abd67 Privacy Policy — How We Handle Your Data
At abd67, your privacy is not an afterthought — it is built into every part of how we operate. This Privacy Policy explains in plain English exactly what personal data we collect from players in Bangladesh, why we collect it, how we protect it, and what rights you hold over your information.
About This Policy: This Privacy Policy applies to all personal data collected through the abd67 website at abd67.io, our mobile-optimised platform, and any communication channels operated by abd67, including live chat, WhatsApp support, and email. By creating an account and using the abd67 platform, you acknowledge that you have read and understood this Privacy Policy. This document should be read alongside the abd67 Terms & Conditions, which are incorporated by reference.
Table of Contents
1 Data Controller
1.1 For the purposes of this Privacy Policy, abd67 acts as the data controller in respect of all personal data collected from players who access abd67.io. As data controller, abd67 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.
1.2 All data protection enquiries, access requests, and formal privacy-related complaints should be directed to the abd67 data support team using the contact details provided in Section 13 of this Policy. Abd67 is committed to responding to all data-related correspondence within a reasonable timeframe and, in any event, within thirty (30) calendar days of receipt.
2 Data We Collect
2.1 Abd67 collects personal data that is necessary to provide you with a safe, compliant, and fully functional gaming and betting experience. The categories of personal data we collect are set out in the table below:
| Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number | Yes — required for registration and KYC |
| Contact Data | Email address, Bangladeshi mobile number, physical address (for KYC) | Yes — required for account management |
| Financial Data | bKash number, Nagad number, Rocket number, Upay number, bank account details, transaction history, deposit and withdrawal records | Yes — required for payment processing |
| Technical Data | IP address, browser type, device type, operating system, session duration, referring URL | Collected automatically |
| Usage Data | Games played, bets placed, betting markets accessed, bonus offers viewed, session frequency and duration | Collected automatically |
| KYC Documentation | Scanned or photographed copies of NID, passport, proof of address, selfie verification images | Required before first withdrawal |
| Communications Data | Records of live chat conversations, WhatsApp messages sent to abd67 support, emails sent to abd67 | Retained for quality and compliance |
| Marketing Preferences | Whether you have opted in or out of promotional emails and SMS notifications | Optional — consent-based |
| Responsible Gaming Data | Deposit limits set, cooling-off periods requested, self-exclusion status, session time alerts configured | Recorded where applicable |
2.2 Abd67 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification (such as a photograph of a government-issued ID). Abd67 does not collect biometric data, health data, racial or ethnic origin data, political opinions, or religious beliefs. Where a document submitted for KYC incidentally contains such information (for example, a religion field on a Bangladeshi NID), that data is not processed for any purpose other than confirming the document's authenticity and the Player's identity.
3 How We Collect Data
3.1 Abd67 collects personal data through the following channels and mechanisms:
- Direct registration: When you create an account on abd67.io, you provide your name, date of birth, email address, and Bangladeshi mobile number directly.
- KYC verification process: When you submit identity documents to complete your account verification prior to your first withdrawal.
- Payment transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a connected bank account, relevant financial transaction data is recorded.
- Platform interaction: As you browse abd67.io, place bets, play games, or access account features, technical and usage data is automatically collected via server logs, cookies, and similar technologies.
- Customer support communications: When you contact abd67 via live chat, WhatsApp, or email, the content of those communications is recorded and stored.
- Responsible gaming tool usage: When you configure deposit limits, cooling-off periods, or self-exclusion settings, those preferences and their timestamps are recorded.
- Promotional engagement: When you opt in to marketing communications or claim a bonus offer, your consent and engagement data are recorded.
3.2 Abd67 does not purchase personal data from third-party data brokers. All personal data held by abd67 is collected directly from the Player or generated through their use of the Platform.
4 Purposes of Processing
4.1 Abd67 processes your personal data only for the specific, legitimate purposes described below. We do not process personal data in a manner incompatible with the original purpose for which it was collected.
Account Management
Your identity and contact data are used to create and maintain your abd67 account, authenticate your identity at login, restore account access if credentials are lost, and communicate essential account-related information such as security alerts, deposit confirmations, and withdrawal notifications.
KYC and Age Verification
Abd67 is required to verify that all players are aged 21 years or above and are who they claim to be. Your identity documents and personal details are processed to fulfil this obligation. KYC verification is a prerequisite for withdrawal of funds. 21+ Only
Payment Processing
Your financial data, including mobile banking numbers (bKash, Nagad, Rocket, Upay) and bank account details, is processed to facilitate deposits and withdrawals, reconcile transaction records, investigate disputed transactions, and detect potential payment fraud.
Platform Security and Fraud Prevention
Technical data including IP addresses, device identifiers, and session metadata is processed to detect and prevent unauthorised account access, identify and block fraudulent activity, enforce the one-account-per-player policy, and protect the integrity of betting markets and casino games.
Legal and Regulatory Compliance
Abd67 processes personal data where required to comply with applicable legal obligations, including anti-money laundering (AML) checks, counter-terrorism financing (CTF) screening, and responses to lawful requests from competent authorities.
Responsible Gaming Monitoring
Usage data and responsible gaming tool configurations are processed to monitor for behavioural patterns consistent with problem gambling, enforce player-set limits, apply cooling-off periods, and fulfil self-exclusion requests in a timely and reliable manner.
Marketing and Promotions
Where you have given explicit consent, your contact data and usage data may be processed to send you personalised promotional offers, bonus notifications, and information about upcoming cricket betting markets such as BPL, IPL, and T20 World Cup events. You may withdraw marketing consent at any time from your account dashboard or by contacting abd67 support.
Platform Improvement and Analytics
Aggregated and anonymised usage data is analysed to improve platform performance, identify popular games and betting markets, optimise the mobile experience for players across Dhaka, Chittagong, Sylhet, and other cities in Bangladesh, and plan new product features.
5 Legal Basis for Processing
5.1 Abd67 relies on the following legal bases for processing your personal data:
- Contractual necessity: Processing required to perform our contract with you — specifically, to operate your account, process payments, and deliver the games and betting services you have registered to use.
- Legal obligation: Processing required to comply with applicable laws, including age verification, AML/CTF obligations, and responses to lawful authority requests.
- Legitimate interests: Processing carried out for abd67's legitimate business interests, including fraud prevention, platform security, and aggregated analytics, provided those interests are not overridden by your rights and interests.
- Consent: Processing for which you have given a clear, specific, and informed consent — most notably, the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6 Data Sharing and Disclosure
6.1 Abd67 does not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or marketing networks. Data is shared only in the circumstances described below:
Payment Service Providers
Your financial data is shared with the relevant mobile financial service or banking partner (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank) solely for the purpose of processing your requested deposit or withdrawal transaction. These providers process your data under their own privacy policies and are responsible for their own data handling practices.
Identity Verification Partners
Where abd67 uses a third-party KYC or identity verification service, the identity documents and personal details you submit for verification may be shared with that provider for the sole purpose of completing the verification check. Such providers are contractually bound to process your data only as instructed by abd67 and to maintain appropriate security measures.
Game Providers
Third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session tokens or pseudonymous player identifiers to facilitate game delivery and record bet outcomes. These providers do not receive your full name, contact details, or payment information.
Legal and Regulatory Authorities
Abd67 may disclose personal data to competent legal or regulatory authorities where required by law, court order, or lawful authority request. In such circumstances, abd67 will disclose only the minimum data required to satisfy the request and will, where legally permissible, notify the affected Player of the disclosure.
Business Continuity
In the event of a merger, acquisition, or sale of all or part of abd67's business operations, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.
Abd67 will never share your personal data with any third party for that party's own marketing purposes. If you receive unsolicited marketing claiming to be from abd67 via a channel you did not consent to, please report it to [email protected] immediately.
7 Data Retention
7.1 Abd67 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | Legal obligation, AML compliance |
| Financial Transaction Records | 7 years from date of transaction | Financial record-keeping requirements |
| KYC Documentation | 5 years after account closure | AML/CTF legal obligation |
| Responsible Gaming Records | 5 years after account closure | Duty of care obligations |
| Support Communications | 3 years from date of communication | Quality assurance, dispute resolution |
| Technical / Log Data | 12 months from collection | Security monitoring, fraud detection |
| Marketing Consent Records | Until consent withdrawn + 3 years | Proof of consent basis |
7.2 Where personal data is no longer required for any lawful retention purpose, abd67 will delete or anonymise it securely. Anonymised data — from which it is not possible to identify any individual — may be retained indefinitely for aggregated analytics purposes.
8 Data Security
All data transmitted between your device and abd67.io is protected by TLS/SSL (Transport Layer Security / Secure Socket Layer) encryption. Abd67 does not transmit personal data over unencrypted channels.
8.1 Abd67 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- Encryption in transit: All data exchanged between your browser or app and the abd67 servers is encrypted using TLS 1.2 or higher. This includes login credentials, payment data, and KYC document uploads.
- Encryption at rest: Sensitive data fields stored on abd67 infrastructure — including passwords (stored as one-way cryptographic hashes), financial account references, and KYC document files — are encrypted at rest.
- Access controls: Access to systems holding personal data is restricted to abd67 staff members whose role requires it, and is enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
- Intrusion detection: Abd67 operates continuous network monitoring and intrusion detection systems to identify and respond to unauthorised access attempts in real time.
- Penetration testing: The abd67 platform undergoes periodic third-party security assessments to identify and remediate potential vulnerabilities before they can be exploited.
- Incident response: Abd67 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, abd67 will notify affected Players without undue delay, and in any event within 72 hours of becoming aware of the breach.
8.2 While abd67 takes all reasonable technical and organisational measures to protect your data, no internet-based system is entirely free from risk. You are responsible for maintaining the security of your own account credentials. Abd67 will never ask for your password via any channel. If you suspect that your account has been compromised, contact abd67 support immediately via live chat or WhatsApp.
9 Cookies and Tracking Technologies
9.1 Abd67 uses cookies and similar tracking technologies to provide core platform functionality, maintain your session while logged in, remember your preferences, and gather anonymised analytics data to improve the platform experience for players across Bangladesh.
9.2 The following categories of cookies are used on abd67.io:
- Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember items in your betting slip, and ensure secure communication between your browser and abd67 servers. These cookies cannot be disabled without breaking core platform functionality.
- Functional cookies: These remember your preferences such as language settings, preferred payment method, and responsible gaming configurations so you do not need to re-enter them each session.
- Analytics cookies: These collect anonymised data about how players use abd67.io — which pages are visited most, where players click, and how long sessions last. This data is used to improve platform design and performance. No personally identifiable information is collected via analytics cookies.
- Security cookies: These help abd67 detect and prevent fraudulent activity, identify unusual login patterns, and enforce the one-account-per-player policy.
9.3 Abd67 does not use third-party advertising or retargeting cookies. Abd67 does not allow third-party advertising networks to place cookies on abd67.io or to track players across other websites for advertising purposes.
9.4 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the abd67 platform, including logging in and placing bets. Instructions for managing cookies in commonly used browsers are available in the relevant browser's help documentation.
10 Your Privacy Rights
10.1 Abd67 is committed to respecting and facilitating the exercise of your privacy rights. As an abd67 player, you hold the following rights in respect of your personal data:
10.2 To exercise any of the rights listed above, contact the abd67 support team via live chat or by email at [email protected]. Abd67 will acknowledge your request within five (5) business days and endeavour to provide a substantive response within thirty (30) calendar days. Where a request is complex or voluminous, this period may be extended by a further thirty (30) days, in which case abd67 will inform you of the extension and the reason for it.
10.3 Abd67 will not charge a fee for the exercise of privacy rights in ordinary circumstances. Where requests are manifestly unfounded, repetitive, or excessive, abd67 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for that decision.
11 Protection of Minors
Abd67 is an adults-only platform. The minimum age for registration and play is 21 years old. Abd67 does not knowingly collect personal data from any individual under the age of 21. 21+ Only
11.1 Abd67 employs mandatory age verification as part of its registration and KYC processes. Where abd67 discovers that personal data belonging to an individual under the age of 21 has been collected — whether through a falsified date of birth or any other means — that data will be deleted immediately, the associated account will be permanently closed, and any funds in the account will be handled in accordance with Section 2.3 of the abd67 Terms & Conditions.
11.2 Players who are parents or guardians are encouraged to use parental control software to prevent minors from accessing gambling websites, including abd67.io, on shared or family devices. Abd67 recommends the use of established internet filtering tools available for devices commonly used in Bangladesh.
12 Changes to This Privacy Policy
12.1 Abd67 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — for example, a new purpose for which your data is processed, a new category of third-party recipient, or a significant change to retention periods — abd67 will notify all active account holders via the email address registered to their account, with a minimum advance notice period of seven (7) days before the revised Policy takes effect.
12.2 The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision. It is your responsibility to review this Privacy Policy periodically to stay informed of how abd67 handles your personal data. Continued use of the abd67 platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.
12.3 Where a change to this Privacy Policy requires your active consent under applicable law (for example, a new processing purpose that relies on a consent legal basis), abd67 will obtain that consent separately and will not rely on continued platform use as deemed consent for such changes.
13 Contact Us
13.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way abd67 handles your personal data, please reach out using one of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly from your abd67 account dashboard after login.
- WhatsApp: Available 24/7 via the contact option in your account dashboard.
- Email: [email protected] (displayed as plain text — not a clickable link)
13.2 Abd67's support team operates in both English and Bengali across Bangladesh Standard Time (BST, UTC+6), 24 hours a day, seven days a week. Privacy-related requests submitted via email will receive a written acknowledgement within five (5) business days of receipt.
13.3 All formal privacy-related correspondence — including subject access requests, erasure requests, and data breach notifications — should be clearly marked as "Privacy Request" in the email subject line to ensure prompt routing to the appropriate team.
- Your data is never sold to third parties
- SSL encryption protects all data in transit
- 21+ age verification required for all accounts
- Request access to your data at any time
- Withdraw marketing consent anytime from dashboard
- Data access requests answered within 30 days
- 24/7 support in English and Bengali
Six Ways abd67 Protects Your Privacy
End-to-End Encryption
Every piece of data transmitted between your device and abd67 — from login credentials to bKash payment details — is protected by TLS encryption. No data travels over the internet in plain text. Your financial information is additionally encrypted at rest on abd67 servers.
Strict Access Controls
Only abd67 staff members whose specific role requires access to personal data are permitted to view it. Access is enforced through role-based permissions and multi-factor authentication. All internal data access is logged and periodically audited to detect any unauthorised activity.
Zero Data Sales
Abd67 has a strict, unconditional policy against selling, renting, or otherwise commercialising your personal data. Your information is collected solely to deliver and improve the abd67 platform experience for players across Bangladesh. It is never passed to advertisers or data brokers under any circumstances.
Full Control Over Your Data
Abd67 gives you meaningful control over your personal data. You can request access to everything we hold about you, ask us to correct inaccuracies, withdraw marketing consent, or request deletion of your account and data — all through a straightforward support request process available 24/7.
Marketing on Your Terms
Abd67 will only send you promotional offers, bonus alerts, and cricket betting notifications if you have explicitly opted in. You can update or withdraw your marketing consent at any time directly from your account dashboard — no complex opt-out process, no hidden settings.
Transparent Data Practices
This Privacy Policy is written in clear, plain English so that every abd67 player — whether based in Dhaka, Chittagong, Sylhet, or Rangpur — can understand exactly how their data is used. We update this Policy whenever our practices change and notify all active players of material updates via email.
Your Data Is Safe at abd67 — Explore the Platform
Now that you understand how abd67 handles your privacy, explore everything the platform has to offer — from live cricket betting on BPL and IPL matches to slots, live casino games, and instant bKash deposits. For players aged 21 and above only.
21+ Only Gambling can be addictive. Please play responsibly. Visit our Responsible Gaming page for guidance.