Privacy Policy — How ab66 Collects, Uses, and Protects Your Data

1 Who We Are

This Privacy Policy is issued by ab66, the operator of the online betting and casino platform available at ab66.io (referred to throughout this document as "ab66", "we", "us", or "our"). ab66 is the data controller responsible for the personal data of all registered players and site visitors in Bangladesh.

References to "you" or "the player" mean any individual who visits, browses, registers on, or interacts with the ab66 platform in any capacity. This policy applies to all personal data collected through the ab66 website, mobile-optimised site, live chat, email correspondence, and any other channel through which you communicate with ab66.

This policy should be read alongside the ab66 Terms & Conditions and Responsible Gaming Policy. By registering an account or continuing to use the ab66 platform, you acknowledge that you have read and understood this Privacy Policy.

2 Data We Collect

ab66 collects personal data through several distinct channels. The categories of data collected, the channel through which they are gathered, and the primary purpose of collection are summarised in the table below.

3 How We Use Your Data

ab66 uses the personal data we collect for the following purposes. Each purpose is mapped to the legal basis on which we rely, as set out in Section 4.

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the ab66 platform.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), verify payment method ownership, and detect fraudulent transactions.
• Service delivery: To provide access to cricket betting markets, live casino games, slots, and all other features of the ab66 platform.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service based on interaction history.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, and to cooperate with lawful requests from competent authorities.
• Responsible gaming monitoring: To identify patterns of behaviour that may indicate problem gambling and to apply appropriate safeguards including deposit limits, session alerts, and self-exclusion tools in a player's best interests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-account registrations, bonus abuse, and unauthorised access to player accounts.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the ab66 platform, personalising game recommendations, and optimising the user experience.
• Marketing communications: To send you promotional offers, bonus alerts, and platform news by email or in-platform notification — but only where you have given explicit consent to receive such communications.

4 Legal Bases for Processing

ab66 processes your personal data only where there is a valid legal basis for doing so. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to register your account, process payments, and deliver the ab66 platform services you have requested. Without this processing, ab66 cannot provide the service.
• Legal obligation: Processing required to comply with AML, KYC, tax reporting, and other legal or regulatory obligations applicable to online gaming operators.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other purpose where consent is the appropriate basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

5.1 What Cookies ab66 Uses

The ab66 platform uses cookies and similar tracking technologies (local storage, session tokens, pixel tags) to operate the site correctly, remember your preferences, and analyse how players use the platform. The categories of cookies in use are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and last-visited game category to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the ab66 platform — pages visited, time spent, click paths — to help us identify and improve areas of poor usability. Used only with your consent.
• Responsible gaming cookies: Track session duration to power session-time alerts and cool-off reminders as part of ab66's responsible gaming obligations. These are treated as strictly necessary.

5.2 Managing Cookies

You can control non-essential cookies via your browser settings at any time. Most modern browsers allow you to block or delete cookies; please refer to your browser's help documentation for instructions. Note that disabling strictly necessary cookies will prevent the ab66 platform from functioning correctly and may prevent you from logging in.

6 Third-Party Data Sharing

ab66 does not sell or rent your personal data to any third party. We share data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive the transaction data necessary to process your deposit or withdrawal. These processors are bound by their own regulatory obligations and PCI-DSS standards.
• KYC and identity verification providers: Third-party KYC service providers process your identity documents on ab66's behalf under strict data processing agreements that limit their use of the data solely to the verification task.
• Game software providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier to deliver game sessions. They do not receive your name, address, or payment details.
• Fraud prevention and AML screening services: Specialised providers assist ab66 in detecting multi-account registrations, fraudulent transactions, and potential money laundering activity. Data shared is limited to what is necessary for each screening function.
• Legal and regulatory authorities: ab66 will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required by law, pursuant to a valid legal order, or where disclosure is necessary to prevent serious harm.
• Customer support platform providers: Our live chat and helpdesk software providers process support conversation data on ab66's behalf, subject to data processing agreements that prohibit independent use of that data.

7 International Data Transfers

ab66 primarily stores and processes player data on servers located in data centres with strong security certifications. In some cases, data may be accessed by support staff or processed by service providers located outside Bangladesh. Where such transfers occur, ab66 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this policy.

Safeguards used for international transfers include contractual clauses that impose data protection obligations on the recipient, and in some cases, transfers to jurisdictions recognised as providing adequate levels of data protection. If you would like further information about the specific safeguards governing a particular transfer, you may contact ab66 at [email protected].

8 Data Retention

ab66 retains personal data for only as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. The principal retention periods are:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following permanent account closure, to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction in compliance with applicable financial regulations.
• KYC verification documents: Retained for five years following account closure or the completion of the KYC process to which the documents relate.
• Customer support communications: Retained for three years from the date of the last interaction, to allow resolution of deferred disputes and to improve service quality.
• Marketing consent records: Retained for the duration of consent plus one year following withdrawal, as evidence that communications were lawfully sent.
• Technical and server logs: Retained for 90 days for security monitoring and fraud investigation purposes, then automatically purged.

When data is no longer required, ab66 securely deletes or anonymises it so that it can no longer be associated with you as an individual.

9 Security Measures

ab66 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key technical and organisational measures in place include:

• 256-bit TLS/SSL encryption for all data in transit between your device and the ab66 platform
• AES-256 encryption for personal and financial data stored at rest in ab66's databases
• Role-based access controls that restrict internal access to personal data to only those staff members with a documented operational need
• Comprehensive audit logging of all access to personal data records, reviewed on a regular basis
• Multi-factor authentication requirements for all ab66 staff accessing internal systems that contain player data
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals
• Incident response procedures to detect, contain, assess, and notify affected players and relevant authorities in the event of a personal data breach

While ab66 takes every reasonable precaution to protect your data, no internet-based transmission or storage system is completely immune to risk. You play an important role in keeping your account secure by choosing a strong, unique password and never sharing your login credentials with anyone.

10 Your Privacy Rights

As a player on the ab66 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact ab66 at [email protected] with the subject line "Privacy Rights Request" and a description of the specific right you wish to exercise.

• Right of access: You may request a copy of all personal data ab66 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your ab66 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ab66's legal retention obligations.
• Right to restriction: You may request that ab66 restrict the processing of your data while a rectification or objection request is under review.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to ab66, for the purpose of transferring it to another service provider.
• Right to object: You may object to processing carried out on the basis of ab66's legitimate interests. ab66 will cease such processing unless compelling grounds that override your interests can be demonstrated.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time via your account notification settings or by contacting support.

ab66 will respond to all verified privacy rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days; in such cases ab66 will notify you of the extension and the reason for it before the initial 30-day period expires.

11 Children & Minors

The ab66 platform is strictly intended for adults aged 21 and above. ab66 does not knowingly collect personal data from any individual under the age of 21. Registration by a minor is a breach of the ab66 Terms & Conditions and this Privacy Policy.

If ab66 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted from our systems immediately and the relevant account will be closed without notice. If you are a parent or guardian and believe that your child has registered an account on ab66, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12 Marketing Communications

ab66 will send you promotional emails, bonus alerts, and platform news only where you have explicitly opted in to receive such communications at the time of registration or via your account notification settings. Marketing communications will always be clearly identified as originating from ab66 and will include a clear, one-click unsubscribe mechanism.

Withdrawing marketing consent will not affect your ability to use the ab66 platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, account security alerts, and support responses), which are sent on the basis of contractual necessity rather than consent.

ab66 does not engage in SMS marketing without your explicit prior consent, and it does not share your contact details with third-party marketing agencies. All marketing communications are sent directly from ab66 infrastructure using your registered email address.

13 Amendments to This Policy

ab66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, ab66 will publish the updated policy on this page with a revised effective date and will notify registered players via email or in-platform notification before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the ab66 platform following the publication of a revised policy constitutes your acknowledgement of the updated terms. If you disagree with any change to this policy, you must stop using the platform and contact [email protected] to request account closure.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or would like to raise a concern about how ab66 handles your personal data, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: "Privacy Rights Request" or "Data Protection Concern"
• Live Chat: Available 24 hours a day, 7 days a week via the ab66 platform
• Response time: ab66 aims to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days (Bangladesh Standard Time, UTC+6)

ab66 takes all privacy concerns seriously. If you are not satisfied with the outcome of your complaint after ab66's internal review process, you retain the right to escalate the matter to the appropriate data protection authority or seek other legal remedies available under the laws of Bangladesh.