Privacy Policy — How ab365 Collects, Uses, and Protects Your Data

ab365 is an online betting and casino platform accessible at https://ab365.onl, offering cricket betting, live casino games, slots, and related entertainment services to adult players aged 21 and above who are located in Bangladesh.

For the purposes of this Privacy Policy, ab365 acts as the data controller — meaning we determine the purposes for which and the means by which personal data provided by Players and visitors is processed. All questions and requests relating to personal data held by ab365 should be directed to our support team at [email protected].

We are committed to handling personal information with respect, transparency, and a genuine regard for the privacy interests of all individuals who interact with our platform.

This Privacy Policy applies to all personal data collected, processed, or stored by ab365 in connection with:

• Your registration and maintenance of an ab365 player account;
• Your use of any game, betting market, or feature available on the ab365 platform;
• Any deposit, withdrawal, or other financial transaction conducted through your ab365 account;
• Your communications with the ab365 customer support team via email or live chat;
• Your visit to the ab365 website at https://ab365.onl, including pages visited and actions taken while browsing.

This Policy does not apply to third-party websites, services, or platforms that may be referenced or linked from the ab365 platform. Those entities maintain their own independent privacy policies, and ab365 bears no responsibility for their data-handling practices.

The following table sets out the categories of personal data ab365 may collect and the primary purpose associated with each category:

Where you provide personal data relating to a third party (for example, a nominated next-of-kin contact), you confirm that you have obtained that person's consent to share their information with ab365 for the stated purpose.

ab365 collects personal data through the following means:

• Direct Submission: Information you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting support.
• Automated Technical Collection: Technical and usage data collected automatically when you visit or interact with the ab365 platform, including via server logs, session cookies, and browser fingerprinting technologies used for fraud prevention.
• Payment Processors: Confirmation data returned by payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) upon completion or failure of a transaction, including transaction reference numbers and status codes.
• Identity Verification Services: Results and flags returned by third-party KYC and age-verification services to whom document data is transmitted for processing as part of our verification obligations.
• Game Providers: Game session data, round results, and RNG outcomes logged by Game Providers (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, and others) in connection with games played on the ab365 platform.

ab365 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to fulfil our contractual obligations to you under the ab365 Terms & Conditions, including operating your account, processing bets, and managing payments.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering obligations, age-verification requirements, and any lawful request from competent authorities.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring, and improving the ab365 platform, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as sending promotional offers, newsletters, or personalised bonus communications, where you have clearly and actively opted in. You may withdraw consent for marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

ab365 uses the personal data we hold about you for the following specific purposes:

• Creating, maintaining, and administering your ab365 player account;
• Verifying your identity and age in compliance with our 21+ policy and anti-fraud obligations;
• Processing deposits and withdrawals through your selected payment method;
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions;
• Monitoring betting and gaming behaviour to identify signs of problem gambling and to apply responsible gaming interventions where appropriate;
• Providing customer support via email and live chat, and maintaining records of your support interactions for quality assurance;
• Sending you account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts — these are non-optional service communications;
• Sending promotional offers, bonus notifications, and marketing materials relating to ab365 services — only where you have opted in to receive such communications;
• Improving the ab365 platform through analysis of aggregated, anonymised usage data;
• Complying with any lawful request or legal obligation imposed by competent authorities.

ab365 does not use personal data to make automated decisions that produce significant legal or similarly significant effects on you without human review. Responsible gaming interventions triggered by automated monitoring are reviewed by a member of the ab365 support team before being communicated to the Player.

ab365 does not sell, rent, or trade your personal data to any third party for commercial gain. We may share personal data with the following categories of recipients solely to the extent required to operate the platform and meet our legal obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers, to whom we transmit transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age-verification services that process your identity documents and return a verification result to ab365.
• Game Providers: Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, and other licensed game studios whose software operates on the ab365 platform. These providers receive the minimum data necessary to authenticate your game session and record outcomes.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud-detection service providers that process technical data on ab365's behalf under strict data-processing agreements.
• Competent Authorities: Regulatory bodies, law enforcement agencies, or courts where ab365 is required or permitted by law to disclose information. ab365 will seek to notify affected Players of such disclosures where legally permissible.

All third-party service providers who receive personal data from ab365 are required to process that data only for the specific purposes instructed by ab365 and to maintain appropriate technical and organisational security measures.

The ab365 platform uses cookies and similar technologies to ensure the platform functions correctly, to maintain session security, and to gather anonymised usage data. The following cookie categories are used:

ab365 does not use third-party advertising cookies or cross-site tracking technologies. Strictly necessary cookies cannot be disabled as they are essential to platform operation. Functional and analytical cookies may be managed through your browser settings; however, disabling functional cookies may affect your experience on the platform.

ab365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your ab365 account and for a period of five years following permanent account closure, to support any post-closure financial or regulatory enquiry.
• KYC and Identity Documents: Retained for a minimum of five years from the date of submission, in line with standard anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Email and chat records retained for three years from the date of the interaction, or longer if the matter is subject to an ongoing dispute.
• Technical and Usage Logs: Retained for 12 months from the date of generation, after which they are deleted or anonymised.
• Marketing Consent Records: Retained for the duration of your marketing opt-in and for two years following any withdrawal of consent, to demonstrate compliance.

When personal data is no longer required and no legal retention obligation applies, ab365 will securely delete or irreversibly anonymise that data in accordance with our internal data destruction procedures.

ab365 maintains a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 or higher encryption on all data transmitted between the player's device and the ab365 platform;
• Salted cryptographic hashing of all account passwords — passwords are never stored in recoverable plaintext;
• Encryption of sensitive documents stored for KYC purposes, with strict role-based access controls limiting access to authorised personnel only;
• Continuous monitoring of platform infrastructure for intrusion attempts, anomalous behaviour, and security vulnerabilities;
• Regular internal security reviews and, where appropriate, independent security assessments;
• Staff training on data protection obligations and incident response procedures.

In the event of a personal data breach that poses a risk to Player rights, ab365 will take immediate containment steps and notify affected Players via their registered email address as promptly as reasonably practicable.

Subject to applicable legal limitations, you have the following rights with respect to the personal data ab365 holds about you:

• Right of Access: You may request a copy of the personal data ab365 holds about you, together with information about how it is being processed. Requests will be responded to within 30 days.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Where possible, corrections will be applied promptly and any third parties to whom the data has been shared will be notified.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Note that data subject to anti-money-laundering retention requirements cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that ab365 suspend active processing of your personal data in certain circumstances, for example while a rectification request is being considered.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to ab365 for the purpose of transferring it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. ab365 will review the objection and cease processing unless compelling legitimate grounds exist that override your privacy interests.

To exercise any of the above rights, please submit a written request to [email protected], including your registered username or account reference number to allow us to locate your records. We will acknowledge your request within 48 hours and respond substantively within 30 days, or notify you if a legitimate extension of that period is required.

The ab365 platform is strictly intended for adults aged 21 and above. ab365 does not knowingly collect personal data from individuals under the age of 21 and will not create accounts for minors.

If ab365 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, all pending bets will be voided, any deposits will be returned to the payment source where possible, and the personal data of the minor will be securely deleted as soon as legally permissible.

Parents and legal guardians who believe their child has registered an ab365 account should contact [email protected] immediately. ab365 will treat such reports as urgent and investigate promptly.

The ab365 platform may reference or display content from third-party Game Providers (such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe) whose game interfaces are embedded within the ab365 lobby. When you launch and play a game provided by one of these studios, your game-session data is processed by that provider's systems in addition to being recorded by ab365.

Each Game Provider operates under its own privacy policy and data protection framework. ab365 is not responsible for the privacy practices of Game Providers beyond the data-processing obligations set out in our agreements with them. We encourage you to review the privacy documentation of any Game Provider whose games you play through the ab365 platform.

ab365 does not include links to external third-party websites for commercial or advertising purposes. Any reference to external services on the ab365 platform is for informational context only and does not constitute an endorsement or acceptance of responsibility for those services' privacy practices.

ab365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or platform features. When material changes are made, ab365 will:

• Update the "Last updated" date and version number at the top of this page;
• Make reasonable efforts to notify registered Players of material changes via their registered email address at least 14 days before the updated Policy takes effect;
• Where required, seek fresh consent from Players for any new processing activities that require it.

Your continued use of the ab365 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with material changes to this Policy, you should close your account before the effective date and request withdrawal of any remaining balance.

We recommend bookmarking this page and reviewing it periodically. The version number displayed at the top of this Policy allows you to confirm you are reading the most recent published version.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ab365 holds about you, please contact our dedicated support team using the details below:

• Email: [email protected] (responses within 4 hours)
• Live Chat: Available 24/7 via your ab365 account dashboard (average response under 2 minutes)
• Support Language: English
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

When contacting us about a privacy matter, please include your registered username or account reference number and a clear description of your request or concern. This will allow us to locate your account records and respond accurately and efficiently.