abcd8 Privacy Policy

Introduction

abcd8 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that players across Bangladesh — whether in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar — entrust us with sensitive personal and financial information when they register and play. That trust is not taken lightly.

This Policy applies to all personal data collected through the abcd8 website at abcd8.im, including all account registration interfaces, deposit and withdrawal flows, live chat support sessions, email correspondence, and any other channel through which you interact with abcd8. It applies equally to data collected via desktop browsers and mobile-optimised interfaces.

abcd8 acts as the data controller for all personal data processed in connection with the operation of the Platform. This means we determine the purposes for which your personal data is collected and the means by which it is processed. Where we engage third-party processors (such as payment providers or KYC verification services), those parties act strictly on our instructions and are bound by data processing agreements that mirror the protections set out in this Policy.

This Policy should be read in conjunction with the abcd8 Terms & Conditions, which are available at abcd8.im/terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy prevails.

Personal Data We Collect

abcd8 collects the following categories of personal data from players. We have organised this information to make it as clear as possible what we hold and why:

2.1 Identity Data

Full legal name, date of birth, gender, and a copy of a government-issued identity document (National Identity Card, passport, or driving licence). This data is collected during the KYC verification process and is required to confirm that you are aged 21 or over and are the person you claim to be.

2.2 Contact Data

Email address, mobile phone number, and residential address (including district, city, and postcode). Contact data is used to communicate account-related notifications, respond to support enquiries, and deliver promotional communications where you have opted in to receive them.

2.3 Financial Data

Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay accounts; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank transfers; and the last four digits of any Visa or Mastercard used for deposits. abcd8 does not store full card numbers, CVV codes, mobile banking PINs, or internet banking passwords on our systems. All payment credential processing is handled by our PCI-DSS-compliant payment partners.

2.4 Transaction Data

A complete record of all deposits, withdrawals, bets, casino game rounds, bonus credits, and wagering activity associated with your account. Transaction data is retained for financial record-keeping purposes and to resolve any disputes that may arise regarding account activity.

2.5 Technical Data

IP address, device type, operating system, browser type and version, time zone setting, screen resolution, and device identifiers. Technical data is collected automatically when you access the Platform and is used for fraud prevention, security monitoring, and platform optimisation purposes.

2.6 Usage Data

Information about how you interact with the abcd8 Platform, including pages visited, game sessions played, search queries entered, links clicked, session duration, and navigation paths. Usage data helps us improve the Platform experience and personalise content recommendations where you have consented to personalisation.

2.7 Communications Data

Records of all communications between you and abcd8, including live chat transcripts, email correspondence, and support ticket history. These records are retained to maintain continuity of support, resolve disputes, and monitor the quality of our customer service.

2.8 Responsible Gaming Data

Records of any responsible gaming tools you have activated, including deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion orders. This data is retained for the duration of any active restriction and for a minimum of five years following account closure to ensure that self-exclusion decisions are honoured.

The table below summarises the data categories, the primary purpose for collection, and the lawful basis under which each category is processed:

How We Collect Your Data

abcd8 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the abcd8 registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support via live chat or email, or participating in a survey or promotional campaign.
• Automated collection: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the abcd8 Platform. See Section 07 for full details of our cookie practices.
• Payment providers: Confirmation data received from bKash, Nagad, Rocket, Upay, and our banking partners when a deposit or withdrawal transaction is processed. This includes transaction reference numbers, timestamps, and transaction status updates.
• KYC verification partners: Identity verification results and document authenticity scores returned by our third-party KYC service providers following the submission of identity documents by the Player.
• Fraud and risk detection services: Risk scores and device fingerprint data received from our fraud detection partners, used to identify suspicious account activity and protect the integrity of the Platform.
• Public sources: In limited circumstances, we may verify information against publicly available sources (such as official government records) where this is necessary to confirm KYC compliance.

Legal Basis for Processing

abcd8 processes personal data on the following lawful bases, as summarised in the table in Section 02 above:

• Contract performance: Processing that is necessary to register your account, process deposits and withdrawals, settle bets and casino game outcomes, and otherwise fulfil our contractual obligations to you as a registered Player.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, financial record-keeping requirements, and age verification regulations.
• Legitimate interests: Processing carried out to pursue our legitimate business interests, including fraud prevention, platform security, customer service quality monitoring, and general platform analytics, provided those interests are not overridden by your fundamental rights and freedoms. We conduct legitimate interests assessments before relying on this basis.
• Consent: Processing for which we have obtained your explicit prior consent, such as sending promotional emails or SMS messages, enabling personalised game recommendations, or placing non-essential cookies on your device. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Vital interests: In exceptional circumstances involving a risk to the life or safety of a Player (for example, where a player indicates a serious gambling-related personal crisis), we may process data to the extent necessary to protect those vital interests.

How We Use Your Personal Data

abcd8 uses the personal data it collects for the following specific purposes:

• Account registration and management: Creating and maintaining your abcd8 account, verifying your identity and age, managing account security settings, and processing account closure requests.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests to your verified payment method; and maintaining accurate transaction records in BDT.
• Sports betting and casino operations: Accepting and settling bets on cricket (BPL, IPL, T20 World Cup), football, kabaddi, and other sports; operating live casino games powered by Evolution Gaming and Ezugi; managing slots, Teen Patti, and Andar Bahar game sessions; and applying bonus and free spin credits to your account.
• Fraud prevention and security: Detecting and preventing fraudulent account registrations, payment fraud, multi-accounting, bonus abuse, and other forms of prohibited conduct as defined in the abcd8 Terms & Conditions.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance via live chat and email.
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion orders, and providing support resources to players who request them.
• Promotions and marketing (opt-in only): Sending personalised promotional offers, bonus notifications, BPL season betting boosts, Eid deposit bonus alerts, Pohela Boishakh free spin announcements, and other seasonal campaign communications — but only where you have explicitly opted in to receive marketing communications.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, fix bugs, optimise page load speeds, and develop new game categories and features.
• Legal compliance: Maintaining records required by applicable financial, anti-money laundering, and identity verification regulations, and cooperating with lawful requests from competent authorities.

Data Sharing & Third Parties

abcd8 does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

6.1 Payment Processing Partners

We share the minimum necessary financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and our Visa/Mastercard acquiring bank — to process your deposit and withdrawal transactions. These partners receive only the data required to execute the specific transaction and are bound by strict confidentiality obligations.

6.2 KYC and Identity Verification

Identity documents and personal details submitted for KYC verification are shared with our certified third-party identity verification provider. This provider processes your documents solely for the purpose of confirming your identity and age and returns a verification result to abcd8. They do not retain your documents beyond the period necessary to complete verification.

6.3 Fraud Detection and Risk Management

Technical data (including IP address, device fingerprint, and behavioural signals) is shared with our fraud detection and risk management partners for the purpose of identifying and preventing fraudulent activity on the Platform. This sharing is carried out under legitimate interests and is strictly limited to fraud prevention purposes.

6.4 Game Technology Providers

When you play games powered by Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, or Ezugi, the game provider's software may process certain technical and game session data to operate the game and determine outcomes. This data sharing is governed by our agreements with each provider and is limited to data necessary for game functionality.

6.5 Legal and Regulatory Disclosure

abcd8 may disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, or where we believe disclosure is necessary to protect the legal rights of abcd8 or to prevent fraud or illegal activity.

6.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of abcd8 or its assets, personal data held by abcd8 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the email address associated with their Account prior to the transfer taking effect, and will have the opportunity to request Account closure before the transfer is completed.

Cookies & Tracking Technologies

abcd8 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, remember your preferences, maintain your login session, and analyse how the Platform is used. The following categories of cookies are used on abcd8.im:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that maintain your login state while you are active on the Platform, security cookies that protect against cross-site request forgery, and cookies that remember your language and currency preferences. No personal data is shared with third parties through strictly necessary cookies.

7.2 Performance and Analytics Cookies

These cookies collect anonymous statistical information about how visitors use the Platform, such as which pages are visited most frequently and how users navigate between pages. This data is used exclusively to improve Platform performance. Analytics data is aggregated and does not identify individual users. These cookies are activated only where you have consented to performance cookies.

7.3 Functional Cookies

Functional cookies allow the Platform to remember choices you make, such as your preferred deposit method, your responsible gaming settings, and your game lobby display preferences. These cookies improve your experience but are not strictly necessary for Platform operation. They are activated only with your consent.

7.4 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will affect Platform functionality and may prevent you from accessing certain features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Data Security

abcd8 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and abcd8 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• AES-256 encryption at rest for all personal data stored in abcd8 databases, ensuring that data is protected even in the event of a physical infrastructure breach.
• Multi-factor authentication (MFA) options available for all Player accounts, providing an additional layer of protection against unauthorised account access.
• Role-based access controls that restrict internal access to personal data to only those abcd8 staff members whose job function requires it. All internal access to personal data is logged and audited.
• Regular security assessments including penetration testing and vulnerability scanning of the abcd8 Platform infrastructure, conducted by independent security professionals.
• PCI-DSS compliant payment processing through certified payment partners, ensuring that card and mobile banking payment data is handled to the highest available standard.
• Incident response procedures that ensure any confirmed personal data breach is identified, contained, and — where required — reported to affected Players and relevant authorities within the timeframes required by applicable law.

While abcd8 takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their abcd8 account, to enable multi-factor authentication where available, and to contact [email protected] immediately if they suspect any unauthorised access to their account.

Data Retention

abcd8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual. Where data has been anonymised for analytical purposes, the resulting anonymised dataset is not subject to deletion timelines as it no longer constitutes personal data.

Your Data Rights

abcd8 recognises and respects your rights in relation to your personal data. The following rights are available to all Players:

To exercise any of your data rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days. In complex cases, the response period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

Children's Privacy

The abcd8 Platform is strictly intended for adults aged 21 and over. abcd8 does not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and accounts where age cannot be verified are suspended pending the submission of satisfactory identity documents.

If abcd8 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a failure of the verification process, misrepresentation by the individual, or any other means — that account will be immediately suspended and all associated personal data will be securely deleted. Any funds in such an account will be handled in accordance with the abcd8 Terms & Conditions and applicable law.

If you are a parent or guardian and you believe that a minor in your care has registered an account with abcd8, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action within 48 hours of receiving your report.

Third-Party Links

The abcd8 Platform may contain references to third-party services, game providers, or payment platforms. While abcd8 takes care to partner only with reputable and well-established service providers, we are not responsible for the privacy practices or content of any third-party website or application. This Privacy Policy applies solely to data processed by abcd8 in connection with the operation of abcd8.im.

When you interact with third-party services such as bKash, Nagad, or Rocket to complete a payment transaction, you are subject to those providers' own privacy policies in addition to this Policy. We encourage you to review the privacy policies of any third-party services you use in connection with the abcd8 Platform.

Game software provided by Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi operates within the abcd8 Platform environment. Data processing by these providers in connection with game operations is governed by our data processing agreements with each provider and is limited to the minimum data necessary for game functionality.

Changes to This Privacy Policy

abcd8 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, or improvements to how we communicate our privacy commitments to Players.

When material changes are made to this Policy, abcd8 will notify registered Players by email to the address associated with their account at least 14 days before the changes take effect. The updated Policy will also be published on this page with a revised "Effective Date" at the top of the document. Your continued use of the abcd8 Platform after the effective date of any updated Policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Policy, you have the right to close your account before the changes take effect by contacting [email protected]. Account closure requests received in connection with a Policy update will be processed within 5 business days, and any withdrawable balance will be returned to your verified payment method.

We recommend that you review this Privacy Policy periodically to stay informed of how abcd8 protects your personal data. The version number and effective date shown at the top of this page and in the Table of Contents sidebar allow you to identify when the Policy was last updated.

Contact & Data Protection Officer

abcd8 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with applicable data protection law. If you have any questions about this Policy, wish to exercise your data rights, or want to raise a concern about how abcd8 handles your personal data, please contact our DPO using the details below:

All privacy-related communications must be submitted in writing via email. We are unable to process verbal privacy requests. When submitting a data rights request, please include your full name and the email address associated with your abcd8 account to allow us to identify your records. For security purposes, we may ask you to verify your identity before actioning any data rights request.

abcd8 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to your complaint or data rights request, you have the right to escalate your concern to a competent data protection authority or seek judicial remedy through the courts.