abce67 Privacy Policy
— How We Protect Your Data

1 Information We Collect

abce67 collects personal information from players through several channels: directly from you when you register an account or complete KYC verification; automatically as you interact with the platform; and in some cases from trusted third-party service providers engaged to support platform operations. The categories of personal data we collect are described below.

1.1 Account Registration Data

When you create an abce67 account, we collect the following information:

• Full legal name as it appears on your Bangladesh National ID Card or passport.
• Date of birth — collected to verify that you meet the 18+ age requirement.
• Email address — used for account communications, transaction confirmations, and password recovery.
• Mobile phone number — your Bangladesh-registered mobile number, used for account security, two-factor authentication (2FA), and payment method linking (bKash, Nagad, Rocket, Upay).
• Username and password — your chosen login credentials. Passwords are stored in hashed form and are never accessible in plain text by abce67 staff.
• Preferred currency — Bangladeshi Taka (৳) is the only supported currency on abce67.

1.2 KYC Verification Data

Before processing any withdrawal, abce67 requires players to complete Know Your Customer (KYC) verification. This involves collecting:

• A clear photograph or scan of a valid government-issued identity document — Bangladesh National ID Card (NID) or passport.
• A live selfie photograph as directed by the KYC verification interface.
• Proof of payment method — for example, a screenshot confirming that the bKash or Nagad account is registered in your legal name.
• Proof of address — where required by enhanced due diligence procedures for high-value accounts.

1.3 Transaction and Financial Data

abce67 records all financial transactions conducted on the platform. This includes:

• Deposit amounts, dates, times, and payment method identifiers (e.g., the last four digits of a registered bKash number).
• Withdrawal requests, including the amount, destination payment method, and processing status.
• Bonus credits, wagering activity, and cashback calculations.
• Transaction reference numbers provided by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank.

1.4 Gameplay and Betting Data

abce67 records all gameplay and betting activity associated with your account. This includes bet history, game session logs, cricket and sports betting selections, cash-out decisions, crash game round participation, and fishing game session data. This data is used for account management, dispute resolution, bonus wagering tracking, and responsible gaming monitoring.

1.5 Technical and Device Data

When you access abce67.net, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location derived from IP lookup.
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and features used.
• Referral source — the URL or platform from which you arrived at abce67.net.
• Cookie identifiers and local storage data as described in the Cookies section of this Policy.

1.6 Customer Support Data

When you contact abce67 via Live Chat, email ([email protected]), or WhatsApp, we retain records of those communications, including the content of your messages, timestamps, and any attachments or screenshots you share. These records are used to resolve your query, improve our support processes, and maintain an audit trail for compliance purposes.

2 How We Use Your Data

abce67 processes your personal data for the following purposes, each supported by a lawful basis:

Purpose	Data Categories Used	Lawful Basis
Account creation and management	Registration data, device data	Contract performance
Identity and age verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method data	Contract performance
Anti-money-laundering monitoring	Transaction data, gameplay data, KYC data	Legal obligation
Fraud prevention and security	Device data, IP data, transaction data	Legitimate interest
Responsible gaming monitoring	Gameplay data, session data, account data	Legal obligation / Legitimate interest
Customer support	Support communications, account data	Contract performance
Marketing communications (opted-in)	Email, mobile number, betting preferences	Consent
Platform analytics and improvement	Technical data, session data (aggregated)	Legitimate interest
Legal disputes and enforcement	All relevant data categories	Legal obligation / Legitimate interest

abce67 does not use automated decision-making processes that produce legally significant effects on players without human oversight. Where automated systems flag an account for suspected fraud, bonus abuse, or responsible gaming concerns, a trained compliance team member reviews the flagged account before any restrictive action is taken.

If you have consented to receiving marketing communications from abce67, we may send you promotional offers, bonus announcements, tournament notifications (including BPL cricket season promotions, IPL specials, and Eid bonus events), and platform updates. You may withdraw marketing consent at any time as described in the Your Privacy Rights section below.

3 Data Sharing & Third Parties

abce67 does not sell or rent your personal data to any third party. We share personal data only in the circumstances listed below, and only to the minimum extent necessary for the specified purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, abce67 shares transaction data with your chosen payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. The information shared is limited to what is technically required to initiate, confirm, or reverse the transaction (e.g., your registered mobile number and the transaction amount). Each payment provider operates under its own privacy policy and data protection practices.

3.2 Identity Verification Services

abce67 engages third-party identity verification providers to assist with KYC compliance. These providers receive copies of your identity documents and selfie photograph for the sole purpose of verifying your identity. They are contractually prohibited from using your data for any other purpose.

3.3 Game Technology Providers

Game studios and technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a session token and anonymised player identifier when you launch a game. They do not receive your full name, NID, payment details, or contact information. Game logs are maintained by the provider and made available to abce67 for dispute resolution purposes.

3.4 Regulatory and Law Enforcement Authorities

abce67 will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory requirement. This includes disclosures made in connection with anti-money-laundering obligations and investigations into fraud or other criminal activity. abce67 will notify affected players of such disclosures where legally permitted to do so.

3.5 Analytics Providers

abce67 uses privacy-respecting analytics tools to understand aggregate platform usage patterns — such as which game categories are most popular, average session duration, and deposit funnel performance. Analytics data is aggregated and anonymised before processing and cannot be used to identify individual players.

4 Cookies & Tracking

abce67 uses cookies and similar technologies (such as local storage and session storage) when you visit abce67.net. A cookie is a small text file stored on your device by your web browser at the instruction of the abce67 server. Cookies allow the platform to recognise your device on subsequent visits and to maintain your session while you are logged in.

abce67 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery (CSRF), and cookies that store your language preference. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences and settings — for example, your last-used payment method, your preferred sports market, or your responsible gaming deposit limit settings. Disabling these cookies will not prevent you from using the platform but may result in a less personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with abce67.net — including which pages are visited most frequently, average time on page, and navigation paths. This data is used solely to improve the platform and is not linked to your individual identity.
• Fraud prevention cookies: Used to detect and prevent fraudulent behaviour, including bot activity, multi-accounting, and suspicious login patterns. These cookies are essential to the security of all abce67 players and cannot be disabled.

abce67 does not deploy third-party advertising cookies or retargeting pixels that track your activity across external websites after you leave abce67.net. You will not see abce67 display advertisements on other websites as a result of cookies set by abce67.net.

Managing cookies: You can configure your browser to block or delete cookies. Please note that blocking strictly necessary or fraud prevention cookies will significantly impair your ability to use the abce67 platform, including logging in and processing transactions. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

5 Data Security

abce67 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and abce67.net. Look for the padlock icon in your browser's address bar when visiting the site.
• Bcrypt password hashing with individual salts. Your password is never stored in plain text and cannot be retrieved by abce67 staff in its original form.
• Two-factor authentication (2FA) available to all players via SMS OTP to their registered Bangladesh mobile number. abce67 strongly recommends enabling 2FA on your account.
• Role-based access controls ensuring that abce67 staff can only access the personal data necessary for their specific job function. KYC documents, for example, are accessible only to authorised compliance team members.
• Encrypted data storage for all sensitive personal data at rest, including KYC documents, financial records, and account credentials.
• Regular security audits and penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems that monitor platform traffic in real time for anomalous activity patterns consistent with hacking attempts, credential stuffing, or DDoS attacks.

Despite these measures, no online platform can guarantee absolute security against all possible threats. abce67 will notify affected players without undue delay in the event of a data breach that is likely to result in a high risk to their rights and freedoms. Notifications will be sent to the email address registered on the affected account.

6 Data Retention

abce67 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of account closure or from the date the document was submitted, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• Customer support communications: Retained for three years from the date of the last communication in each support thread, or for the duration of any related dispute resolution process if longer.
• Marketing preferences and consent records: Retained for as long as your account is active, plus two years following account closure or withdrawal of consent, to demonstrate compliance with applicable marketing regulations.
• Analytics data: Aggregated and anonymised analytics data is retained indefinitely, as it cannot be used to identify individual players.
• Self-exclusion records: Retained permanently to prevent re-registration by players who have applied for permanent self-exclusion on abce67.

When the applicable retention period expires, abce67 will securely delete or anonymise the relevant personal data so that it can no longer be associated with your identity. Secure deletion involves overwriting stored data in a manner that prevents forensic recovery.

In certain circumstances — for example, where personal data is the subject of ongoing legal proceedings or a regulatory investigation — abce67 may be required to retain data beyond the standard retention periods set out above. In such cases, the data will be preserved until the proceedings or investigation are concluded and the applicable legal hold is lifted.

7 Your Privacy Rights

abce67 respects your rights in relation to your personal data. The following rights are available to all registered players:

• Right of access: You have the right to request a copy of the personal data abce67 holds about you. This includes your account registration data, transaction history, KYC records, and support communication logs. Requests will be fulfilled within 30 days of receipt.
• Right to rectification: If any personal data abce67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date of birth corrections, a supporting identity document may be required.
• Right to erasure: You may request that abce67 delete your personal data. Please note that this right is subject to overriding legal and regulatory obligations — for example, abce67 cannot delete transaction records that must be retained for anti-money-laundering compliance. Where erasure cannot be completed in full, abce67 will inform you of the specific data categories that must be retained and the legal basis for doing so.
• Right to restrict processing: You may request that abce67 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing on legitimate interest grounds.
• Right to data portability: You may request a copy of the personal data you provided to abce67 in a structured, commonly used, machine-readable format (e.g., CSV or JSON), where technically feasible.
• Right to withdraw marketing consent: Where data processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time by updating your notification preferences in your abce67 account dashboard, or by emailing [email protected] with the subject line "Marketing Opt-Out". Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing of your personal data where abce67 relies on legitimate interest as the lawful basis. abce67 will assess the objection and cease or restrict the processing unless compelling legitimate grounds exist that override your interests.

To exercise any of these rights, please contact the abce67 privacy team by emailing [email protected] with the subject line "Privacy Rights Request". Please include your registered username and, for security purposes, a brief description of your request. abce67 may need to verify your identity before processing certain requests. We will respond within 30 days of receiving a complete and verified request.

abce67 does not charge a fee for handling privacy rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. If this is the case, abce67 will notify you of the fee before proceeding.

8 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how abce67 has handled your personal data, please contact us using the details below. All privacy-related communications are handled by the abce67 compliance and data protection team.

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" as appropriate.
• Live Chat: Available 24/7 via your abce67 account dashboard. For complex privacy matters, email is preferred as it creates a written record.
• WhatsApp: +880 17XX-XXXXXX, available 9 AM to 11 PM Bangladesh Standard Time (BST, UTC+6).
• Response time: abce67 aims to acknowledge all privacy enquiries within two business days and to provide a substantive response within 30 days of receiving a complete request.

Policy updates: abce67 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable regulations, or platform functionality. When material changes are made, registered players will be notified via their registered email address or via an on-screen notification upon next login. The updated policy will be published at abce67.net/privacy-policy with a revised "Last Updated" date at the top of the page. We encourage you to review this page periodically to stay informed about how abce67 protects your personal information.