ab356 Privacy Policy

This Privacy Policy ("Policy") describes how ab356 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the ab356 platform, including the website at ab356.io, its mobile-optimised interface, and all associated services (collectively, the "Platform").

This Policy applies to all registered account holders, visitors to the Platform, and any individual whose personal data ab356 processes in connection with the operation of its services. By creating an ab356 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the ab356 Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform and are incorporated by reference into the overall agreement between you and ab356.

ab356 collects personal data in the following categories, depending on how you interact with the Platform:

ab356 does not collect or store full payment card numbers, mobile banking PINs, or online banking passwords. Financial credentials are processed directly by the relevant payment provider and are never transmitted to ab356 servers.

ab356 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your ab356 account, including verifying your identity, processing deposits and withdrawals, and managing your account preferences.
• Service Delivery: To provide access to all betting markets, casino games, live dealer tables, and other features available on the Platform. Your account data and usage history are used to personalise your experience where applicable.
• Transaction Processing: To process and record all deposits, withdrawals, bets, and game sessions accurately. Financial data is used solely to facilitate and verify transactions between you and ab356.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and that the identity information provided is accurate. KYC verification is required before withdrawals are approved and may be triggered at any point during your account lifecycle.
• Anti-Money Laundering (AML): To monitor transactions and account activity for indicators of money laundering, fraud, or other financial crime, in accordance with applicable AML obligations.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Responsible Gaming: To operate responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion, and to identify players who may be showing signs of problem gambling behaviour so that appropriate support can be offered.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, unauthorised account access, and other security threats to the Platform and its players.
• Legal Compliance: To comply with applicable laws and regulatory obligations, including responding to lawful requests from government authorities or law enforcement agencies.
• Platform Improvement: To analyse usage patterns and technical data in order to improve the performance, reliability, and functionality of the Platform. This analysis is conducted on aggregated and anonymised data wherever possible.
• Marketing Communications: To send you promotional emails, SMS notifications, or in-platform messages about bonuses, promotions, and new features — but only where you have given your consent to receive such communications. You may opt out at any time.

ab356 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and ab356 — specifically, to operate your account, process transactions, and deliver the services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC/AML requirements and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for ab356's legitimate interests in operating a secure, fair, and commercially viable platform — for example, fraud detection, security monitoring, and platform analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing is based on your freely given, specific, informed, and unambiguous consent — for example, in the case of optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ab356 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared only in the following limited and controlled circumstances:

• Payment Processors: Your financial data (such as your bKash or Nagad mobile number and transaction reference) is shared with the relevant mobile money operator or bank solely to process the specific transaction you have initiated.
• Game Providers: Technical session data (such as a session token and stake amount) is shared with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely to deliver the game sessions you have initiated.
• Identity Verification Services: Identity documents and personal data submitted for KYC verification may be shared with trusted third-party identity verification service providers who are contractually bound to process such data securely and for verification purposes only.
• Legal & Regulatory Authorities: ab356 may disclose personal data to law enforcement agencies, regulators, courts, or other government bodies where required to do so by law, court order, or other binding legal obligation.
• Professional Advisers: ab356 may share personal data with its legal advisers, auditors, or other professional service providers on a strictly need-to-know basis and subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of ab356's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to how your data is handled.

All third parties with whom ab356 shares personal data are required to handle that data securely, to use it only for the specified purpose, and to comply with all applicable data protection obligations. ab356 does not permit any third party to use your personal data for their own marketing purposes.

ab356 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform efficiently and to improve your experience as a player. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable you to log in, maintain a session, navigate between pages, and use core features such as the account dashboard and game lobby. These cookies cannot be disabled without materially impairing the Platform's functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, last visited game category, and responsible gaming settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — such as which pages are visited most frequently and where users encounter errors. This information helps ab356 identify areas for improvement. No individual player is identified through analytics cookies.
• Security Cookies: These cookies help ab356 detect and prevent fraudulent activity, unauthorised account access, and other security threats by identifying unusual patterns in session behaviour.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the Platform. ab356 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on other websites.

ab356 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and the ab356 Platform is encrypted using 256-bit SSL/TLS protocols. This applies to account logins, deposit and withdrawal flows, and all API communications.
• Data Storage Security: Personal data stored on ab356 servers is encrypted at rest. Database access is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Network Security: The ab356 infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing by independent security specialists.
• Access Controls: Access to personal data within the ab356 organisation is granted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Incident Response: ab356 maintains a formal data breach response plan. In the event of a personal data breach that poses a risk to affected individuals, ab356 will notify impacted players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

ab356 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, plus a period of five years following account closure to meet anti-money laundering and financial record-keeping obligations.
• Transaction Records: Financial transaction records (including deposit and withdrawal history) are retained for a minimum of five years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Identity Verification Documents: Copies of identity documents submitted for KYC purposes are retained for five years from the date of submission or from the date of account closure, whichever is later.
• Communications Data: Customer support communications and live chat transcripts are retained for two years from the date of the interaction, after which they are securely deleted unless they are subject to an ongoing dispute or legal hold.
• Marketing Data: If you have consented to receive marketing communications, your marketing preferences and contact details will be retained until you withdraw your consent or until two years after your last interaction with ab356 marketing content, whichever occurs first.
• Technical & Usage Data: Aggregated and anonymised analytics data may be retained indefinitely for platform improvement purposes, as it cannot be used to identify any individual player.

When personal data is no longer required and the applicable retention period has expired, ab356 will securely delete or anonymise that data in a manner that ensures it cannot be reconstructed or re-identified.

As a player whose personal data is processed by ab356, you have the following rights in relation to that data. To exercise any of these rights, please contact the ab356 support team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 72 hours.

• Right of Access: You have the right to request a copy of all personal data that ab356 holds about you, along with information about how and why it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that ab356 holds about you. You may update certain details directly within your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to ab356's legal and regulatory obligations to retain certain records.
• Right to Restriction: You have the right to request that ab356 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that this data be transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ab356's legitimate interests. ab356 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

ab356 does not knowingly collect, use, or retain personal data from any individual under the age of 21. The Platform is intended exclusively for adults aged 21 and above. This is a non-negotiable requirement that applies to all players regardless of jurisdiction.

If ab356 discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, it will immediately close the relevant account, void any associated balance or winnings, and securely delete all personal data associated with that account.

If you believe that a minor has registered an ab356 account or has provided personal data to the Platform , please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

ab356 may send you promotional messages about bonuses, new games, seasonal offers, and platform updates by email or SMS, but only where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account preferences.

You may opt out of marketing communications at any time using any of the following methods:

• Email Unsubscribe: Click the "unsubscribe" link included in the footer of any marketing email sent by ab356. Your preference will be updated within 24 hours.
• Account Settings: Update your communication preferences directly within your ab356 account dashboard under the Notifications or Privacy settings section.
• Support Request: Contact the ab356 support team via live chat or email at [email protected] and request to be removed from all marketing communications. Your request will be processed within 24 hours.

Please note that opting out of marketing communications does not affect your receipt of essential service communications, such as transaction confirmations, account security alerts, KYC verification requests, and updates to these Terms or this Privacy Policy. These operational communications are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

ab356 does not share your contact details with third-party marketers. Any promotional communications you receive will originate from ab356 directly and will relate exclusively to the ab356 platform and its services.

The ab356 Platform may, from time to time, contain references to or descriptions of third-party services — such as payment providers (bKash, Nagad, Rocket, Upay) or game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While ab356 works with these providers to deliver the Platform's services, each third party operates under its own privacy policy and data handling practices.

ab356 is not responsible for the privacy practices or the content of any third-party service, website, or application. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the ab356 Platform.

The inclusion of a reference to a third-party service provider on the Platform does not constitute an endorsement of that provider's privacy practices by ab356.

ab356 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, or improvements to the Platform's features and services.

When a material change is made to this Policy, ab356 will notify registered players by email to the address associated with their account, and will display a prominent notice on the Platform for a minimum of 14 days following the update. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent change.

Your continued use of the Platform following notification of a Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should stop using the Platform and contact our support team to request account closure. Closing your account does not affect ab356's right to retain data where required by applicable legal or regulatory obligations.

We recommend that you review this Privacy Policy periodically so that you remain informed about how ab356 is protecting and handling your personal data. The most current version of the Policy is always available at ab356.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 9, please contact the ab356 data support team using the details below. All privacy-related enquiries are handled by a dedicated team member and will receive a response within 72 hours.

• Email: [email protected] — plain text, not a clickable link. Use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week from within your ab356 account dashboard after logging in.
• Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh.
• Response Time: Privacy and data rights requests are responded to within 72 hours. Complex erasure or portability requests may require up to 30 days to complete, during which time ab356 will keep you updated on progress.
• Language: All customer support and data rights communications are conducted in English.