abe67 Privacy Policy
— Your Data, Your Rights, Our Commitment

Introduction

This Privacy Policy is published by abe67 ("the Company", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player") who access or use the abe67 platform at abe67.io, including all sub-pages, casino game interfaces, sports betting markets, account management tools, and customer support channels.

abe67 is committed to safeguarding the privacy and personal data of every player who uses our platform, with particular care given to the privacy expectations of our primary audience in Bangladesh. We recognise that the trust of our players is the foundation of our business, and that trust begins with responsible, transparent data handling.

This policy describes the categories of personal data we collect, the lawful bases on which we process that data, the purposes for which it is used, how long we retain it, and the rights you have over your own information. It should be read alongside our Terms & Conditions, which are incorporated by reference.

Data We Collect

abe67 collects the following categories of personal data from players. In each case, collection is limited to what is genuinely necessary for the stated purpose.

2.1 Identity & Registration Data

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (for mandatory 21+ age verification)
• Residential address in Bangladesh
• Nationality
• Gender (optional, for account personalisation)
• Account username and encrypted password hash

2.2 Contact Data

• Email address registered to your abe67 account
• Mobile phone number (linked to your bKash, Nagad, or Rocket payment account)

2.3 Identity Verification (KYC) Data

• Copy of government-issued National Identity Card (NID), passport, or driving licence
• Address verification document (utility bill or bank statement dated within 3 months)
• Selfie photograph where requested during enhanced verification
• Proof of payment method ownership (e.g., screenshot of registered bKash or Nagad account)

2.4 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps (denominated in BDT)
• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, etc.)
• Transaction reference numbers generated by payment providers
• Account balance history
• Bonus credits received and wagering activity associated with those credits

2.5 Gameplay & Betting Data

• Casino game session logs including game title, stake amount, outcome, and timestamp
• Sports betting history including market, selection, odds, stake, and settlement result
• Return-to-player data used for responsible gaming monitoring
• Session duration and frequency metrics

2.6 Technical & Device Data

• IP address at time of login and transaction
• Device type, operating system, and browser version
• Geolocation data (country/city level, derived from IP) used for fraud and compliance screening
• Cookie identifiers and session tokens (see Section 7)

2.7 Communications Data

• Records of support correspondence sent to or received from [email protected]
• Live chat transcripts where applicable
• Records of promotional email opt-in and opt-out preferences

How We Collect Your Data

abe67 collects personal data through the following channels:

3.1 Directly From You

The majority of personal data we hold is provided directly by you during the account registration process, the KYC verification process, when you make deposits or request withdrawals, when you contact our support team, or when you opt in to receive promotional communications. You are in control of what you provide and when.

3.2 Automatically During Platform Use

When you access the abe67 platform, our servers automatically record certain technical data including your IP address, device type, browser version, session timestamps, and page navigation patterns. This data is collected via server logs and browser cookies (see Section 7) and is used for security monitoring, fraud detection, and platform performance optimisation.

3.3 From Third-Party Service Providers

We may receive limited personal data from trusted third-party partners who support the operation of the abe67 platform, including:

• KYC Verification Partners: Identity verification outcomes and fraud risk scores generated during document checks;
• Payment Processors: Transaction confirmation data, payment method validation results, and fraud screening flags;
• Game Studios: Session and outcome data from games hosted by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers;
• Fraud Detection Services: Device fingerprint risk scores and IP reputation data used to prevent multi-account fraud and unauthorised access.

Lawful Basis for Processing

abe67 processes your personal data only where a valid lawful basis exists. The following table summarises the primary lawful bases applicable to each category of processing activity.

How We Use Your Data

abe67 uses the personal data we hold about you for the following specific purposes:

• Account Operation: Creating, maintaining, and managing your abe67 account, including processing logins, managing session security, and applying account-level settings such as deposit limits and self-exclusion preferences;
• Identity Verification: Conducting the mandatory KYC verification process to confirm that you are 21 years of age or older and that your account details are accurate and genuine — a requirement applied consistently to all players regardless of deposit size;
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and Dutch-Bangla Bank, and processing withdrawal requests to your registered payment account, including the matching of payment method ownership to your KYC-verified identity;
• Fraud Prevention: Detecting and preventing unauthorised account access, multi-account abuse, bonus fraud, money laundering activity, and other forms of prohibited conduct that could harm the platform or its players;
• Responsible Gaming: Monitoring session duration, deposit frequency, loss patterns, and betting behaviour to identify players who may be exhibiting signs of problem gambling, and delivering timely responsible gaming interventions where warranted;
• Customer Support: Responding to your enquiries, resolving disputes, processing withdrawal reviews, and handling formal complaints in a documented and auditable manner;
• Legal Compliance: Meeting our obligations under applicable anti-money laundering rules, data protection requirements, and any lawful requests from competent authorities;
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players navigate the platform and to prioritise improvements to the user interface, game library, and payment flows;
• Marketing (where consented): Sending you information about new games, seasonal promotions (such as Eid or Pohela Boishakh offers), cricket tournament betting specials, and other platform news — but only where you have explicitly opted in to receive such communications.

Data Sharing & Third Parties

6.1 Who We Share Data With

abe67 does not sell, rent, or trade your personal data. We share your data only with the following categories of trusted third-party service providers, and only to the minimum extent necessary for them to perform their contracted function:

• Payment Processors: bKash, Nagad, Rocket, Upay, and Dutch-Bangla Bank receive the transaction data necessary to execute payment instructions you initiate. Each provider operates under its own privacy policy and regulatory obligations;
• KYC & Identity Verification Partners: Third-party document verification services receive copies of your identity documents and address proofs solely for the purpose of performing KYC checks on our behalf;
• Game Studio Partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated studios receive the session data necessary to operate their games and ensure accurate settlement of game outcomes;
• Fraud & Security Services: Third-party fraud detection platforms receive device and IP data necessary to generate risk scores used in our account security and anti-fraud systems;
• IT Infrastructure Providers: Cloud hosting and database management providers who store platform data on our behalf under strict contractual data processing agreements.

6.2 Legal Disclosures

abe67 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by law, court order, or other binding legal process. In such cases, disclosure is limited to the minimum data necessary to satisfy the legal obligation.

6.3 Business Transfers

In the event that abe67 undergoes a corporate restructuring, merger, or acquisition, player data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer via the email address registered to their account, and the terms of this Privacy Policy will continue to apply to the transferred data unless and until a revised policy is published with appropriate advance notice.

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, preferred settings, and navigation history — so that your next visit is smoother and more personalised. abe67 uses cookies and similar technologies including local storage and session tokens.

7.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session authentication tokens that keep you logged in during your account session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without disrupting the platform's core functionality;
• Functional Cookies: Store your preferences such as display settings, preferred payment method, and responsible gaming reminder configurations, so that these do not need to be re-entered each session;
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where sessions end, and which game categories attract the most engagement. This data is used exclusively for internal platform improvement and is not shared with advertising networks;
• Security & Fraud Detection Cookies: Support device fingerprinting and IP consistency checks used by our fraud detection systems to identify unauthorised access attempts and multi-account behaviour.

7.3 Managing Cookies

You may configure your browser to block or delete cookies at any time through your browser's privacy or security settings. However, please be aware that disabling strictly necessary cookies will prevent you from logging in to your abe67 account and will disrupt core platform functionality. Disabling functional cookies will mean that your account preferences are not saved between sessions.

Data Retention

abe67 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures. Data subject to an ongoing legal investigation or formal dispute resolution process may be retained beyond the standard period until the matter is fully resolved.

Your Data Rights

As a player registered with abe67, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account email address. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

9.1 Right of Access

You have the right to request a copy of all personal data that abe67 holds about you. We will provide this in a structured, commonly-used digital format. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Note that corrections to KYC identity data must be supported by updated documentation to maintain the integrity of our verification records.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is not absolute — where abe67 is required to retain data to comply with a legal obligation (such as anti-money laundering record-keeping), erasure will not be possible for the duration of that obligation.

9.4 Right to Restriction

You may request that abe67 restrict the processing of your data in certain circumstances — for example, where you have contested the accuracy of the data and are awaiting verification, or where processing is unlawful but you prefer restriction to erasure.

9.5 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another service provider where technically feasible.

9.6 Right to Object to Marketing

You may object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, abe67 will immediately cease sending marketing communications to your registered contact details. This does not affect operational communications related to your account, such as deposit confirmations or withdrawal notifications.

Children & Minors

If abe67 becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data from our systems and close the associated account. If you are a parent or guardian and believe that your child may have created an account on abe67, please contact us immediately at [email protected] so that we can take prompt corrective action.

Security Measures

abe67 applies a comprehensive, layered security framework to protect the personal data we hold. Our key technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and abe67 servers is encrypted using industry-standard TLS protocols, preventing interception of login credentials, payment data, and personal information in transit;
• Encrypted Data Storage: Sensitive data fields including password hashes, identity document copies, and financial records are encrypted at rest using AES-256 encryption, meaning that even in the unlikely event of a server breach, the data is unreadable without the corresponding decryption keys;
• Access Controls: Access to player personal data within abe67's internal systems is governed by role-based access controls — staff members can only access the data categories necessary for their specific job function. Access logs are maintained and reviewed regularly;
• Two-Factor Authentication: All internal abe67 staff accounts with access to player data require two-factor authentication. Players are also encouraged to enable 2FA on their own accounts for additional login security;
• Intrusion Detection & Monitoring: Our platform is monitored continuously by automated intrusion detection systems that flag unusual access patterns, failed login attempts, and data exfiltration signals in real time;
• Regular Security Audits: abe67 conducts periodic internal and third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While abe67 applies rigorous security measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to player rights or freedoms, abe67 will notify affected players without undue delay and will cooperate with relevant authorities as required.

Third-Party Links

The abe67 platform may contain references to or integrations with third-party services including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment providers (bKash, Nagad, Rocket, Upay). When you interact with these services — for example, by launching a game hosted on a studio's server or initiating a bKash payment — you are also subject to that third party's own privacy policy and data practices.

abe67 is not responsible for the privacy practices, security standards, or data handling procedures of any third-party service provider. We strongly recommend that you review the privacy policies of any third-party services you interact with through the abe67 platform. Our Data Processing Agreements with these partners set minimum standards for data handling, but ultimate responsibility for compliance with their own privacy obligations rests with those third parties.

Amendments to This Policy

abe67 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The most current version of this policy will always be published at abe67.io/privacy-policy, with the version number and "Last Updated" date revised accordingly.

Where an amendment materially affects the way in which we process your personal data — for example, by introducing a new category of data collection, a new third-party sharing arrangement, or a change to your data rights — abe67 will provide not less than 14 days' advance notice to all registered players via email before the revised policy takes effect. Your continued use of the abe67 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

Players who do not accept a material amendment to this Privacy Policy should cease using the platform and contact [email protected] to request voluntary account closure in accordance with the Terms & Conditions, following which any verified cash balance will be returned to the Player's registered payment method.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data abe67 holds about you, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data compliance team and will be acknowledged within 48 hours.

Privacy Enquiries Email: [email protected]

Subject Line: Privacy Policy Enquiry

Operating Hours: Our support team is available 7 days a week, 09:00–23:00 Bangladesh Standard Time (BST, UTC+6).

Response Time: We aim to acknowledge all privacy-related requests within 48 hours and to provide a full substantive response within 30 calendar days.