ab678 Privacy Policy —
How We Protect Your Data

1. Who We Are

ab678 is an online betting and gaming platform operating at ab678.io, designed primarily to serve players based in Bangladesh. References to "ab678", "we", "us", or "our" throughout this Privacy Policy refer to the ab678 platform and its operating entity. For all privacy-related enquiries, the appropriate point of contact is our dedicated support team reachable at [email protected].

This Privacy Policy applies to all personal data collected through the ab678 website, mobile-optimised browser experience, any application associated with the ab678 brand, and all related services including cricket betting, live casino, slots, dice games, and customer support interactions.

2. Data We Collect

ab678 collects different categories of personal data depending on how you interact with the platform. The main categories are as follows:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (used to verify 21+ age eligibility)
• Gender (where provided during registration)
• Nationality and country of residence
• Username and encrypted password
• Government-issued identification document details (National ID, passport number, driving licence) collected during KYC verification

2.2 Contact Data

• Email address
• Mobile phone number (including bKash or Nagad registered number where used for payment)
• Residential address
• City and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction reference numbers
• Account balance history
• Bonus claim and wagering activity records
• Source of funds documentation submitted during enhanced due-diligence reviews

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end times
• Pages visited, games played, betting markets accessed
• Clickstream and navigation data
• Error logs and crash reports

2.5 Communications Data

• Records of live chat, email, and support ticket conversations with the ab678 customer support team
• Responses to satisfaction surveys or feedback forms (where voluntarily completed)

3. How We Collect Your Data

ab678 collects personal data through the following channels:

• Direct registration: Information you provide when creating your ab678 account, including name, email, date of birth, and mobile number.
• KYC verification submissions: Documents you upload or submit in response to identity verification requests.
• Transaction processing: Data generated automatically when you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Platform usage: Technical data collected automatically through cookies, server logs, and analytics tools as you browse and use the platform.
• Customer support interactions: Information shared during conversations with our support team via live chat or email.
• Third-party payment providers: Confirmation data received from payment processors to validate the success or failure of a transaction.

4. Legal Basis for Processing

ab678 processes your personal data on the following legal grounds:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (providing the ab678 service to you)
Age verification and KYC checks	Legal obligation (compliance with anti-money-laundering and age-gating requirements)
Processing deposits and withdrawals	Performance of a contract
Fraud prevention and security monitoring	Legitimate interests (protecting the platform and its users)
Sending transactional emails (e.g., deposit confirmations)	Performance of a contract
Sending promotional communications	Consent (you may withdraw consent at any time)
Platform analytics and improvement	Legitimate interests (improving user experience)
Record-keeping for regulatory compliance	Legal obligation

5. How We Use Your Data

ab678 uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your ab678 player account
• To confirm your eligibility to use the platform (21+ age verification and jurisdiction checks)
• To process deposits and withdrawals via your chosen payment method
• To apply bonuses and promotions to your account in accordance with the applicable promotion terms
• To provide customer support and respond to your enquiries
• To detect, prevent, and investigate fraud, money laundering, and prohibited activities
• To comply with legal and regulatory obligations applicable to the ab678 platform
• To send you transactional notifications such as deposit confirmations, withdrawal updates, and account alerts
• To send you promotional communications about ab678 offers, where you have provided consent to receive such communications
• To analyse platform usage patterns and improve the quality, performance, and content of the ab678 service
• To enforce the ab678 Terms & Conditions and resolve disputes

6. Data Sharing & Third Parties

ab678 does not sell your personal data. We may share your data with carefully selected third parties only in the following limited circumstances:

6.1 Payment Processors

To facilitate deposits and withdrawals, ab678 shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card networks (Visa and Mastercard). These providers are bound by their own strict data protection and financial security obligations.

6.2 Identity Verification Services

ab678 may use third-party KYC and identity verification partners to assist with document checks and fraud screening. These partners process identity data only for the purposes of verification and are contractually prohibited from using it for any other purpose.

6.3 Technology & Infrastructure Partners

ab678 relies on cloud hosting and infrastructure providers to operate the platform. These providers may process technical data (such as server logs and IP addresses) as part of their service delivery. They are engaged under data processing agreements that restrict their use of your data.

6.4 Game Studios & Software Providers

Where you play games supplied by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), limited session and gameplay data may be shared with those studios to support fair game delivery, dispute resolution, and game performance monitoring. No financial or sensitive identity data is shared with game studios beyond what is technically required.

6.5 Legal & Regulatory Disclosures

ab678 may disclose your personal data to law enforcement agencies, government authorities, or regulatory bodies where required by applicable law, court order, or legal process. We will notify you of such disclosures where legally permitted to do so.

7. Payment Data & Financial Information

ab678 takes particular care with financial data. Full payment card numbers and full mobile banking credentials are never stored on the ab678 platform. Where card payments are processed via Visa or Mastercard, card data is handled exclusively by the relevant payment gateway using PCI-DSS compliant infrastructure. ab678 only retains transaction reference numbers, amounts, dates, and method identifiers for record-keeping and reconciliation purposes.

Mobile financial service data related to bKash, Nagad, Rocket, and Upay transactions is processed in accordance with the terms and privacy policies of those respective providers. Players are encouraged to review the privacy documentation of their chosen payment method provider in addition to this policy.

8. Cookies & Tracking Technologies

ab678 uses cookies and similar technologies to deliver, maintain, and improve the platform experience. The categories of cookies we use are as follows:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, preserve your language preferences, and ensure secure page navigation. These cookies cannot be disabled without severely impairing your ability to use the ab678 platform.

8.2 Performance & Analytics Cookies

ab678 uses anonymised analytics cookies to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is aggregated and cannot be used to identify individual players. It is used solely to improve platform performance and content.

8.3 Functional Cookies

Functional cookies remember your preferences such as your preferred game category, notification settings, and display options. They enhance your experience by reducing the need to re-enter settings each time you visit.

ab678 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect platform functionality.

9. Data Security

ab678 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields (including passwords) at rest using industry-standard hashing algorithms
• Role-based access controls ensuring that only authorised ab678 personnel can access player data, and only to the extent required for their specific function
• Regular internal security reviews and vulnerability assessments
• Incident response procedures to identify, contain, and report data breaches in a timely manner
• Secure data centre environments with physical access controls for server infrastructure

While ab678 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. Players are advised to use strong, unique passwords for their ab678 account and to contact us immediately at [email protected] if they suspect unauthorised access to their account.

10. Data Retention

ab678 retains different categories of personal data for different periods, based on the purpose for which the data was collected and any applicable legal retention requirements:

• Account and identity data is retained for the duration of your account's active status plus a period of five (5) years following account closure, to meet financial record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years from the date of the transaction, in line with standard financial compliance requirements.
• KYC documents are retained for five (5) years from the date of submission or from account closure, whichever is later.
• Customer support communications are retained for two (2) years from the date of the conversation, unless they relate to an ongoing dispute or legal matter.
• Technical and usage logs are retained for a rolling period of twelve (12) months, after which they are deleted or fully anonymised.
• Marketing consent records are retained for as long as you maintain an active account or until you withdraw your consent, after which they are deleted within 30 days.

On expiry of the applicable retention period, personal data is securely deleted from ab678's systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

11. Your Rights

As a player on the ab678 platform, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data ab678 holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held on your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction: You may request that ab678 restrict the processing of your data in certain circumstances, for example while the accuracy of data is being disputed.
• Right to Object: You may object to the processing of your data where that processing is based on our legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: You may request a copy of the personal data you have provided to ab678 in a structured, machine-readable format.

To exercise any of the above rights, please contact the ab678 support team at [email protected]. We will respond to all valid requests within 30 calendar days. In some cases, we may need to verify your identity before processing a data rights request. There is no fee for exercising your rights under normal circumstances.

12. Children & Minors

The ab678 platform is strictly for adults aged 21 and above. ab678 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the associated account, delete the personal data, and — where applicable — report the matter in accordance with our child protection obligations. If you believe that a minor has registered an account on ab678, please contact us immediately at [email protected].

13. Changes to This Policy

ab678 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will update the effective date displayed at the top of this page and, where the changes are significant, we may also notify registered players via their registered email address. Continued use of the ab678 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ab678 handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Within 24 hours for standard enquiries; within 30 calendar days for formal data rights requests
• Languages: English and Bengali

ab678 is committed to resolving all privacy-related concerns promptly and transparently. Where you remain dissatisfied with our response to a data rights request, you retain the right to escalate the matter through appropriate legal channels in your jurisdiction.