Your Privacy Matters
at abd8

This Privacy Policy ("Policy") is issued by abd8 ("abd8", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access or use the abd8 website at abd8.io, its mobile-optimised interface, and all associated services including sports betting, live casino, slot games, and payment processing targeted at players in Bangladesh.

abd8 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection principles. We collect only the data we genuinely need to provide our services, we keep it secure, and we never sell it to third parties for their own marketing purposes.

By registering an account on abd8, depositing funds, placing a wager, or otherwise using the abd8 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not use the abd8 platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the abd8 website and are incorporated herein by reference.

For the purposes of this Privacy Policy, abd8 acts as the data controller in respect of all personal data collected from players using the abd8 platform. As data controller, abd8 determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to our dedicated privacy support channel. You can reach us at:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available inside your abd8 account dashboard, 24 hours a day, 7 days a week, including all Bangladesh public holidays (BST, UTC+6).
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days of receipt.

Abd8 collects personal data across several categories depending on how you interact with the platform. The table below sets out the categories of data we collect, with examples of the specific data points within each category:

Abd8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request. In that case, such information is processed strictly for the purpose of administering the self-exclusion and is not used for any other purpose.

Abd8 collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide when you create an abd8 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you browse the abd8 platform, via server logs, session tracking technology, and first-party cookies (see Section 11 for full cookie details).
• Payment providers: When you transact via bKash, Nagad, Rocket, or Upay, the payment provider confirms the transaction reference, amount, and registered mobile number to abd8 for reconciliation purposes. Abd8 does not receive your full mobile banking PIN or password.
• Identity verification partners: Where third-party KYC services are used to verify your NID or passport, those providers return a verified status and a redacted data summary to abd8. Full identity document images may be retained by the KYC provider subject to their own privacy policy.
• Game providers: Game providers such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi may pass session and bet data back to abd8 via API for the purposes of account settlement, dispute resolution, and responsible gaming monitoring.
• Fraud and security tools: Device fingerprinting and fraud detection services may collect technical attributes of your device to identify suspicious activity and protect the integrity of the abd8 platform.

Abd8 uses your personal data only for the purposes described in this Policy. The primary purposes for which your data is used are:

• Account management: Creating, maintaining, and securing your abd8 account; processing login authentication; enabling two-factor authentication via SMS OTP to your Bangladesh mobile number.
• Service delivery: Processing deposits and withdrawals in BDT; settling bets and game outcomes; crediting bonuses and promotions; operating the abd8 VIP programme.
• Identity verification (KYC): Verifying your identity and age (21+ requirement) in compliance with applicable anti-money-laundering obligations and responsible gaming standards.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, collusion, bonus abuse, and money laundering. Technical data and behavioural patterns are analysed for anomalies that may indicate prohibited conduct.
• Legal and regulatory compliance: Maintaining transaction records, responding to lawful requests from competent authorities, and fulfilling any obligations imposed by applicable anti-money-laundering (AML) regulations.
• Customer support: Responding to your enquiries, resolving disputes, processing responsible gaming requests, and improving the quality of our support service.
• Responsible gaming: Monitoring your playing patterns for indicators of problem gambling; administering self-exclusion, deposit limits, and cooling-off requests; sending responsible gaming reminders where appropriate.
• Marketing communications: Sending you promotional emails, SMS notifications, and in-platform messages about abd8 bonuses, tournaments, and seasonal offers (e.g., BPL promotions, Eid offers, Pohela Boishakh specials) — subject to your communication preferences. You may opt out of marketing communications at any time via your account settings or by emailing [email protected].
• Platform improvement: Analysing aggregated, anonymised behavioural data to improve the abd8 platform, optimise game selection, and enhance the player experience for Bangladesh users.

Abd8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and abd8 — for example, creating your account, processing deposits and withdrawals, and settling bets. Without this processing, abd8 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML record-keeping obligations, and responding to lawful authority requests.
• Legitimate interests: Processing carried out for abd8's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for platform improvement.
• Consent: Processing for purposes where your consent is the appropriate legal basis, including sending you marketing communications and placing non-essential cookies on your device. You may withdraw your consent for these activities at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Abd8 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and bet data necessary to operate their games within the abd8 platform. These providers operate as data processors under contractual agreements that require them to maintain appropriate security standards and to use your data only for the purposes specified by abd8.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data required to process your deposits and withdrawals. Each payment provider is subject to its own privacy policy and regulatory obligations under Bangladesh Bank guidelines.
• KYC and identity verification partners: Third-party identity verification services receive the identity documents you submit during KYC. These partners are contractually required to process your documents only for verification purposes and to maintain ISO-certified data security standards.
• Fraud and security services: Fraud detection providers may process technical data about your device and session in order to identify and prevent fraudulent activity on the abd8 platform.
• Legal authorities: Abd8 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of abd8, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of abd8's business, your personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to process your data in accordance with this Privacy Policy or a policy that provides equivalent protection.

Abd8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, taking into account applicable legal, regulatory, and operational requirements. The following general retention periods apply:

After the applicable retention period has expired, abd8 will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, the resulting anonymised dataset no longer constitutes personal data and may be retained indefinitely for aggregated analytics purposes.

Abd8 applies a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the abd8 platform is encrypted using industry-standard TLS 1.2 or higher. This protects your login credentials, financial data, and personal information from interception in transit.
• Data Encryption at Rest: Sensitive personal data stored on abd8 servers — including NID details, payment method information, and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within abd8 is strictly role-based and limited to employees and contractors who require it for their specific job function. All access is logged and audited.
• Two-Factor Authentication (2FA): Abd8 supports SMS OTP-based 2FA for player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorised account access.
• Intrusion Detection: Abd8 employs automated intrusion detection and monitoring systems that flag unusual access patterns, large-scale data queries, and other anomalies for immediate review by our security team.
• Third-Party Security Audits: The abd8 platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All abd8 employees and contractors who handle personal data receive regular training on data protection obligations and security best practices.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any security incident affecting your abd8 account — such as an unauthorised login, unusual betting activity, or a suspected phishing attempt — please contact abd8 support immediately via live chat or by emailing [email protected].

As a player on the abd8 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact abd8 support at [email protected] or via live chat. We will respond to all verifiable requests within 30 calendar days.

If you are dissatisfied with how abd8 has handled a data protection request or complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Abd8 uses cookies and similar tracking technologies on the abd8 platform. Cookies are small text files placed on your device by the abd8 website that allow the platform to recognise your device, remember your preferences, and improve your experience.

Categories of Cookies Used by abd8

• Strictly Necessary Cookies: Required for the abd8 platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your language and currency preferences. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies: Enhance your experience by remembering your game preferences, display settings, and responsible gaming configurations. These are not strictly necessary but significantly improve platform usability.
• Analytics Cookies: Allow abd8 to understand how players use the platform — which pages are visited most frequently, where players drop off in the registration flow, and which games are most popular. Analytics data is aggregated and anonymised wherever possible. Abd8 uses first-party analytics tools rather than third-party analytics platforms where feasible.
• Marketing / Targeting Cookies: Used to deliver relevant promotional content to you based on your interests and betting behaviour. These cookies are placed only with your consent and can be disabled via your account cookie preferences at any time.

Cookie Retention Periods

Session cookies expire when you close your browser. Persistent cookies remain on your device for a defined period, typically between 30 days and 12 months, depending on their function. You can view and manage the cookies currently placed on your device through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your abd8 account.

Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. Abd8 acknowledges DNT signals where technically feasible and will limit non-essential tracking accordingly. However, strictly necessary cookies required for platform security and session management will continue to operate regardless of DNT signals.

The abd8 platform is strictly intended for adults aged 21 years and above. Abd8 does not knowingly collect personal data from any person under the age of 21. The age verification step during account registration is a mandatory control designed to prevent minors from accessing the abd8 platform.

If abd8 becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration, misrepresentation of age, or any other means — abd8 will immediately suspend the account, void any transactions associated with that account, and permanently delete all personal data collected from the minor without undue delay.

If you are a parent or guardian and you believe that your child under the age of 21 has registered an account on abd8 or has otherwise submitted personal data to abd8, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.

Abd8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our business. When material changes are made to this Policy, abd8 will take reasonable steps to notify affected players, which may include:

• Displaying a prominent notice on the abd8 platform homepage and login page for a period of at least 30 days following the change.
• Sending an email notification to the email address registered on your abd8 account.
• Sending an SMS notification to the Bangladesh mobile number registered on your abd8 account.
• Requiring you to re-acknowledge the updated Policy before continuing to use certain platform features.

The "Last Updated" date displayed at the top of this Policy and in the last-updated bar below the hero section will always reflect the date on which the most recent version came into effect. Continued use of the abd8 platform after a Policy update constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the abd8 platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to remain informed about how abd8 protects your data. Previous versions of this Policy are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way abd8 handles your personal data, please do not hesitate to get in touch with our support team. We take all privacy enquiries seriously and are committed to responding promptly and transparently.

• Email (plain text — not clickable): [email protected]
• Live Chat: Available 24/7 inside your abd8 account dashboard — response time under 5 minutes during peak hours (BST, UTC+6).
• Subject Access Requests: To submit a formal SAR, please email [email protected] with the subject line "Data Subject Access Request" and include your registered account username and Bangladesh mobile number so we can verify your identity before releasing any data.

Abd8 is committed to working with you to resolve any privacy concern fairly and efficiently. If you are not satisfied with our response, you retain the right to escalate your complaint to the appropriate supervisory authority.