ak365 Privacy Policy

ak365 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the ak365 platform at https://ak365.io. This Privacy Policy sets out in clear and transparent terms what personal information we collect, why we collect it, how it is stored and protected, with whom it may be shared, how long we retain it, and what rights you hold as a data subject.

This policy applies to all users of the ak365 platform, including visitors who have not yet registered an account, registered players, and former account holders whose data we continue to hold in accordance with our legal retention obligations. It covers data collected through the website, through communications with our support team, and through the payment and identity verification processes associated with your account.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and ak365. Where there is a conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy takes precedence.

For the purposes of this Privacy Policy, ak365 acts as the data controller in respect of the personal data it collects and processes in connection with the operation of the platform. As data controller, ak365 determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled, wish to exercise any of your data rights, or need to raise a privacy-related complaint, you may contact ak365's data protection team directly at the contact details provided in Section 16 of this policy. All privacy enquiries are handled confidentially and with priority.

ak365 collects personal data in the following categories. We collect only what is genuinely necessary for the purposes described in this policy — we do not collect excessive or irrelevant personal information.

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by law or with your explicit prior consent.

ak365 collects personal data through the following methods:

• Direct submission: Data you provide when completing the registration form, submitting identity verification documents, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you visit and interact with the ak365 platform, including via cookies, log files, and session tracking technology.
• Third-party sources: Identity verification data received from our KYC service providers; fraud-risk signals received from payment processors; publicly available information used to fulfil anti-money-laundering obligations.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks (Visa, Mastercard) when you make a deposit or withdrawal.

ak365 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual necessity: Processing required to perform the contract between you and ak365 — including operating your account, processing transactions, and delivering platform services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, know-your-customer (KYC) rules, and financial record-keeping mandates.
• Legitimate interests: Processing carried out in pursuit of ak365's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — where such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — in particular for optional marketing communications — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

ak365 uses the personal data we collect for the following purposes:

• To create, manage, and administer your ak365 player account.
• To verify your identity and age in accordance with our eligibility requirements (21+ only).
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card networks.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited conduct.
• To monitor your gaming activity for responsible gaming purposes and to apply account restrictions where appropriate.
• To provide customer support and to resolve complaints or disputes.
• To personalise your platform experience, including game recommendations and relevant promotional offers.
• To send you service-related communications such as account confirmations, security alerts, and policy update notifications.
• To send you marketing communications about ak365 promotions, bonuses, and seasonal offers — where you have provided consent or where a legitimate interest applies and you have not opted out.
• To comply with applicable legal obligations including tax reporting, AML reporting, and regulatory audits.
• To analyse platform usage patterns and improve the performance, features, and security of the ak365 platform.

ak365 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions.
• Identity verification providers: Licensed KYC and AML service providers who assist in verifying the identity and age of players as required by platform policy.
• Game studio partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the minimum extent necessary to deliver their games through the ak365 platform (typically a session token; no full personal profile is shared).
• Legal and regulatory authorities: Where we are required by applicable law, court order, or regulatory directive to disclose personal data — for example, in connection with AML investigations or fraud prosecutions.
• Professional advisors: Legal counsel, accountants, and auditors bound by confidentiality obligations, where necessary for ak365 to fulfil its legal and corporate governance obligations.

All third-party service providers who process personal data on behalf of ak365 are required to implement data protection safeguards at least equivalent to those described in this Privacy Policy, and to process your data only for the specific purpose for which it was shared.

ak365 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies may be set when you visit https://ak365.io:

• Strictly necessary cookies: Required for the platform to function. These cookies maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF). They cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Remember your platform preferences such as deposit method, game display settings, and notification choices. These improve your experience but are not essential for basic functionality.
• Analytics cookies: Collect anonymised data about how users interact with the ak365 platform — pages visited, features used, session duration — to help us identify areas for improvement. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. ak365 does not use third-party advertising or retargeting cookies.

ak365 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with ak365 plus a minimum of 5 years following account closure, in accordance with financial record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by anti-money-laundering regulations.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Marketing consent records: Retained for the period of consent plus 2 years, to demonstrate compliance with marketing opt-in requirements.
• Technical and usage logs: Typically retained for 12 months on active servers; may be archived for up to 3 years for fraud investigation purposes.

When personal data is no longer required and no legal retention obligation applies, ak365 will securely delete or anonymise the data in accordance with our internal data disposal procedures.

ak365 takes the security of your personal data seriously and implements comprehensive technical and organisational measures to protect it from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ak365 platform.
• Encrypted data storage for all personally identifiable information and financial records held on ak365 servers.
• Role-based access controls ensuring that internal ak365 personnel can access personal data only on a strict need-to-know basis.
• Two-factor authentication (2FA) available to all player accounts and mandatory for internal staff accounts with data access.
• Regular independent security audits and penetration testing conducted by qualified third-party security professionals.
• Intrusion detection and monitoring systems operating continuously to identify and respond to potential security threats in real time.

In the event of a personal data breach that poses a risk to your rights and freedoms, ak365 will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach. You are encouraged to enable two-factor authentication on your ak365 account to maximise the security of your personal data.

As a data subject whose personal data is processed by ak365, you hold the following rights. These rights may be exercised at any time by contacting [email protected]:

• Right of access: You may request a copy of the personal data ak365 holds about you, together with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data is corrected or updated. You may also update basic account information directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that ak365 restricts its processing of your personal data while a rectification or objection request is being assessed.
• Right to data portability: You may request that ak365 provides your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. Processing will cease unless ak365 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The ak365 platform is strictly intended for adults aged 21 and above. ak365 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, we will immediately suspend the associated account, delete all personal data collected, and void any transactions made during the period of underage use.

If you are a parent or guardian and believe that a minor in your care has created an account on ak365, please contact our support team at [email protected] immediately. We will investigate and take appropriate action without delay. ak365 supports responsible gaming measures and proactively works to prevent underage gambling — please visit our Responsible Gaming page for further information and tools.

ak365 is operated primarily for the Bangladesh market and processes most personal data within the region. However, some of our technology service providers, game studio partners, and identity verification services operate internationally. Where personal data is transferred outside Bangladesh to such partners, ak365 ensures that appropriate safeguards are in place to protect your data at a standard equivalent to that described in this Privacy Policy.

Safeguards for international data transfers include contractual data protection clauses incorporated into agreements with all third-party processors, together with technical security controls that apply regardless of the jurisdiction in which data is processed. If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact [email protected].

ak365 may send you promotional communications about bonuses, new games, seasonal offers (such as BPL season promotions, Eid specials, and Pohela Boishakh offers), and platform news — where you have provided consent to receive such communications or where a legitimate interest applies.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email sent by ak365.
• Updating your communication preferences in the Notifications section of your ak365 account settings.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect service communications, which are essential to the operation of your account. You will continue to receive account activity confirmations, security alerts, deposit and withdrawal notifications, and policy update notices regardless of your marketing preferences.

ak365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform services. When material changes are made to this policy, we will notify registered players by email to the address on file at least 7 days before the revised policy takes effect — except where an immediate change is required by law or to address a security vulnerability, in which case the updated policy will take effect immediately.

The current version of this Privacy Policy, together with its effective date, is always available at https://ak365.io/privacy-policy. We encourage you to review this page periodically to stay informed about how ak365 protects your personal data. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ak365, please contact our data protection team using the details below. All privacy enquiries are treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 2 business hours for urgent data concerns; within 5 business days for standard privacy enquiries
• Availability: 24 hours a day, 7 days a week, in English

For requests to exercise your data rights (access, rectification, erasure, portability, objection, or withdrawal of consent), please email [email protected] with the subject line "Data Rights Request" and include your registered account email address and a description of your request. ak365 will acknowledge your request within 48 hours and provide a full response within 30 days.