processing — the right to request that we limit the way we use your personal data in certain circumstances, for example while a correction request is being reviewed.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

ak667 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive data including KYC documents and payment records, access controls limiting data access to authorised personnel only on a need-to-know basis, regular security reviews and vulnerability assessments of the Platform infrastructure, and two-factor authentication requirements for staff accounts with access to player data. While we apply industry-standard security practices, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a risk to your rights and freedoms, ak667 will notify affected players promptly in accordance with applicable law.

The ak667 Platform and all of its Services are intended exclusively for adults aged 21 and above. ak667 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a player account has been created by or on behalf of a person under the age of 21, we will immediately suspend that account, forfeit any associated balances, and delete all personal data associated with that account to the extent permitted by law. If you are a parent or guardian and believe that a minor has registered on the Platform, please contact the support team immediately at [email protected] so that we can take prompt action.

ak667 reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this Policy, we will update the "Last Updated" date at the top of this page. Where a change significantly affects your privacy rights, we will endeavour to notify you via your registered mobile number or through a prominent notice on the Platform. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically so that you remain informed about how your personal data is being protected.