abd67 Privacy Policy

abd67 is the data controller responsible for your personal information collected through the abd67.pro platform. If you have any questions, concerns or requests relating to this Privacy Policy or the personal data we hold about you, please contact our Data Privacy team by email at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

Our platform is operated in English and is designed to serve players located in Bangladesh. All personal data handling practices described in this policy apply regardless of the device or connection method used to access the Platform.

abd67 collects personal data through three primary channels: information you provide directly during registration and use of the Platform; information collected automatically through your use of the Platform; and information received from third-party service providers. The categories of personal data we collect include:

• Identity data: Full name, date of birth, gender, nationality and government-issued identification document details (National ID, passport, or driving licence number) collected during account registration and KYC verification.
• Contact data: Email address, mobile phone number and residential address in Bangladesh (city, district, postal code). These are required for account verification and customer support communications.
• Financial data: Transaction history including deposit and withdrawal amounts, payment method identifiers (such as your bKash or Nagad registered mobile number, masked for security), and account balance records. We do not store full card numbers — Visa and Mastercard payments are tokenised by our payment processor.
• Technical data: IP address, device type and model, operating system version, browser type, session timestamps, login history, and approximate geolocation derived from IP. This data is collected automatically via server logs and analytics tools.
• Gaming data: Gameplay records including bets placed, games played, wins and losses, session durations, bonus usage history and responsible gaming tool activations. This data is used for fraud detection, account management and responsible gaming compliance.

abd67 processes your personal data only for specific, legitimate purposes. We will never use your data for any purpose incompatible with the purpose for which it was originally collected without obtaining your prior consent. The primary purposes for which we use your personal data are:

• Account creation, management and identity verification (KYC) to comply with responsible gaming and security obligations
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and maintaining accurate financial records
• Providing customer support, resolving disputes and responding to enquiries submitted via email or live chat
• Detecting and preventing fraud, money laundering, multi-accounting and other prohibited activities that could harm players or the integrity of the Platform
• Sending promotional communications, bonus offers and Platform updates — but only where you have opted in or where legitimate interest applies and you have not opted out

abd67 does not use personal data for automated decision-making that produces significant legal effects on players, such as permanent account closure, without human review.

abd67 does not sell, rent or share your personal data with unaffiliated third parties for their own commercial purposes. We may share your personal data with the following categories of third-party service providers strictly as necessary to operate the Platform and deliver services to you:

• Payment processors: bKash, Nagad, Rocket, Upay and international card processors receive only the transaction data required to process your deposit or withdrawal. They are contractually bound by strict data security obligations.
• Identity verification providers: Third-party KYC and document verification services receive your identity document images and personal details solely to complete your account verification. These providers are required to delete your data once verification is complete.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe and others receive only the anonymised session token and wager data necessary to deliver their game content. They do not receive your identity or contact details.
• Fraud prevention services: Technical data (IP address, device fingerprint, login patterns) may be shared with specialised fraud prevention partners to identify suspicious activity. This is a legitimate interest processing purpose to protect players and the Platform.

abd67 uses cookies and similar tracking technologies to operate the Platform, improve your experience and understand how players engage with our content. We use the following categories of cookies:

• Essential cookies — required for the Platform to function correctly (session management, login state, security tokens). These cannot be disabled without breaking Platform functionality.
• Analytical cookies — used to measure how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is aggregated and anonymised before analysis.
• Preference cookies — store your Platform preferences such as language selection and display settings so they persist across sessions. These are optional and may be cleared via your browser settings.

As an abd67 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your registered email address and a description of your request:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request at no charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Most contact and profile details can be updated directly within your account settings.
• Right to erasure: You may request that we delete your personal data. We will action this request where no legal obligation requires us to retain the data (for example, financial transaction records may be retained for up to 7 years for anti-money-laundering compliance purposes).
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. Once you object, we will stop using your data for that purpose immediately.
• Right to data portability: Where technically feasible, you may request a machine-readable export of the personal data you provided to abd67 (such as account profile and transaction history) to transfer to another service.

abd67 takes the security of your personal data seriously and has implemented a range of technical and organisational safeguards proportionate to the sensitivity of the data we hold. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or mobile app and our servers
• Encrypted storage of sensitive data fields (passwords are hashed using a one-way cryptographic function and are never stored in plain text)
• Access controls ensuring that personal data can only be accessed by abd67 personnel with a documented need and appropriate authorisation level
• Regular security reviews, penetration testing and vulnerability assessments of our Platform infrastructure

Despite these measures, no online platform can guarantee absolute security against all possible cyber threats. In the event of a data breach that is likely to result in risk to your rights, abd67 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact.

abd67 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows: active account data is retained for the lifetime of the account; financial transaction records are retained for a minimum of 7 years following the transaction date for compliance purposes; KYC verification documents are retained for a minimum of 5 years following account closure; technical logs and session data are retained for 12 months; marketing preference records are retained for 3 years from the date of consent or last interaction.

When personal data is no longer required and no legal obligation requires its retention, abd67 will securely delete or anonymise it so that it can no longer be linked to any identifiable individual.

The abd67 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to abd67, please contact us immediately at [email protected]. We will investigate and take prompt action to close the account and delete all associated personal data.

• Age verification: All players must confirm they are aged 21 or above during registration. Where there is doubt about a player's age, abd67 will request documentary evidence before permitting continued play or any withdrawals.
• Zero tolerance: Any account found to belong to a player under 21 will be closed immediately. All real-money winnings generated during underage play will be forfeited and returned to the Platform.
• Parental controls: We encourage parents and guardians to use device-level parental control software to prevent minors from accessing online gambling platforms. If you need guidance, please contact our support team.

abd67 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or Platform functionality. When we make material changes, we will notify registered players via email and by displaying a prominent notice on the Platform for at least 14 days before the changes take effect. The updated Privacy Policy will be published on this page with a revised "Last updated" date.

Your continued use of the Platform after the effective date of any change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the changes, you must stop using the Platform and may request account closure as described in our Terms and Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights described in Section 6, please contact abd67 via the following channel. We take all privacy enquiries seriously and will respond promptly:

• Email: [email protected] — for all data rights requests, privacy concerns and policy queries
• Response time: within 5 business days for standard queries; within 30 days for formal data rights requests
• Live chat: available 24/7 through the abd67 Platform for urgent account-related privacy matters
• When submitting a data rights request, please include your full registered name, registered email address and a clear description of your request so we can process it efficiently

abd67 will not charge a fee for responding to data rights requests in the majority of circumstances. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, stating our reasons in writing.

abd67 may store or process your personal data on servers located outside of Bangladesh, including in jurisdictions where data protection laws may differ from those applicable in Bangladesh. In all cases, we take contractual and technical measures to ensure that personal data transferred internationally receives a level of protection equivalent to the standards described in this Privacy Policy. If you have questions about the specific safeguards in place for international transfers, please contact us at [email protected].

This Privacy Policy is governed by and construed in accordance with applicable law. Any disputes arising from this Privacy Policy shall be subject to the dispute resolution process set out in the abd67 Terms and Conditions. By using the Platform, you acknowledge that it is your responsibility to ensure that accessing abd67 and providing your personal data complies with the laws applicable in your location.

If any provision of this Privacy Policy is found to be unenforceable under applicable law, the remaining provisions shall continue in full force and effect. abd67's failure to enforce any right or provision of this Privacy Policy shall not constitute a waiver of that right or provision.