a022f Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") is published by a022f (the "Platform", "we", "us", or "our") and applies to all personal data collected from individuals (the "Player", "you", or "your") who access or use the a022f website at a022f.io, register an account, place bets, play casino games, interact with promotional content, or otherwise engage with any service offered through the a022f platform.

a022f is committed to protecting the privacy and security of your personal data. This Policy sets out in clear terms what data we collect, the purposes for which it is used, the circumstances in which it may be shared, how long it is kept, and what rights you have regarding your own information.

This Policy should be read alongside the a022f Terms & Conditions and, where applicable, the Responsible Gaming policy. Together these documents form the complete framework governing your relationship with a022f.

2. Data We Collect

a022f collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the platform, and from trusted third-party sources during identity verification processes.

2.1 Data You Provide Directly

When you register an a022f account or use the platform's services, we collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and a copy of your government-issued photo identification (National ID card, passport, or driving licence).
• Contact data: Mobile phone number, email address, and residential address (including district, division, and postal code within Bangladesh).
• Financial data: Details of the payment methods used for deposits and withdrawals on the a022f platform, including bKash account numbers, Nagad account numbers, Rocket account details, Upay account details, and local bank account information. a022f does not store full card numbers, PINs, or mPIN credentials.
• KYC documentation: Copies of identity documents and proof-of-address documents submitted during the Know Your Customer verification process.
• Communications data: Records of your correspondence with the a022f support team, including live chat transcripts, emails, and any complaint submissions.
• Self-exclusion and responsible gaming data: Records of any responsible gaming tools you have activated, including deposit limits, time-out periods, and self-exclusion requests.

2.2 Data Collected Automatically

When you access the a022f platform, we automatically collect certain technical and behavioural data:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage data: Pages viewed, features accessed, time spent on the platform, betting and gaming activity records, login and logout timestamps, and navigation patterns.
• Transaction data: Full records of all deposits, withdrawals, bets placed, bets settled, bonuses claimed, and account balance movements.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 5 of this Policy.

2.3 Data from Third Parties

a022f may receive supplemental personal data from third parties in the following circumstances:

• From identity verification and KYC service providers who cross-reference the information you supply against official databases.
• From payment service providers (bKash, Nagad, Rocket, Upay, and local banks) confirming transaction status and account ownership.
• From fraud detection and anti-money laundering screening services that flag accounts associated with known fraudulent activity.

3. How We Use Your Data

a022f uses your personal data for the following specific purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data
KYC identity verification	Identity data, KYC documentation
Processing deposits and withdrawals	Financial data, transaction data
Fraud prevention and anti-money laundering	Identity data, financial data, usage data, device data
Delivering betting and casino services	Usage data, transaction data
Responsible gaming compliance	Transaction data, usage data, responsible gaming data
Customer support and complaint handling	Identity data, communications data, transaction data
Promotional and bonus management	Identity data, transaction data, usage data
Platform security and technical operations	Device data, usage data, cookie data
Marketing communications (opt-in only)	Contact data, usage data

a022f does not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

4. Legal Basis for Processing

a022f processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and a022f, including account registration, payment processing, and the delivery of betting and casino services.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC and anti-money laundering obligations.
• Legitimate interests: Processing carried out in pursuit of a022f's legitimate business interests — such as fraud prevention, platform security, and improving the quality of our services — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular for optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Cookies & Tracking Technologies

a022f uses cookies and similar tracking technologies (including web beacons and session identifiers) to ensure the proper functioning of the platform, to analyse how players use the service, and to improve the overall user experience.

5.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing the platform's core functionality.
• Functional cookies: Remember your preferences and settings (such as language preference and accepted terms version) to provide a more personalised experience on the a022f platform.
• Analytics cookies: Collect aggregated, anonymised information about how players navigate and interact with the a022f platform, helping us understand usage patterns and improve the service.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised account access attempts.

5.2 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Please note that disabling certain categories of cookies may affect the performance and functionality of some features on the a022f platform. Strictly necessary cookies cannot be disabled as they are essential to service delivery.

a022f does not use third-party advertising cookies or retargeting pixels that share your browsing data with external advertising networks.

6. Third-Party Sharing

a022f does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary:

6.1 Service Providers

a022f works with carefully selected third-party service providers who process personal data on our behalf in order to deliver the a022f service. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and local Bangladeshi banking partners (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) — to process deposits and withdrawals in Bangladeshi Taka (৳).
• KYC and identity verification providers — to perform required know-your-customer checks.
• Anti-fraud and AML screening services — to detect and prevent financial crime.
• Game content providers — Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming — who operate the game engines and live dealer environments accessible through the a022f casino.
• Cloud hosting and infrastructure providers — who host the a022f platform and store player data under strict data processing agreements.

All third-party service providers are bound by data processing agreements that require them to implement appropriate technical and organisational security measures and to use your personal data solely for the purposes specified by a022f.

6.2 Legal Disclosures

a022f may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law or where we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of a022f; (c) prevent or investigate possible wrongdoing in connection with the a022f platform; or (d) protect the personal safety of users of the platform or the public.

6.3 Business Transfers

In the event that a022f or any of its assets are acquired, merged with, or transferred to another entity, your personal data may form part of the transferred assets. You will be notified of any such change via the email address registered to your a022f account and will be informed of any changes to this Privacy Policy that result from the transfer.

7. International Data Transfers

Some of a022f's service providers — in particular game content providers and cloud infrastructure partners — may be located outside Bangladesh. Where your personal data is transferred to a jurisdiction outside Bangladesh, a022f ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Such safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable data protection frameworks. If you require further information about the specific mechanisms used to safeguard your data during international transfers, please contact us at [email protected].

8. Data Retention

a022f retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five years following the closure or permanent suspension of your a022f account, in order to comply with applicable anti-money laundering and record-keeping regulations.
• Transaction and financial data: Retained for a minimum of seven years following the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Communications and support data: Retained for a minimum of three years from the date of the last interaction, to support ongoing dispute resolution and quality improvement activities.
• Marketing consent records: Retained until you withdraw consent or for a period of three years from the date consent was last confirmed, whichever is earlier.
• Cookie and analytics data: Session data is deleted at the end of each browser session. Aggregated analytics data may be retained for up to 24 months.

Once retention periods expire, a022f securely deletes or anonymises personal data so that it can no longer be used to identify you.

9. Your Rights

As a player on the a022f platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of the personal data that a022f holds about you and to receive information about how that data is being used.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data that a022f holds about you.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to a022f's legal retention obligations.
• Right to restriction of processing: You have the right to request that a022f restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is carried out on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where processing is based on a022f's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

a022f will respond to all valid data rights requests within 30 days of receipt. In cases of complexity, the response period may be extended by up to a further 60 days, and you will be informed of the extension and the reasons for it.

10. Children & Minors

The a022f platform is strictly intended for use by individuals aged 21 years and above. a022f does not knowingly collect, process, or store personal data relating to any person under the age of 21. If a022f becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a person under your care has created an a022f account or submitted personal data to the platform, please contact us immediately at [email protected] so that we can take prompt action.

11. Data Security

a022f implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the a022f platform.
• AES-256 encryption for sensitive personal data stored in a022f's databases.
• Hashed and salted password storage — your account password is never stored in plaintext and is never accessible by a022f staff.
• Access controls — internal access to player data is restricted on a strict need-to-know basis. All staff access is logged and audited.
• Intrusion detection systems that monitor the platform for anomalous access patterns and potential security incidents in real time.
• Regular security assessments including penetration testing and vulnerability scanning of the a022f platform infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data security incident that is likely to result in risk to your rights and freedoms, a022f will notify affected players and relevant authorities in a timely manner, in accordance with applicable legal requirements.

You also play an important role in keeping your a022f account secure. Use a strong, unique password, do not share your credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

12. Marketing Communications

a022f may send you marketing communications about platform promotions, seasonal bonus offers (including BPL season promotions, Eid offers, Pohela Boishakh specials, and IPL-related campaigns), and new features — but only where you have given your explicit consent to receive such communications during the registration process or thereafter.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by a022f.
• Updating your communication preferences within your a022f account dashboard following login.
• Contacting the a022f support team at [email protected] with the subject line "Unsubscribe".

Please note that withdrawing consent to marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are necessary for the operation of your account and are sent regardless of your marketing preferences.

13. Changes to This Privacy Policy

a022f reserves the right to update or modify this Privacy Policy at any time. When material changes are made to this Policy, we will notify you by email to the address registered to your a022f account and by displaying a prominent notice on the a022f platform for a minimum of 14 days prior to the changes taking effect.

The "Last Updated" date shown at the top of this Policy reflects the date on which the most recent version came into effect. We encourage you to review this Policy periodically to remain informed of how a022f protects your personal data. Continued use of the a022f platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which a022f handles your personal data, please contact our data team in writing at:

Email: [email protected]
Subject line: Privacy Policy Enquiry

a022f will acknowledge all privacy-related enquiries within 48 hours and will aim to provide a substantive response within 14 business days.

If you are not satisfied with a022f's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority or regulatory body in your jurisdiction. a022f will cooperate fully with any such regulatory investigation.