Privacy Policy — How ab999 Collects, Uses, and Protects Your Data

ab999 is an online casino and sports betting platform operating at ab999.bar and accessible to players across Bangladesh. The ab999 platform is operated under an international gaming licence and is committed to maintaining the highest standards of data protection in its dealings with all registered players.

For the purposes of this Privacy Policy, ab999 acts as the data controller in respect of all personal data collected from players and visitors to the platform. As data controller, ab999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

References to "ab999", "we", "us", or "our" in this Privacy Policy refer to the operator of the ab999 platform. References to "you", "your", or "player" refer to any individual who accesses the ab999 website, registers an account, or otherwise interacts with the platform.

The categories of personal data that ab999 collects from players and platform visitors are set out below. Not all categories apply to all users — the data collected depends on how you interact with the platform and at what stage of the registration and verification process you are.

2.1 Registration Data

When you create an ab999 account, we collect: your full legal name as it appears on your government-issued identity document; your date of birth; your email address; your mobile telephone number (Bangladesh-registered); and your chosen account username. This data is mandatory — without it, we cannot open an account for you.

2.2 Identity Verification (KYC) Data

To comply with our obligations under our international gaming licence, we are required to verify the identity and age of all players before processing any withdrawal. For this purpose, we may collect copies of: a government-issued national identity card, passport, or driving licence; a proof of address document (utility bill or bank statement dated within 90 days); a selfie or biometric photograph for identity matching; and proof of the payment method used for deposits (such as a screenshot of your bKash or Nagad account).

2.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we collect the data necessary to process that transaction. This includes: your payment method identifier (bKash number, Nagad number, Rocket number, bank account reference, or Upay account); transaction amounts; transaction timestamps; and transaction reference numbers assigned by the relevant payment processor.

2.4 Gaming Activity Data

We collect a detailed record of your gaming activity on the ab999 platform, including: games played; bets placed (amount, odds, market); game outcomes; session duration; deposit and withdrawal history; and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Device and Technical Data

When you access the ab999 platform, we automatically collect certain technical data from your device and browser, including: IP address; device type and operating system; browser type and version; screen resolution; referring URL; pages visited on the platform; time and date of visits; and session duration. This data is collected through server logs and cookies (see Section 7).

2.6 Communications Data

If you contact the ab999 support team — by email or live chat — we retain a record of that correspondence, including the content of the messages exchanged, the date and time of contact, and the nature of the query or complaint raised. This data is used for customer service quality assurance and dispute resolution purposes.

ab999 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, fill in a support contact form, or communicate with the ab999 support team.
• Automatically through platform use: Server logs, session tracking, and cookies record technical data when you access and navigate the ab999 platform. This happens automatically each time you visit the site.
• From payment processors: When a transaction is initiated via bKash, Nagad, Rocket, Upay, or a partner bank, we receive transaction confirmation data from the relevant payment provider, including the transaction reference and status.
• From KYC verification providers: Where identity verification is conducted via a third-party KYC service, that provider may return a verification result and match score to ab999. We do not receive raw biometric data from these providers beyond what is necessary for the verification decision.
• From fraud detection and security systems: Automated risk-scoring systems may flag unusual login patterns or suspicious betting behaviour. The outputs of these systems are associated with your account record for risk management purposes.

ab999 processes your personal data on the following legal bases:

• Performance of a contract: The majority of data processing on the ab999 platform is necessary for the performance of the contract between you and ab999 — specifically, the player account agreement formed when you register. Without processing your registration data, financial data, and gaming activity data, we cannot provide the services you have contracted for.
• Legal obligation: ab999 is required by its international gaming licence to carry out age verification (KYC), to maintain transaction records, to monitor for money laundering indicators, and to preserve data for regulatory audit purposes. Processing for these purposes is required by law and cannot be opted out of.
• Legitimate interests: Certain processing activities are carried out on the basis of ab999's legitimate business interests, where those interests are not overridden by your rights and interests. These include: fraud detection and prevention; platform security monitoring; improving the platform's features and user experience; and responsible gaming monitoring to identify at-risk players.
• Consent: Where ab999 sends you marketing communications about promotions, bonuses, or new game releases, we do so on the basis of your consent. You may withdraw this consent at any time — see Section 11 for details.

The personal data collected by ab999 is used for the following purposes:

5.1 Account Management

Your registration data is used to create, maintain, and manage your player account. This includes verifying your login credentials on each session, enabling you to update your account settings, and communicating important account-related notifications such as deposit confirmations and withdrawal status updates.

5.2 Identity Verification and Fraud Prevention

KYC data is used to verify that you are who you claim to be, that you meet the 21+ age requirement, and that you are not a person who has been excluded from gaming services. Fraud detection systems analyse device data, transaction patterns, and gaming behaviour to identify and prevent unauthorised access, money laundering, and bonus abuse.

5.3 Payment Processing

Financial transaction data is used solely to process your deposit and withdrawal requests via your chosen payment method (bKash, Nagad, Rocket, Upay, or partner bank). Transaction records are retained for regulatory compliance and dispute resolution purposes.

5.4 Responsible Gaming

Gaming activity data and session data are used to power ab999's responsible gaming monitoring systems. These systems flag patterns of play that may indicate problem gambling behaviour — such as rapidly increasing bet sizes, extended unbroken sessions, or repeated failed attempts to self-exclude — so that the ab999 responsible gaming team can intervene proactively where appropriate.

5.5 Customer Support

Communications data from support interactions is used to resolve your query or complaint, to maintain a history of your interactions with the ab999 support team, and to monitor customer service quality. Support records are also used in the investigation of account disputes and withdrawal queries.

5.6 Legal and Regulatory Compliance

ab999 retains certain data categories for periods required by our gaming licence obligations, anti-money laundering regulations, and financial record-keeping requirements. This processing is non-optional and cannot be restricted by a player data subject request.

5.7 Platform Improvement

Aggregated and anonymised technical data and usage data are used to analyse how players interact with the ab999 platform, to identify performance bottlenecks, to test new features, and to improve the overall player experience. This analysis is conducted on anonymised data sets that cannot be used to identify individual players.

ab999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and data protection obligations.
• KYC and identity verification providers: Where a third-party service is used to verify your identity documents or age, we share only the data necessary for that verification to be completed. These providers are contractually prohibited from using your data for any purpose other than performing the verification service for ab999.
• Game studios and platform providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and bet data as part of the technical integration required to deliver their games within the ab999 platform. These studios do not receive your name, payment details, or contact information.
• Fraud detection and security services: Third-party risk and fraud detection systems may process your device data and behavioural signals for the purpose of identifying potential fraud or security threats. These providers act as data processors under contract with ab999.
• Legal and regulatory authorities: ab999 may be required to disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or courts if required to do so by law, court order, or our gaming licence obligations. Such disclosures are made only to the extent required and are logged internally.

ab999 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players use the site. The categories of cookies used are as follows:

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure that security features operate correctly. Strictly necessary cookies cannot be disabled — without them, core platform functionality would not work. They do not track your activity across other websites.

7.2 Performance and Analytics Cookies

These cookies collect anonymised data about how players use the ab999 platform — for example, which pages are visited most frequently, how long players spend on each page, and where errors are encountered. This data is used to improve platform performance and user experience. These cookies do not identify individual users and the data collected is aggregated.

7.3 Functional Cookies

Functional cookies remember your platform preferences — such as your preferred language setting, display options, and last-visited game category — so that your experience is personalised on return visits. These cookies are not used to track your activity across other websites.

7.4 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling cookies beyond the strictly necessary category may affect your experience on the ab999 platform — for example, your session may not persist correctly if session cookies are blocked.

ab999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption on all data transmissions between your device and ab999 servers.
• Encryption at rest for sensitive data categories including KYC documents, payment method identifiers, and account credentials.
• Access controls and role-based permissions ensuring that ab999 staff can access personal data only on a strictly need-to-know basis relevant to their role.
• Audit logging of all access to sensitive data systems, with regular review by the ab999 security team.
• Regular penetration testing and vulnerability assessments of the ab999 platform infrastructure.
• Incident response procedures that are activated in the event of a suspected data breach, including notification protocols for affected players and relevant authorities where required by law.

While ab999 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your account login credentials and for reporting any suspected unauthorised access to your account promptly via [email protected].

ab999 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal or regulatory minimum retention obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ab999's data disposal procedures.

As a player whose personal data is processed by ab999, you have the following rights in respect of your data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request" and your registered account username.

10.1 Right of Access

You have the right to request a copy of all personal data that ab999 holds about you. We will provide this in a structured, readable format within a reasonable timeframe of receiving your verified request.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating a phone number or email address — can be made directly through your account settings. For corrections to identity or KYC data, please contact our support team.

10.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that this right is subject to override where ab999 is legally required to retain data — for example, financial transaction records that must be kept for regulatory compliance cannot be deleted on request.

10.4 Right to Restriction

You may request that ab999 restrict its processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are evaluating that objection.

10.5 Right to Data Portability

Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another data controller where technically feasible.

10.6 Right to Object

You may object to processing of your personal data that is carried out on the basis of ab999's legitimate interests. Upon receipt of an objection, ab999 will assess whether its legitimate interests are overridden by your interests, rights, and freedoms, and will cease the processing in question if they are. You have an absolute right to object to processing of your data for direct marketing purposes — see Section 11.

ab999 may send you marketing communications about promotions, bonus offers, new game releases, seasonal campaigns, and platform updates. We will only send marketing communications to players who have given their consent to receive them, either during the registration process or by subsequently opting in through account settings.

Marketing communications from ab999 are sent exclusively via email to the address registered on your account. We do not send unsolicited SMS marketing messages. We do not use third-party advertising networks to display targeted advertisements to ab999 players on other websites.

You may withdraw your consent to receive marketing communications at any time by: clicking the "unsubscribe" link in any marketing email received from ab999; or contacting [email protected] with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and it does not affect your receipt of transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent regardless of marketing consent as they are necessary for the management of your account.

The ab999 platform does not contain links to external third-party websites. All navigation within the platform remains within the ab999.bar domain. This Privacy Policy applies exclusively to data collected and processed by ab999 in connection with the ab999.bar platform and does not extend to any third-party services or platforms.

Game studios whose games are delivered within the ab999 platform (such as Pragmatic Play, Evolution Gaming, and others) operate under their own data protection arrangements in respect of data processed within their game environments. These studios receive only the minimal session and bet data necessary to deliver the game experience within ab999 — they do not have access to your name, payment details, or contact information.

The ab999 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data immediately and suspend the associated account.

If you are a parent or guardian and you believe that a person under your care has registered on the ab999 platform or submitted their personal data to us, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action, including account closure and data deletion.

ab999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the services we provide. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they could significantly affect your rights or our obligations in respect of your data — ab999 will notify registered players by email to their registered address at least 14 days before the revised policy takes effect. For minor clarifications or corrections that do not affect player rights, no specific advance notice will be provided beyond the update to this page.

Continued use of the ab999 platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of and agreement to the revised policy. If you do not agree to any revision, you must cease using the platform and may request closure of your account by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about the way in which ab999 has handled your personal data, please contact the ab999 privacy team using the details below:

• Email: [email protected] — use subject line "Privacy Query" or "Data Subject Request" as appropriate.
• Response time: We aim to acknowledge all privacy-related correspondence within 48 hours (BST, UTC+6) and to provide a substantive response within 30 calendar days.
• Language: All privacy-related correspondence is handled in English.

If you are not satisfied with ab999's response to a privacy concern or data subject request, you have the right to escalate your complaint to the relevant supervisory authority or regulatory body in accordance with the terms of ab999's international gaming licence.