act67 Privacy Policy
— How We Keep Your Data Safe

Act67's Privacy Policy is the foundation of trust between you and us. We believe your personal data belongs to you, and protecting it is our responsibility. From the moment you register with act67 through every transaction, your privacy is our highest priority.

Millions of users in Bangladesh trust act67 because we believe in transparency. This Privacy Policy contains no hidden terms — everything is stated clearly and plainly.

1 What Data We Collect

Act67 only collects information that is necessary to provide our services. We never ask for excessive or unnecessary data.

2 Purpose of Data Collection

Act67 uses your data only for specific, limited purposes. Here is what we do with your information:

• Account Management: For registration, login, and profile management.
• Payment Processing: To process deposits and withdrawals securely.
• Identity Verification: To verify age and identity, and to prevent money laundering.
• Customer Support: To resolve your issues quickly.
• Promotions: To inform you of relevant bonuses and offers (with opt-out available).
• Security: To detect and prevent suspicious activity.
• Legal Obligations: To comply with applicable laws and regulations.

3 Data Storage & Security Practices

Act67 uses industry-standard technology to keep your data secure. The key components of our security infrastructure:

• SSL/TLS Encryption: All data transmissions are secured with 256-bit encryption.
• Firewall Protection: An advanced firewall system prevents unauthorized access.
• Encrypted Database: All stored data is kept in fully encrypted form.
• Two-Factor Authentication: Two-factor authentication is available for your account.
• Regular Backups: Regular backups are taken to keep your data safe.
• Staff Training: All staff receive regular training on data protection.

Your data is stored in secure, internationally certified data centers with strict physical security measures in place.

4 Third-Party Data Sharing

Act67 shares data with third parties only in limited circumstances. When and with whom data may be shared:

• Payment Providers: Only the information required to process payments through providers such as Mobile Banking, Nagad, and Rocket is shared, solely to complete transactions.
• Identity Verification Service: Only regulated third parties involved in the KYC process receive your data, and solely for identity verification purposes.
• Legal Obligations: We are legally required to share data in response to a court order or a valid request from a government authority.
• Technology Service Providers: Technology partners have limited access to data for platform operations and are bound by strict confidentiality agreements.

5 Cookies & Tracking Technologies

Act67 uses cookies and similar technologies on its website and app to help improve your experience.

• Essential Cookies: These are strictly required to maintain your login session and ensure security.
• Functional Cookies: Used to remember your preferences, such as language and settings.
• Analytics Cookies: To understand which features are used most — without collecting any personal data.

Cookies can be disabled through your browser settings, though some features may not work as a result. act67 never uses third-party advertising or tracking cookies.

6 Your Rights & Controls

You have full rights over your data at act67. You can exercise any of the following rights at any time:

• Right to Access: You can request to know what data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or outdated information.
• Right to Erasure: You may request deletion of your data under certain conditions.
• Right to Restrict Processing: In certain cases, you may request that the use of your data be restricted.
• Marketing Opt-Out: You can opt out of promotional messages at any time.
• Data Portability: You can request a copy of your data in a structured, portable format.

To exercise any of these rights, contact our support team. Requests are typically processed within 30 business days.

7 Data Retention Period

Act67 does not retain data longer than necessary. The principles we follow when determining data retention periods:

• Active account data is retained for as long as the account remains open.
• After account closure, financial data is retained for up to 5 years in accordance with legal requirements.
• Transaction records are retained in compliance with anti-money laundering laws.
• Data from inactive accounts is automatically reviewed after 2 years.
• Once the retention period ends and there is no legal obligation to keep the data, it is securely deleted.

8 Protection of Minors' Data

Act67 strictly enforces an 18+ policy. We do not knowingly collect or store data from anyone under the age of 18.

If a minor's data is collected inadvertently, the account will be closed and all associated data deleted immediately upon discovery. Parents or guardians with any concerns should contact support right away.

9 Privacy Policy Updates

Act67 may update this Privacy Policy at any time. When significant changes are made:

• All members will be notified in advance via SMS or email.
• The date of the latest update will always be shown at the top of this page.
• Re-consent may be requested for significant changes.
• Continued use of the platform after any changes will be considered acceptance of the updated policy.

We recommend checking this page regularly. If you object to any changes, please contact support before closing your account.

10 Contact Us

If you have any questions, complaints, or data-related requests regarding our Privacy Policy, please reach out to us. Our dedicated privacy team is always ready to address your concerns.