aba99 Privacy Policy —
How We Protect Your Personal Data

1. Information We Collect

aba99 collects personal information from you through several channels: directly when you register an account or interact with our platform, automatically through your use of aba99.club, and from third-party service providers involved in delivering our services. The categories of personal data we collect are described below.

1.1 Registration & Account Data

When you create an aba99 account, we collect the information you provide during the registration process. This includes:

• Your full legal name as it appears on your national identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Email address and mobile phone number registered in your name
• Username and encrypted password (we store only a hashed, salted version of your password — it is never stored in plain text)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we collect documentary evidence to verify your identity before processing withdrawals or when flagged for enhanced due diligence. This may include:

• Scanned copy or photograph of your National Identity Card (NID), passport, or other government-issued identification
• Proof of address document (utility bill, bank statement, or similar, dated within 90 days)
• Proof of payment method ownership (for example, a screenshot showing your bKash or Nagad account is registered to your mobile number)
• Selfie or live video verification as directed by our KYC team

KYC documents are stored securely and accessed only by authorised aba99 compliance personnel and our contracted KYC verification partner. They are not used for any purpose other than identity verification, fraud prevention, and compliance with anti-money laundering (AML) obligations.

1.3 Financial Transaction Data

When you make deposits or request withdrawals, we record transaction details including: the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard), transaction amount in BDT, transaction reference numbers, timestamps, and the outcome of each transaction. We do not store full card numbers on our servers — card data is tokenised by our payment processing partners.

1.4 Gameplay & Betting Activity Data

We record your activity on the aba99 platform, including games played, bets placed, wagers won or lost, session durations, and interaction with promotional features such as the Loyalty Program. This data is used to calculate your account balance accurately, resolve disputes, detect unusual or potentially problem gambling behaviour, and improve our services.

1.5 Technical & Device Data

Whenever you visit aba99.club, our servers automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited within aba99.club, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation. We may use your IP address to infer your approximate geographic location for the purpose of compliance with jurisdictional restrictions.

2. How We Use Your Data

aba99 uses your personal data only for the purposes described in this section. We do not use your data for undisclosed purposes, and we do not make decisions about you based solely on automated profiling without human oversight where such decisions have a significant legal or material effect.

Purpose	Data Used	Legal Basis
Account creation & management	Registration data, contact details	Performance of contract
Age & identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits & withdrawals	Financial transaction data	Performance of contract
Fraud prevention & AML monitoring	Transaction data, device data, IP address	Legal obligation / Legitimate interest
Responsible gaming monitoring	Gameplay data, session data, deposit history	Legal obligation / Legitimate interest
Customer support	Account data, communication records	Performance of contract
Platform security & abuse prevention	Device data, IP address, login history	Legitimate interest
Promotional communications (opt-in only)	Email address, mobile number	Consent

aba99 will never use your personal data to send you unsolicited marketing from third-party brands. If you have opted in to receive promotional communications from aba99 (for example, bonus offers, BPL cricket promotions, or Eid special offers), you may withdraw that consent at any time by contacting support or updating your account notification preferences.

3. Cookies & Tracking Technologies

aba99.club uses cookies — small text files stored on your device — along with similar technologies such as web beacons and local storage, to ensure the platform functions correctly and to improve your experience. The categories of cookies we use are as follows:

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of aba99.club. They enable core functions such as maintaining your login session, remembering your language preference, and keeping your account balance updated in real time. Without these cookies, the platform cannot function. These cookies cannot be disabled.

3.2 Performance & Analytics Cookies

We use analytics tools to understand how players navigate aba99.club — which pages are most visited, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymised. It helps us prioritise improvements to the platform. You may opt out of analytics cookies through your browser settings.

3.3 Functionality Cookies

Functionality cookies remember your preferences — such as your preferred game category, display settings, or last-viewed promotional offers — so that your experience feels personalised each time you return. These cookies do not track your activity outside of aba99.club.

3.4 Security Cookies

Short-lived security cookies are used to detect and prevent fraudulent activity such as session hijacking and cross-site request forgery (CSRF) attacks. These are strictly necessary for the safety of your account and cannot be disabled.

4. Data Sharing & Third Parties

aba99 does not sell your personal data. We share data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the specific purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, we share necessary transaction data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and our bank and card processing gateways. These partners are contractually bound to use your data solely for the purpose of processing your transactions and are prohibited from using it for any other purpose.

4.2 KYC & Identity Verification Providers

We use a contracted third-party KYC provider to assist with identity document verification. Your KYC documents are transmitted to this provider securely over encrypted channels. The provider is authorised only to process your documents for the purpose of identity verification and to return a verification result to aba99. Your documents are not retained by the provider beyond the period required for the verification task.

4.3 Game Content Providers

The games available on aba99 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier for the purpose of loading and operating their games within the aba99 platform. They do not receive your name, address, payment details, or other personally identifiable information.

4.4 Legal & Regulatory Disclosure

aba99 may be required to disclose personal data to competent authorities — including law enforcement, financial intelligence units, or courts — when we receive a lawful request, court order, or are otherwise legally obligated to do so. We will notify you of such a disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the event that aba99's business or substantially all of its assets are acquired by or merged with another entity, your personal data may be transferred as part of that transaction. In such circumstances, we will notify registered players via email and provide information about the new data controller's privacy practices prior to the transfer taking effect.

5. Data Retention & Security

aba99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.

5.1 Retention Periods

As a general rule, aba99 applies the following retention schedule:

• Active account data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, to meet AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the communication.
• Technical / server logs: Retained for up to twelve (12) months and then securely deleted or anonymised.

5.2 Security Measures

aba99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• Encryption of sensitive data fields at rest within our database infrastructure
• Role-based access controls ensuring that only authorised personnel can access personally identifiable information
• Regular internal security reviews and vulnerability assessments
• Bcrypt password hashing — we never store your password in recoverable form
• Two-factor authentication available for all player accounts

While aba99 takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. You also have an important role to play: keep your login credentials confidential, use a strong unique password, and contact [email protected] immediately if you suspect your account has been compromised.

6. Your Privacy Rights

As a user of the aba99 platform, you hold a number of rights with respect to your personal data. These rights are set out below. To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within a reasonable period and in any case within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data that aba99 holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For account details such as your registered email address or mobile number, you may also update these directly through your aba99 account settings.

6.3 Right to Erasure

You may request that aba99 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to legal exceptions: we are required by law to retain certain records (such as KYC documents and financial transaction records) for a minimum of five years after account closure, and we cannot delete data that we are legally obligated to retain.

6.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of your data while we verify it — you have the right to request that we temporarily restrict our processing of your personal data.

6.5 Right to Object

Where we process your data on the basis of our legitimate interests (for example, for platform security monitoring or fraud detection), you have the right to object to that processing. We will consider your objection and cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.

6.6 Right to Withdraw Consent

Where we process your personal data on the basis of your consent — for example, to send you promotional emails or SMS messages about aba99 offers — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

7. Minors & Age Verification

aba99 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes mandatory declaration of date of birth, and all accounts are subject to KYC age verification before withdrawal functionality is enabled.

If aba99 becomes aware that personal data has been collected from a person under the age of 18 — whether through a false declaration at registration or any other means — we will immediately suspend the account, forfeit any associated balances, delete the collected data to the extent not required for legal record-keeping, and where appropriate report the matter to relevant authorities. Parents or guardians who believe that a minor has registered an aba99 account should contact [email protected] without delay.

8. Changes to This Policy

aba99 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the effective date shown at the top of this page and, where the changes are significant, notify registered players via email to their registered address. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of aba99.club following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you must cease using the platform and may request account closure by contacting [email protected].