ab8 Privacy Policy

1.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with personal data including but not limited to:

• Full legal name, date of birth, and nationality
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address and mobile phone number
• Government-issued identity document details (National ID, passport, or driving licence)
• Payment account identifiers (bKash number, Nagad number, Rocket number, Upay number, bank account details)
• Any correspondence or support ticket content you submit to ab8

1.2 Data Collected Automatically

When you access the ab8 platform, our systems automatically collect certain technical and behavioural data, including:

• IP address, approximate geographic location, and internet service provider
• Device type, operating system, browser type, and browser version
• Session timestamps, pages viewed, game sessions played, and bet history
• Cookie identifiers and locally stored preference data (see Section 7)
• Referring URL and traffic source data

This data is used for platform security, fraud prevention, service improvement, and responsible gaming monitoring. It does not identify you by name but may constitute personal data when combined with other information we hold.

1.3 Data from Third Parties

We may receive personal data about you from third-party sources, including:

• Payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks
• Identity verification services: Confirmation or rejection results from KYC verification partners
• Fraud and AML screening tools: Risk scores and watchlist screening results from compliance service providers

Data received from third parties is handled under the same protections described in this Privacy Policy and is used only for the purposes for which it was shared with us.

2.1 Marketing Communications

Where you have consented to receive marketing communications, ab8 may send you promotional offers, bonus notifications, tournament invitations, and seasonal promotions — for example, during Eid ul-Fitr, Pohela Boishakh, BPL season, or the ICC T20 World Cup. You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing will not affect the operation of your ab8 account.

3.1 Third-Party Service Providers

ab8 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks), identity and age verification providers, KYC and AML compliance platforms, game content providers (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe), cloud hosting providers, and customer support software vendors.

All third-party service providers are contractually obligated to handle your personal data securely, to use it only for the specific services they are engaged to provide, and to maintain data protection standards consistent with this Privacy Policy. ab8 does not permit its service providers to use your data for their own independent marketing purposes.

3.2 Legal and Regulatory Disclosures

ab8 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are required to do so by applicable law, court order, or lawful government request. We may also disclose data where we reasonably believe disclosure is necessary to prevent fraud, protect the safety of any person, or defend our legal rights. In all such cases, we disclose only the minimum data necessary to fulfil the legal obligation.

3.3 No Sale of Personal Data

ab8 does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party for that party's own marketing or profiling purposes. Any data shared with third parties is shared solely to enable the delivery of ab8's services or to fulfil a legal obligation, as described in this Privacy Policy.

4.1 Retention Periods

ab8 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, regulatory, accounting, or reporting requirements. As a general principle:

• Account and transaction records are retained for a minimum of five years following account closure, in accordance with AML regulatory obligations.
• KYC and identity documents are retained for the same minimum five-year period after the end of the business relationship.
• Customer support correspondence is retained for three years from the date of the last interaction.
• Marketing preference records are retained until you withdraw consent or request deletion, after which a suppression record may be kept to prevent future accidental contact.
• Technical log data (session logs, IP logs) is typically retained for 12 months.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

5.1 Security Measures

ab8 employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data fields including payment identifiers and identity document details
• Role-based access controls limiting which staff members can access personal data
• Regular security assessments and penetration testing
• Two-factor authentication requirements for internal administrative systems
• Automatic session timeouts and suspicious login detection

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, ab8 will notify affected users without undue delay in accordance with applicable law.

5.2 Your Responsibility

You are responsible for keeping your ab8 login credentials confidential. Do not share your username or password with any third party. ab8 will never ask you for your password via email, live chat, or any other communication channel. If you believe your account has been accessed without your authorisation, contact [email protected] immediately so that we can take protective action on your behalf.

6.1 Rights Available to You

As a data subject, you have the following rights in relation to the personal data ab8 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, free of charge, by contacting [email protected].
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may ask us to restrict the processing of your data while a dispute or correction request is pending.
• Right to Data Portability: You may request that we provide your data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interest, including profiling for responsible gaming purposes, though such objections may limit our ability to provide the full service.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 days of receiving your request. We may ask you to verify your identity before acting on a data rights request to protect you against fraudulent requests made by third parties.

7.1 How We Use Cookies

ab8 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, and collect aggregate analytics data. Cookies are small text files stored on your device by your browser.

The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled without breaking core site features such as login sessions and game loading.
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming limit configurations.
• Analytics cookies: Used to understand how users navigate the platform so that we can improve the experience. This data is aggregated and does not identify you individually.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious session behaviour.

ab8 does not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the platform.