Privacy Policy —
How ab77 Protects Your Data

1 Introduction

This Privacy Policy applies to all users of the ab77 platform, accessible at https://ab77.asia. It explains how ab77 collects, uses, stores, and protects the personal data of players based in Bangladesh and elsewhere.

ab77 takes data privacy seriously. The platform is built on the principle that your personal information belongs to you — we hold it in trust, use it only for the purposes described in this policy, and protect it with industry-standard security measures.

By registering an account on ab77, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the ab77 Terms and Conditions, which govern your use of the platform overall.

If you have questions about how ab77 handles your data at any point, the fastest way to get an answer is to contact our support team directly at [email protected]. We respond to all privacy-related queries within 48 hours.

2Data We Collect

ab77 collects personal data in three ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party service providers such as payment processors and identity verification services.

Information you provide directly:

• Full legal name and date of birth
• Residential address and country of residence
• Email address and phone number
• Payment method details (bKash number, Nagad number, bank account details)
• Identity verification documents (national ID, passport, or driving licence)
• Any information you provide when contacting ab77 support

Information generated automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, login timestamps, and pages visited
• Game activity, bet history, and transaction records
• Cookie and tracking data (see Section 8)

Information from third parties:

• Identity verification results from our KYC (Know Your Customer) provider
• Transaction confirmation data from payment processors
• Fraud risk signals from our security monitoring partners

3 How We Use Your Data

ab77 uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

ab77 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. If an automated system flags your account for any reason, a member of the ab77 team will review the flag manually before any action is taken.

4 Legal Basis for Processing

ab77 processes your personal data on the following legal grounds, depending on the specific purpose:

• Contractual necessity: Processing required to fulfil the agreement between you and ab77 — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering regulations, identity verification requirements, and responsible gaming obligations.
• Legitimate interests: Processing necessary for ab77's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights.
• Consent: Processing based on your explicit consent — including promotional communications. You can withdraw consent at any time by contacting [email protected].

5 Data Sharing

ab77 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: bKash, Nagad, Rocket, and bank transfer partners receive the payment details necessary to process your transactions. They are bound by their own data protection obligations.
• Identity verification providers: Our KYC partner receives the identity documents you submit for verification. Documents are processed securely and not retained beyond the verification period.
• Game providers: Licensed game providers receive anonymised session data necessary to deliver game content. They do not receive your personal identity information.
• Security and fraud prevention partners: Our security monitoring partners receive technical data (IP address, device fingerprint) to identify and prevent fraudulent activity.
• Legal authorities: ab77 will disclose personal data to law enforcement or regulatory authorities when required to do so by applicable law or a valid legal order.

6 Data Retention

ab77 retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and our internal compliance obligations.

• Active accounts: Data is retained for the full duration of your account's active status.
• Closed accounts: Transaction records, identity verification documents, and account history are retained for a minimum of 5 years after account closure to comply with anti-money laundering regulations.
• Support communications: Records of support interactions are retained for 2 years after the last interaction.
• Marketing data: If you have consented to marketing communications, your contact details are retained until you withdraw consent or request deletion.
• Technical logs: Server logs and security monitoring data are retained for 90 days, after which they are automatically deleted.

When data is no longer required for any of the above purposes, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

7 Data Security

ab77 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and the ab77 platform is encrypted using 256-bit SSL/TLS.
• Encryption at rest: Sensitive data stored in ab77's databases — including payment details and identity documents — is encrypted at rest.
• Two-factor authentication: Account access is protected by two-factor authentication, which is strongly recommended for all players.
• Access controls: Access to player data within ab77's internal systems is restricted to staff who require it for their specific role. All internal access is logged and audited.
• 24/7 monitoring: ab77's infrastructure is monitored around the clock for security threats, unusual access patterns, and potential breaches.
• Regular security audits: ab77 conducts regular independent security audits and penetration tests to identify and address vulnerabilities.

8 Cookies and Tracking

ab77 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site so we can improve it.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling preference or analytics cookies will not affect your ability to use the core features of the ab77 platform, but some personalisation features may not work as expected.

ab77 does not use third-party advertising cookies or share tracking data with advertising networks. The analytics data collected is used solely to improve the ab77 platform experience.

9 Your Rights

As an ab77 player, you have the following rights over your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 5 business days.

• Right of access: You can request a copy of all personal data ab77 holds about you.
• Right to rectification: You can request that inaccurate or incomplete data be corrected. You can update most account information directly through your account settings.
• Right to erasure: You can request that your personal data be deleted. Note that some data must be retained for legal compliance purposes even after account closure (see Section 6).
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to restrict processing: You can request that ab77 restrict the processing of your data in certain circumstances — for example, while a dispute is being resolved.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time.
• Right to object: You can object to processing based on legitimate interests. ab77 will review the objection and cease processing unless there are compelling legitimate grounds that override your interests.

10 Children's Privacy

The ab77 platform is strictly for adults aged 18 and over. ab77 does not knowingly collect personal data from anyone under the age of 18. If you believe that a person under 18 has registered an account on ab77, please contact us immediately at [email protected].

Any account found to belong to a person under 18 will be immediately closed. All personal data associated with the account will be deleted, and any funds deposited will be returned to the originating payment method.

11 Changes to This Policy

ab77 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data practices. When material changes are made, registered players will be notified via email or an in-platform notification at least 7 days before the changes come into effect.

The effective date at the top of this document will always reflect the date of the most recent update. We encourage you to review this policy periodically so you are always aware of how ab77 handles your data.

Continued use of the ab77 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and close your account before the changes come into effect.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ab77 handles your personal data, please get in touch:

• Email: [email protected]
• Live Chat: Available 24/7 through your ab77 account dashboard
• Subject line for data requests: "Data Rights Request"

ab77 takes all privacy-related communications seriously. Our team will acknowledge your message within 24 hours and provide a full response within 5 business days for standard queries, or 30 days for complex data access or deletion requests.