Privacy Policy — ab99o Data Protection Commitment

1. About This Policy

This Privacy Policy ("Policy") describes how ab99o ("the Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who visit, register on, or otherwise use the ab99o online betting and casino platform available at https://ab99o.io and any associated subdomains or mobile interfaces.

ab99o is operated as an international online gaming platform. We recognise the importance of privacy to our players, particularly those based in Bangladesh, and we have designed our data practices to be transparent, proportionate, and respectful of your rights. This Policy applies to all personal data processed in connection with your use of our platform, regardless of the device or channel through which you access it.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to your account and your experience on ab99o.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact customer support, or participate in promotions on ab99o, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and a copy of government-issued photo identification (such as a National ID card or passport) submitted during KYC verification.
• Contact data: Email address, phone number, and residential address (including district, division, and postal code for players in Bangladesh).
• Account data: Username, encrypted password, account preferences, and communication consent settings.
• Financial data: Payment method details (bKash mobile number, Nagad account reference, bank account holder name), transaction history, deposit and withdrawal records. Full payment account numbers are not stored directly by ab99o — they are handled by our payment processing partners.
• Verification documents: Copies of identity documents, proof of address (such as a utility bill or bank statement dated within 90 days), and proof of payment method ownership submitted to satisfy KYC requirements.
• Communications data: Records of messages you send to our customer support team via email or live chat, including the content of those messages and any attachments you share.

2.2 Information Collected Automatically

When you access and interact with the ab99o platform, certain technical and behavioural data is collected automatically by our systems:

• Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers, and time zone settings.
• Usage data: Pages visited, features accessed, games played, bet history, session duration, click paths, search queries entered within the platform, and error logs.
• Location data: Approximate geolocation inferred from your IP address. We do not collect precise GPS-level location data.
• Cookie and tracking data: As described in Section 6 of this Policy.

2.3 Information from Third Parties

We may receive personal data about you from the following third-party sources:

• Payment providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners may share transaction confirmation data with us to reconcile deposits and withdrawals.
• Identity verification services: Third-party KYC and anti-fraud service providers may share verification results and risk scores as part of the account verification process.
• Fraud prevention databases: We may check your details against industry fraud-prevention shared databases to protect the platform and our players.

3. How We Use Your Data

ab99o processes your personal data for the following purposes:

Purpose	Data Categories Used
Creating and managing your account	Identity, contact, account data
Verifying your identity (KYC)	Identity, verification documents, financial data
Processing deposits and withdrawals	Financial, identity, contact data
Providing betting and gaming services	Account, usage, device data
Customer support and complaint handling	Identity, contact, communications data
Fraud detection and prevention	Identity, financial, device, usage data
Responsible gaming monitoring	Account, usage, financial data
Sending service communications	Contact, account data
Sending promotional communications (with consent)	Contact, account, usage data
Platform analytics and improvement	Usage, device, cookie data
Compliance with legal obligations	Identity, financial, communications data

ab99o will not use your personal data for any purpose that is incompatible with the purposes listed above without first seeking your explicit consent or having a lawful basis to do so.

4. Legal Basis for Processing

ab99o processes your personal data on the following legal grounds:

• Performance of a contract: Processing your account registration, deposits, withdrawals, bets, and game play is necessary to deliver the services you have signed up for under our Terms & Conditions.
• Legal obligation: We are required to verify your identity, maintain transaction records, and conduct anti-money laundering checks under applicable international financial regulations and the terms of our operating licences.
• Legitimate interests: We process usage and device data to protect the security of our platform, detect fraud, improve our services, and conduct responsible gaming monitoring. We balance our legitimate interests against your privacy rights and will not override them.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only with your explicit consent. You may withdraw consent at any time by contacting us at [email protected] or updating your account communication preferences.

5. Data Sharing and Disclosure

5.1 Service Providers

ab99o works with carefully selected third-party service providers who process personal data on our behalf. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), identity verification providers, cloud hosting and infrastructure providers, customer support platform operators, and platform analytics tools. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond delivering their contracted services to ab99o.

5.2 Game Providers

When you play games on the ab99o platform supplied by third-party providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data such as your player session token and game activity may be processed by those providers solely to operate the game session. These providers do not receive your full personal profile.

5.3 Legal and Regulatory Disclosure

ab99o may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. We will disclose only the minimum data required to satisfy the specific legal request.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ab99o's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email before your data is transferred and becomes subject to a different privacy policy.

5.5 No Sale of Data

ab99o does not sell, rent, lease, or exchange your personal data with third-party marketers, advertisers, or data brokers. This is an absolute commitment with no exceptions.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and activity. ab99o uses cookies and similar technologies including local storage and session tokens.

6.2 Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Performance cookies: Used to measure how players use the platform — which pages are visited most, where errors occur, and how features perform. Data collected is aggregated and anonymised. These help us improve the ab99o experience for all players.
• Functional cookies: Store your language preferences, display settings, and other personalisation choices so you do not have to re-enter them on each visit.

ab99o does not use third-party advertising or retargeting cookies. We do not share cookie data with social media platforms for ad-targeting purposes.

6.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in or using core platform features. Detailed instructions for managing cookies are available in the help documentation of your specific browser.

7. Data Retention

ab99o retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your active account relationship with ab99o.
• Closed account data: Identity, financial, and transaction records are retained for a minimum of 5 years following account closure to comply with anti-money laundering record-keeping obligations.
• KYC documents: Retained for 5 years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Marketing consent records: Retained for the period of consent plus 3 years to demonstrate compliance.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual.

When data is no longer required and the retention period has expired, ab99o securely deletes or irreversibly anonymises it in accordance with our internal data destruction procedures.

8. Your Privacy Rights

As a user of the ab99o platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days.

9. Security Measures

ab99o takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All communications between your device and the ab99o platform are encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive data fields including financial records and identity documents are encrypted at rest using AES-256 encryption.
• Password hashing: User passwords are stored as one-way cryptographic hashes using industry-standard algorithms. Plain-text passwords are never stored or transmitted.
• Access controls: Access to personal data within ab99o's internal systems is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and security training.
• Monitoring and logging: Our infrastructure is continuously monitored for unusual access patterns, intrusion attempts, and anomalous activity. Security logs are retained and reviewed regularly.
• Vulnerability management: We conduct periodic security assessments and promptly address identified vulnerabilities.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ab99o will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

10. Children's and Minors' Privacy

The ab99o platform is strictly for individuals aged 21 years and over. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a minor, we will immediately suspend the account, void any associated bets and balances, and permanently delete all associated personal data.

If you believe that a minor has registered an account on ab99o, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11. International Data Transfers

ab99o operates as an international platform and your personal data may be stored and processed on servers located outside Bangladesh. Where data is transferred to countries that may not have equivalent data protection laws, ab99o takes steps to ensure that adequate safeguards are in place. These include contractual data protection clauses with service providers and the use of encrypted, access-controlled infrastructure.

By using the ab99o platform, you acknowledge that your personal data may be processed in jurisdictions outside your own, and you consent to such transfers taking place in accordance with the safeguards described in this Policy.

12. Third-Party Links and Services

The ab99o platform may contain references to third-party services including game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) and payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard). When you interact with these third-party services, their own privacy policies apply to the data they collect directly from you.

ab99o is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the ab99o platform.

13. Changes to This Privacy Policy

ab99o may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or improvements to our platform. When material changes are made, we will notify registered players via email to the address on record and by displaying a prominent notice on the platform for at least 14 days before the changes take effect.

The date of the most recent revision is always displayed at the top of this page. Your continued use of the ab99o platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your account before the effective date.

14. Contact and Data Requests

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding how ab99o handles your personal data, please contact our Data Support team:

Email: [email protected]

Please include "Privacy Request" in the subject line of your email, along with your registered username and a description of your request. We will acknowledge receipt within 5 business days and aim to resolve all privacy requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days and will inform you accordingly.

If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter through such further channels as may be available under the laws of your jurisdiction.