ab7778 Privacy Policy

1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data. The categories of data we collect directly from you include:

• Identity data: full legal name, date of birth, national ID or passport number (for verification purposes).
• Contact data: email address, phone number, and residential address.
• Financial data: payment method details such as bKash account number, Nagad account number, Rocket account number, Upay details, and card information (Visa, Mastercard). Full card numbers are never stored on our servers; they are processed through our secure payment partners.
• Account credentials: username and encrypted password. Passwords are stored using one-way hashing and are never accessible in plain text, even to ab7778 staff.
• Correspondence data: records of messages you send to our support team, including the content, date, and time of communications.

2 Information Collected Automatically

When you access and use the ab7778 platform, certain technical data is collected automatically by our systems. This includes:

• Device and connection data: IP address, browser type and version, operating system, device model, and screen resolution.
• Usage data: pages visited, games played, bet amounts and outcomes, session duration, clicks, and navigation paths.
• Location data: general geographic location inferred from your IP address (country and city level only; we do not collect precise GPS coordinates).
• Cookie data: session identifiers, preference settings, and analytics identifiers stored via cookies and similar tracking technologies. See Section 8 (Cookies) for full details.

3 Information from Third Parties

In limited circumstances, ab7778 may receive personal data about you from third parties. This includes identity verification data returned by KYC (Know Your Customer) service providers when we ask them to cross-check the documents you submit, and fraud-prevention signals from payment processors. We do not purchase marketing lists or obtain your data from social media platforms or data brokers.

4 Primary Purposes

ab7778 processes your personal data for the following primary purposes, each of which is necessary to deliver the service you have signed up for:

• Creating and managing your player account, including authentication and access control.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank.
• Verifying your identity and age (21+) as required to operate a responsible gaming platform.
• Detecting, investigating, and preventing fraud, money laundering, multi-accounting, and other prohibited activity.
• Providing customer support and responding to your queries and complaints.
• Calculating and settling bets, awarding bonuses, and administering promotional offers.
• Complying with our responsible gaming obligations, including monitoring for problem gambling indicators and enforcing self-exclusions.

5 Secondary Purposes

With your consent, or where we have a legitimate interest, we may also use your data for the following secondary purposes:

• Sending you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers — but only where you have opted in to marketing communications.
• Conducting internal analytics to understand how players use the platform and to improve the overall experience.
• Personalising the games and offers displayed to you based on your gaming history and preferences.
• Measuring the effectiveness of our marketing campaigns through aggregated, anonymised analytics data.

You may withdraw consent for secondary purposes at any time by contacting [email protected] or by adjusting your account notification preferences.

6 Service Providers

ab7778 works with a small number of carefully selected third-party service providers who process personal data on our behalf. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards. The categories of service providers we use include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors handle transaction data necessary to complete deposits and withdrawals.
• Identity verification providers: KYC partners who verify the authenticity of government-issued identification documents you submit.
• Technology and hosting providers: cloud infrastructure and server operators that host the ab7778 platform and its databases.
• Customer support tools: helpdesk software providers that facilitate our live support and ticketing systems.
• Fraud prevention services: providers who analyse transaction and behaviour patterns to identify and block fraudulent activity.

7 Legal and Regulatory Disclosure

ab7778 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies when required to do so by applicable law, court order, or legal process. In such cases, ab7778 will disclose only the minimum amount of information required to comply with the legal obligation. Where legally permitted, we will notify you of such a disclosure request before responding to it.

8 Business Transfers

In the event that ab7778 undergoes a merger, acquisition, sale of assets, or other business restructuring, personal data held by us may be transferred to the successor entity as part of that transaction. In such circumstances, the receiving entity will be required to honour the commitments made in this Privacy Policy, and you will be notified of any material change to how your data is processed before the transfer takes effect.

9 Retention Periods

ab7778 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected. The table below sets out the standard retention periods we apply to different categories of data.

10 Deletion and Anonymisation

When a retention period expires, ab7778 will securely delete or irreversibly anonymise the relevant personal data. Anonymised data — which can no longer be linked back to any individual — may be retained indefinitely for statistical and analytical purposes. When you request deletion of your account (see Section 6 — Your Rights), we will initiate our deletion process promptly, subject to any legal retention obligations that require us to keep certain records for a specified period.

11 Technical Safeguards

ab7778 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption: all data transmitted between your browser or device and our servers is encrypted using industry-standard TLS protocols.
• Password hashing: account passwords are stored using strong one-way cryptographic hashing algorithms; plain-text passwords are never stored.
• Access controls: internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular security training.
• Firewalls and intrusion detection: our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning.
• Data backups: regular encrypted backups ensure data can be recovered in the event of a system failure.

12 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, ab7778 will take immediate steps to contain the breach, assess its impact, and notify affected players without undue delay. Notification will be sent to the email address registered on your account and will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the incident.

13 Rights Available to You

As a player using the ab7778 platform, you have the following rights with respect to your personal data:

• Right of access: you may request a copy of the personal data we hold about you at any time. We will provide this within 30 days of a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: in certain circumstances you may request that we limit how we use your personal data while a dispute or correction request is being resolved.
• Right to data portability: you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: you may object to processing carried out on the basis of legitimate interests where you believe your individual rights and freedoms override those interests.

14 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". To protect your privacy, we will ask you to verify your identity before acting on any request. We will respond to all verified requests within 30 days. If a request is complex or we receive a high volume simultaneously, we may extend this period by a further 60 days, with prior notice given to you. There is no charge for exercising your rights in standard circumstances.

15 How ab7778 Uses Cookies

ab7778 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyse usage patterns. The categories of cookies we use are:

• Strictly necessary cookies: essential for the platform to function. They enable login sessions, maintain your bet slip, and keep the platform secure. These cookies cannot be disabled.
• Functional cookies: remember your preferences such as language settings and notification opt-in status to provide a more personalised experience.
• Analytics cookies: collect anonymised data about how players navigate the platform, which pages are most visited, and where errors occur. This helps us improve the user experience over time.
• Marketing cookies: used only where you have given explicit consent to receive personalised promotional content based on your gaming behaviour and preferences.

You may manage your cookie preferences through your device browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the platform and may prevent you from logging in or completing transactions.

16 Policy Updates

ab7778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify you by sending an email to your registered address and by posting a prominent notice on the platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the ab7778 platform after the effective date of any amendments constitutes your acceptance of the revised Policy.

17 Contact for Privacy Matters

If you have any questions, concerns, or complaints about this Privacy Policy or about how ab7778 handles your personal data, please contact us in writing at [email protected]. We take all privacy concerns seriously and will investigate and respond to every query thoroughly. Our privacy team aims to provide an initial acknowledgement within 3 business days and a full response within 20 business days of receipt.