ab67 Privacy Policy

1 Information We Collect

When you interact with the ab67.club Platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing — ab67 may collect the following categories of personal data:

1.1 Registration & Identity Data

When you create an ab67 account, we collect your full legal name, date of birth, email address, mobile phone number, and country of residence. This information is used to establish and verify your identity, comply with our Know Your Customer (KYC) obligations, and ensure you meet the minimum age requirement of 18 years.

1.2 Financial & Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (৳), we collect details of your chosen payment method. For bKash, Nagad, Rocket, and Upay transactions, this includes your registered mobile number. For bank transfers via Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank, this includes your account name and account number. For Visa and Mastercard transactions, we collect the card number, expiry date, and billing address. We do not store full card numbers on our servers; payment card data is tokenised by our PCI-DSS compliant payment processors.

1.3 KYC Verification Documents

Prior to processing your first withdrawal, ab67 requires a copy of a valid government-issued identity document such as a National ID card or passport, and where requested, proof of payment method ownership. These documents are stored securely and used exclusively for identity verification and legal compliance purposes.

1.4 Technical & Usage Data

When you access the Platform, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, pages visited, session duration, clickstream data, and referring URL. This data helps us secure the Platform, diagnose technical issues, and improve the overall user experience.

1.5 Communications Data

If you contact ab67 via email, live chat, or any other channel, we retain records of those communications including your contact details, the content of your messages, and any attachments. This data is used to resolve your enquiry and to improve our customer support quality.

2 How We Use Your Data

ab67 processes your personal data only for specific, legitimate purposes. The table below summarises our primary processing activities and the legal basis on which each rests:

ab67 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where required to assess bonus abuse or fraud risk, in which case you have the right to request human review of any such decision.

Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

3 Data Sharing & Disclosure

ab67 does not sell, rent, or otherwise disclose your personal data to third parties for their own independent marketing or commercial purposes. We may, however, share your data with the following categories of recipients for the purposes described below:

3.1 Payment Processors

To facilitate deposits and withdrawals, we share the minimum necessary financial data with our authorised payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these partners operates under their own privacy policies and applicable financial regulations. ab67 contractually requires all payment partners to implement appropriate data security measures.

3.2 Game Software Providers

ab67 integrates games from third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, certain technical data (such as a session token and game outcome history) is exchanged with the provider's servers. These providers operate under their own data protection frameworks and are selected in part based on their commitment to player data security.

3.3 Identity Verification & KYC Providers

ab67 may engage specialist third-party KYC and identity verification service providers to assist in validating the identity documents you submit. These providers process your data solely on our behalf and under our instructions, and are contractually prohibited from using your data for any other purpose.

3.4 Legal and Regulatory Disclosure

ab67 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of ab67, our players, or the public.

4 Cookies & Tracking Technologies

ab67 uses cookies and similar tracking technologies (including local storage, session storage, and web beacons) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security checks. You cannot opt out of strictly necessary cookies while continuing to use the Platform, as the Platform cannot function properly without them.

4.2 Performance & Analytics Cookies

These cookies collect anonymised or aggregated information about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where users navigate from. This data helps ab67 identify areas for improvement and optimise the player experience. You may opt out of performance cookies via your browser settings.

4.3 Functional Cookies

Functional cookies remember your preferences — such as your chosen language, display settings, and recently played games — to provide a more personalised experience across sessions. Disabling functional cookies may result in a reduced experience when returning to the Platform.

4.4 Marketing & Retargeting Cookies

With your consent, ab67 may use marketing cookies to deliver relevant promotional content and to measure the effectiveness of our campaigns. These cookies may track your activity across the Platform to build a profile of your interests. You may withdraw consent at any time via your browser settings or the cookie preference controls available on the Platform.

5 Data Retention

ab67 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account, and to comply with our legal obligations. The following retention periods apply as a general guide:

• Active account data — Retained for the duration of your account relationship with ab67 plus five years following account closure, to satisfy anti-money laundering (AML) record-keeping obligations.
• KYC verification documents — Retained for a minimum of five years following the end of the customer relationship, in accordance with applicable financial regulations.
• Transaction records — Retained for a minimum of five years from the date of the transaction for regulatory compliance purposes.
• Support communications — Retained for three years from the date of the last communication, unless the communication relates to an active dispute, in which case it is retained until the dispute is fully resolved.
• Technical and usage data — Retained in identifiable form for up to 24 months; thereafter anonymised or deleted.
• Marketing consent records — Retained for three years from the date consent was given or last renewed, or until consent is withdrawn.

Following the expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical or analytical purposes.

6 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data ab67 holds about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to your request within a reasonable period and in any event no later than 30 calendar days from receipt.

6.1 Right of Access

You have the right to request a copy of the personal data ab67 holds about you, together with information about how that data is used, where it came from, with whom it has been shared, and how long it will be retained. This is commonly known as a Subject Access Request (SAR).

6.2 Right to Rectification

If any personal data ab67 holds about you is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. You may also update certain account details directly through your account settings on the Platform.

6.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute — it does not apply where we are legally required to retain your data (for example, under AML or KYC regulations). Where erasure is not possible, we will explain the reason and the extent to which your data can be anonymised instead.

6.4 Right to Restrict Processing

You may request that ab67 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified, or while an objection to processing is being considered.

6.5 Right to Object

Where ab67 processes your data on the basis of legitimate interest (for example, for marketing or analytics purposes), you have the right to object to that processing. Upon receiving a valid objection, ab67 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

6.6 Right to Data Portability

Where your data is processed by automated means on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format.

7 Data Security

ab67 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the ab67 servers.
• AES-256 encryption at rest for sensitive data fields including identity documents and payment details.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Multi-factor authentication (MFA) for all internal staff accounts with access to player data systems.
• Regular third-party penetration testing and security audits of the Platform's infrastructure.
• Automated monitoring and alerting systems for unusual login activity, bulk data access, or other indicators of potential breach.
• Incident response procedures including player notification protocols in the event of a confirmed data breach affecting your personal data.

While ab67 employs industry-standard security measures, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials. If you believe your ab67 account has been compromised, please contact our support team immediately at [email protected] so that we can take protective action.

8 Contact & Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ab67 processes your personal data, you are welcome to contact our dedicated privacy support team. Our support team is available 24 hours a day, seven days a week, and operates in English aligned to Bangladesh Standard Time (BST, UTC+6).

You may reach us at: [email protected]

Please include "Privacy Enquiry" in the subject line of your message, along with your registered username and a clear description of your request. We aim to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within 30 calendar days.

8.2 Updates to This Privacy Policy

ab67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, we will notify registered players via the email address on file and/or via a prominent notice on the Platform. The effective date at the top of this Policy will be updated accordingly.

We encourage you to review this Privacy Policy periodically to stay informed about how ab67 protects your personal data. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the revised terms, you must discontinue use of the Platform and may request account closure by contacting our support team.

8.3 Children's Privacy

The ab67 Platform is strictly intended for adults aged 18 years and above. ab67 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 18 has registered on the Platform, please notify us immediately at [email protected].