Your Privacy at ab99o
At ab99o, protecting the personal information of every player in Bangladesh is a core responsibility — not an afterthought. This Privacy Policy explains in plain English exactly what data we collect, why we collect it, how it is stored, and the rights you have over your own information at all times.
Every connection to ab99o is protected by industry-standard SSL/TLS encryption. Personal data transmitted between your device and our servers cannot be read or intercepted by third parties in transit.
ab99o collects only the personal information that is genuinely necessary to operate your account, process BDT payments, verify your identity, and comply with responsible gaming obligations. We do not collect data for its own sake.
ab99o does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertisers under any circumstances. Your data is used solely to operate and improve the ab99o platform for you.
All staff with access to player data are bound by strict confidentiality obligations. Data access within ab99o is role-based and limited to personnel who genuinely need it to deliver or support the platform's services.
You may request access to, correction of, or deletion of your personal data at any time by contacting our support team. Your rights over your own information are real, enforceable, and respected by ab99o.
Promotional communications from ab99o are always opt-in. If you no longer wish to receive bonus offers, match alerts, or seasonal promotions, you can update your communication preferences from your account dashboard at any time.
1. Information We Collect
ab99o collects personal information across three broad categories: information you provide directly when registering and using the platform; information generated automatically as you interact with the platform; and, in limited circumstances, information received from trusted third-party sources such as payment providers and identity verification services. The following table summarises what we collect and why.
| Category | Data Points | Collected When |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number (if provided) | Account registration and KYC verification |
| Contact Data | Mobile phone number, email address | Account registration and ongoing communications |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, bank account details (where applicable), transaction amounts and timestamps | Deposits, withdrawals, and payment processing |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Every platform visit (automated collection) |
| Usage Data | Pages visited, games played, bet history, stakes, session duration, click patterns | Every authenticated platform session |
| Communications Data | Support chat transcripts, emails sent to [email protected], in-platform messages | Whenever you contact ab99o's support team |
| Verification Documents | Scanned copies or photographs of NID, passport, utility bills, bank statements | KYC verification requests |
ab99o does not knowingly collect special category data (including racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) except where a player voluntarily discloses such information in a support communication, in which case it will be treated with the highest level of confidentiality and not retained beyond the resolution of the relevant support case.
2. How We Use Your Data
Every piece of personal information collected by ab99o is used for a defined, legitimate purpose. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which ab99o processes personal data are set out below.
- Account administration: To create and maintain your ab99o account, authenticate your identity at login, and manage account settings, preferences, and communication options.
- Payment processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment channels. Financial data is transmitted securely to payment partners only to the extent necessary to complete each transaction.
- Identity verification (KYC): To verify that you are who you say you are, that you are at least 18 years old, and that the payment methods registered on your account belong to you. KYC is a responsible gaming and financial crime prevention obligation.
- Platform personalisation: To present you with game recommendations, deposit offers, and content that is relevant to your usage patterns. Personalisation is based solely on your own activity on ab99o and does not involve selling your data to external profiling services.
- Responsible gaming oversight: To monitor gameplay patterns for indicators of problem gambling behaviour, apply self-imposed limits you have set, and fulfil ab99o's commitment to player protection. This processing is carried out in your interest and in the interest of safe gaming standards.
- Fraud detection and security: To identify and investigate unusual account activity, protect against unauthorised access, detect multi-accounting and bonus abuse, and prevent financial crime including money laundering.
- Customer support: To respond to your enquiries, investigate complaints, process disputes, and maintain records of support interactions for quality assurance and dispute resolution purposes.
- Legal and regulatory compliance: To meet obligations under applicable laws governing online gambling, anti-money laundering, data protection, and financial crime prevention. In some cases this requires us to retain certain data for defined minimum periods regardless of your account status.
- Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with ab99o's games, features, and interface, and to use those insights to improve the platform's performance, reliability, and user experience.
- Marketing communications (opt-in only): To send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, BPL cricket betting offers, Eid promotions, and other seasonal campaigns — but only if you have opted in to receive such communications. You may withdraw consent at any time.
3. Data Sharing & Disclosure
ab99o does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose. All third parties who receive your data are required to handle it securely and in accordance with applicable data protection standards.
- Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data needed to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are responsible for the security of data within their own systems.
- Identity verification services: Third-party KYC providers may receive copies of your identity documents and personal details to carry out age verification and identity checks. These providers are contracted to process this data solely for verification purposes on behalf of ab99o.
- Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive technical session data (such as player session tokens) necessary to operate their games within the ab99o platform. They do not receive your full identity or payment data.
- IT infrastructure and hosting providers: ab99o uses trusted cloud infrastructure and technology service providers to host the platform and process data on our behalf. These providers act as data processors under contractual obligations and have no independent right to use your data.
- Legal and regulatory authorities: ab99o may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by law, court order, or legitimate authority request. We will, where legally permissible, notify you of such a disclosure.
- Sports integrity bodies: In cases involving suspected match fixing or insider betting, ab99o may share relevant betting data with sports governing bodies such as the ICC, BCB, or FIFA integrity units. This is done in the interest of maintaining the integrity of sport and is not a sale or commercial transfer of data.
- Business transfers: In the event that ab99o undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights under this Privacy Policy will continue to apply.
5. Data Security
ab99o implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, ab99o's security framework reflects industry best practices for online gaming platforms serving the Bangladesh market.
- SSL/TLS encryption in transit: All data exchanged between your browser or mobile device and ab99o's servers is encrypted using TLS 1.2 or higher. This prevents interception of login credentials, payment data, and personal information while it is being transmitted.
- Encryption at rest: Sensitive personal and financial data stored in ab99o's databases is encrypted at rest using strong encryption standards. Database access is restricted to authorised systems and personnel only.
- Access controls: ab99o operates a strict role-based access control (RBAC) model. Only staff members with a legitimate operational need can access player personal data, and all such access is logged and periodically audited.
- Password security: Player passwords are stored as cryptographic hashes, not in plain text. ab99o's systems cannot retrieve your original password — only reset it through a verified process. We strongly recommend using a strong, unique password for your ab99o account.
- Two-factor security prompts: Unusual login attempts — such as access from a new device or IP address — may trigger additional identity checks to protect your account from unauthorised access.
- Penetration testing and vulnerability management: ab99o's platform undergoes periodic security assessments. Identified vulnerabilities are prioritised and addressed according to their risk severity. Critical vulnerabilities are remediated as an emergency priority.
- Data breach response: In the event of a data security incident that poses a risk to your personal data, ab99o will notify affected players without undue delay and take immediate steps to contain and remediate the incident. Notifications will be sent to the email address registered on your account.
6. Data Retention
ab99o retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The retention periods applied by ab99o are proportionate to the sensitivity of the data and the purpose for which it is held.
- Active account data: All personal, financial, and usage data associated with an active account is retained throughout the lifetime of that account. This data is necessary to operate your account and provide the services you have requested.
- Closed account data: Following account closure — whether voluntary or by ab99o — core identity and transaction records are retained for a minimum of five years. This retention is required to meet anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
- KYC documents: Identity verification documents are retained for the duration of the account and for five years following account closure, in line with standard financial services record-keeping requirements.
- Support communications: Records of support interactions, including email correspondence and chat transcripts, are retained for three years following the closure of the relevant support case. This enables ab99o to reference prior interactions in the event of related future disputes.
- Marketing consent records: Records of marketing consent (or withdrawal of consent) are retained for the duration of the account and for two years after account closure, to demonstrate compliance with consent-based marketing obligations.
- Analytics data: Anonymised and aggregated analytics data — which contains no personally identifiable information — may be retained indefinitely for platform improvement purposes.
When personal data is no longer required for any of the above purposes and no legal obligation requires its further retention, ab99o will securely delete or irreversibly anonymise it. Deletion requests submitted by players are processed subject to the retention obligations described above — where a legal retention obligation applies, data cannot be deleted until that obligation expires, but its use will be restricted to the legally required purpose only.
7. Your Privacy Rights
ab99o recognises that your personal data belongs to you, and we are committed to making it easy for you to exercise your rights over that data. The following rights are available to all ab99o account holders. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two business days and respond substantively within ten business days.
Request a copy of all personal data ab99o holds about you, including what it is, where it came from, and how it is being used.
Request that inaccurate or incomplete personal data held by ab99o be corrected or updated. You can also update basic contact details directly from your account settings.
Request deletion of your personal data where it is no longer necessary for its original purpose and no legal obligation requires its retention.
Request that ab99o restrict the processing of your personal data in specific circumstances, for example while a dispute about its accuracy is being resolved.
Request that we provide your personal data in a structured, machine-readable format so you can transfer it to another service provider if you wish.
Object to the processing of your personal data for direct marketing purposes. You may also object to processing based on ab99o's legitimate interests in specific circumstances.
Request a manual review of any significant decision about your account that was made solely by an automated system, such as a fraud flag or withdrawal hold.
Withdraw your consent to marketing communications at any time by updating your preferences in your account dashboard or by contacting support directly.
8. Policy Updates & Contact
ab99o reviews this Privacy Policy periodically and updates it to reflect changes in the platform's data practices, applicable laws, or regulatory guidance. The effective date at the top of this page indicates when the current version was last updated. When material changes are made — changes that affect how your data is collected, used, or shared in a way that could meaningfully impact your privacy — ab99o will notify registered players by email to the address on file.
Minor updates, such as clarification of existing practices, correction of typographical errors, or formatting improvements, will be made without individual notification. We encourage you to review this Privacy Policy periodically to stay informed of how ab99o protects your data.
Your continued use of ab99o after a revised Privacy Policy is posted constitutes your acceptance of the updated terms. If you do not agree with any material change to this Privacy Policy, you should cease using the platform and request account closure by contacting our support team.
How to Contact ab99o About Privacy
- Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
- WhatsApp: +880 1700 000000 — available during business hours, Bangladesh Standard Time (UTC+6).
- Live Chat: Available 24/7 through your account dashboard once logged in.
- Response time: ab99o aims to acknowledge all privacy-related correspondence within two business days and provide a substantive response within ten business days of receiving a complete request.
Questions About Your Privacy?
Our English-language support team is available around the clock to answer privacy questions, process data rights requests, and help you manage your account preferences safely and confidently.