aec777 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how aec777 ("aec777", "we", "us", "our") collects, uses, discloses, retains, and protects personal information relating to individuals ("you", "your") who visit, register on, or otherwise interact with the aec777 website at https://aec777.app and all associated services, features, and products (collectively, the "Platform").

By accessing the Platform, creating an account, or placing a wager, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and close your account.

This Policy should be read in conjunction with the aec777 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any inconsistency between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail on matters of account governance, while this Policy shall prevail on matters of personal data handling.

2 Data Controller

For the purposes of applicable data protection legislation, aec777 is the data controller responsible for the personal data you provide to us or that we collect in connection with your use of the Platform. As data controller, aec777 determines the purposes and means of processing your personal information.

If you have questions about how aec777 processes your data, or if you wish to exercise any of your rights as described in this Policy, please contact us using the details set out in Section 15 of this document.

3 Data We Collect

aec777 collects personal data in several categories depending on the nature of your interaction with the Platform. The table below summarises the principal categories of personal data we process:

aec777 does not intentionally collect special categories of sensitive personal data (such as health information, biometric data, or political opinions) unless specifically required by law or with your explicit consent.

4 How We Collect Data

aec777 collects personal data through several channels and mechanisms:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically as you interact with the Platform, including through cookies, log files, session tracking tools, and analytics software.
• Third-party sources: Identity and address verification data received from KYC and AML screening providers; fraud-risk signals from payment processors; age verification confirmations from identity document validation services.
• Public sources: In limited circumstances, aec777 may verify information against publicly available records to support fraud detection or identity verification processes.

5 How We Use Your Data

aec777 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your aec777 account, verifying your identity, processing login requests, and managing account settings.
• Transaction processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels; maintaining accurate financial records.
• Legal and regulatory compliance: Meeting our Know Your Customer (KYC) and anti-money laundering (AML) obligations; responding to lawful requests from regulatory bodies or law enforcement agencies.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and abuse of promotional offers.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviour; facilitating access to deposit limit, cooling-off, and self-exclusion tools.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
• Marketing communications: Sending promotional offers, bonus notifications, and product updates where you have provided consent. You may withdraw this consent at any time.
• Platform improvement: Analysing aggregated usage data to improve game performance, user experience, and Platform reliability.

6 Legal Bases for Processing

aec777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and aec777 — including account registration, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and age verification requirements.
• Legitimate interests: Processing carried out for aec777's legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — such as the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Third Parties

aec777 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients strictly as required to deliver the Platform's services:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners, solely to process your deposit and withdrawal requests.
• Identity verification providers: KYC and AML screening services that assist us in verifying your identity and monitoring transactions for compliance purposes.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive limited session data necessary to deliver their games and maintain game integrity.
• IT infrastructure and security providers: Cloud hosting, content delivery network (CDN), and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or to prevent or report suspected criminal activity, including fraud, money laundering, or match-fixing.
• Professional advisers: Legal counsel, auditors, and accountants, where necessary and subject to professional confidentiality obligations.

All third parties with whom aec777 shares personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using it for any purpose beyond the specific service they provide to aec777.

8 Data Retention

aec777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to meet AML and KYC record-keeping obligations.
• Financial transaction data: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and usage logs: Typically retained for up to twelve (12) months for security monitoring and platform analysis, after which they are anonymised or deleted.

When personal data is no longer required for any lawful purpose, aec777 will securely delete or anonymise it in accordance with our internal data destruction procedures.

9 Security Measures

aec777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key measures include:

• SSL/TLS encryption for all data transmitted between your device and aec777 servers
• Encryption of sensitive data at rest, including identity document images and financial account references
• Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis
• Regular security audits and vulnerability assessments of Platform infrastructure
• Two-factor authentication (2FA) options available to account holders to protect login security
• Intrusion detection systems and 24/7 security monitoring of network traffic

While aec777 takes all reasonable steps to protect your data, no method of internet transmission or electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, aec777 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

10 Your Privacy Rights

Depending on the laws applicable to you, you may have the following rights in relation to the personal data aec777 holds about you:

• Right of access: The right to request a copy of the personal data aec777 holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data without undue delay.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: The right to request that aec777 restricts the processing of your data in certain circumstances, such as while the accuracy of the data is contested.
• Right to data portability: The right to receive your personal data in a structured, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to object: The right to object to processing based on legitimate interests, including profiling and direct marketing.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the aec777 support team via live chat or email at [email protected]. We will respond to all valid requests within thirty (30) calendar days. We may need to verify your identity before processing any request.

11 Cookies & Tracking Technologies

aec777 uses cookies and similar tracking technologies to operate and improve the Platform. A "cookie" is a small text file placed on your device when you visit a website. The following types of cookies are used on the aec777 Platform:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently and how long sessions last. This data is used solely to improve Platform performance.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.

aec777 does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies may impair your ability to use core Platform features, including account login.

12 Children & Minors

The aec777 Platform is strictly intended for individuals who are 18 years of age or older. aec777 does not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been collected from a minor without appropriate consent, we will delete that data promptly and close the associated account.

If you believe that a minor has registered an account or provided personal data to aec777, please contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

13 International Data Transfers

aec777 primarily serves players located in Bangladesh and stores data on servers within or near the region. In certain circumstances, personal data may be transferred to, stored at, or processed in jurisdictions outside Bangladesh — for example, where a game provider's servers or a KYC verification provider's infrastructure is located overseas.

Where such transfers occur, aec777 takes appropriate steps to ensure that your data receives a level of protection consistent with this Policy and applicable data protection law. This may include relying on standard contractual clauses, data processing agreements, or other legally recognised transfer mechanisms.

14 Changes to This Policy

aec777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Where changes are material, we will notify registered users via the contact method associated with their account or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Reviewed" date shown at the top of this document will be updated to reflect the date of the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how aec777 uses your personal data.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which aec777 handles your personal data, please contact our support team in the first instance. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Live Chat: Available 24/7 directly on the aec777 Platform
• Email: [email protected]

We aim to acknowledge all privacy requests within five (5) business days and provide a substantive response within thirty (30) calendar days. Where a request is complex or voluminous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with our response to your privacy complaint, you may have the right to escalate the matter to a relevant data protection authority or seek independent legal advice.