ab89 Privacy Policy

1 Introduction

ab89 is committed to protecting and respecting the privacy of every player who uses our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It covers all services provided through the ab89 website and any associated mobile applications.

We encourage you to read this policy in full so that you understand your rights and our obligations. If you have any questions about how ab89 handles your data, our support team is available 24 hours a day at [email protected].

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relating to the use of your Account and the protection of player welfare.

2 Who We Are

The data controller responsible for your personal data is ab89, the operator of the online betting and casino platform accessible at ab89.io. ab89 is the entity that determines the purposes and means by which your personal data is processed in connection with your use of the Platform.

ab89 operates primarily for players based in Bangladesh, with a particular focus on serving users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi and other major cities and districts. Our platform supports Bangladeshi Taka (BDT) as the sole transaction currency and provides payment integration with local providers including bKash, Nagad, Rocket and Upay.

For all data-related enquiries, please contact our dedicated Data Protection contact at: [email protected]

3 Data We Collect

ab89 collects personal data from you in a number of ways. The categories of personal data we may hold about you are outlined in the table below:

4 How We Use Your Data

ab89 uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create and maintain your Player Account, verify your identity, and provide access to the full range of ab89 services.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, and to maintain accurate transaction records.
• KYC and Compliance: To fulfil our Know Your Customer obligations, conduct age verification, and comply with applicable anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
• Service Delivery: To provide access to sports betting, live casino, slots, and all other features of the Platform, and to personalise your user experience based on your preferences and betting history.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and communicate important Account notifications.
• Responsible Gaming: To monitor betting patterns, identify signs of problem gambling, apply self-exclusion or deposit limit requests, and fulfil our duty of care obligations under our Responsible Gaming policy.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal or prohibited activities on the Platform.
• Marketing Communications: To send you promotional offers, bonuses, and relevant updates — but only where you have provided explicit opt-in consent to receive such communications.
• Platform Improvement: To analyse aggregated usage data in order to improve the functionality, performance, and content of the ab89 Platform.
• Legal Obligations: To comply with applicable laws, court orders, regulatory requests, and the lawful directions of competent authorities.

5 Legal Basis for Processing

ab89 processes your personal data only where we have a valid legal basis to do so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your Account, process bets, and handle payments.
• Legal Obligation: Processing required to comply with legal obligations including AML regulations, KYC requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — in particular, for marketing communications and for any processing beyond what is strictly necessary for the above purposes. You may withdraw your consent at any time.

6 Cookies & Tracking Technologies

ab89 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit our website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable you to log in, maintain your session, and navigate the site. They cannot be disabled without breaking core functionality.
• Performance Cookies: Used to collect anonymous statistical information about how visitors use the Platform (e.g., pages visited, time on site). This data helps us identify areas for improvement.
• Functional Cookies: Used to remember your preferences, such as your language setting, preferred sports, and display options, in order to provide a more personalised experience.
• Targeting / Analytics Cookies: Used to understand user behaviour patterns at an aggregate level. ab89 does not use third-party advertising tracking cookies that serve ads on other websites.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ab89 Platform. A full cookie preference centre is accessible via your Account settings.

7 Data Sharing & Disclosure

ab89 does not sell your personal data. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa and Mastercard — solely to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services that assist us in verifying player identities and screening for financial crime risks.
• Game Technology Providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi who supply the casino and game software. These providers may receive limited technical session data necessary to deliver the game to your device.
• Fraud and Security Vendors: Specialist fraud detection and cybersecurity providers who help ab89 protect the integrity of the Platform and player funds.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law or court order.
• Professional Advisers: Legal counsel, auditors, and other professional advisers bound by confidentiality obligations, where necessary for the conduct of ab89's business.

All third parties with whom ab89 shares personal data are required, by contract, to process that data only for the specified purpose and to maintain security standards no less stringent than our own.

8 International Data Transfers

ab89 operates a platform that serves players primarily in Bangladesh. In certain circumstances, personal data may be processed or stored on servers or systems located outside Bangladesh — for example, where a game technology provider or cloud infrastructure partner operates data centres in another country.

Where personal data is transferred internationally, ab89 takes appropriate steps to ensure that your data receives a level of protection equivalent to that afforded within Bangladesh. These safeguards may include:

• Standard contractual clauses requiring the recipient to protect your data to an equivalent standard.
• Restricting transfers to countries or regions that maintain recognised adequate data protection frameworks.
• Technical and organisational security measures applied at both origin and destination.

If you wish to obtain further information about the international transfer safeguards we apply, please contact us at [email protected].

9 Data Retention

ab89 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law. Our standard retention periods are as follows:

Once the applicable retention period has expired, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical analysis and Platform improvement purposes.

10 Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by ab89. You may exercise any of these rights at any time by contacting [email protected]:

• Right of Access: You have the right to request a copy of the personal data ab89 holds about you, free of charge, within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right is subject to legal retention obligations — we cannot delete data we are legally required to retain.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is contested.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to ab89 in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

11 Security Measures

ab89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ab89's servers is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in ab89's databases is encrypted at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that personal data is accessible only to authorised ab89 personnel with a legitimate need to process it.
• Multi-Factor Authentication (MFA): MFA is enforced for all internal staff systems. Players are strongly encouraged to enable MFA on their own Accounts.
• Regular Security Audits: ab89 undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response Plan: ab89 maintains a documented data breach incident response plan. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify affected users promptly.
• Staff Training: All ab89 employees who handle personal data receive mandatory privacy and data security training upon joining and on an annual basis thereafter.

12 Children & Minors

The ab89 Platform is strictly for adults aged 21 years and above. ab89 does not knowingly collect, process, or store personal data from any individual under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account with ab89, please notify us immediately at [email protected] so that we can investigate and act accordingly.

ab89 employs age verification checks at the point of registration and during the KYC process to enforce this policy. We take our responsibility to prevent underage gambling extremely seriously and have zero tolerance for violations of this rule.

13 Third-Party Links

The ab89 Platform may contain links to third-party websites, including the websites of payment providers such as bKash or Nagad. ab89 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party site you visit via a link on our Platform.

This Privacy Policy applies exclusively to data collected and processed by ab89 in connection with your use of the ab89 Platform. It does not govern data collected by third parties, including payment providers, game studios, or any other external service.

14 Updates to This Policy

ab89 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will provide at least 14 days' prior notice via the email address registered to your Account and/or a prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this policy. By continuing to use the ab89 Platform after the effective date of any updated Privacy Policy, you acknowledge that you have read and accept the revised terms. We recommend bookmarking this page and reviewing it periodically.

If you do not agree with any changes to this policy, you should stop using the Platform and may request Account closure by contacting [email protected].

15 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way ab89 processes your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "DATA RIGHTS REQUEST — [Your Full Name]"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Within 30 days for data rights requests; within 2 hours for general support queries during peak Bangladesh Standard Time (BST, UTC+6) hours