Privacy Policy — Your Data, Your Rights at ave67

ave67 ("the Platform", "we", "us", "our") is an online casino and sports betting platform operated under an international offshore licence, providing services to players in Bangladesh and other permitted markets. The ave67 platform is accessible at ave67.io.

ave67 acts as the data controller for all personal data collected from players registering and using the platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, please contact our support team at [email protected]. We are committed to responding to all data-related queries within 30 days.

ave67 collects personal data in the following categories. We collect only what is necessary for the stated purpose and do not engage in speculative or excessive data collection.

ave67 collects personal data through the following channels:

• Direct submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or opt in to promotional communications.
• Automated collection: Technical and usage data collected automatically when you interact with the ave67 platform, including via cookies, server logs, and session-tracking technologies. See Section 7 for full details on cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification partners: Confirmation or flags from KYC and document-verification service providers used to validate the authenticity of identity documents you submit.
• Fraud and AML screening partners: Risk signals and alerts from anti-money laundering and fraud detection tools that assess transaction patterns against known risk indicators.

ave67 does not purchase personal data from data brokers or third-party list providers for the purpose of direct marketing.

ave67 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to enter into and perform the player account agreement with you — including registration, identity verification, game provision, and payment processing.
• Legal obligation: Processing required to comply with our legal and regulatory obligations, including anti-money laundering (AML) checks, age verification (21+), Know Your Customer (KYC) requirements, and record-keeping obligations under our operating licence.
• Legitimate interests: Processing necessary for ave67's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud detection, responsible gaming monitoring, platform security, and product improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent — principally for sending marketing communications and promotional offers. You may withdraw your marketing consent at any time by contacting support at [email protected] or by updating your communication preferences within your account settings.

Where we rely on legitimate interests as our legal basis, you have the right to object to that processing. Please see Section 10 for details on how to exercise your rights.

ave67 uses your personal data for the following specific purposes:

• Account management: Creating and maintaining your ave67 player account, verifying your identity and age (21+), and managing your account settings and preferences.
• Game and betting services: Enabling you to access casino games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers, and to place bets on cricket markets including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures.
• Payment processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer partners. Verifying that payment accounts belong to the registered account holder.
• Bonus and promotion administration: Determining your eligibility for welcome bonuses, reload offers, seasonal promotions (Eid, Pohela Boishakh, Victory Day), and VIP programme benefits.
• Customer support: Responding to your enquiries, resolving complaints and disputes, and maintaining records of our communications with you.
• Responsible gaming: Monitoring your usage patterns to identify indicators of problem gambling, enforcing deposit limits and self-exclusions you have requested, and contacting you if our responsible gaming tools flag a concern.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multiple-account abuse, and other prohibited conduct described in our Terms & Conditions.
• Legal and regulatory compliance: Fulfilling our obligations under our operating licence, including record retention, regulatory reporting, and responding to lawful requests from authorities.
• Marketing communications: Sending you promotional emails, SMS messages, or platform notifications about new games, bonuses, and offers — only where you have given your consent to receive such communications and have not subsequently withdrawn that consent.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the ave67 platform, identify performance issues, and improve the user experience for Bangladeshi players.

ave67 will never sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the minimum data required to process your transactions. All payment partners are contractually required to protect your data and may not use it for any other purpose.
• Game providers: Certified game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers necessary to authenticate you within their game environments. They do not receive your full identity data.
• Identity verification and KYC partners: Third-party identity verification services receive copies of documents you submit for KYC verification. These partners operate under strict data processing agreements.
• Fraud detection and AML screening services: Transaction data and risk signals are shared with anti-money laundering and fraud-detection tools to protect the integrity of the platform and comply with our regulatory obligations.
• Legal and regulatory authorities: ave67 will disclose personal data to relevant regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or in response to a lawful regulatory demand. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ave67 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new ownership.

All third parties with whom ave67 shares personal data are required to handle that data securely and in accordance with applicable privacy law. ave67 does not permit third parties to use your data for their own marketing purposes.

ave67 uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on our platform. A cookie is a small text file placed on your device by a web server when you visit a website. The following categories of cookies are used on ave67:

• Strictly necessary cookies: These cookies are essential for the ave67 platform to function correctly. They manage your logged-in session, maintain your account security state, and remember your language and currency preferences. These cookies cannot be disabled without preventing use of the platform.
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with the ave67 platform — such as which games are most played, which pages are most visited, and where errors occur. This data is used in aggregate to improve platform performance.
• Functional cookies: These cookies remember your preferences — such as your preferred deposit method, game lobby filter settings, and responsible gaming limit configurations — to provide a more convenient experience.
• Marketing cookies: Where you have consented to marketing communications, these cookies help us deliver relevant promotional content and measure the effectiveness of our campaigns. Marketing cookies are only activated with your explicit consent.

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies may impair your ability to use the ave67 platform.

ave67 does not use cross-site tracking technologies to follow you across the internet outside of the ave67.io domain.

ave67 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply:

When the applicable retention period expires, ave67 will securely delete or irreversibly anonymise the relevant data. Anonymised aggregate data (which cannot identify any individual player) may be retained for longer periods for statistical and business analysis purposes.

ave67 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• SSL/TLS encryption: All data transmitted between your device and ave67 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser confirms that your connection to ave67.io is secure at all times.
• Encryption at rest: Sensitive data categories — including identity documents, financial account details, and password hashes — are encrypted within ave67's secure database infrastructure. Plain-text passwords are never stored.
• Access controls: Access to personal data within ave67's systems is strictly limited to staff and contractors who require it to perform their specific functions. All access is logged and subject to periodic review.
• Two-factor authentication: ave67 supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA from within their account settings to add an additional layer of protection to their login credentials.
• Fraud and intrusion monitoring: ave67 operates real-time monitoring systems that detect and alert on anomalous access patterns, login attempts from unrecognised devices or locations, and other indicators of unauthorised access.
• Penetration testing: ave67's platform infrastructure undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

While ave67 takes all reasonable technical and organisational precautions to safeguard your data, no internet transmission or data storage system can be guaranteed to be 100% secure. If you believe your ave67 account has been compromised, please contact us immediately at [email protected].

As a player on the ave67 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 days.

• Right of access: You have the right to request a copy of the personal data that ave67 holds about you, along with information about how that data is processed and why.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain information directly from within your account settings.
• Right to erasure: In certain circumstances — such as where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies — you may request that we delete your personal data. Please note that where we are required to retain data by law (for example, AML and KYC records), the right to erasure will not apply to those specific data categories.
• Right to restriction of processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to ave67.
• Right to object: You have the right to object to processing of your personal data where ave67 relies on legitimate interests as the legal basis. We will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (principally, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

ave67 will not charge a fee for processing data rights requests in ordinary circumstances. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

ave67 is strictly an adult platform. Access to and use of the ave67 platform is prohibited for any person under the age of 21. 21+ Only

ave67 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the associated account, delete the data, and reverse any transactions associated with that account.

If you are a parent or guardian and believe that a minor has registered on ave67 or provided personal data to our platform, please contact us immediately at [email protected]. We will investigate and take prompt corrective action.

The ave67 platform may contain references to third-party game providers and payment partners. While we take care to work only with reputable partners, ave67 is not responsible for the privacy practices of any third-party service. This Privacy Policy applies solely to data collected and processed by ave67 within the ave67.io platform.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the ave67 platform, including payment processors such as bKash and Nagad, which maintain their own separate privacy policies governing data collected through their respective mobile financial services.

ave67 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. All updates will be published on this page with a revised effective date clearly displayed at the top of the document.

Where changes are material — meaning they significantly affect your rights or how your data is used — ave67 will notify registered players via email and via a platform notification displayed at next login. We recommend that you review this Privacy Policy periodically to stay informed of how ave67 protects your data.

Your continued use of the ave67 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change to this policy, you should discontinue use of the platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ave67 processes your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Registered Username]"
• Response time: We aim to respond to all privacy enquiries within 5 business days and to complete all formal data rights requests within 30 calendar days.
• Operating hours: Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).