ab67 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how ab67 ("ab67", "we", "us", "our") collects, uses, stores, shares and protects the personal data of individuals ("you", "your", "the Player") who register an account or otherwise interact with the ab67 platform at ab67.io. This Policy forms part of our overall Terms & Conditions and should be read alongside that document.

ab67 is committed to handling personal data responsibly and transparently. We recognise that our Bangladesh-based players entrust us with sensitive financial and identity information, and we take that responsibility seriously. This Policy explains your rights and our obligations in plain, readable English so you always know exactly where you stand.

By registering an account on ab67.io, depositing funds, placing a bet, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

2. Data We Collect

ab67 collects personal data through several channels: account registration, identity verification (KYC), payment processing, platform usage, and direct communications with our support team. The categories of data we collect are described below.

2.1 Identity Data

Full legal name, date of birth, gender (where provided), and a copy of your government-issued identity document (National ID card, passport or driving licence) collected during KYC verification.

2.2 Contact Data

Residential address in Bangladesh (district, city, street), email address, and the mobile number registered to your bKash, Nagad, Rocket or Upay wallet.

2.3 Financial Data

Mobile wallet identifiers associated with deposits and withdrawals processed through bKash, Nagad, Rocket and Upay. ab67 does not store full card numbers or banking credentials. Transaction records including deposit amounts, withdrawal requests, bonus credits and wagering history are retained for audit and compliance purposes.

2.4 Technical Data

IP address, device type and operating system, browser type and version, screen resolution, session timestamps, referring URL, and geolocation data derived from your IP address at the time of login.

2.5 Usage Data

Betting activity, game selections, session duration, click-through patterns within the platform, bonus usage, and customer support interaction logs.

2.6 Communications Data

Records of any emails, chat messages or support tickets you submit to ab67, including the content of those communications and our responses.

3. How We Use Your Data

ab67 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your separate, explicit consent.

• Account Creation and Management: Setting up and maintaining your ab67 player account, authenticating your identity at login, and processing any changes you make to your account settings.
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket and Upay, processing withdrawal requests and maintaining an accurate transaction history in your account wallet.
• Identity Verification (KYC): Verifying your age (21+), confirming your identity and residential address, and meeting our obligations under applicable anti-money-laundering and responsible gaming requirements.
• Fraud and Security Monitoring: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting and other prohibited activities as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring player activity patterns to identify potential signs of problem gambling and making our responsible gaming tools (deposit limits, self-exclusion, session reminders) available to players who may need them.
• Customer Support: Responding to your enquiries, resolving account disputes and maintaining records of support interactions for quality assurance.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the ab67 platform, optimise game selection, and enhance the overall player experience.
• Marketing Communications (opt-in only): Sending promotional emails and SMS notifications about ab67 bonuses, new games and seasonal offers to players who have explicitly opted in to receive such communications.
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws and responding to lawful requests from competent authorities.

4. Legal Basis for Processing

ab67 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e., operating your ab67 account, processing deposits and withdrawals, and delivering the betting and casino service you have registered to use.
• Legal Obligation: Processing required to comply with applicable laws, including age verification requirements, anti-money-laundering regulations, and responses to lawful information requests from competent authorities.
• Legitimate Interests: Processing carried out for ab67's legitimate operational interests, including fraud detection, security monitoring, platform analytics and responsible gaming supervision, provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific and informed consent — in particular, the sending of direct marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

ab67 does not sell, rent or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third parties only where strictly necessary:

5.1 Payment Processors

Your mobile wallet identifiers and transaction amounts are shared with bKash, Nagad, Rocket and Upay solely for the purpose of completing the deposit or withdrawal transaction you have initiated. These providers process your data under their own privacy policies and are responsible for the security of transaction data on their own systems.

5.2 KYC and Identity Verification Providers

ab67 may use a third-party identity verification service to assist with the KYC process. Your identity document scans and personal details submitted during verification are shared with this provider solely for the purpose of confirming your identity and age. The provider is bound by strict confidentiality agreements with ab67.

5.3 Game Software Providers

Your player session data (account reference, bet amounts, game results) is shared in pseudonymised form with game software providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi for the purpose of delivering the game service. These providers do not receive your full name, contact details or financial account information.

5.4 Legal and Regulatory Authorities

ab67 may disclose personal data to law enforcement agencies, regulatory bodies or other competent public authorities where required to do so by law, court order or other legal process. ab67 will inform you of such disclosures where it is legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition or sale of all or part of ab67's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email and/or a prominent notice on ab67.io if such a transfer occurs, and any new data controller will be bound by the terms of this Privacy Policy or its equivalent.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit ab67.io. They help the platform remember your preferences, maintain your login session and gather analytical data about how the site is used. ab67 uses both first-party cookies (set directly by ab67.io) and third-party cookies (set by our analytics and game software partners).

6.2 Types of Cookies Used

• Essential Cookies: Required for the basic operation of the platform, including session management, login authentication and the cashier. These cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate the ab67 platform, which pages are visited most frequently and where technical errors occur. This data is used to improve the site.
• Preference Cookies: Store your chosen language, display settings and other personalisation options so they are remembered between sessions.
• Marketing Cookies: Used only where you have given explicit consent. These track whether you arrived at ab67.io via a promotional link and measure the effectiveness of our promotional campaigns.

6.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent the ab67 platform from functioning correctly and you may be unable to log in or access the cashier. Disabling analytics or marketing cookies will not impair your core platform experience.

7. Data Retention

ab67 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The specific retention periods for each data category are set out in the table in Section 2 of this Policy.

When a player requests account closure, ab67 will delete or anonymise personal data that is no longer required for legal, regulatory or legitimate operational purposes within 30 days of the closure request being processed. Financial transaction records and KYC documentation are subject to longer statutory retention periods as set out in the table above and cannot be deleted earlier on request.

Where data is retained beyond the period of active platform use, it is stored in a restricted-access archive and is not used for any active processing purpose other than compliance with legal obligations or the defence of legal claims.

8. Data Security

ab67 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• SSL/TLS encryption on all pages of ab67.io, ensuring that data transmitted between your device and our servers is always encrypted in transit.
• Encrypted storage of sensitive personal data fields, including identity document data and financial identifiers, at rest in our database systems.
• Role-based access controls limiting internal access to personal data to staff members who require it to perform their specific job functions.
• Two-factor authentication (2FA) enforced for all internal staff accounts with access to player data.
• Regular security assessments and penetration testing of the ab67 platform infrastructure.
• Incident response procedures ensuring that any data breach is identified, contained and, where required, reported without undue delay.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ab67 will notify affected players directly by email as soon as practicable after the breach is confirmed.

9. Children and Minors

The ab67 platform is strictly for adults aged 21 years and above. ab67 does not knowingly collect, process or retain any personal data relating to individuals under the age of 21. If ab67 discovers that a player account has been registered by a person under 21, the account will be closed immediately, all funds will be subject to review, and any personal data collected in connection with that account will be deleted in accordance with our data retention policy.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on ab67.io, please contact our support team at [email protected] immediately so we can take appropriate action.

10. Marketing Communications

ab67 may send you promotional communications by email or SMS about bonuses, new game releases, seasonal promotions (including Eid offers, Pohela Boishakh promotions and BPL cricket betting specials) and platform updates, but only if you have explicitly opted in to receive such communications at registration or through your account settings.

You can withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any promotional email from ab67;
• Updating your notification preferences in the Communications section of your ab67 account settings; or
• Contacting support at [email protected] with the subject line "Unsubscribe from Marketing".

Unsubscribe requests are processed within 5 business days. Please note that opting out of marketing communications does not opt you out of service-related messages such as deposit confirmations, withdrawal notifications, KYC request emails and important account security alerts — these are sent as a necessary part of operating your account and cannot be disabled.

11. Third-Party Links

The ab67 platform may contain references to third-party game providers whose software is embedded within the platform. While these game environments are delivered within the ab67.io domain, the underlying software is operated by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi, each of whom operates under their own privacy practices in relation to session data generated during gameplay.

ab67 is not responsible for the privacy practices of these third-party game software providers beyond the data sharing controls described in Section 5.3 of this Policy. We recommend reviewing the privacy documentation of individual game providers if you have specific concerns about how session data is handled at the game-engine level.

12. Changes to This Privacy Policy

ab67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will notify registered players by email to the address associated with their account and by displaying a prominent notice on ab67.io for a period of at least 14 days following the update.

The updated Policy will display a revised "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the ab67 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

13. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in this document, or want to raise a concern about how ab67 has handled your personal data, please contact our support team using the details below. All privacy-related requests will be acknowledged within 3 business days and resolved within 30 calendar days wherever possible.

When submitting a data rights request, please include your full name, the email address associated with your ab67 account, and a clear description of your request so we can locate your data and process your request efficiently. ab67 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive in nature.

If you are not satisfied with ab67's response to your privacy concern after following the process above, you have the right to escalate your complaint through appropriate legal channels in your jurisdiction.