ab678 Privacy Policy — Your Data, Your Rights

Key Privacy Points

This summary highlights the most important aspects of our Privacy Policy. Please read the full policy below for complete details.

1. Introduction

ab678 (referred to in this policy as "we", "us", or "our") operates the online betting and casino platform available at https://ab678.ws. We are committed to protecting and respecting the privacy of all individuals who interact with our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Privacy Policy applies to all personal data collected through the ab678 website, mobile-browser platform, customer support channels, and any other service operated under the ab678 brand. By creating an account or continuing to use the ab678 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should stop using the platform and contact us to request account closure.

2. Personal Data We Collect

We collect personal data in two ways: data you provide to us directly, and data we collect automatically when you use the platform. The categories of data we collect are described below.

Data You Provide Directly

Data Collected Automatically

When you access the ab678 platform, we automatically collect certain technical and usage data. This includes your IP address, device type and operating system (for example, Android version), mobile browser type, session timestamps, pages visited, and approximate geolocation derived from IP address. This data is used solely for security monitoring, fraud prevention, platform performance optimisation, and responsible gaming analytics. We do not use this data to build individual advertising profiles or share it with advertising networks.

3. How We Use Your Personal Data

ab678 uses your personal data only for specific, legitimate purposes. We do not process your data in any way that is incompatible with the purposes stated below:

• To create and administer your ab678 account, verify your identity (KYC), and provide the betting and casino services you have requested.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
• To comply with anti-money laundering (AML), know-your-customer (KYC), and other applicable regulatory obligations.
• To detect and prevent fraud, money laundering, match-fixing, collusion, and other prohibited conduct, and to enforce our Terms & Conditions.
• To deliver responsible gaming tools, including session reminders, deposit limit enforcement, and self-exclusion management, to players who have activated these features.
• To provide customer support in English and Bengali, respond to your queries, and improve the quality of our support services based on interaction records.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual necessity: processing is required to create your account, provide the services you have signed up for, and manage your deposits and withdrawals.
• Legal obligation: processing is required to comply with applicable AML, KYC, and other regulatory requirements, including the obligation to retain certain financial records for a specified period.
• Legitimate interests: we process certain technical data (IP address, device fingerprint, session logs) to protect the platform against fraud, unauthorised access, and abuse, which is in the legitimate interests of ab678 and its user community.
• Consent: where we send you optional marketing communications about promotions, seasonal bonuses (such as Eid or Pohela Boishakh offers), or new game launches, we do so only with your prior consent, which you may withdraw at any time by contacting support.

5. Sharing Your Personal Data

ab678 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share data only in the following limited and specific circumstances:

• Payment processors: we share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners solely to execute transactions you have authorised. These partners are bound by their own data protection obligations.
• Game providers: game session data (non-financial) is shared with our third-party game software providers (such as Pragmatic Play, Evolution Gaming, and Spribe) to the extent necessary to deliver the games and detect technical issues.
• Regulatory and law enforcement authorities: we may be required by law to disclose certain data to regulatory bodies, financial intelligence units, or law enforcement agencies. ab678 will comply with any such lawful request. Where permitted, we will endeavour to notify you of any such disclosure.
• Fraud prevention and security partners: anonymised or pseudonymised data may be shared with specialised fraud-detection service providers who assist ab678 in identifying suspicious account activity, multi-accounting, and money laundering patterns.

6. Payment Data and Financial Security

ab678 takes the security of your financial data extremely seriously. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction is processed through encrypted payment gateways. ab678 does not store your full card number, CVV code, bKash PIN, or Nagad PIN at any point. We record only the information necessary to identify the payment method used (for example, the last four digits of a card or the last three digits of a mobile wallet number) for the purpose of processing future withdrawals to the same source.

All financial transaction records are retained for a minimum period required by applicable AML and financial regulation, after which they are securely deleted. During the retention period, these records are accessible only to authorised ab678 compliance and finance staff, and to regulatory bodies pursuant to a lawful request.

7. Cookies and Tracking Technologies

The ab678 platform uses cookies and similar local storage technologies to function correctly and to improve your experience. The types of cookies we use are described below:

You may disable non-essential cookies by adjusting your mobile browser settings. Please note that disabling essential cookies will impair the core functionality of the ab678 platform. ab678 does not use advertising cookies, retargeting pixels, or any cross-site tracking technology.

8. Data Retention

ab678 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data and betting records are retained for a minimum of five years following account closure to comply with AML and financial regulatory obligations. After the mandatory retention period has expired, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Where you have given us consent to send you marketing communications, we will retain your contact details for marketing purposes until you withdraw that consent. You may withdraw consent at any time by contacting [email protected], after which your contact details will be removed from our marketing lists within 10 business days.

9. Your Data Protection Rights

As a user of the ab678 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 10 business days.

• Right of access: you may request a copy of the personal data we hold about you at any time. We will provide this in a clear, readable format within 10 business days of receiving a valid request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data has been unlawfully processed. Please note that certain data may need to be retained to comply with legal obligations even after an erasure request.
• Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
• Right to data portability: you may request that we provide your personal data to you in a structured, commonly used, machine-readable format, or that we transmit it directly to another controller where technically feasible.
• Right to object: you have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to processing for direct marketing purposes.

Please note that exercising certain rights may affect your ability to use the ab678 platform. For example, if you request deletion of your account data while your account is active and holds a balance, we will need to process the outstanding balance before completing the deletion. We will always advise you of any such implications before acting on your request.

10. Data Security

ab678 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers; encrypted storage of sensitive account data at rest; access controls that limit data access to authorised personnel on a strict need-to-know basis; regular security audits and vulnerability assessments of the platform infrastructure; and automated fraud-detection systems that monitor account activity in real time.

While we take all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, ab678 will notify affected users without undue delay and will take all necessary steps to contain the breach, assess its impact, and prevent recurrence. We encourage you to use a strong, unique password for your ab678 account and to notify us immediately if you suspect any unauthorised access.

11. Minors and Age Restriction

The ab678 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the ab678 platform, please notify us immediately at [email protected].

12. Changes to This Privacy Policy

ab678 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, we will provide reasonable notice to active account holders before the updated policy takes effect. The date of the most recent update is displayed at the top of this page. Your continued use of the ab678 platform following any update constitutes acceptance of the revised Privacy Policy.

13. Contact and Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ab678 handles your personal data, please contact our support team. We aim to acknowledge all privacy-related queries within 2 business days and to resolve them fully within 10 business days.