Privacy Policy
ab998 Online Casino & Betting
At ab998, your privacy is taken seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you hold over your information. We operate with full transparency so every Bangladeshi player can engage with ab998 with complete confidence.
Data Minimisation
ab998 collects only the personal data that is strictly necessary to operate your account, process payments, and comply with responsible gaming obligations. We do not harvest data for its own sake.
SSL Encryption
Every page and every transaction on ab998.club is protected by industry-standard SSL/TLS encryption. Your personal and financial data is transmitted securely and stored in encrypted form at rest.
You Stay in Control
You have the right to access, correct, or request deletion of your personal data at any time. ab998 honours data subject requests promptly and will never penalise you for exercising your privacy rights.
No Sale of Data
ab998 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with partners is limited to what is necessary to deliver the service you have requested.
Scope of This Policy: This Privacy Policy applies to all users of ab998.club — including visitors who have not yet registered an account, registered players, and players who have requested account closure. It covers data collected through the website, live chat, email correspondence, and payment processing interactions. By using ab998, you acknowledge that you have read this policy and consent to the data practices described herein.
1. Data We Collect
ab998 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your device and browser as you navigate the site, and from trusted third-party partners such as payment processors and identity verification providers. The categories of data we collect are described in detail below.
Registration & Account Data
When you create an ab998 account, we collect the following information to establish and maintain your player profile:
- Full legal name — used for identity verification and payment matching.
- Date of birth — used to verify you meet the minimum age requirement of 18 years.
- Email address — used for account-related communications, promotional messages (where consent is given), and password recovery.
- Bangladesh mobile number — used for account verification and as the primary contact channel for bKash, Nagad, or Rocket payment methods.
- Username and encrypted password — used to authenticate your login sessions. Passwords are stored as irreversible cryptographic hashes; ab998 staff cannot view your password in plain text.
- Preferred currency — Bangladeshi Taka (৳ BDT) is the default and only supported currency on the platform.
Identity Verification (KYC) Data
To comply with responsible gaming obligations and anti-money-laundering best practices, ab998 may request the following documents as part of the KYC process:
- Government-issued National ID Card (NID) or passport — front and back copies.
- Proof of address — a utility bill, bank statement, or official government document dated within the last three months and showing your name and residential address.
- Payment method verification — a screenshot or confirmation showing that the bKash, Nagad, or Rocket wallet used for deposits is registered in your name.
- Selfie or live photograph — in some cases, a real-time selfie holding your identity document may be requested to prevent impersonation.
KYC documents are reviewed by ab998's compliance team and stored securely in an encrypted document repository. They are never shared with third parties except where legally required or where a licensed identity verification partner is engaged under a strict data processing agreement.
Transaction & Payment Data
Every financial transaction on ab998 generates a transaction record. This includes:
- Deposit amount, date, time, and payment method (bKash, Nagad, Rocket, Upay, bank transfer, card).
- Withdrawal requests, amounts, processing dates, and destination payment method details.
- Transaction reference numbers issued by the payment provider.
- Running wallet balance history.
ab998 does not store full card numbers or mobile banking PINs. Card data is handled exclusively by PCI-DSS-compliant payment gateways. Mobile wallet transactions are processed through the official bKash, Nagad, and Rocket merchant APIs.
Gameplay & Betting Data
- Game sessions — titles played, duration, stakes, outcomes, and bonus activity.
- Sports bets placed — market, selection, odds, stake, and settlement outcome.
- Responsible gaming interactions — deposit limit settings, session time reminders, and self-exclusion requests.
Gameplay data is used to personalise your experience, calculate bonus eligibility, resolve disputes, and fulfil responsible gaming monitoring obligations.
Technical & Device Data
When you access ab998.club, our servers and analytics tools automatically collect the following technical data:
- IP address — used for geolocation (country/region level), fraud detection, and detecting multiple accounts.
- Browser type and version, operating system, and device type (desktop, mobile, tablet).
- Pages visited, session duration, click paths, and referring URL.
- Screen resolution and language settings.
- Cookie identifiers and session tokens — see the Cookies section for full details.
| Data Category | Examples | Collection Method | Required? |
|---|---|---|---|
| Account Data | Name, email, mobile number, DOB | Provided by you at registration | Mandatory |
| KYC Documents | NID, passport, selfie | Uploaded by you on request | Required for withdrawals above threshold |
| Payment Data | bKash/Nagad number, transaction IDs | Provided at deposit/withdrawal | Mandatory for financial transactions |
| Gameplay Data | Game sessions, bets, outcomes | Automatically recorded by platform | Automatic |
| Technical Data | IP address, browser, device type | Automatically via server logs & cookies | Automatic |
| Communications Data | Live chat transcripts, email history | Generated when you contact support | When support is used |
2. How We Use Your Data
ab998 uses personal data collected from players only for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises our primary data uses and the lawful basis for each.
Account Management & Service Delivery
- Creating and maintaining your player account in a functional, secure state.
- Processing your deposits and withdrawals through your chosen Bangladesh payment method — bKash, Nagad, Rocket, Upay, or bank/card.
- Providing access to games, live dealer tables, sports betting markets, and promotional offers.
- Calculating bonus eligibility, wagering progress, and reward distributions.
- Responding to customer support enquiries via live chat or email at [email protected].
Security & Fraud Prevention
- Detecting and preventing multiple account registrations, bonus abuse, and payment fraud.
- Monitoring for suspicious betting patterns or transaction activity indicative of money laundering.
- Verifying that your device and IP address history is consistent with your account's normal activity profile.
- Investigating player complaints and resolving disputes using game session logs and transaction records.
Responsible Gaming Obligations
- Monitoring gameplay patterns to identify potential problem gambling behaviour and trigger responsible gaming interventions where appropriate.
- Enforcing deposit limits, session time limits, cooling-off periods, and self-exclusion orders set by or for a player.
- Age verification — ensuring all registered players are aged 18 or above before granting access to real-money games.
Legal & Regulatory Compliance
- Maintaining transaction records for the minimum periods required by applicable anti-money-laundering (AML) obligations.
- Responding to lawful requests from courts, law enforcement agencies, or regulatory bodies in the jurisdictions where ab998 operates.
- Producing records required to defend or pursue legal claims.
Marketing Communications
ab998 may send you promotional emails or in-platform notifications about new games, upcoming cricket tournaments (BPL, IPL, T20 World Cup, ICC events), seasonal bonuses (Eid, Pohela Boishakh), and deposit offers — but only where you have given explicit consent to receive such communications. You may withdraw your marketing consent at any time by clicking the "Unsubscribe" link in any promotional email or by contacting support. Withdrawal of marketing consent does not affect our right to send you service-critical communications such as account security alerts or transaction confirmations.
No Automated Decision-Making: ab998 does not use fully automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated screening flags an account for review (e.g., suspected underage play or money laundering indicators), a member of ab998's compliance team reviews the case before any enforcement action is taken.
3. Data Sharing & Third Parties
ab998 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose. All third-party partners who process personal data on behalf of ab998 are subject to strict contractual obligations requiring them to protect your data in accordance with this Privacy Policy.
Payment Processing Partners
To process your deposits and withdrawals, ab998 shares the minimum necessary payment data with the relevant payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers receive only the data required to complete the specific transaction. They are not permitted to use your data for any other purpose.
Identity Verification Providers
Where ab998 uses a licensed third-party KYC or identity verification provider to authenticate player identity documents, your submitted documents and personal details are shared with that provider solely for the purpose of verification. The provider is contractually bound to process the data exclusively for KYC purposes and to delete it once verification is complete, unless retention is required by law.
Game Content Providers
Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe deliver their game content through secure APIs integrated into the ab998 platform. These providers may receive a pseudonymous player identifier and session token to manage game state, but they do not receive your full name, email address, or payment details.
Analytics & Security Providers
ab998 may use third-party analytics and cybersecurity platforms to monitor site performance, detect threats, and analyse aggregated player behaviour. These providers process anonymised or pseudonymised data and are not permitted to re-identify individual users.
Legal Disclosures
ab998 may disclose personal data to law enforcement agencies, courts, or other governmental bodies where required to do so by law, court order, or other binding legal process. In such cases, ab998 will disclose only the data specifically requested and will, where legally permissible, notify the affected player of the disclosure.
International Data Transfers: ab998's servers are located outside Bangladesh. By using ab998.club, you acknowledge that your personal data may be transferred to, stored in, and processed in countries that may not offer the same level of data protection as your home jurisdiction. ab998 applies appropriate technical and contractual safeguards to all international data transfers to ensure your data is protected to a standard consistent with this Privacy Policy.
5. Data Security & Retention
Protecting your personal data from unauthorised access, accidental loss, or destruction is a core operational priority at ab998. The following technical and organisational measures are in place at all times:
TLS 1.3 Encryption
All data transmitted between your browser and ab998.club is encrypted using TLS 1.3, the current industry standard for secure web communications. No data travels over the network in plain text.
Encrypted Storage
Personal data stored in ab998's databases — including KYC documents and payment details — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only via role-based access controls.
Staff Access Controls
ab998 staff access to player data is governed by the principle of least privilege. Only staff members whose role requires access to specific data categories are granted that access, and all access is logged for audit purposes.
Intrusion Detection
ab998's infrastructure is protected by continuous intrusion detection and prevention systems (IDS/IPS). Anomalous access patterns trigger automatic alerts reviewed by the security team around the clock.
Regular Security Audits
ab998 conducts periodic security assessments of its platform, including penetration testing and vulnerability scanning, to identify and remediate weaknesses before they can be exploited.
Incident Response
In the event of a data breach that poses a risk to players' rights and freedoms, ab998 will notify affected players without undue delay and describe the nature of the breach, the data involved, and the steps being taken to address it.
Data Retention Periods
ab998 retains personal data for only as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | AML compliance, dispute resolution |
| KYC Documents | Duration of account + 5 years after closure | Regulatory and legal obligations |
| Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| Gameplay Logs | 3 years from session date | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Quality assurance, complaint record-keeping |
| Analytics / Technical Logs | 13 months from collection date | Platform performance analysis |
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.
6. Your Privacy Rights
ab998 is committed to respecting your rights over your personal data. Regardless of where you are based in Bangladesh — whether in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Cox's Bazar — the following rights apply to you as an ab998 player:
- Right of Access: You have the right to request a copy of all personal data ab998 holds about you. We will respond to access requests within 30 days and provide the data in a clear, readable format. You may make this request by emailing [email protected] with the subject line "Data Access Request".
- Right to Rectification: If any personal data ab998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled name) can be addressed through the account dashboard or by contacting live chat support.
- Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you withdraw consent and there is no other lawful basis for processing. Note that this right is subject to our legal obligation to retain certain data (such as transaction records) for the minimum periods specified in the retention schedule above. Erasure requests that cannot be fully satisfied due to legal retention obligations will be partially fulfilled, with the retained data isolated from operational systems.
- Right to Restriction: You have the right to request that ab998 restrict the processing of your personal data in circumstances where, for example, you contest the accuracy of the data or object to its processing but do not wish to have it deleted.
- Right to Data Portability: For data you provided to ab998 directly and which is processed on the basis of your consent or a contract, you may request a copy in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though ab998 may have compelling grounds to continue processing in certain cases (such as fraud prevention).
- Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
How to Submit a Privacy Request
To exercise any of the rights listed above, contact ab998's privacy team by emailing [email protected] with the subject line "Privacy Rights Request" and the specific right(s) you wish to exercise. To protect your data, we may ask you to verify your identity before processing the request. We aim to respond to all privacy requests within 30 calendar days. Where the request is complex or involves a large volume of data, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.
No Fee for Standard Requests: ab998 does not charge a fee for processing standard privacy rights requests. However, where requests are manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or to decline to act on the request, with written justification provided to the requesting player.
7. Minors & Age Restriction
18+ Strictly Enforced: ab998 is an adults-only gambling platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you are not permitted to use ab998 and must not attempt to register an account or provide any personal data to us.
ab998 implements age verification controls at registration and at the time of withdrawal processing to confirm that all players are aged 18 or above. If we become aware that personal data has been submitted by a person under 18 — whether through our own screening or through a report from a parent or guardian — we will immediately close the associated account, delete the minor's personal data, and refund any deposits made, minus any losses incurred (which are forfeited in accordance with the Terms & Conditions).
Parents and guardians concerned about minors accessing online gambling platforms are strongly encouraged to use device-level parental control software. Common options available in Bangladesh include built-in controls on Android devices (Google Family Link), Samsung Kids Mode, and third-party parental control applications available through the Google Play Store. ab998 also supports the self-exclusion and account closure tools described in the Responsible Gaming policy.
If you suspect that a minor in your household has accessed or registered on ab998, please contact our support team immediately at [email protected]. We treat all such reports with the highest priority and will take immediate action to close the account and protect the minor's data.
8. Policy Updates & Contact
ab998 reviews this Privacy Policy periodically to ensure it remains accurate and reflects any changes in our data practices, applicable law, or platform functionality. When material changes are made to this policy, we will notify registered players via email at their registered address and/or through a prominent notice on the ab998.club homepage. The "Effective Date" shown at the top of this page will be updated to reflect the date on which the revised policy takes effect.
Your continued use of ab998 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you are entitled to close your account and request the deletion of your personal data in accordance with Section 6 above. Account closure requests can be submitted via live chat or by emailing [email protected].
Contact for Privacy Matters
For any questions, concerns, or requests relating to this Privacy Policy or ab998's handling of your personal data, please contact us through the following channels:
- Email: [email protected] — subject line "Privacy Enquiry"
- Live Chat: Available 24/7 on every page of ab998.club
- WhatsApp (text only): +880 1700 000 998 — for urgent privacy concerns during business hours (BST, UTC+6)
- Response time: Privacy enquiries are prioritised and typically receive a response within 48 hours BST.
Governing Language: This Privacy Policy is written in English. In the event of any conflict between this English-language version and any translated version, the English version shall prevail.
Ready to Play at ab998?
Now that you know how ab998 protects your personal data, explore our full range of games — cricket betting, live casino, slots, and more — all built for Bangladeshi players with instant bKash and Nagad deposits.