How ab333 Collects, Uses, and Protects Your Personal Data

1.1  For the purposes of this Privacy Policy, ab333 acts as the data controller in respect of all personal information collected from players who use the Platform. As data controller, ab333 determines the purposes for which and the means by which your personal data is processed.

1.2  If you have any questions, concerns, or requests relating to the way ab333 handles your personal data, please contact our data protection team at [email protected]. We aim to respond to all data-related enquiries within 30 calendar days of receipt.

1.3  ab333 serves players primarily located in Bangladesh and processes data in connection with the provision of online casino and sports betting services to that market. By using the Platform, you acknowledge that your personal data may be processed and stored on servers located within or outside Bangladesh, in either case subject to appropriate security controls.

2.1  Information you provide directly. When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you directly provide ab333 with personal information. This includes:

• Your full legal name, date of birth, gender (if provided), and residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere).
• A valid email address and mobile phone number used for account authentication and communications.
• Copies of government-issued identity documents submitted for KYC purposes.
• Details of the payment method(s) you use to deposit and withdraw funds, including bKash, Nagad, Rocket, and Upay account numbers, or the last four digits of a linked Visa or Mastercard.
• Any information you voluntarily share when contacting our support team by email or live chat.

2.2  Information collected automatically. When you use the Platform, ab333's systems automatically record certain technical information about your session, including:

• Your IP address and approximate geographic location at the time of login.
• The type of device, operating system, and browser you use to access the Platform.
• Session start and end times, pages visited within the Platform, and in-session click paths.
• Game launch events, bet placement timestamps, and round outcomes as recorded by the game server.

2.3  Information from third-party providers. ab333 may receive limited personal information from third-party payment processors (for example, transaction status confirmations from bKash or Nagad) and from its game software providers (for example, session tokens from Evolution Gaming or Pragmatic Play) strictly for the purpose of completing your requested transaction or game session. ab333 does not purchase marketing data lists from third parties.

3.1  ab333 uses the personal information it collects for the following purposes:

• Account management: To create, verify, maintain, and administer your ab333 player account, including processing login requests, managing your Wallet balance, and tracking your betting and gaming history.
• Identity and age verification: To confirm that you are at least 21 years of age and are the person you claim to be, in compliance with our KYC obligations and internal anti-fraud policy.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, and to verify that payment methods belong to the registered account holder.
• Fraud prevention and AML compliance: To monitor account activity for signs of fraudulent behaviour, money laundering, multi-accounting, or bonus abuse, and to take appropriate action where such activity is detected.
• Responsible gaming: To identify patterns of play that may indicate a gambling problem, to apply deposit limits or self-exclusion arrangements you have requested, and to comply with responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service based on interaction history.
• Marketing (with consent only): To send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL cricket specials), and other offers — but only where you have given explicit consent to receive such communications.
• Platform improvement: To analyse aggregate, anonymised usage data to understand how players interact with the Platform and to improve game selection, user interface design, and site performance.
• Legal and regulatory compliance: To retain records as required by applicable law, to respond to lawful information requests from competent authorities, and to enforce the ab333 Terms & Conditions.

3.2  ab333 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or notifying you of the new purpose in a revised Privacy Policy.

4.1  ab333 processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing is necessary to create and manage your player account, process transactions, and provide the services described in the ab333 Terms & Conditions to which you are a party.
• Compliance with legal obligations: Processing is necessary to fulfil ab333's KYC, anti-money laundering, and fraud prevention obligations under applicable law.
• Legitimate interests: Processing is necessary for ab333's legitimate interest in preventing fraud, ensuring platform security, monitoring responsible gaming indicators, and improving the Platform — provided those interests are not overridden by your rights and interests.
• Consent: Where ab333 relies on your consent (for example, to send you marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or by using the opt-out mechanism included in any marketing message.

4.2  Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on a legal obligation or contract performance, withdrawal of consent does not remove ab333's right to process data under those other grounds.

5.1  ab333 does not sell your personal data. We share personal information only in the limited circumstances described below:

• Payment service providers: We share transaction-related information with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. These providers act as data processors and are contractually bound to use your data only for payment processing purposes.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi receive a session token and minimal account reference data to facilitate game launches and record round outcomes. They do not receive your full personal profile.
• KYC and identity verification services: ab333 may use third-party identity verification tools to assist in validating government-issued documents submitted during KYC. These providers process your identity data as processors under strict contractual confidentiality obligations.
• Fraud prevention and security partners: Anonymised or pseudonymised data may be shared with security vendors that help ab333 detect bot activity, multi-accounting, and other fraudulent patterns.
• Legal and regulatory authorities: ab333 may disclose personal data to competent authorities, law enforcement bodies, or courts of competent jurisdiction where required to do so by law, court order, or in connection with the investigation of suspected fraudulent or criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of ab333's assets, player personal data may be transferred to the successor entity. Players will be notified in advance of any such transfer that materially affects their data rights.

5.2  All third parties with whom ab333 shares personal data are required by contract to apply appropriate security measures and to use the data only for the specific purpose for which it was disclosed.

6.1  ab333 retains your personal data for as long as your account remains active and for a period of five (5) years following permanent account closure. This retention period reflects ab333's obligations under applicable anti-money laundering and fraud prevention requirements, which mandate the preservation of transaction and identity records for a minimum period after the end of the customer relationship.

6.2  After the applicable retention period has elapsed, ab333 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

6.3  The following categories of data may be subject to specific retention rules:

• KYC documents (identity and address verification): retained for the full five-year post-closure period.
• Transaction records (deposit and withdrawal history): retained for five years post-closure for AML compliance purposes.
• Support communications (email and chat logs): retained for three years from the date of the interaction.
• Marketing consent records: retained for three years from the date consent was given or withdrawn, to demonstrate compliance with consent obligations.
• Technical logs (IP addresses, session data): retained for up to 12 months and then deleted unless required for an active fraud or security investigation.

6.4  Where you have submitted a data deletion request under Section 9 of this Policy, ab333 will delete or anonymise data ahead of schedule to the extent that doing so does not conflict with a legal obligation to retain specific records.

7.1  ab333 takes the security of your personal data seriously and implements a range of technical and organisational safeguards to protect it from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ab333's servers.
• Encrypted storage of sensitive data fields including passwords (hashed and salted), payment account numbers, and identity document file references.
• Access controls: Personal data is accessible only to ab333 staff members who need it to perform their specific job function. Access is granted on a least-privilege basis and is logged for audit purposes.
• Two-factor authentication (2FA) for ab333 staff accessing internal systems that hold player data.
• Regular security assessments including penetration testing and vulnerability scanning of the Platform infrastructure.
• Incident response procedures: In the event of a data breach that poses a risk to your rights, ab333 will notify affected players by email without undue delay and will take immediate steps to contain and remediate the incident.

7.2  While ab333 uses industry-standard security practices, no system connected to the internet can be guaranteed to be completely immune from attack. You are encouraged to use a strong, unique password for your ab333 account and to enable any available two-factor authentication features. ab333 will never ask you to disclose your password by email, phone, or any other channel. If you suspect that your account has been compromised, contact [email protected] immediately.

8.1  ab333 uses cookies and similar tracking technologies on the Platform to ensure essential functionality, remember your preferences, and analyse how the Platform is used. The following categories of cookies may be set when you visit ab333.io:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that help prevent cross-site request forgery. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your language preferences and game display settings so you do not have to re-enter them on each visit.
• Analytics cookies: Collect anonymised information about how players navigate the Platform — for example, which games are most frequently launched and which pages receive the most visits. This data is used exclusively to improve the Platform and is not shared with third-party advertisers.
• Session management cookies: Track session duration and activity status for responsible gaming monitoring purposes, including identification of extended play sessions that may trigger a responsible gaming prompt.

8.2  ab333 does not use third-party advertising or retargeting cookies that would allow external advertisers to track your browsing activity across other websites.

8.3  Most modern browsers allow you to control cookie settings, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will impair the functionality of the ab333 Platform and may prevent you from logging in or placing bets. Instructions for managing cookies are available in your browser's help documentation.

9.1  As a player whose personal data is processed by ab333, you have the following rights in respect of that data:

• Right of access: You may request a copy of the personal data ab333 holds about you, together with information about how it is used, where it comes from, and with whom it is shared.
• Right to rectification: If any personal data ab333 holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
• Right to erasure ("right to be forgotten"): You may request that ab333 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to ab333's legal obligations to retain certain records (see Section 6).
• Right to restriction of processing: You may request that ab333 limit the processing of your data while a rectification or objection request is being considered, or where you dispute the lawfulness of processing.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that ab333 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, though ab333 may be entitled to continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where ab333 relies on your consent to process personal data (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

9.2  To exercise any of the rights listed above, please send a written request to [email protected] with the subject line "Data Rights Request". Please include your registered email address and a brief description of your request. ab333 will respond within 30 calendar days. Where a request is complex or numerous, ab333 may extend this period by a further 30 days, in which case you will be notified.

9.3  ab333 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or altered by an unauthorised person.

10.1  The ab333 Platform is strictly intended for adults aged 21 years and above. ab333 does not knowingly collect personal data from individuals under the age of 21. Registration on the Platform by a person under 21 is a violation of the ab333 Terms & Conditions.

10.2  If ab333 becomes aware that personal data has been collected from a person under 21 — whether through a complaint, KYC review, or other means — it will promptly delete the registration data, close the account, and refund any deposits made to the original payment method. Any winnings generated prior to the identification of under-age play will be forfeited.

10.3  If you believe that a minor may have registered on the ab333 Platform using falsified age details, please notify us immediately at [email protected] so that the account can be reviewed and closed without delay.

11.1  The ab333 Platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game software providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi). Interactions with these third parties — including payment transactions conducted on their own platforms or apps — are governed by those third parties' own privacy policies, not by this Policy.

11.2  ab333 is not responsible for the privacy practices, data security measures, or content of any third-party platform. Players are encouraged to review the privacy policies of payment providers and other third-party services before sharing personal information with them directly.

12.1  ab333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. The "Last Updated" date at the top of this page will always show the date of the most recent revision.

12.2  Where changes to this Policy are material — meaning they significantly affect how ab333 processes your personal data or the rights you hold — ab333 will notify registered players by email at least seven (7) days before the changes take effect. Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without prior notice.

12.3  Continued use of the ab333 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept a revised Policy, please stop using the Platform and contact [email protected] to request account closure.

12.4  For all privacy-related questions, data rights requests, or concerns about how ab333 handles your personal information, please contact us at:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 1 hour for general support; within 30 days for formal data rights requests.
• Availability: 24 hours a day, 7 days a week, including public holidays in Bangladesh.