ab44 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

Introduction and Scope

ab44 operates an online betting and casino platform accessible at ab44.io, targeting adult players in Bangladesh who are 21 years of age or older. In the course of operating this platform, ab44 collects and processes personal data relating to registered players, prospective players, and visitors to the ab44.io website. This Policy applies to all such personal data, regardless of how it was collected or in what format it is held.

ab44 acts as the data controller in respect of personal data collected directly from players through the ab44.io platform. Where ab44 uses third-party service providers to process data on its behalf — for example, payment processors, identity verification providers, or game software suppliers — those providers act as data processors and are contractually required to process data only in accordance with ab44's instructions and applicable data protection standards.

This Policy does not apply to third-party websites, applications, or services that may be linked from the ab44 platform. ab44 does not control and is not responsible for the privacy practices of any third-party service to which links may appear on the platform. Players are encouraged to review the privacy policies of any third-party service they access.

Personal Data We Collect

ab44 collects the following categories of personal data in the course of operating the platform. The specific data collected from any individual player will depend on the nature of their interaction with the platform and the level of account verification they have completed.

2.1 Identity and Contact Data

• Full legal name as it appears on official identification documents
• Date of birth (used to verify that the player is 21 years of age or older)
• Residential address, including city, postal code, and country
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account communications and security alerts)
• Copies of government-issued identity documents submitted during KYC verification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)

2.2 Financial Data

• Mobile banking account identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals
• Bank account details where bank transfer payment methods are used
• Card details (card number masked to the last four digits, card type, expiry date) where Visa or Mastercard is used
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references
• Source of funds documentation submitted in connection with large or high-frequency transactions

2.3 Account and Activity Data

• Account username and encrypted password credentials
• Betting history, including sports markets wagered on, stake amounts, odds accepted, and settlement outcomes
• Casino game history, including games played, bet sizes, and session durations
• Bonus claims, wagering activity associated with bonuses, and promotional participation records
• Responsible gaming tool settings, including deposit limits, loss limits, session time limits, and self-exclusion status
• Player support correspondence, including live chat transcripts and email exchanges with the ab44 support team

2.4 Technical and Usage Data

• IP address at the time of each login and significant account action
• Device type, operating system, and browser version
• Session duration and page navigation patterns within the platform
• Geolocation data at a country or city level (derived from IP address)
• Cookie identifiers and similar tracking technology data (see Section 9 for full details)

How We Collect Personal Data

ab44 collects personal data through the following means:

3.1 Direct Collection

The majority of personal data held by ab44 is provided directly by the player. This occurs when a player completes the account registration form on ab44.io, submits identity verification documents, contacts the support team, participates in a promotion, or updates their account profile. Players are responsible for ensuring that all information provided to ab44 is accurate, complete, and kept up to date.

3.2 Automated Collection

When a player accesses ab44.io, certain technical data is collected automatically by ab44's platform infrastructure. This includes IP address, device identifiers, browser type, and session activity data. This data is collected using server logs, session tracking mechanisms, and first-party cookies. No third-party advertising cookies are used on the ab44 platform.

3.3 Third-Party Sources

ab44 may receive personal data from third-party sources in the following limited circumstances:

• Identity Verification Providers: Where ab44 uses a third-party KYC service to verify the authenticity of identity documents submitted by a player, that provider may return verification results and associated data to ab44.
• Payment Processors: Payment service providers such as bKash, Nagad, Rocket, and Upay may share transaction confirmation data and account holder identifiers with ab44 for the purpose of matching deposits and withdrawals to the correct player accounts.
• Fraud Prevention Services: ab44 may receive risk signals or fraud indicators from third-party fraud prevention tools that help protect the platform from fraudulent registrations and suspicious financial activity.

Purpose and Use of Personal Data

ab44 processes personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which each category of personal data is used.

ab44 does not use personal data for automated decision-making that produces significant legal effects without human oversight, except where required by law or expressly permitted by the player. Where automated risk-scoring tools are used in fraud prevention, a human review process is available upon request.

Legal Basis for Processing

ab44 processes personal data on the following legal bases, depending on the purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between ab44 and the player, including account management, payment processing, and delivery of betting and casino services. Without this processing, ab44 cannot provide the services described in the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, Know Your Customer requirements, and data retention obligations imposed by law.
• Legitimate Interests: Processing carried out for the legitimate interests of ab44 where those interests are not overridden by the rights and interests of the player. This includes fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Where ab44 relies on consent as the legal basis for processing — for example, in relation to sending promotional communications — that consent is freely given, specific, and may be withdrawn at any time by contacting the support team or updating account preferences.

Data Sharing and Third-Party Disclosure

ab44 does not sell, rent, or trade personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:

6.1 Service Providers (Data Processors)

ab44 engages trusted third-party service providers to assist with the operation of the platform. These providers act solely as data processors, processing personal data only on ab44's behalf and strictly in accordance with ab44's documented instructions. Categories of service providers used by ab44 include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways for processing deposits and withdrawals
• Identity verification providers: Third-party KYC technology services for document verification and liveness checks
• Game software suppliers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other providers whose game software is integrated into the ab44 platform (these providers receive only the minimum data necessary to deliver game sessions)
• Cloud infrastructure providers: Hosting and data storage services that maintain the ab44 platform infrastructure under strict data security agreements
• Customer support tools: Live chat and ticketing system providers used to deliver 24/7 player support
• Fraud detection services: Risk and compliance technology providers that help protect the platform from fraudulent activity

All third-party data processors engaged by ab44 are subject to a written data processing agreement that requires them to implement appropriate security measures, process data only as instructed, and not transfer data to any further party without prior authorisation from ab44.

6.2 Legal and Regulatory Disclosure

ab44 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where it is legally required to do so — for example, in response to a valid court order, statutory investigation, or regulatory inquiry. In such cases, ab44 will disclose only the minimum data required to comply with the legal obligation and will notify the affected player of the disclosure where it is legally permissible to do so.

6.3 Business Transfers

In the event that ab44 undergoes a restructuring, merger, acquisition, or sale of assets, personal data held by ab44 may form part of the transferred assets. In such circumstances, ab44 will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy, and affected players will be notified of the change in data controller prior to the transfer taking effect.

Data Retention Periods

ab44 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the player's account and for a period of five (5) years following account closure, in accordance with standard record-keeping obligations applicable to financial services platforms.
• KYC and identity documents: Retained for a minimum of five (5) years following the date of the last transaction conducted by the player, in line with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction.
• Support correspondence: Retained for three (3) years following the resolution of the relevant support case, unless the matter involves an ongoing dispute, legal claim, or regulatory inquiry, in which case records are retained until the matter is fully resolved.
• Technical and usage logs: Typically retained for twelve (12) months for security monitoring and fraud detection purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal of consent, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes.

Security Measures

ab44 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between a player's browser or app and the ab44 platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser's address bar when accessing ab44.io.
• Data encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted when stored in ab44's database infrastructure.
• Access controls: Access to personal data within ab44's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role. All internal access is logged and audited.
• Password security: Player passwords are stored using industry-standard one-way cryptographic hashing. ab44 staff cannot access or recover a player's password in plaintext; they can only reset it through a verified identity confirmation process.
• Two-factor authentication: ab44 offers two-factor authentication (2FA) for player accounts. Players are encouraged to enable 2FA to add an additional layer of security to their account login.
• Security monitoring: ab44 maintains continuous security monitoring of its platform infrastructure to detect and respond to potential threats, intrusion attempts, or anomalous activity.
• Incident response: ab44 maintains a documented data breach response procedure. In the event of a security incident that affects personal data, ab44 will take immediate containment measures, conduct a root-cause investigation, and notify affected players and relevant authorities as required by applicable law.

Cookies and Tracking Technologies

ab44 uses cookies and similar tracking technologies on the ab44.io platform. Cookies are small text files placed on your device by a website when you visit it. They serve a variety of functions, from keeping you logged into your account to remembering your preferences and helping us understand how the platform is used.

9.1 Types of Cookies Used by ab44

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings, game lobby view, and responsible gaming limit configurations — so that you do not have to re-enter them on each visit.
• Analytics Cookies: ab44 uses first-party analytics tools to understand how players interact with the platform — for example, which pages are visited most frequently, where players navigate to after viewing certain content, and how long sessions typically last. This data is used in aggregate, anonymised form to improve platform design and user experience. No third-party analytics networks are used.
• Security Cookies: These cookies support ab44's fraud detection and account security functions, helping to identify unusual login patterns or suspicious device changes.

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser's settings. Please note that disabling certain cookies may affect your ability to use some features of the ab44 platform, including account login persistence and game preference settings. Instructions for managing cookies in the most commonly used browsers are available via your browser's help documentation.

ab44 does not use third-party advertising cookies, behavioural profiling cookies, or cross-site tracking technologies. No personal data collected through cookies on ab44.io is shared with advertising networks or data brokers.

Your Privacy Rights

As a player on the ab44 platform, you hold the following rights in relation to your personal data. ab44 is committed to honouring these rights promptly and without undue delay. To exercise any of the rights listed below, please contact the ab44 support team via live chat or email.

• Right of Access: You have the right to request a copy of the personal data that ab44 holds about you, along with information about how it is being processed. ab44 will respond to access requests within thirty (30) days of receipt.
• Right to Rectification: If you believe that any personal data held by ab44 is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Players may update certain account details (such as email address and phone number) directly through their account settings panel.
• Right to Erasure: You may request that ab44 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to ab44's legal obligations to retain certain data for regulatory and compliance purposes; erasure requests that conflict with mandatory retention obligations will be partially fulfilled to the extent legally permissible.
• Right to Restriction: You may request that ab44 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity, and by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to the processing of your personal data where ab44 relies on legitimate interests as the legal basis. ab44 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw consent for marketing communications, contact our support team or update your notification preferences within your account settings.

Children's Privacy and Underage Player Protection

The ab44 platform is strictly intended for adults aged 21 years and above. ab44 does not knowingly collect personal data from any person under the age of 21. If ab44 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be reviewed and deleted to the extent permitted by applicable law, and any funds held in the account will be handled in accordance with ab44's underage account procedures.

Parents and guardians who believe that a minor may have registered an account on ab44.io are urged to contact the support team immediately at [email protected] so that the matter can be investigated and resolved without delay. ab44 cooperates fully with any inquiry from a parent, guardian, or relevant authority regarding the protection of minors.

Changes to This Privacy Policy

ab44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in the way we operate the platform, changes in applicable law or regulatory requirements, or changes in data processing practices following the introduction of new services or features.

When a material change is made to this Policy, ab44 will notify registered players via the email address associated with their account and will post the updated Policy on ab44.io with a revised effective date clearly indicated at the top of the document. Minor changes — such as typographical corrections or clarifications that do not affect the substance of the Policy — may be made without individual notification.

Your continued use of the ab44 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the platform and may request account closure in accordance with the procedure described in the Terms & Conditions.

Contact and Privacy Enquiries

If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way ab44 processes your personal data, please contact us using the details below. All privacy-related enquiries will be handled by ab44's designated data protection point of contact.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the ab44 platform
• WhatsApp: +880 1700 000000
• Response Time: Privacy enquiries submitted by email are responded to within four (4) business hours during Bangladesh Standard Time (BST, UTC+6) working hours. Formal data subject rights requests are responded to within thirty (30) days as set out in Section 10.

ab44 takes all privacy complaints seriously and will investigate each matter thoroughly. If you are not satisfied with ab44's response to a privacy complaint, you have the right to escalate the matter to ab44's compliance team by stating this clearly in your follow-up communication.