aba99 Privacy Policy — How We Handle Your Data

When you register and use aba99, we collect the following categories of personal data:

• Identity data: full name, date of birth, and copies of government-issued identification documents submitted for KYC verification purposes.
• Contact data: phone number registered in Bangladesh, email address, and any correspondence you send to our support team.
• Financial data: payment method details (bKash, Nagad, Rocket, Upay mobile wallet identifiers), transaction history, deposit and withdrawal records.
• Technical data: IP address, device type, operating system, browser type, session duration, pages visited, and in-game activity logs.
• Behavioural data: game preferences, betting patterns, bonus usage, and responsible gaming tool interactions — used to personalise your experience and detect problem gambling indicators.

aba99 uses the personal data collected from Bangladesh players for the following purposes:

• Account administration: creating and maintaining your registered account, processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and providing customer support.
• Legal compliance: fulfilling KYC, anti-money laundering (AML), and fraud prevention obligations as required by applicable law and our operational policies.
• Service improvement: analysing aggregated and anonymised usage data to improve platform performance, fix bugs, and develop new game categories and features.
• Responsible gaming: monitoring game activity and deposit patterns to identify potential signs of problem gambling, and making responsible gaming tools available to players who may need them.

aba99 processes your personal data on one or more of the following legal bases: (a) contractual necessity — processing is required to fulfil the service agreement between you and aba99, including creating your account, processing transactions, and delivering games; (b) legal obligation — processing is required to comply with applicable law, including KYC and AML requirements; (c) legitimate interests — processing is necessary for fraud prevention, platform security, and improving services, where those interests are not overridden by your privacy rights; and (d) consent — where you have explicitly provided consent for a specific processing purpose, such as receiving promotional communications.

Where we rely on your consent as the legal basis for a specific processing activity, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

As a registered player on aba99, you hold the following rights in respect of the personal data we process about you:

• Right of access: you may request a copy of the personal data aba99 holds about you. We will provide this within a reasonable period following verification of your identity.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Please contact our support team with the correction required.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations and fraud prevention requirements.
• Right to object: you may object to processing carried out on the basis of legitimate interests, including direct marketing communications. Where you object to marketing, we will cease sending marketing messages immediately.

aba99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, encryption of sensitive data at rest, role-based access controls that limit internal staff access to personal data on a strict need-to-know basis, and regular penetration testing and security audits of our platform infrastructure.

While we take all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights, aba99 will notify affected players without undue delay and take all steps necessary to contain and remediate the breach.

aba99 is strictly intended for players who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately suspend the associated account, void any balances or winnings, and delete the personal data in question. Parents and guardians who believe a minor may have registered on aba99 should contact our support team immediately at [email protected] so that we can take prompt action.

aba99 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing personal data or a new category of data sharing — we will provide advance notice to registered players via the platform or by email to their registered address. Non-material clarifications or corrections may be made at any time without prior notice. The date at the top of this page will always reflect when the policy was last updated. We encourage all players to review this Privacy Policy periodically to remain informed of how their data is being used.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to report a concern relating to how aba99 handles your personal data, please contact our support team. We are committed to responding to all data-related inquiries within 10 business days of receipt. Please include your registered username and a clear description of your request so that we can handle it promptly and accurately.