Privacy Policy — How abt99 Collects, Uses, and Protects Your Personal Data

1. Information We Collect

abt99 collects personal information from you in several ways: directly when you register and use the platform, automatically through your device and browser as you navigate the site, and in some cases from third-party identity verification or payment processing partners. The categories of personal data we collect are set out below.

1.1 Information You Provide Directly

When you register an account, make a deposit, submit a support request, or otherwise interact with the abt99 platform, you may provide the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and national identity card (NID) number or passport number where required for KYC verification.
• Contact data: Mobile phone number, email address, and city or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Financial data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), transaction reference numbers, and deposit or withdrawal amounts in Bangladeshi Taka (BDT).
• Account credentials: Username and encrypted password. abt99 does not store your password in plain text — it is hashed using a one-way cryptographic algorithm.
• Communications data: The content of messages you send to the abt99 support team via live chat, email, or any other support channel.
• Verification documents: Copies of government-issued identity documents submitted as part of the KYC or age verification process.

1.2 Information Collected Automatically

When you access the abt99 platform through a web browser or mobile device, certain technical data is collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, features accessed, games played, bet history, session duration, click paths, and time stamps of activity on the platform.
• Location data: General geographic location derived from your IP address (typically at city or district level). abt99 does not collect precise GPS location data.
• Cookie and tracking data: Data collected through cookies, pixel tags, and similar technologies as described in Section 4 of this Policy.

1.3 Information from Third Parties

abt99 may receive personal data about you from the following categories of third-party sources:

• Payment processors: Mobile financial service providers such as bKash, Nagad, Rocket, and Upay may transmit transaction confirmation data to abt99 in order to credit deposits and verify withdrawal completion.
• Identity verification providers: Third-party KYC service providers used to verify the authenticity of identity documents and confirm player age and identity.
• Fraud prevention services: Specialist services that provide risk scores, device fingerprinting data, and fraud signals to help abt99 identify and prevent account misuse.

2. How We Use Your Data

abt99 uses the personal data we collect for the following specific and lawful purposes. We process your data only where we have a legitimate basis to do so — which may be the performance of our contract with you, compliance with a legal obligation, your consent, or our legitimate interests where these do not override your fundamental privacy rights.

Purpose	Data Used	Legal Basis
Account registration and management	Identity data, contact data, account credentials	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
Age and identity verification (KYC)	Identity data, verification documents	Legal obligation
Fraud prevention and anti-money-laundering	Financial data, device data, usage data	Legal obligation / Legitimate interests
Customer support and dispute resolution	Identity data, communications data, transaction history	Contract performance
Platform security and abuse prevention	Device data, usage data, IP address	Legitimate interests
Responsible gaming monitoring	Usage data, bet history, deposit/withdrawal patterns	Legal obligation / Legitimate interests
Service improvement and analytics	Usage data, cookie data (anonymised/aggregated)	Legitimate interests
Promotional communications (where consented)	Contact data, usage data	Consent

abt99 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human oversight. Where automated processes are used — for example, in initial fraud screening — a member of the abt99 compliance team will review any outcome that results in account restriction before that restriction is confirmed.

3. Data Sharing & Disclosure

abt99 does not sell your personal data to third parties. We may share your personal information with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

3.1 Service Providers

We engage carefully selected third-party service providers to assist in operating the abt99 platform. These providers act as data processors on our behalf and are contractually bound to process your data only according to our instructions and to implement appropriate security measures. Categories of service providers include:

• Payment processing and mobile financial service gateways (bKash, Nagad, Rocket, Upay integrations);
• KYC and identity verification technology providers;
• Cloud hosting and infrastructure providers;
• Fraud detection and risk management services;
• Customer support platform providers;
• Casino game content providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming).

3.2 Legal and Regulatory Disclosure

abt99 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are required to do so by applicable law, regulation, or court order, or where disclosure is necessary to protect the rights, property, or safety of abt99, our players, or others.

3.3 Business Transfers

In the event that abt99 undergoes a merger, acquisition, asset sale, or other corporate restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy via the platform and by email where an address is registered on your account.

4. Cookies & Tracking Technologies

The abt99 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies are widely used across the internet and are not inherently harmful.

4.1 Categories of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the abt99 platform to function. They enable core features such as secure login session management, account authentication, and fraud prevention checks. You cannot opt out of strictly necessary cookies without disabling core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language settings and display options — so that you do not need to reset them each time you visit the platform.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the abt99 platform so that we can improve performance, layout, and features. Analytics data is aggregated and does not identify individual users.
• Security cookies: These cookies help us detect and prevent fraudulent activity, including identifying unusual login patterns or multiple account creation attempts from the same device.

4.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive a warning before accepting cookies. Please note that blocking strictly necessary cookies will impair the functionality of the abt99 platform and may prevent you from logging in or accessing your account. Instructions for managing cookies are available in the help documentation for your browser (Chrome, Firefox, Safari, Edge, etc.).

5. Data Retention

abt99 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping standards applicable to payment service environments.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the date of the most recent verification check, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication forms part of a dispute or investigation that requires longer retention.
• Marketing consent records: Retained for the duration of your consent plus three (3) years thereafter, to demonstrate compliance with consent-based marketing practices.
• Technical and usage logs: Retained for up to twelve (12) months for operational and security purposes, after which they are deleted or anonymised.

Where your data is no longer required under any retention obligation, abt99 will securely delete it or irreversibly anonymise it so that it can no longer be linked to you as an individual.

6. Data Security Measures

abt99 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption: All data transmitted between your browser or device and the abt99 platform is encrypted using TLS 1.2 or higher. The presence of HTTPS in the browser address bar confirms that your connection is encrypted.
• Encrypted data storage: Sensitive data fields — including financial account references and identity document data — are encrypted at rest using AES-256 or equivalent encryption standards.
• Password hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with salting, meaning that abt99 staff cannot read your password even with direct database access.
• Access controls: Internal access to production systems and personal data is restricted to authorised abt99 personnel on a strict need-to-know basis. All internal access is logged and subject to periodic audit.
• Security monitoring: The abt99 platform is monitored continuously for unusual access patterns, intrusion attempts, and other indicators of compromise. Security incidents are investigated and resolved promptly.
• Vendor security assessments: Third-party service providers with access to personal data are subject to security assessments and contractual security obligations before being granted access to abt99 systems.

7. Your Privacy Rights

As a user of the abt99 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the abt99 support team via 24/7 live chat on the platform or by emailing [email protected]. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that abt99 holds about you, along with information about how that data is processed and shared.
• Right to rectification: If any personal data held by abt99 about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that abt99 delete your personal data. We will comply with such requests where there is no overriding legal obligation requiring us to retain the data (such as anti-money-laundering record-keeping requirements). Where deletion is not possible, we will explain why and advise on the applicable retention period.
• Right to restrict processing: In certain circumstances — for example, where you have contested the accuracy of your data — you may request that we temporarily restrict further processing of your personal data while the matter is resolved.
• Right to data portability: Where technically feasible and where processing is based on your consent or on the performance of a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where abt99 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.
• Right to object: You may object to the processing of your personal data where abt99 relies on legitimate interests as the legal basis for processing, including profiling for responsible gaming monitoring purposes. We will review your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way abt99 handles your personal data, please contact the abt99 data privacy team through any of the following channels:

• Live chat: 24/7 live chat is available on every page of the abt99 platform. This is the fastest way to raise a privacy concern and receive a real-time response.
• Email: [email protected] — email responses are provided within 2 to 6 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

If you believe that abt99 has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a formal complaint. Please submit your complaint in writing to [email protected] with the subject line "Privacy Complaint". We will acknowledge receipt of your complaint within 48 hours and aim to provide a full written response within 14 calendar days.

This Privacy Policy is written and published in English. In the event of any dispute regarding interpretation, the English-language version published at abt99.app/privacy-policy shall be the definitive and authoritative version.