ab8 Privacy Policy

1. Data We Collect

ab8 collects personal data only to the extent necessary to provide a safe, compliant, and fully functional gaming and betting experience. The categories of personal data we collect are set out below. We do not collect data that is unnecessary for the purposes described in this policy, and we do not request sensitive data such as biometric identifiers, racial or ethnic origin, or political opinions.

1.1 Registration Data

When you create an ab8 account, we collect the following information:

• Full legal name — required for identity verification and account ownership.
• Date of birth — required to confirm you are aged 18 or above as mandated by our Terms & Conditions.
• Bangladeshi mobile number — used for account verification, two-factor authentication (where enabled), and support communications.
• Email address — used for account notifications, transaction confirmations, and support correspondence.
• Username and password (hashed) — your chosen login credentials. Passwords are never stored in plain text.
• Preferred currency — Bangladeshi Taka (BDT) by default.

1.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering (AML) obligations and to verify player age, ab8 may request documentary evidence during the Know Your Customer (KYC) process. Documents collected may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport issued by a competent Bangladeshi authority.
• Proof of address, such as a utility bill or bank statement dated within three months.
• Proof of payment method ownership (e.g., screenshot of a bKash or Nagad account in your name).

KYC documents are stored securely and accessed only by authorised compliance personnel. They are not used for any purpose other than identity and age verification.

1.3 Transaction and Financial Data

When you make deposits or request withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer, ab8 records the following:

• Transaction reference numbers and timestamps.
• Deposit and withdrawal amounts in BDT.
• Payment method type (e.g., bKash, Nagad) — not your full mobile wallet credentials.
• Account balance history and betting activity logs for audit and AML purposes.

1.4 Technical and Usage Data

When you access the ab8 platform, our servers and analytics systems automatically record certain technical information, including:

Data Type	Purpose	Retention
IP address	Fraud prevention, geographic eligibility checks	12 months
Device type & operating system	Platform optimisation, session management	6 months
Browser type & version	Compatibility and security monitoring	6 months
Session timestamps	Security auditing, dormant account detection	24 months
Pages visited & features used	Platform improvement, responsible gaming monitoring	12 months
Referral source	Marketing attribution (internal only)	6 months

1.5 Communications Data

If you contact ab8 support via email or live chat, we retain the content of those communications, including your name, contact details, and the nature of your query, for a period of up to 36 months. This allows us to maintain a service history and resolve any disputes that may arise.

2. How We Use Your Data

ab8 processes your personal data on the basis of contractual necessity (to provide the gaming service you have contracted for), legal obligation (to comply with applicable AML, KYC, and age-verification requirements), and legitimate interest (to maintain platform security and prevent fraud). We do not rely on consent as the sole lawful basis for processing data that is essential to the operation of your account.

2.1 Primary Uses

• Creating, maintaining, and managing your ab8 player account.
• Processing deposits and withdrawals via your chosen Bangladeshi payment method.
• Verifying your identity and age in compliance with our Terms & Conditions.
• Detecting and preventing fraud, money laundering, and other prohibited activities.
• Monitoring gameplay for responsible gaming purposes and applying any self-exclusion or deposit limits you have requested.
• Communicating with you about your account, including transaction confirmations, security alerts, and support responses.
• Complying with applicable legal and regulatory obligations.

2.2 Secondary Uses

With your explicit consent, ab8 may also use your contact details to send you promotional communications about bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and new game launches. You may withdraw consent for marketing communications at any time by contacting support@ab8.bio or by following the unsubscribe instructions in any promotional email. Withdrawal of marketing consent will not affect your ability to use the platform.

2.3 Automated Decision-Making

ab8 uses automated systems to flag accounts for fraud review, AML screening, and responsible gaming intervention. These systems may result in temporary account restrictions pending human review. If your account is restricted as a result of an automated decision, you have the right to request human review of that decision by contacting support.

3. Data Sharing & Third Parties

ab8 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Payment Processors

To facilitate deposits and withdrawals, ab8 shares necessary transaction data with the payment service you have selected, such as bKash, Nagad, Rocket, or Upay. Each of these providers operates under its own privacy policy and is subject to applicable Bangladeshi financial regulations. ab8 does not store your full mobile wallet credentials or bank account numbers on its own servers.

3.2 Game Content Providers

ab8's game library is powered by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, limited technical data (such as session tokens and game outcome data) is shared with the relevant provider for the purpose of delivering the game and calculating results. These providers do not receive your name, contact details, or financial transaction history.

3.3 Legal and Regulatory Disclosure

ab8 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of ab8, its players, or the public. ab8 will notify affected players of any such disclosure to the extent permitted by law.

3.4 Service Providers

ab8 engages a small number of trusted third-party service providers to assist with platform hosting, security monitoring, and customer support infrastructure. These providers act as data processors under written agreements that prohibit them from using player data for any purpose other than delivering the contracted service, and require them to maintain data security standards consistent with this policy.

4. Cookies & Tracking

ab8 uses cookies and similar local storage technologies to ensure the platform functions correctly, to maintain session security, and to gather anonymised usage statistics that help us improve the player experience. We do not use third-party advertising cookies or cross-site tracking technologies.

4.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and language preference cookies. These cannot be disabled without breaking core functionality.
• Security cookies: Used to detect and prevent fraudulent access attempts, including device fingerprinting tokens that identify unusual login patterns.
• Analytics cookies: Anonymised data about which pages are visited and how features are used, collected using first-party analytics tools only. No personal identifiers are included in analytics data.
• Preference cookies: Store your platform preferences such as display settings and notification options to persist across sessions.

4.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, disabling essential cookies will prevent you from logging in to your ab8 account and using core platform features. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation. ab8 does not currently respond to "Do Not Track" browser signals, as there is no universally accepted standard for how such signals should be interpreted.

5. Data Security Measures

ab8 implements a layered approach to data security, combining technical, administrative, and organisational safeguards to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

5.1 Technical Safeguards

• TLS/SSL encryption on all data in transit between your browser and ab8 servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Bcrypt password hashing — your account password is never stored in recoverable plain text.
• Firewall and intrusion detection systems monitoring the platform perimeter in real time.
• Two-factor authentication (2FA) available for all player accounts as an additional login security layer.

5.2 Organisational Safeguards

Access to personal data is restricted to ab8 personnel and authorised service providers who require it to perform specific, defined functions. All staff with access to personal data receive regular data protection training. Access logs are maintained and reviewed periodically. In the event of a data breach that poses a risk to player rights and freedoms, ab8 will notify affected players promptly and take immediate remedial action.

5.3 Player Responsibilities

While ab8 takes extensive measures to protect your data on our end, you also play an important role in account security. You are responsible for choosing a strong, unique password for your ab8 account, not sharing your login credentials with any third party, logging out of your account on shared devices, and notifying ab8 support immediately if you suspect unauthorised access to your account.

6. Data Retention

ab8 retains personal data for as long as necessary to fulfil the purposes set out in this policy, subject to any longer retention period required or permitted by applicable law. The following retention principles apply:

• Active account data: Retained for the lifetime of your ab8 account plus a minimum of five years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, consistent with financial regulation best practices.
• KYC documents: Retained for five years from the date of account closure or the date of the last verified transaction, whichever is later.
• Support communications: Retained for up to 36 months from the date of each interaction.
• Technical and usage logs: Retained for six to twenty-four months depending on the data type, as set out in the table in Section 1.4.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

7. Your Privacy Rights

As a player on the ab8 platform, you hold the following rights in respect of your personal data. ab8 is committed to honouring these rights promptly and without undue restriction. To exercise any of these rights, please contact support@ab8.bio with the subject line "Privacy Rights Request" and include your registered email address for verification purposes.

7.1 Right of Access

You have the right to request a copy of the personal data ab8 holds about you. We will provide a structured summary of your data within 30 days of receiving a verified request. This is provided free of charge for the first request in any 12-month period. Additional requests may incur a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as email address and mobile number) directly through your account settings. For corrections to KYC documents or other sensitive records, please contact support.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute. ab8 may be required to retain certain data for legal, regulatory, or legitimate business purposes, in which case we will inform you of the applicable retention period and the legal basis for continued retention.

7.4 Right to Restrict Processing

You may request that ab8 restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data and wish processing to be paused while accuracy is verified. During a restriction period, ab8 will continue to store your data but will not use it for any purpose other than the specific one you have agreed to.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to transmit it to another service provider of your choosing. Contact support to request a data export.

7.6 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes. Following such an objection, ab8 will cease processing your data for marketing immediately and will not require you to provide any justification for your objection. Objecting to marketing will not affect your ability to use the ab8 platform.

8. Policy Updates & Contact

ab8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made — for example, changes that affect what data we collect, how we use it, or who we share it with — we will notify registered players via the email address on file before the updated policy takes effect.

Minor changes, such as clarifications of existing practices or corrections of typographical errors, may be made without advance notice and will take effect upon publication. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed of how ab8 protects your privacy.

8.1 Children's Privacy

The ab8 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If ab8 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered on the ab8 platform, please notify us immediately at support@ab8.bio.

8.2 Cross-Border Data Transfers

ab8 operates servers and engages service providers that may be located outside Bangladesh. Where your personal data is transferred to a jurisdiction that does not provide the same level of data protection as Bangladesh, ab8 ensures that appropriate safeguards are in place — including contractual data protection clauses with receiving parties — to protect your data to the same standard as described in this policy.

8.3 Contact Information

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data ab8 holds about you, please contact our support team directly. All privacy-related enquiries are handled by personnel with specific data protection responsibilities.

Email: support@ab8.bio
Response time: Within 2 business days for standard enquiries; within 30 days for formal rights requests.
Support hours: 24/7, Bangladesh Standard Time (UTC+6).