ab67 Privacy Policy

This Privacy Policy ("Policy") describes how ab67 ("we", "us", or "our") collects, uses, stores, shares, and protects the personal information of users ("you" or "User") who access or use the ab67 platform at ab67.bio and the associated gaming, betting, and payment services (collectively, the "Services"). This Policy forms part of our Terms and Conditions and is incorporated into them by reference. By registering an account or using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

ab67 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data that is necessary to deliver our Services, verify your identity, process payments, and ensure the security of your account. We do not collect data for purposes beyond those described in this Policy without first obtaining your explicit consent.

The personal data collected by ab67 is used exclusively for the following purposes. We do not use your data for any purpose not listed here without obtaining your prior consent.

• Account creation and management: processing your registration, maintaining your account record, enabling login authentication, and providing access to the Services.
• Identity and age verification: conducting KYC checks to confirm that you are aged 21 or above and that your identity matches the payment methods associated with your account.
• Payment processing: executing deposits, withdrawals, and refunds via bKash, Nagad, Rocket, Upay, and bank transfer channels; maintaining accurate financial records of all transactions.
• Fraud prevention and security: monitoring account activity for signs of fraudulent transactions, money laundering, multi-accounting, or other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming monitoring: reviewing gaming behaviour patterns to identify players who may be at risk of problematic gambling, and enabling the responsible gaming tools described in our Responsible Gaming Policy.
• Customer support: responding to your enquiries, processing complaints, and resolving disputes relating to your account, transactions, or use of the Services.
• Service improvement: analysing aggregated, anonymised usage data to understand how players use the Platform, identify technical issues, and improve the overall experience — including mobile performance on Grameenphone, Robi, Banglalink, and Teletalk networks.

ab67 does not sell personal data to third parties. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality obligations or legal requirements.

• Payment processors: your payment account identifiers (bKash, Nagad, Rocket, Upay, or bank details) are shared with the relevant payment service provider solely to execute your deposit or withdrawal transaction. Payment providers process this data under their own privacy policies.
• KYC verification providers: your identity documents and selfie photograph are shared with our third-party KYC verification partner for the sole purpose of confirming your identity and age. KYC data is not used for any other purpose by this provider.
• Game software providers: aggregated, anonymised game performance data may be shared with our game software partners (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) for technical support and game optimisation purposes. No personally identifiable information is included in these data transfers.
• Legal and regulatory authorities: we may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by applicable law, court order, or regulatory directive. Such disclosures are made without prior notice to you where legally required.

ab67 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption on all data transmitted between your device and the ab67 Platform, ensuring that your login credentials, payment information, and personal data cannot be intercepted during transmission.
• One-way cryptographic hashing of passwords. ab67 does not store your password in a readable form. Even internal staff cannot retrieve your password — only a reset via verified mobile OTP is possible.
• Role-based access controls that limit internal staff access to personal data on a strict need-to-know basis. Customer data is not accessible to employees whose job function does not require it.
• Automatic session termination after defined periods of inactivity, reducing the risk of unauthorised access if you leave your device unlocked or unattended.

While ab67 takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ab67 will notify affected users promptly and take all appropriate remedial measures.

As a user of the ab67 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account username and a description of your request. ab67 will respond within 30 days.

• Right of access: you may request a copy of all personal data ab67 holds about you, together with information about how that data is used and with whom it has been shared.
• Right to rectification: you may request correction of any personal data that is inaccurate or incomplete. Where the correction relates to KYC information, updated identity documents may be required.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements that override this right.
• Right to restriction of processing: you may request that ab67 restrict the processing of your personal data in certain circumstances, for example while a correction request is being investigated.
• Right to data portability: you may request that ab67 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ab67 will not charge a fee for handling privacy rights requests unless they are manifestly unfounded or excessive. Where a request is complex or numerous, ab67 may extend the response period by a further 30 days and will notify you accordingly.

The ab67 Platform may display content from or references to third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt. These game providers operate their own privacy practices within their software environments. ab67 is not responsible for the privacy practices of these third-party providers, and their practices are governed by their own privacy policies. Additionally, the ab67 Platform does not include outbound links to external websites. Any communication you receive purportedly linking to an external site in the name of ab67 should be treated as suspicious and reported to [email protected].

For all privacy-related enquiries, data access requests, correction requests, deletion requests, or complaints about how ab67 handles your personal data, please contact our dedicated support team. We aim to acknowledge all privacy requests within 24 hours and resolve them within 30 days, Bangladesh Standard Time (BST, UTC+6).