Privacy Policy

This Privacy Policy applies to all users of the ab89 platform, accessible at https://ab89.bio, including visitors who browse without registering, registered players, and any individual who contacts us through our support channels. By using the ab89 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

ab89 is committed to handling your personal information with care, transparency, and respect. We collect only what we genuinely need, we store it securely, and we never sell it to third parties for commercial purposes unrelated to the operation of the ab89 platform.

1 Data Controller & Contact

ab89 acts as the data controller for all personal information collected through the platform. This means ab89 determines the purposes and means by which your personal data is processed. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our dedicated privacy team at any time.

When submitting a privacy enquiry, please include your registered email address (if applicable), a clear description of your request, and any relevant account details that will allow us to identify your records and respond accurately. We may request additional verification to confirm your identity before acting on any data access, correction, or deletion request.

2 Information We Collect

ab89 collects personal data through several channels: directly from you when you register, verify, or contact us; automatically when you browse or interact with the platform; and from third-party service providers who assist in delivering our services. The categories of information we collect include:

ab89 does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and responsible gaming compliance purposes. We do not collect racial or ethnic origin data, political opinions, religious beliefs, or biometric data beyond what may be contained in a government-issued identity document submitted during KYC verification.

3 How We Use Your Data

ab89 processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your information are as follows:

• Account Management: To create, maintain, and administer your ab89 player account, including processing registrations, managing login credentials, and handling account settings updates.
• Identity Verification & Compliance: To conduct mandatory age verification (18+ requirement) and Know Your Customer (KYC) checks in order to comply with responsible gaming standards and prevent underage gambling and financial crime.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records for both your reference and our financial compliance obligations.
• Platform Delivery: To provide access to our full range of products — cricket betting, live casino, slots, and more — and to ensure a smooth, personalised experience tailored to your preferences and betting history.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of all support interactions for quality assurance and audit purposes.
• Responsible Gaming: To monitor your gambling behaviour for signs of problem gambling, apply deposit limits and self-exclusion arrangements where requested, and fulfil our duty of care to all players on the ab89 platform.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, account takeover attempts, and any other activity that threatens the security and integrity of the ab89 platform or its users.
• Marketing Communications: To send you promotional offers, bonus announcements, and seasonal campaign notifications — but only where you have given explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse usage patterns, conduct internal research, and make product improvements that enhance the overall experience for all ab89 players in Bangladesh.
• Legal Obligations: To comply with any applicable laws, regulations, court orders, or lawful requests from competent authorities requiring us to disclose or retain certain categories of personal data.

4 Data Sharing & Third Parties

ab89 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your information only in the limited circumstances described below, and always with appropriate safeguards in place:

• Payment Service Providers: We share the minimum necessary financial data with our approved payment partners — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are subject to their own data protection obligations.
• Game Technology Providers: Our platform hosts games developed and operated by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Basic session and account identifiers may be shared with these providers to facilitate seamless game delivery and to maintain fair-play integrity. These providers do not receive your full identity or financial data.
• Identity Verification Partners: During the KYC process, we may share identity documents and verification data with specialist identity verification service providers. These partners process your data solely for the purpose of confirming your identity and age, and are contractually bound to strict confidentiality and data security standards.
• IT Infrastructure and Security Providers: We use trusted cloud infrastructure, hosting, and cybersecurity partners to maintain the availability and security of the ab89 platform. These providers may have limited access to your data as a technical necessity but are prohibited from using it for any independent purpose.
• Legal and Regulatory Authorities: We may disclose personal data to government bodies, law enforcement agencies, or courts in Bangladesh or other applicable jurisdictions when required to do so by law, court order, or in response to a lawful formal request. We will notify you of such disclosure where we are legally permitted to do so.
• Professional Advisers: In the context of legal proceedings, audits, or business reviews, we may share relevant personal data with our legal advisers, accountants, or auditors under strict confidentiality obligations.

All third parties with whom ab89 shares personal data are required to respect the security and confidentiality of that data. ab89 does not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

5 Cookies & Tracking Technologies

ab89 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform effectively, remember your preferences, and gather analytics data that helps us improve the service. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot carry viruses or malware.

The types of cookies deployed on the ab89 platform are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as maintaining your login session, remembering items in your account, and ensuring the platform behaves consistently across pages. These cookies cannot be disabled without significantly impairing your experience on ab89.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use the ab89 platform — for example, which pages are visited most frequently, how long sessions last, and which features are most popular. This data is aggregated and used solely to improve platform performance and content relevance.
• Functional Cookies: These cookies remember choices you have made — such as your preferred language or display settings — so that you do not need to re-enter them on subsequent visits. They enhance your experience by personalising certain aspects of the platform.
• Marketing and Targeting Cookies: These are only placed on your device where you have given explicit consent. They help us deliver promotional content and bonus offers that are relevant to your interests and betting activity. You may withdraw consent for marketing cookies at any time through your account settings.

ab89 does not use cookies to collect your financial data, NID details, or any other sensitive personal information. Cookies are used exclusively in the ways described above and are not shared with third parties for independent commercial use.

6 Data Retention

ab89 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The key retention periods that apply to different categories of data on the ab89 platform are:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five years following account closure. This extended retention period supports our obligations under anti-money-laundering regulations and enables us to respond to any disputes or regulatory enquiries that may arise after your account is closed.
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction, in line with standard financial record-keeping requirements. This data is stored securely and access is restricted to authorised personnel only.
• KYC Verification Documents: Retained for the duration of your active account and for five years thereafter, or longer if required by a specific regulatory obligation or ongoing investigation.
• Support Correspondence: Retained for three years from the date of each interaction. This allows us to maintain continuity in our customer support, track the resolution history of recurring issues, and comply with any audit requirements.
• Marketing Preferences and Consent Records: Retained until you withdraw consent, plus an additional three years to evidence the history of your consent decisions in the event of a dispute.
• Usage and Technical Data (Logs): Retained for up to 12 months in an identifiable form, after which they may be anonymised and retained indefinitely for aggregate statistical purposes.

When retention periods expire, ab89 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where deletion is not immediately possible (for example, because data is stored in backup archives), we will ensure the data is isolated from active processing and deleted as soon as the backup cycle allows.

7 Your Rights & Choices

As an ab89 player, you have a number of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. Your rights include:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a clear, readable format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details (such as your email address or phone number) directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data — for example, if you close your account and we no longer have a legal basis to retain it. Note that this right is subject to our legal retention obligations and may not apply to all categories of data we hold.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain situations — for example, while a dispute about its accuracy is being resolved, or while an objection to our use of it is being considered.
• Right to Data Portability: Where we process your data on the basis of your consent or a contractual obligation, and processing is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on our legitimate interests as the legal basis. We will comply with your objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where our processing of your data is based on your consent — particularly in the case of marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact our support team at [email protected]. We may ask you to verify your identity before acting on your request. In most cases, requests are processed within 30 days; complex requests may take up to an additional 60 days, in which case we will inform you of the extended timeline and the reason for it.

8 Data Security

ab89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ab89 platform is encrypted using industry-standard 128-bit SSL/TLS technology. This ensures that your personal and financial information cannot be intercepted in transit.
• Secure Data Storage: Personal data at rest is stored in encrypted databases hosted on hardened infrastructure with strict access controls. Database access is restricted to a small number of authorised personnel and is subject to comprehensive audit logging.
• Access Controls: Internal access to personal data is governed by a role-based access control (RBAC) policy. Staff members access only the data that is necessary for their specific role and are required to complete regular data protection training.
• Payment Tokenisation: Card payment details (Visa, Mastercard) are never stored directly on ab89's servers. All card data is tokenised by our payment processor, meaning only a non-sensitive token is retained for recurring transaction reference.
• Penetration Testing: ab89 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in our platform infrastructure before they can be exploited.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, ab89 will notify affected users promptly and take all reasonable steps to contain the breach, assess its scope, and prevent recurrence.

While ab89 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You also play an important role in keeping your data safe: choose a strong, unique password for your ab89 account, never share your login credentials with anyone, and log out of your account when using a shared or public device. If you believe your account may have been compromised, contact us immediately at [email protected].