Data & Privacy
Privacy Policy — ab678
Your privacy matters to us. This Privacy Policy explains exactly what personal data ab678 collects when you use our platform, how that data is used, who it may be shared with, and what rights you hold over your own information. We are committed to handling your data with transparency and care.
ab678 collects only the data that is genuinely necessary to operate the platform, verify player identity, process payments, and deliver a safe gaming experience. We do not collect unnecessary personal information.
All data transmitted between your device and the ab678 platform is protected using industry-standard 256-bit SSL encryption. Your personal details, payment information, and account credentials are never transmitted in plain text.
ab678 does not sell, rent, or trade your personal information to any third-party marketing organisation. Data shared with partners is limited strictly to what is required for service delivery, payment processing, or legal compliance.
We use cookies strictly to maintain your session, remember your preferences, and analyse platform performance. We do not deploy third-party advertising or tracking cookies that follow you across external websites.
You have the right to access, correct, or request deletion of your personal data at any time. ab678 will respond to all valid data subject requests promptly and in accordance with this Privacy Policy.
ab678 is strictly an 18+ platform. We never knowingly collect data from individuals under the age of 18. Any account found to belong to an underage player will be immediately closed and associated data handled in accordance with our retention policy.
Section 1
Information We Collect
When you register for and use the ab678 platform, we collect personal data in several ways: information you provide to us directly, information generated automatically through your use of the platform, and information received from trusted third-party partners such as payment processors. The categories of data we collect are described in full below.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID (NID) number, passport number, profile photo | Provided by you during registration or KYC verification |
| Contact Data | Mobile phone number (e.g., bKash-linked), email address, residential address in Bangladesh | Provided by you during registration or account updates |
| Financial Data | bKash/Nagad/Rocket account reference, bank account name (for bank transfer), USDT wallet address (TRC20/ERC20), deposit and withdrawal transaction records | Provided during deposit/withdrawal; received from payment processors |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone (BST, UTC+6) | Collected automatically when you access the platform |
| Usage Data | Pages visited, games played, bets placed, session duration, navigation path, search queries within the platform | Collected automatically via server logs and analytics tools |
| Communications Data | Support ticket content, live chat transcripts, email correspondence with the ab678 support team | Collected when you contact us for support |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, session reminder preferences, problem gambling self-assessment responses | Set by you via responsible gaming tools; recorded automatically |
ab678 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data (other than what you may voluntarily disclose in the context of responsible gaming), or biometric data. If any such data is inadvertently provided, it will be deleted promptly upon discovery. Identity documents submitted for KYC are used solely for age and identity verification and are stored in encrypted form.
Section 2
How We Use Your Data
ab678 uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below sets out each processing purpose together with the legal basis on which we rely.
- Account management — creating, maintaining, and securing your ab678 player account throughout its lifetime.
- Identity verification (KYC) — confirming you are who you say you are and that you meet the 18+ age requirement before enabling withdrawals.
- Payment processing — facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and USDT in Bangladeshi Taka.
- Platform delivery — presenting games, cricket betting markets, live casino tables, and arcade titles tailored to your preferences and device.
- Customer support — responding to your queries, resolving disputes, and improving service quality based on your feedback and support interactions.
- Responsible gaming — monitoring play patterns to identify potential problem gambling indicators and offering tools such as deposit limits and self-exclusion.
- Fraud prevention & security — detecting and investigating suspicious activity, including multi-account registration, bonus abuse, and money laundering attempts.
- Legal compliance — meeting obligations under applicable anti-money laundering (AML) requirements and responding to lawful requests from authorities.
- Platform analytics — analysing aggregated usage data to improve site performance, navigation, game selection, and the overall player experience.
- Personalised promotions — where you have consented, sending you relevant bonus offers, seasonal promotions (Eid, BPL, Pohela Boishakh), and platform news via your registered email or SMS.
- Dispute resolution — maintaining records of transactions and communications sufficient to investigate and resolve any disputes you raise with us.
ab678 will never use your personal data for purposes other than those described above without first obtaining your explicit consent or establishing an alternative lawful basis for the new processing activity.
Section 3
Data Sharing & Disclosure
ab678 does not sell, rent, or trade your personal data. We share data only with trusted parties where it is strictly necessary to deliver our services, comply with legal obligations, or protect the security and integrity of the platform. All third-party recipients of your data are bound by confidentiality obligations and are permitted to use your data only for the specific purpose for which it was shared.
To process deposits and withdrawals, we share the minimum necessary financial and identity data with bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). USDT transactions are processed via TRC20/ERC20 networks with wallet verification only.
Certified game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a session token and anonymous player identifier sufficient to run games. They do not receive your full name, payment details, or contact information.
Where required by law or in response to a lawful request from a competent authority — including in connection with anti-money laundering investigations — ab678 may disclose personal data to the relevant authority. We will notify you of such disclosure wherever legally permissible.
- Sell your personal data to advertisers, data brokers, or any third-party marketing organisation.
- Share your full identity documents with game providers or any party not directly involved in KYC verification.
- Transfer your personal data to countries without adequate data protection standards without implementing appropriate safeguards.
- Use your personal data for profiling or automated decision-making that produces legal or similarly significant effects without your consent.
Section 5
Data Retention
ab678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymised in a manner that prevents re-identification.
- Active account data — retained for the full duration of your account's active life on ab678, plus a post-closure period as required for legal and dispute-resolution purposes.
- Transaction records — all deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction, in line with standard AML record-keeping obligations.
- KYC and identity documents — retained for a minimum of 5 years from the date of account closure or the date the document was submitted, whichever is later.
- Support communications — email and chat transcripts are retained for 3 years from the date of the interaction to support dispute resolution and quality assurance.
- Technical and log data — server logs and IP address records are retained for 12 months, after which they are automatically purged or anonymised.
- Self-exclusion records — records of self-exclusion requests are retained for the duration of the exclusion period and for 5 years following its expiry to prevent accidental re-registration during a restricted period.
- Fraud and security investigation records — where an account is closed due to confirmed fraud or a breach of our Terms & Conditions, associated investigation records may be retained for up to 7 years.
Section 6
Data Security
ab678 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. While no digital platform can guarantee absolute security, we apply best-practice standards throughout our infrastructure and operational procedures.
- 256-bit SSL/TLS encryption on all data in transit between your browser or mobile device and our servers.
- AES-256 encryption at rest for all sensitive stored data, including identity documents, payment references, and account credentials.
- Two-factor authentication (2FA) via SMS OTP, available and encouraged for all registered ab678 accounts.
- Firewalls and intrusion detection systems monitoring the platform perimeter continuously for anomalous traffic and access patterns.
- Regular penetration testing and vulnerability assessments conducted to identify and address weaknesses before they can be exploited.
- Segregated database access — no single team member has unrestricted access to all categories of player data. Access is granted on a strict need-to-know basis.
- All ab678 staff who handle personal data receive regular data security and privacy training.
- Third- party suppliers with access to personal data are subject to written data processing agreements that mandate appropriate security standards.
- Internal access to player data is logged and audited on a regular basis to detect any unauthorised or inappropriate access.
- A documented data breach response procedure is in place, including notification protocols for affected players where required.
You also play a role in keeping your account secure. Use a strong, unique password for your ab678 account. Never share your login credentials with anyone. If you suspect unauthorised access to your account, contact our support team at [email protected] immediately so we can investigate and take protective action.
Section 7
Your Privacy Rights
As a player on the ab678 platform, you have a number of rights in relation to the personal data we hold about you. ab678 is committed to upholding these rights and will respond to all valid requests in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request" and include sufficient information for us to verify your identity before processing the request.
You have the right to request a copy of the personal data ab678 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe following identity verification.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update basic account details directly through your account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected. Note that data subject to legal retention obligations (e.g., transaction records, KYC documents) cannot be deleted before the mandatory retention period expires.
You have the right to request that we restrict our processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending a legitimate interest assessment.
Where we process your data on the basis of your consent or to perform a contract with you, you have the right to receive that data in a portable, machine-readable format so you can transfer it to another service provider if you choose.
You have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis. You may also withdraw consent for marketing communications at any time by contacting [email protected].
ab678 will acknowledge all privacy rights requests within 3 business days of receipt and will provide a full response within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension and the reason for it. All requests are processed free of charge unless they are manifestly unfounded or excessive.
Section 8
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how ab678 has handled your personal data, we encourage you to contact us directly in the first instance. We take all privacy concerns seriously and will work to resolve them promptly and fairly.
For all privacy-related enquiries — including data access requests, rectification requests, deletion requests, and general questions about this policy — please write to us at:
Email: [email protected]
Subject line: Privacy Rights Request
Please include your registered username or account email address so we can locate your account and verify your identity before processing your request. We will acknowledge your request within 3 business days (Bangladesh Standard Time, UTC+6).
If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter. ab678 takes formal complaints seriously and will investigate each one thoroughly.
Please submit formal complaints in writing to [email protected] with the subject line "Formal Privacy Complaint". Include a clear description of your concern, the steps already taken, and your expected outcome. We will provide a full written response within 10 business days of receiving your complete complaint submission.
We are committed to resolving all privacy disputes amicably and transparently, and to treating every player's concerns with the respect they deserve.
ab678 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via their registered email address. The effective date at the top of this page will always reflect when the current version came into force. We encourage you to review this page periodically. Continued use of the ab678 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.
Explore ab678
Your Data Is Safe — Now Let's Play
Now that you understand how ab678 protects your privacy, explore everything our platform has to offer — from live cricket betting and slots to arcade games and a world-class live casino, all in BDT.