abc67 Privacy Policy — How We Protect Your Personal Data

1. About This Policy and Data Controller

1.1 This Privacy Policy describes the practices of abc67 (referred to in this document as "abc67", "we", "us", or "our") with respect to the collection, processing, storage, and disclosure of personal data relating to individuals who access or use the abc67 platform at abc67.io ("Platform").

1.2 abc67 acts as the data controller in respect of all personal data collected directly from players during registration, identity verification, payment processing, and platform usage. As data controller, abc67 determines the purposes and means by which personal data is processed.

1.3 This Privacy Policy applies to all players based in Bangladesh who use the abc67 Platform, regardless of the device or browser through which the Platform is accessed. It applies equally to desktop users, mobile browser users, and users accessing abc67 via any promoted application.

1.4 This Privacy Policy should be read together with the abc67 Terms & Conditions (available at abc67.io/terms-conditions). Where any inconsistency exists between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall prevail.

1.5 If you are aged under 21, you are not permitted to use the abc67 Platform and you must not submit any personal data to abc67. abc67 operates a strict 21+ policy and will delete any personal data it identifies as having been submitted by a person under the age of 21.

2. Personal Data We Collect

2.1 abc67 collects personal data in the following categories:

2.2 abc67 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, unless such data is voluntarily and explicitly provided by the player in a support context and is strictly necessary to address the player's query.

2.3 abc67 does not collect data from social media profiles, publicly available databases, or third-party data brokers. All personal data collected by abc67 is provided directly by the player or generated through the player's use of the Platform.

3. How We Use Your Personal Data

3.1 abc67 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, maintain your profile, verify your identity, and manage your wallet balance on the abc67 platform.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain an accurate record of all financial transactions on your account.
• Identity and age verification: To confirm that you meet the abc67 eligibility requirements, including the 21+ age requirement, and to comply with Know Your Customer (KYC) obligations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor betting patterns that may indicate a problem gambling risk and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) where appropriate or as requested by the player.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyse aggregate usage data and improve the performance, features, and user experience of the abc67 platform.
• Marketing communications: To send you information about abc67 promotions, bonuses, and events, subject to your having opted in to receive such communications. You may withdraw this consent at any time.
• Legal compliance: To comply with applicable legal, regulatory, and reporting obligations, including anti-money laundering record-keeping requirements.

3.2 abc67 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review. Where automated tools are used for initial fraud scoring or responsible gaming monitoring, any material action taken against a player's account is subject to manual review by abc67's compliance team.

4. Legal Basis for Processing

4.1 abc67 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the abc67 services you have contracted for, including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, fraud prevention obligations, and applicable financial record-keeping requirements.
• Legitimate interests: Processing carried out for the legitimate business interests of abc67, including fraud detection, platform security, and aggregate analytics, where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and any non-essential cookie use, where you have given explicit, freely withdrawn consent. You may withdraw consent at any time without detriment to your ability to use the Platform.

5. Sharing Your Personal Data

5.1 abc67 does not sell, rent, or trade your personal data. Your data is shared only with the categories of third parties described below, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, as applicable, receive financial data necessary to process your deposit and withdrawal requests.
• Identity verification providers: Third-party KYC service providers receive identity and document data to carry out age and identity verification checks on behalf of abc67.
• Fraud prevention services: Specialist fraud and risk analytics providers may receive technical data (IP address, device fingerprint, behavioural signals) to assist in the detection and prevention of fraudulent activity.
• Game content providers: Game suppliers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Spribe, and Microgaming may receive a player session token necessary to launch their games within the abc67 platform. These providers do not receive your full profile or financial data.
• Legal and regulatory authorities: abc67 may be required to disclose personal data to law enforcement agencies, financial intelligence authorities, or courts in response to a lawful request, court order, or regulatory requirement.

5.2 All third-party data processors engaged by abc67 are required to handle personal data only in accordance with abc67's instructions, to maintain appropriate security measures, and to use the data for no purpose other than the specific service they are contracted to provide.

5.3 In the event that abc67's business is subject to a merger, acquisition, or restructuring, player personal data may be transferred as part of that transaction. abc67 will notify affected players via their registered email address prior to any such transfer taking effect and will ensure that the receiving entity agrees to honour the protections set out in this Privacy Policy.

6. Cookies and Tracking Technologies

6.1 abc67 uses the following categories of cookies on its Platform:

• Strictly necessary cookies: These cookies are essential to the operation of the abc67 Platform. They maintain your login session, remember your account preferences, and ensure the Platform functions correctly. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember choices you have made, such as your preferred language settings or display preferences, to provide a more personalised experience during future visits.
• Analytics cookies: abc67 uses first-party analytics tools to collect aggregate data about how players use the Platform — for example, which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used exclusively to improve the Platform and is not associated with your individual identity.

6.2 abc67 does not use third-party advertising cookies, cross-site tracking technologies, or retargeting pixels. Your browsing activity on abc67 is not shared with advertising networks.

6.3 You may manage your cookie preferences at any time through your browser's settings panel. Disabling strictly necessary cookies will affect your ability to log in and use core Platform features. Disabling functional or analytics cookies will not impair access to games or account services.

7. Data Retention and Deletion

7.1 abc67 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, in order to satisfy anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial compliance requirements.
• Technical and log data: Retained for up to 12 months, after which it is anonymised or securely deleted unless required for an ongoing fraud or security investigation.
• Support communications: Retained for up to three years from the date of the most recent interaction, to assist with dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of your consent and for one year following withdrawal of consent, to demonstrate compliance with consent management obligations.

7.2 Upon the expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for aggregate analytical purposes.

7.3 Where you request the deletion of your personal data under your rights described in Section 9, abc67 will fulfil that request within 30 days, subject to the need to retain data for the minimum periods described above for legal compliance purposes.

8. Data Security Measures

8.1 abc67 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL (Secure Socket Layer) / TLS encryption on all data transmissions between your device and the abc67 Platform.
• Encrypted storage of passwords and sensitive account credentials — abc67 staff cannot view your password in plain text.
• Role-based access controls that limit employee access to personal data on a need-to-know basis.
• Regular internal security assessments and vulnerability testing of the abc67 Platform infrastructure.
• Monitoring of login activity and automated alerts for suspicious account access patterns.

8.2 While abc67 employs robust security measures, no internet-based platform can guarantee absolute security against all threats. Players are strongly encouraged to use a strong, unique password for their abc67 account and to avoid accessing their account over unsecured public Wi-Fi networks.

8.3 In the event of a personal data breach that poses a risk to players, abc67 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, and will take all reasonable steps to contain and remediate the incident.

9. Your Rights and How to Exercise Them

9.1 As a player whose personal data is processed by abc67, you hold the following rights in respect of that data:

• Right of access: You may request a copy of the personal data abc67 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your abc67 profile.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to abc67's legal retention obligations described in Section 7.
• Right to restriction: You may request that abc67 restrict the processing of your data in certain circumstances — for example, while a correction request is being assessed.
• Right to data portability: You may request that abc67 provide your personal data in a structured, machine-readable format so that you may transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests where you believe your rights and freedoms override those interests.

9.2 To exercise any of the rights listed above, please contact abc67's support team at [email protected] with the subject line "Data Rights Request". abc67 will acknowledge your request within five business days and will fulfil it within 30 days, unless the complexity or volume of requests necessitates an extension, in which case you will be notified.

9.3 abc67 will not charge a fee for processing data rights requests unless they are manifestly unfounded, repetitive, or excessive in nature. In those cases, abc67 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

10. Children and Minors

10.1 The abc67 Platform is strictly intended for adults aged 21 years and above. abc67 does not knowingly collect, process, or store personal data from individuals under the age of 21.

10.2 Where abc67 becomes aware that personal data has been submitted by a person under the age of 21 — whether identified through the KYC verification process or by any other means — it will immediately suspend the relevant account and permanently delete all associated personal data.

10.3 If you are a parent or guardian and believe that a person under 21 in your care has submitted personal data to abc67, please contact [email protected] immediately so that the matter can be investigated and remediated without delay.

11. Changes to This Privacy Policy

11.1 abc67 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or Platform features. The effective date at the top of this document will always reflect the date on which the current version entered into force.

11.2 Where changes are material — meaning they alter the nature of the data collected, the purposes for which it is used, or the rights available to players in a significant way — abc67 will notify registered players via their registered email address at least 14 days before the revised policy takes effect.

11.3 For minor updates (such as clarifications of existing provisions, corrections to typographical errors, or changes to third-party processor names), abc67 may update the policy without advance notice. Continued use of the Platform following any update to this Privacy Policy constitutes acceptance of the revised terms.

11.4 The current version of this Privacy Policy is always available at abc67.io/privacy-policy. Players are encouraged to review it periodically.

12. Contact and Complaints

12.1 If you have any questions about this Privacy Policy, wish to exercise a data right, or have concerns about how abc67 has handled your personal data, please contact the abc67 support team directly:

• Email: [email protected]
• Subject line for data queries: "Privacy Policy Enquiry" or "Data Rights Request"
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

12.2 abc67 treats all privacy-related enquiries with priority and aims to provide a substantive response within five business days. Complex requests, particularly those involving data subject access or erasure, are fulfilled within 30 days of receipt of sufficient information to process the request.

12.3 If you are not satisfied with abc67's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction. abc67 will cooperate fully with any such authority in the course of a formal investigation.