abe8 Privacy Policy

1 Data We Collect

abe8 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of our website, and from third-party payment partners and identity verification services. The categories of data we collect are outlined below.

1.1 Registration & Account Data

When you create an abe8 account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (for mandatory age verification — 18+ requirement)
• Email address and contact telephone number
• Residential address, including city, district, and postal code
• Username and hashed password (passwords are never stored in plain text)
• Preferred language and currency (BDT — Bangladeshi Taka)

1.2 KYC Verification Documents

As part of our Know Your Customer (KYC) obligations, abe8 collects and processes the following identity documents when you initiate a withdrawal or when our compliance team flags your account for review:

• National Identity Card (NID) — both sides
• Passport or driving licence (where NID is unavailable)
• Proof of address (utility bill, bank statement, or official government correspondence dated within three months)
• Proof of payment method ownership (e.g., screenshot showing bKash or Nagad account registered in your name)
• Source of funds declaration for transactions above ৳50,000

1.3 Financial Transaction Data

For every deposit and withdrawal you make at abe8, we record the following:

• Transaction reference number and timestamp (Bangladesh Standard Time, UTC+6)
• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank)
• Transaction amount in BDT
• Transaction status (pending, completed, failed, or reversed)
• Partial payment account identifiers (we never store full bKash PINs or full bank account numbers)

1.4 Gameplay & Betting Activity

To maintain accurate account balances, resolve disputes, and comply with anti-money laundering obligations, abe8 logs the following:

• Games played, bet amounts, win/loss outcomes, and session durations
• Sports betting markets selected, odds accepted, and bet settlement results
• Bonus claims, wagering progress, and promotion participation history
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, time-out activations)

1.5 Technical & Device Data

When you visit abe8.app, our servers automatically collect the following technical information:

• IP address and approximate geographic location (city/region level)
• Browser type, version, and operating system
• Device type (mobile, tablet, or desktop) and screen resolution
• Referring URL and pages visited within abe8.app
• Session start and end times, and pages viewed per session
• Error logs and platform crash reports

2 How We Use Your Data

abe8 processes your personal data only for defined, legitimate purposes. The table below summarises the primary purposes for which your data is used and the legal basis for each processing activity.

Marketing Communications

abe8 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, promotions, and new game releases if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or updating your account notification preferences. Opting out of marketing communications does not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications, or account security alerts — these are sent regardless of marketing preferences as they are necessary for the operation of your account.

3 Data Sharing & Disclosure

abe8 does not sell, rent, or exchange your personal data with third-party advertisers or data brokers. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, abe8 shares relevant payment data with our authorised payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners receive only the transaction-specific data required to complete or verify a payment. They are contractually prohibited from using your data for any purpose other than payment processing.

3.2 Game Technology Providers

abe8 partners with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver casino games and live dealer experiences. These providers may receive your account identifier and gameplay session data for the purposes of game delivery, RNG certification auditing, and dispute resolution. Game providers are bound by strict data processing agreements and are not permitted to use your data for independent marketing purposes.

3.3 Identity Verification Services

To fulfil our KYC obligations, abe8 may share your submitted identity documents with authorised third-party identity verification service providers. These providers operate under strict data processing agreements and use your documents solely for the purpose of verifying your identity against official records.

3.4 Legal and Regulatory Disclosure

abe8 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so. Such disclosures may occur in connection with:

• Active fraud investigations involving your account
• Anti-money laundering (AML) reporting obligations
• Court orders, subpoenas, or lawful regulatory requests
• Investigations into underage gambling or identity fraud

Where legally permitted, abe8 will attempt to notify you of any compelled disclosure before complying with such requests.

3.5 Business Transfers

In the event that abe8 undergoes a merger, acquisition, or asset sale, your personal data may be transferred as part of the business assets involved. You will be notified via your registered email address prior to any such transfer, and your rights under this Policy will be preserved by the acquiring entity.

4 Cookies & Tracking

abe8.app uses cookies and similar local storage technologies to ensure the platform functions correctly, to maintain your login session, and to gather anonymised performance data that helps us improve the user experience for players across Bangladesh.

Types of Cookies Used

Third-Party Cookies

abe8 does not permit third-party advertising networks, social media pixels, or behavioural tracking scripts to place cookies on abe8.app. The only third-party scripts present on our platform relate to game delivery from our certified game provider partners and are strictly functional in nature.

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your abe8 account and will impair the core functionality of the platform. Disabling functional or performance cookies will not affect your ability to play games or make transactions, but may result in certain personalisation features not being retained between sessions.

5 Data Security

abe8 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures are reviewed and updated on a regular basis to address emerging threats.

Technical Safeguards

• 256-bit SSL/TLS encryption on all data in transit between your browser and abe8 servers
• AES-256 encryption for sensitive data stored in our databases, including KYC document files
• Bcrypt password hashing — your password is never stored in a recoverable form
• Tokenised payment processing — full bKash/Nagad PINs and bank account numbers are never stored on abe8 servers
• Automated intrusion detection systems monitoring for anomalous access patterns 24/7
• Regular penetration testing conducted by independent security professionals
• Geographically redundant, access-controlled server infrastructure

Organisational Safeguards

• Strict role-based access controls — only authorised personnel with a legitimate need can access player data
• All staff with access to player data are bound by confidentiality agreements
• Regular staff training on data protection and security best practices
• Formal incident response procedures for data breach scenarios

Data Breach Notification

In the unlikely event of a data security incident that affects your personal data and poses a risk to your rights, abe8 will notify you at your registered email address as promptly as is reasonably practicable. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps abe8 is taking to address it.

6 Data Retention

abe8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods below reflect a balance between operational necessity and data minimisation principles.

Once a retention period expires, abe8 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. Anonymised, aggregated data that can no longer be linked to you as an individual may be retained indefinitely for statistical and platform improvement purposes.

7 Your Privacy Rights

As a registered player at abe8, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from your registered email address. abe8 will acknowledge your request within 48 hours and provide a substantive response within 30 days.

Right of Access

You have the right to request a copy of the personal data that abe8 holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) where technically feasible. We may ask you to verify your identity before processing a data access request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that certain data fields (such as your registered full name and date of birth) are locked after KYC verification to protect against identity fraud. Changes to these fields require re-verification.

Right to Erasure ("Right to Be Forgotten")

You may request that abe8 delete your personal data. However, this right is subject to legal retention obligations — data held to comply with AML regulations, financial record-keeping laws, or active dispute resolution cannot be erased until the relevant retention period has lapsed. We will clearly communicate any limitations when responding to your erasure request.

Right to Restrict Processing

You may request that abe8 pause the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an erasure request is under review. During a processing restriction, we will continue to store your data but will not actively use it beyond what is required for legal compliance.

Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving your objection, abe8 will cease sending you marketing communications immediately and update your preferences in our systems within one business day.

Right to Withdraw Consent

Where abe8 processes your data based on your consent (e.g., for marketing communications or optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

8 Policy Updates & Contact

abe8 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, we will update the Effective Date at the top of this document and, where the changes are significant, notify registered players via their registered email address.

Your continued use of abe8.app following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should cease using the platform and contact [email protected] to request account closure and data erasure in accordance with Section 7 above.

Children's Privacy

abe8 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, we will immediately suspend the account, initiate data deletion procedures for all personal data associated with that account, and retain only the minimum data required to ensure that person cannot re-register. Parents or guardians who believe their child has registered on abe8 should contact us immediately at [email protected].

Cross-Border Data Transfers

abe8's primary server infrastructure is located in secure, access-controlled data centres. In some cases, data may be processed by game technology providers or payment partners who operate infrastructure outside Bangladesh. Where such transfers occur, abe8 ensures that appropriate contractual safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy.

Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the abe8 privacy team directly:

• Email: [email protected] (subject: "Privacy Enquiry")
• Response time: Acknowledgement within 48 hours; full response within 30 days
• Hours: Our support team is available 24/7, Bangladesh Standard Time (BST, UTC+6)