abu88 Privacy Policy

1 Data We Collect

abu88 collects personal data from players in several contexts — during account registration, throughout the course of normal platform use, and during identity verification. The categories of data we collect are described below.

Registration Data

When you create an abu88 account, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile phone number, and your selected account currency (BDT or INR). This information is required to establish and maintain your player account and cannot be omitted at registration.

Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to confirm that all players meet the 18+ age requirement, abu88 requires identity verification documents at the point of withdrawal or where our compliance team flags an account for review. KYC documents may include a copy of your National Identity Card (NID), passport, driving licence, or other government-issued photo identification, together with proof of address (utility bill, bank statement) dated within three months. These documents are stored in an encrypted document vault and are accessible only to authorised compliance personnel.

Financial Data

When you make a deposit or request a withdrawal, we record the payment method used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction amount, the date and time, and the unique transaction reference generated by the payment processor. abu88 does not store full card numbers or mobile wallet PINs — these are handled directly by the respective payment processors under their own security standards.

Behavioural & Usage Data

As you navigate the abu88 platform, we automatically collect technical and behavioural data including your IP address, device type and operating system, browser type and version, session duration, pages and game categories visited, bets placed and their outcomes, and interaction logs with customer support. This data is used to improve platform performance, detect fraudulent behaviour, and personalise your experience where you have not opted out of personalisation.

Communication Data

If you contact abu88 via live chat or email, we retain a record of those communications — including the content of messages, timestamps, and any attachments — for the duration required by our support quality assurance and compliance processes.

Data Category	Examples	Collection Point
Registration Data	Name, email, phone, date of birth	Account sign-up
KYC Documents	NID, passport, proof of address	Verification request
Financial Data	Payment method, transaction amount, reference	Deposits & withdrawals
Behavioural Data	IP address, device info, session logs	Ongoing platform use
Communication Data	Live chat transcripts, support emails	Customer support interactions

2 How We Use Your Data

abu88 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

Account Management

Your registration data is used to create, maintain, and authenticate your player account. This includes verifying your identity at login, resetting your password via SMS OTP, and sending account-related notifications such as deposit confirmations and withdrawal approvals.

Payment Processing

Financial data is used to process your deposit and withdrawal transactions via the payment method you selected. Transaction records are also maintained for our internal accounting, fraud detection, and AML compliance obligations.

Platform Personalisation

Behavioural and usage data allows abu88 to surface relevant game recommendations, highlight promotions that match your betting history, and display cricket markets or slot categories that align with your platform activity. You may opt out of personalisation at any time through your account settings without affecting your ability to use the platform.

Fraud Prevention & Security

IP addresses, device fingerprints, and session logs are analysed by our automated security systems and compliance team to detect and prevent fraudulent activity, duplicate accounts, underage gambling, money laundering, and unauthorised account access.

Responsible Gaming

abu88 uses your betting history and account activity data to monitor for indicators of problem gambling behaviour, including unusual betting patterns, rapid escalation of stake sizes, and frequent reversal of withdrawal requests. Where such patterns are identified, our responsible gaming team may reach out proactively. You can learn more about these tools on our Responsible Gaming page.

Legal Compliance

In certain circumstances, we are required to process and disclose personal data in order to comply with applicable law. This includes cooperating with lawful requests from regulatory authorities, law enforcement agencies, and financial intelligence units where such requests are supported by legal process. abu88 will not disclose personal data in response to informal or unlawful requests.

Marketing Communications

With your consent, abu88 may send you promotional emails or SMS messages regarding bonuses, seasonal offers (such as Eid promotions, BPL season offers, and T20 World Cup specials), and new game launches. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect our ability to send transactional or account-related messages, which are sent regardless of marketing preference.

3 Data Sharing & Third Parties

abu88 does not sell or rent your personal data to third parties. However, in the course of operating the platform, we share data with a defined set of trusted service partners under strict contractual confidentiality obligations.

Payment Processors

To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, Visa, or Mastercard. These providers are independently certified to their own security standards and process payment data under their own privacy policies. abu88 is not responsible for the data practices of payment processors once data has been transmitted to them for the purpose of completing a transaction.

Game Providers

abu88 hosts games supplied by third-party studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and Spribe. These providers may receive a session token and anonymised player identifier to facilitate your game session. No personally identifiable information such as your name, email, or phone number is passed to game studios as part of routine game session data.

Identity Verification Partners

Where automated KYC checks are employed, your identity documents may be processed by a third-party verification service. Such partners are contractually bound to process identity documents solely for the purpose of verification and to delete them within a defined period after the verification decision is made.

Legal & Regulatory Disclosure

abu88 may disclose personal data where required to do so by applicable law, court order, or lawful direction from a competent regulatory or law enforcement authority. In such cases, we will disclose the minimum data required to satisfy the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

4 Cookies & Tracking

abu88 uses cookies and similar tracking technologies on its platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to remember information about your visit — such as your login session, preferred language, or display settings — so that the site functions correctly and your experience is consistent across pages.

Categories of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Session authentication, security tokens, CSRF protection	Session / up to 24 hours
Functional	Currency preference (BDT/INR), game lobby layout, notification settings	Up to 12 months
Analytics	Anonymised page-view counts, feature usage metrics, load time monitoring	Up to 13 months

What We Do Not Use

abu88 does not use advertising cookies, retargeting pixels, or social media tracking scripts. We do not embed Facebook Pixel, Google Ads tags, or any equivalent third-party advertising tracker on the abu88 platform. Our analytics cookies are configured to anonymise IP addresses so that no individual player is personally identifiable from analytics data alone.

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the platform to function securely. Functional and analytics cookies can be disabled through your browser settings. Please note that disabling functional cookies may affect your platform experience — for example, your currency preference may not be saved between sessions. Consult your browser's help documentation for instructions on managing cookies specific to your browser and device.

5 Data Retention

abu88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law and regulatory obligation.

Active Accounts

While your abu88 account is active, we retain all registration, financial, and behavioural data associated with your account. This data is necessary to provide you with uninterrupted access to the platform, process transactions, and fulfil our responsible gaming monitoring obligations.

Closed or Terminated Accounts

Following the closure of an account — whether voluntary or as a result of a policy breach — abu88 retains core account data (name, email, transaction records, KYC documents) for a minimum of five (5) years from the date of closure. This retention period reflects financial record-keeping obligations and the standard period for potential legal claims.

Dormant Accounts

Accounts that have been inactive for a continuous period of 12 months are classified as dormant. Dormant account data is retained in full for the purpose of account reactivation and continued compliance obligations. You will be notified by email before any dormancy-related administrative action is taken.

Support Communications

Live chat transcripts and support email threads are retained for a period of two (2) years from the date of the last message in the thread, after which they are purged from our support systems unless they relate to an unresolved compliance matter or pending legal proceeding.

6 Data Security

abu88 employs a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include both technical controls and operational procedures.

Technical Safeguards

• SSL/TLS Encryption: All data in transit between your browser or app and abu88 servers is encrypted using TLS 1.2 or higher.
• Data at Rest Encryption: Sensitive data fields — including identity documents and financial records — are encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable SMS OTP two-factor authentication on their accounts. 2FA is available from your account security settings.
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection monitoring. Anomalous access patterns trigger immediate alerts to our security operations team.
• Access Controls: Access to personal data within abu88's internal systems is restricted on a strict need-to-know basis. Staff roles are assigned the minimum permissions necessary to perform their job functions, and access logs are maintained and reviewed regularly.

Operational Procedures

All abu88 personnel who handle personal data are trained on data protection obligations. Third-party service partners who process data on abu88's behalf are required to maintain security standards at least equivalent to our own, as specified in their data processing agreements.

Breach Response

In the event of a data security breach that poses a material risk to your personal data, abu88 will notify affected players by email within 72 hours of becoming aware of the breach, describing the nature of the incident, the data affected, the steps abu88 has taken to contain it, and the recommended actions for affected players.

7 Your Privacy Rights

As a player on the abu88 platform, you hold the following rights with respect to your personal data. abu88 is committed to honouring these rights in a timely and transparent manner.

Right of Access

You have the right to request a copy of the personal data that abu88 holds about you. This includes your registration information, transaction history, KYC records, and support communication logs. Access requests can be submitted by contacting our support team. We will respond within 30 days of receiving a verified request.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as email address or phone number updates, you can make changes directly through your account settings. For corrections to KYC-verified data such as your legal name or date of birth, please contact our support team, as these changes require re-verification.

Right to Erasure

You may request the deletion of your personal data. However, this right is subject to our legal retention obligations — in particular, we are required to retain financial transaction records and KYC documents for a minimum of five years following account closure. Where erasure is possible, we will action it promptly. Where it is not possible due to a legal obligation, we will inform you of the specific reason and the applicable retention period.

Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that we restrict the processing of your personal data to storage only. During such a restriction, we will not use your data for any other purpose without your consent.

Right to Object to Marketing

You have the right to object to the use of your personal data for direct marketing purposes at any time. You can withdraw marketing consent through your account communication preferences or by contacting support. Objection to marketing does not affect the delivery of transactional or account-related communications.

How to Exercise Your Rights

To exercise any of the rights described above, contact the abu88 data team via live chat or by email at [email protected]. For account security purposes, all data rights requests require identity verification before they are actioned. We aim to respond to all verified requests within 30 calendar days.

8 Policy Updates & Contact

Updates to This Policy

abu88 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or the operational needs of the platform. When material changes are made, we will post a prominent notice on the abu88 platform and send an email notification to the address registered to your account at least seven (7) days before the changes take effect. Your continued use of abu88 after the effective date of any update constitutes your acknowledgement of the revised policy.

Governing Language

This Privacy Policy is written in English. In the event of any conflict between a translated version and the English text, the English version shall prevail.

Contact the abu88 Data Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or abu88's data handling practices, our support team is available 24 hours a day, seven days a week. You may reach us via live chat on the platform or by email. Contact details: [email protected]. We take all privacy-related enquiries seriously and will respond within 24 hours during normal operating periods.