ab222 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

ab222 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the ab222 platform, accessible at ab222.io. This Privacy Policy describes how ab222 collects, uses, stores, shares, and protects personal information in connection with the operation of its online casino and sports betting services, which are designed for adult players in Bangladesh.

This Privacy Policy should be read alongside the ab222 Terms & Conditions and the ab222 Responsible Gaming Policy, all of which together form the complete framework governing a player's relationship with the ab222 platform. Where there is any conflict between this Privacy Policy and the Terms & Conditions on matters of data handling, this Privacy Policy shall prevail.

References to "personal data" in this policy mean any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes information such as your full name, date of birth, contact details, payment information, and device identifiers.

2 Personal Data We Collect

ab222 collects personal data across several categories depending on how you interact with the platform. The categories of data we may collect include, but are not limited to, the following:

ab222 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is strictly necessary for age and identity verification purposes.

3 How We Collect Your Data

ab222 collects personal data through the following channels:

• Direct interactions: When you register an ab222 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional offer, you provide data to us directly.
• Automated technologies: As you navigate and use the ab222 platform, we automatically collect technical data about your device, browser, and interaction patterns through cookies, server logs, and similar tracking technologies. Please refer to Section 7 (Cookies & Tracking) for more detail.
• Third-party verification partners: When you submit identity or address verification documents, our KYC processing partners may return enriched verification data to ab222 as part of the compliance process.
• Payment providers: When you transact via bKash, Nagad, Rocket, or Upay, transaction confirmation data is shared with ab222 by the respective payment provider to reconcile your account balance.
• Publicly available sources: In limited circumstances related to fraud prevention or compliance checks, ab222 may cross-reference information against publicly available databases or credit reference tools.

4 How We Use Your Personal Data

ab222 uses your personal data for the following purposes:

• Account administration: To create, maintain, and manage your ab222 account, including authentication, account recovery, and the enforcement of platform rules.
• Identity verification (KYC/AML): To verify your identity and age in compliance with anti-money laundering obligations and our strict 21+ age policy. Players found to be under 21 will have their accounts closed immediately.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the ab222 platform.
• Customer support: To respond to enquiries, resolve disputes, investigate complaints, and maintain support records.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, to enforce self-exclusion and deposit limit settings, and to provide support to players who request assistance.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
• Platform improvement: To analyse aggregated usage data to improve the ab222 platform, personalise the player experience, and develop new features and game offerings.
• Marketing communications: To send promotional offers, bonus notifications, and platform news to players who have opted in to marketing communications. See Section 13 for opt-out instructions.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our contractual rights.

5 Legal Basis for Processing

ab222 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between ab222 and the player, including account registration, payment processing, and game service delivery.
• Legal obligation: Processing that is required for ab222 to comply with applicable legal and regulatory obligations, including KYC/AML requirements, tax record-keeping, and responses to lawful authority requests.
• Legitimate interests: Processing conducted for the legitimate business interests of ab222, such as fraud detection, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by the rights and interests of the player.
• Consent: Processing based on your freely given, specific, and informed consent, such as the sending of marketing communications. Where consent is the basis for processing, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

ab222 does not sell, rent, or transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes. Your data may be shared in the following limited circumstances:

• KYC and identity verification providers: Third-party partners engaged by ab222 to perform identity, age, and address verification services as part of the KYC process.
• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) and any other payment infrastructure partners required to process your transactions.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical identifiers (such as session tokens) to enable game delivery. These providers do not receive your full identity data.
• Fraud prevention and security services: Third-party tools and services used by ab222 to detect and prevent fraudulent activity, money laundering, and platform abuse.
• Legal and regulatory authorities: Where ab222 is required by law, court order, or regulatory direction to disclose personal data, we will comply with such legally binding requests.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ab222 business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

7 Cookies and Tracking Technologies

ab222 uses cookies and similar tracking technologies on the ab222 platform to enhance functionality, improve the player experience, and support platform security. A cookie is a small text file placed on your device when you visit a website. ab222 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the ab222 platform. These include session management cookies, authentication tokens, and security cookies. The platform cannot function correctly without these cookies, and they cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations.
• Analytical cookies: Used to collect aggregated data about how players use the ab222 platform, including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used to improve the platform.
• Performance cookies: Used to monitor platform performance, load times, and error rates to ensure a stable and responsive player experience.

You may manage or disable non-essential cookies through your browser settings. However, disabling certain cookies may affect the functionality of the ab222 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

8 Data Security

ab222 takes the security of your personal data seriously. We implement a comprehensive range of technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and the ab222 platform.
• Encrypted data storage for sensitive personal and financial data held on ab222 servers.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Intrusion detection systems and continuous monitoring of platform infrastructure for suspicious activity.
• Regular security assessments and vulnerability testing conducted by qualified security professionals.
• Secure password hashing — ab222 does not store plaintext passwords. All passwords are stored using industry-standard cryptographic hashing algorithms.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. While ab222 uses commercially reasonable efforts to protect your personal data, we cannot guarantee absolute security. Players are encouraged to use strong, unique passwords for their ab222 accounts and to keep their login credentials confidential.

In the event of a personal data breach that is likely to result in a risk to affected individuals, ab222 will take prompt action to contain the breach and notify affected players in accordance with our breach response procedures.

9 Data Retention

ab222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain accurate business records, and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following the closure or permanent suspension of a player's ab222 account, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, or longer if required by applicable financial regulations.
• Communication and support data: Retained for up to three (3) years from the date of the last communication, or longer if related to an ongoing dispute or legal matter.
• Technical and analytical data: Retained in aggregated or anonymised form for up to two (2) years for platform improvement purposes. Raw technical log data is typically retained for 90 days.

Where personal data is no longer required for any of the above purposes, ab222 will delete or anonymise that data in a secure and irreversible manner. Players may request the deletion of their personal data subject to our legal retention obligations by contacting the ab222 support team.

10 Your Data Protection Rights

Registered ab222 players have the following rights with respect to their personal data. To exercise any of these rights, please contact the ab222 support team at [email protected] or via live chat:

• Right of access: You have the right to request a copy of the personal data that ab222 holds about you, together with information about how that data is used and with whom it has been shared.
• Right to rectification: You have the right to request that ab222 correct any inaccurate or incomplete personal data held in your account without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations and legitimate interests.
• Right to restrict processing: You have the right to request that ab222 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where ab222 relies on legitimate interests as the legal basis, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

ab222 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and we will notify you of such an extension within the initial 30-day period.

11 Children and Minors

The ab222 platform is strictly intended for adults aged 21 years and above. ab222 does not knowingly collect or process personal data from individuals under the age of 21. If ab222 discovers or has reasonable grounds to suspect that a registered player is under 21, the account will be immediately suspended, all activity will be reviewed, and the account will be permanently closed. Any funds held in the account will be dealt with in accordance with the ab222 Terms & Conditions and applicable legal requirements.

If you are a parent or guardian and believe that a minor under your care has registered an ab222 account, please contact our support team immediately at [email protected]. We will investigate and act on all such reports promptly.

12 Third-Party Links and Services

The ab222 platform may contain references to third-party game studios, payment providers, and other services. Where such references include links to external platforms or services, please note that ab222 has no control over the data practices of those third parties. This Privacy Policy applies solely to data collected and processed by ab222 in connection with the ab222 platform.

ab222 encourages players to review the privacy policies of any third-party services they interact with independently, including the privacy policies of mobile wallet providers such as bKash, Nagad, and Rocket, which operate their own independent data practices.

13 Marketing Communications

ab222 may send promotional communications, bonus notifications, seasonal offers (including Eid, Pohela Boishakh, and IPL/BPL season promotions), and platform news to registered players who have opted in to receive such communications at the time of registration or subsequently through their account settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email sent by ab222.
• Contacting the ab222 support team via live chat or email and requesting removal from marketing lists.
• Updating your communication preferences in your ab222 account settings.

Please note that opting out of marketing communications does not affect the delivery of transactional messages, including deposit confirmations, withdrawal notifications, account security alerts, and mandatory compliance communications, which are sent as a necessary part of operating your ab222 account.

14 Amendments to This Privacy Policy

ab222 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Privacy Policy, we will notify registered players by posting an announcement on the ab222 platform and, where practicable, by sending a notification to the email address associated with your account.

The effective date at the top of this Privacy Policy will be updated to reflect the date the revised policy comes into force. Your continued use of the ab222 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the ab222 platform and may contact our support team to discuss the closure of your account.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ab222, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the ab222 platform — average response time 2–5 minutes
• Languages: English and Bengali
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

ab222 is committed to resolving all privacy-related enquiries and data rights requests promptly and transparently. Formal written complaints will receive a substantive written response within 30 days of receipt.