ab998 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how ab998 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or interact with the ab998 platform, including its website, mobile web interface, and any associated services available at https://ab998.io (the "Platform").

This Policy applies to all personal data processed in connection with your use of the ab998 Platform, regardless of how you access it. It covers data collected at the point of registration, throughout the lifecycle of your account, and during any interactions with our customer support team.

By using the ab998 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.

2 Data Controller Identity

ab998 acts as the data controller in respect of personal data collected through the Platform. As data controller, ab998 determines the purposes and means by which your personal data is processed.

For all privacy-related enquiries, requests to exercise your data rights, or formal complaints regarding data handling practices, you may contact the ab998 data team using the contact details provided in Section 15 of this Policy. We aim to acknowledge all privacy-related requests within five business days of receipt and to resolve them within thirty calendar days.

3 Data We Collect

The categories of personal data that ab998 may collect about you include:

• Identity Data: Full legal name, date of birth, gender, and copies of identity documents such as a National Identity Card (NID), passport, or birth certificate submitted during account verification.
• Contact Data: Email address, mobile phone number, and city or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account Data: Your chosen username, encrypted account password, account preferences, communication settings, and account activity history.
• Financial Data: Payment method details (e.g., bKash wallet number, Nagad number, Rocket number, bank account details for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or card details for Visa/Mastercard), deposit and withdrawal transaction records, and account balance history.
• Betting & Gaming Data: Records of bets placed, games played, stakes, odds, winnings, and session durations, including sports markets (cricket BPL, IPL, T20 World Cup) and casino games.
• Technical Data: IP address, browser type and version, device type and operating system, referring URLs, and session timestamps.
• Communications Data: Records of live chat conversations, email correspondence, and any other communications exchanged with the ab998 support team.
• Responsible Gaming Data: Any self-exclusion requests, deposit limit settings, time-out preferences, or problem gambling self-assessments submitted through the Platform's responsible gaming tools.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming assessment and provided voluntarily by the player.

4 How We Collect Your Data

ab998 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated Technologies: Technical data collected automatically when you visit or use the Platform, including via cookies, web beacons, and server log files. See Section 8 for full details on our use of cookies.
• Payment Processors: Confirmation data received from payment providers such as bKash, Nagad, Rocket, and Upay when a transaction is initiated or completed. ab998 does not store raw payment credentials; these are handled directly by the relevant payment processor under their own security standards.
• Third-Party Verification Services: Identity and age verification data received from third-party verification providers engaged to confirm account eligibility.
• Fraud Prevention Services: Risk signals and device fingerprint data from anti-fraud and security monitoring tools integrated into the Platform.

5 Legal Basis for Processing

ab998 processes personal data only where a valid legal basis exists. The primary bases on which we rely include:

• Contract Performance: Processing necessary to register your account, process deposits and withdrawals, settle bets, and deliver the services you have requested from ab998.
• Legal Obligation: Processing required to comply with applicable legal obligations including anti-money laundering (AML) checks, age verification requirements, and fraud prevention duties.
• Legitimate Interests: Processing carried out in the legitimate interests of ab998 — such as platform security, fraud detection, service improvement, and responsible gaming monitoring — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, such as the sending of marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

ab998 uses the personal data we collect for the following specific purposes:

• To create and manage your ab998 account, including processing your registration and verifying your identity and age eligibility (21+).
• To process deposits, withdrawals, and bet settlements accurately and in a timely manner.
• To detect, investigate, and prevent fraudulent activity, money laundering, match fixing, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• To monitor betting patterns and gaming behaviour for responsible gaming purposes, including identifying players who may be at risk of problem gambling.
• To communicate with you regarding your account, transactions, security alerts, and updates to our policies.
• To send promotional communications and bonus notifications where you have consented to receive them.
• To improve the functionality, performance, and content of the ab998 Platform through analytics and user behaviour insights.
• To comply with applicable legal and regulatory obligations.

ab998 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human oversight. Bet settlement and payout calculations are automated for speed and accuracy but are not decisions that affect your legal rights without recourse.

7 Sharing Your Data

ab998 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment Processors: Necessary transaction data is shared with bKash, Nagad, Rocket, Upay, and card processors to initiate and confirm your financial transactions. Each processor handles data under its own privacy and security standards.
• Identity Verification Providers: Where you submit identity documents for account verification, those documents are shared with our third-party verification partner solely for the purpose of confirming your eligibility to use the Platform.
• Fraud & Security Services: Risk and device data may be shared with fraud prevention and cybersecurity partners to detect and prevent unauthorised account access or financial crime.
• IT & Hosting Providers: Data is processed on secure servers managed by our infrastructure and cloud hosting partners, all of whom are contractually bound to process data only on our instructions and to maintain appropriate security standards.
• Legal & Regulatory Authorities: ab998 will disclose personal data to law enforcement agencies, regulatory authorities, or courts in Bangladesh or internationally where required to do so by applicable law, valid legal process, or to protect the rights and safety of ab998 or its players.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ab998's assets, player data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

All third-party service providers with whom ab998 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specific purposes for which it was shared.

8 Cookies & Tracking Technologies

The ab998 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session state, detect fraud, and collect aggregate analytics data. Cookies are small text files stored on your device when you visit the Platform.

The types of cookies used on the ab998 Platform include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during a visit and security cookies that help detect suspicious activity. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and display options to personalise your experience on the Platform.
• Analytics Cookies: Collect aggregate, anonymised data about how users interact with the Platform — which pages are visited most often, how long sessions last, and where users navigate from. This information is used solely to improve the Platform.
• Fraud Prevention Cookies: Help us identify devices associated with suspicious activity or known fraud patterns, protecting both the integrity of the Platform and the security of your account.

You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will affect your ability to use certain features of the Platform, including maintaining a logged-in session. Analytics and functional cookies can be declined without impacting core Platform functionality.

9 Data Retention

ab998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Account data and transaction records are retained for a minimum period following account closure to comply with financial record-keeping and anti-money laundering obligations.
• Identity verification documents are retained for the duration of your account and for a defined period following account closure as required by applicable law.
• Communications with customer support are retained for a reasonable period for quality assurance, dispute resolution, and training purposes.
• Responsible gaming records, including self-exclusion and limit-setting history, are retained to ensure that exclusions remain effective and cannot be circumvented by re-registration.
• Technical and log data is retained for shorter periods for security monitoring and fraud detection purposes.

Once a retention period expires, ab998 securely deletes or anonymises the relevant data so it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and service improvement purposes.

10 Data Security

ab998 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ab998 Platform.
• Encrypted storage of sensitive account data, including passwords stored as salted cryptographic hashes — never in plain text.
• Strict access controls limiting employee access to personal data on a need-to-know basis, with access logging and regular access reviews.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform's infrastructure.
• Anomaly detection and real-time fraud monitoring systems that flag unusual account or transaction activity for investigation.
• Secure disposal protocols for data that has reached the end of its retention period.

While ab998 applies industry-standard security practices, no method of electronic data transmission or storage is entirely immune to risk. In the unlikely event of a data breach that materially affects your rights or interests, ab998 will notify affected players promptly in accordance with its incident response procedures.

11 Children & Minors

The ab998 Platform is strictly for adults aged 21 years and above. ab998 does not knowingly collect, store, or process the personal data of individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any capacity.

If ab998 discovers or is notified that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any winnings generated will be forfeited in accordance with the Terms & Conditions.

Parents or guardians who believe that a minor may have registered on the Platform are encouraged to contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

12 Your Rights

As a data subject, you hold the following rights in respect of the personal data ab998 holds about you:

• Access: You may request a copy of the personal data ab998 holds about you, free of charge, by contacting our support team.
• Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Erasure: You may request deletion of your personal data where we have no legitimate grounds to continue retaining it. Note that certain data must be retained to comply with legal obligations even after account closure.
• Restriction of Processing: You may ask us to restrict the use of your data — for example, while a complaint is under investigation — so that it is stored but not actively processed.
• Data Portability: You may request a copy of data you provided to us in a structured, commonly used, machine-readable format.
• Objection: You may object to processing of your data for direct marketing purposes at any time. Objections to other forms of processing will be assessed against our legitimate interests on a case-by-case basis.
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, contact our support team via live chat (available 24/7) or email at [email protected]. We will respond to verified requests within thirty calendar days. We may need to confirm your identity before processing a rights request to prevent unauthorised disclosure of data.

13 Marketing Communications

ab998 may send promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket offers), and platform updates — but only where you have provided explicit consent to receive such communications at registration or through your account communication preferences.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team. Opting out of marketing will not affect the delivery of essential account communications such as transaction confirmations, security alerts, or policy update notices, which are sent regardless of marketing preferences.

ab998 does not engage in unsolicited cold marketing. We will never send promotional communications to individuals who have not registered an account and provided consent.

14 Changes to This Policy

ab998 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify registered players via their registered email address or through a prominent in-platform notice.

Your continued use of the ab998 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this Policy periodically to stay informed about how your personal data is being protected.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ab998 handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the ab998 Platform
• Response Time: Under 3 minutes via live chat; within 24 hours via email
• Operating Hours: Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with ab998's response to a privacy complaint, you have the right to escalate the matter to the ab998 compliance team in writing, clearly describing the nature of your complaint and the resolution you are seeking. ab998 is committed to resolving all privacy-related complaints fairly and transparently.