Privacy Policy — Your Data at aa71
This Privacy Policy explains how aa71 collects, processes, stores, and protects the personal data of every player who registers and uses the aa71 platform. We are committed to handling your information with transparency, care, and in accordance with internationally recognised data-protection principles.
Overview: aa71 respects the privacy of all players who use our platform. This Privacy Policy describes the personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights you hold over your own information. By registering an aa71 account, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, please discontinue use of the aa71 platform and contact us to request account closure.
1. Data We Collect
aa71 collects personal data from players through several channels: directly during registration and account management, automatically during platform use, and from third-party sources such as payment processors. The categories of personal data we collect are described in the table below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number, profile photograph (for KYC) | Provided directly by the player during registration and KYC verification |
| Contact Data | Email address, mobile phone number, city and division of residence (Bangladesh) | Provided directly by the player during registration or account settings update |
| Financial Data | Mobile wallet numbers (bKash, Nagad, Rocket), bank account details, transaction history, deposit and withdrawal amounts in BDT | Provided by the player during deposit/withdrawal and received from payment processing partners |
| Account Activity Data | Login timestamps, session durations, games played, wager amounts, bet history, bonus usage, self-exclusion and limit settings | Automatically collected during platform use |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, mobile network operator (e.g., Grameenphone, Robi, Banglalink) | Automatically collected via server logs and analytics tools during platform access |
| Communications Data | Content of support emails, live chat transcripts, complaint submissions, and survey responses | Provided directly by the player when contacting aa71 support |
| Marketing Preferences | Opt-in and opt-out status for email promotions, SMS notifications, and bonus offers | Provided directly by the player in account preferences |
aa71 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly required for identity verification under our KYC obligations. We do not collect data from children — the aa71 platform is strictly for adults aged 18 and above.
2. How We Use Your Data
aa71 processes your personal data for specific, documented purposes. We do not process data for purposes incompatible with those stated at the time of collection. The following table maps each processing purpose to its legal basis and the data categories involved.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity Data, Contact Data | Performance of contract |
| Processing deposits and withdrawals | Financial Data, Identity Data | Performance of contract |
| Identity and age verification (KYC) | Identity Data, Financial Data | Legal obligation; legitimate interest |
| Fraud prevention and security monitoring | Technical Data, Account Activity Data, Financial Data | Legitimate interest; legal obligation |
| Responsible gaming compliance | Account Activity Data, Identity Data | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Communications Data, Account Activity Data | Performance of contract; legitimate interest |
| Sending promotional offers and bonus notifications | Contact Data, Marketing Preferences | Consent (opt-in only) |
| Platform analytics and service improvement | Technical Data, Account Activity Data | Legitimate interest |
| Legal and regulatory compliance | All categories as required | Legal obligation |
aa71 will never sell your personal data to third parties for their own marketing purposes. We will never use your data to make automated decisions that produce significant legal effects on you without human oversight and your right to object.
Marketing Communications: aa71 will only send promotional emails and SMS messages to players who have expressly opted in to receive such communications. You may withdraw your consent and opt out of marketing communications at any time by updating your account preferences or by contacting [email protected]. Opting out of marketing will not affect the delivery of essential transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.
3. Data Sharing & Third Parties
aa71 shares personal data with third parties only where strictly necessary for the operation of the platform, fulfilment of legal obligations, or delivery of services that benefit the player. In all cases, aa71 requires third-party data processors to maintain data security standards consistent with this Privacy Policy and to use the data solely for the agreed purpose.
The categories of third parties with whom aa71 may share your personal data are as follows:
- Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum financial and identity data necessary to process deposit and withdrawal transactions. These partners operate under their own independently applicable privacy policies and regulatory obligations.
- KYC and Identity Verification Providers: aa71 may use third-party identity verification services to validate identity documents submitted as part of the KYC process. These providers process document images and extracted data points solely for verification purposes and do not retain data beyond the verification period.
- Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive an anonymised session token to authenticate your game session. No personally identifiable information is passed to game studios beyond what is technically required to initialise and authenticate a game session.
- Analytics and Platform Technology Providers: aa71 uses trusted analytics and infrastructure providers to monitor platform performance, detect technical errors, and improve the user experience. These providers process Technical Data and Account Activity Data in an aggregated or pseudonymised form.
- Regulatory and Law Enforcement Authorities: aa71 will disclose personal data to relevant authorities where required to do so by applicable law, court order, or lawful regulatory demand — including in the context of anti-money laundering investigations or fraud referrals.
aa71 does not transfer personal data to countries outside the operational region unless appropriate safeguards are in place, including contractual protections that provide a level of data security equivalent to the standards described in this Policy.
4. Cookies & Tracking Technologies
aa71 uses cookies and similar tracking technologies on the platform to enable core functionality, enhance the player experience, and collect analytics data. A cookie is a small text file placed on your device by the aa71 platform when you visit. The following types of cookies are used:
Strictly Necessary Cookies
These cookies are required for the aa71 platform to function. They enable your login session, maintain your account state across pages, and support security features such as CSRF protection. These cookies cannot be disabled without preventing core platform functions from operating correctly.
Performance Cookies
These cookies collect anonymised data about how players interact with the aa71 platform — which pages are visited most frequently, where errors occur, and how long sessions last. This data helps aa71 improve platform performance and fix issues faster. No individually identifiable data is stored in performance cookies.
Preference Cookies
Preference cookies remember your platform settings — such as your preferred language, notification preferences, and display options — so that you do not need to reconfigure them each time you log in. Disabling these cookies will mean your preferences are reset on each visit.
Fraud Detection Cookies
aa71 uses security cookies as part of its real-time fraud detection and account protection systems. These cookies help identify unusual login patterns, detect automated bot activity, and flag account access from unrecognised devices. They are an integral part of keeping your aa71 account secure.
You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from logging in to the aa71 platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.
5. Data Retention
aa71 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory obligation to retain data for a specified minimum period. The following retention periods apply as a general framework:
- Account Data (Identity and Contact): Retained for the duration of the player's active account relationship with aa71, and for a minimum of 5 years following permanent account closure. This retention period supports our obligations in relation to fraud prevention, anti-money laundering record-keeping, and potential dispute resolution.
- Financial Transaction Records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years from the date of each transaction. This period may be extended where a transaction is the subject of an ongoing investigation or legal proceeding.
- KYC Verification Documents: Identity documents submitted for KYC verification are retained for 5 years following account closure, in line with standard financial services compliance practices.
- Customer Support Communications: Support tickets and live chat transcripts are retained for 3 years from the date of the last communication in a ticket thread. This enables aa71 to reference prior interactions when resolving related disputes.
- Technical and Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data. Raw technical logs containing IP addresses and device identifiers are retained for 12 months, after which they are anonymised or deleted.
- Marketing Preference Records: Records of consent and opt-out actions are retained for the lifetime of the player's account plus 2 years, to provide an auditable record of communication consent status.
When personal data is no longer required and no retention obligation applies, aa71 will securely delete or irreversibly anonymise the data. Deletion processes are carried out using industry-standard secure erasure methods that prevent reconstruction of the deleted data.
6. Data Security
aa71 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect the personal data of our players. Key security measures include the following:
256-Bit SSL Encryption
All data transmitted between your device and the aa71 platform is encrypted using 256-bit TLS/SSL protocols. This ensures that login credentials, financial data, and personal information cannot be intercepted during transmission.
Encrypted Data Storage
Sensitive personal data stored in aa71's databases — including financial information and identity document data — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, with all access logged and audited.
Access Controls
aa71 staff access to personal data is governed by role-based access controls on a strict need-to-know basis. No staff member has access to data beyond what is required for their specific role. All data access by staff is logged and subject to regular audit review.
Real-Time Threat Monitoring
aa71 operates continuous intrusion detection and threat-monitoring systems across its platform infrastructure. Anomalous activity patterns — including unauthorised login attempts, unusual transaction volumes, and API abuse — trigger automated alerts and incident response procedures.
Two-Factor Authentication
aa71 strongly recommends that all players enable two-factor authentication (2FA) on their accounts via SMS verification. 2FA significantly reduces the risk of unauthorised account access even in the event that login credentials are compromised.
Regular Security Audits
aa71's platform and data handling practices are subject to periodic internal security reviews. Any identified vulnerabilities are remediated promptly according to a defined priority and timeline framework. aa71 takes a proactive rather than reactive approach to platform security.
Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, aa71 will notify affected individuals without undue delay. Notifications will be sent to the email address registered to the affected account and will include a description of the nature of the breach, the data affected, the likely consequences, and the steps aa71 has taken or proposes to take in response.
7. Your Privacy Rights
aa71 recognises and respects your rights over your own personal data. The following rights are available to all registered aa71 players. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request", along with sufficient information to verify your identity as the account holder. aa71 will respond to all verifiable privacy rights requests within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data that aa71 holds about you. aa71 will provide this information in a commonly used electronic format within 30 days of a verified request.
Right to Rectification
If any personal data aa71 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many data points directly through your account settings panel.
Right to Erasure
You may request deletion of your personal data where aa71 no longer has a lawful basis for processing it. Note that this right is subject to overriding legal retention obligations — aa71 cannot delete transaction records still within their mandatory retention period.
Right to Restrict Processing
You may request that aa71 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
Right to Data Portability
Where aa71 processes your data on the basis of consent or contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format for transfer to another provider.
Right to Withdraw Consent
Where aa71 processes your data on the basis of your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
8. Policy Updates & Contact
aa71 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made to this Policy, aa71 will notify registered players via the email address associated with their account at least 14 days before the revised Policy takes effect. The current version of this Policy is always accessible at aa71.app/privacy-policy, with the effective date clearly stated at the top of the document.
Minor clarifications or corrections that do not materially affect how personal data is processed may be made without advance notice. In all cases, the version date at the top of this document will be updated to reflect the most recent revision.
Contact the aa71 Privacy Team: If you have any questions, concerns, or formal requests relating to this Privacy Policy or the way aa71 handles your personal data, please contact our support team. All privacy-related enquiries receive priority handling and are acknowledged within 2 business days (Bangladesh Standard Time, UTC+6).
Contact address: [email protected] — Subject line: "Privacy Enquiry"
Please include your registered account username or email address in your message so that our team can locate your account and respond accurately and efficiently. aa71 will never ask you to provide your account password in any privacy-related communication.
Related Policies: This Privacy Policy should be read alongside the aa71 Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how aa71 manages player accounts and the obligations of both parties during the account relationship.
Have Questions About Your Privacy?
Our support team is on hand 24/7 to address any data or privacy concerns. You can also explore our FAQ for quick answers, or review our full Terms & Conditions for a complete picture of your rights on aa71.