abu8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how abu8 ("abu8", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "the Player") who access or use the abu8 online gaming platform available at https://abu8.ws ("the Platform").

abu8 is committed to handling your personal data with transparency, integrity, and care. We recognise that privacy is a fundamental right, and we design our data practices around the principle of collecting only what is genuinely necessary to deliver a high-quality, secure gaming experience to players in Bangladesh.

By creating an abu8 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to request account closure.

2. Data Controller

abu8 acts as the data controller for the personal information processed in connection with the Platform. As data controller, abu8 determines the purposes and means by which your personal data is processed. All data processing activities described in this Policy are carried out by abu8 or by trusted service providers acting on our behalf under strict contractual obligations.

For all privacy-related enquiries, corrections, or deletion requests, please contact our support team using the details provided in Section 15 of this Policy.

3. Data We Collect

abu8 collects the following categories of personal data in the course of operating the Platform:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where a player voluntarily discloses health-related information in the context of a responsible gaming request (e.g., a self-exclusion application citing a gambling disorder). Such disclosures are handled with heightened sensitivity and used solely for the stated welfare purpose.

4. How We Collect Your Data

abu8 collects personal data through the following channels:

• Direct Provision: Information you supply when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including data gathered via cookies, server logs, and similar tracking technologies (see Section 10 for full cookie details).
• Payment Providers: Transaction confirmation data received from mobile financial service providers such as bKash, Nagad, and Rocket when you initiate a deposit or withdrawal.
• Identity Verification Services: Where we use third-party KYC services to assist in verifying your identity documents, those providers may return verification status data to abu8 for use in your account record.

5. How We Use Your Data

abu8 uses your personal data for the following purposes:

5.1 Account Management

To create, maintain, and administer your abu8 account; to verify your identity and age in compliance with our 21+ policy; to process your deposits and withdrawals in Bangladeshi Taka; and to communicate important account-related information including transaction confirmations and security alerts.

5.2 Platform Operation and Improvement

To deliver the games and sports betting services you access on the Platform; to diagnose technical faults; to analyse usage patterns and improve navigation, game selection, and overall platform performance for Bangladeshi players.

5.3 Security and Fraud Prevention

To protect the integrity of the Platform; to detect and investigate suspicious activity, multiple account registrations, fraudulent transactions, and attempts to exploit the Platform; and to enforce our Terms & Conditions.

5.4 Responsible Gaming

To monitor gaming behaviour for signs of problematic gambling; to administer voluntary and mandatory deposit limits, cool-off periods, and self-exclusions; and to contact players where our responsible gaming obligations require us to intervene.

5.5 Legal and Regulatory Compliance

To meet record-keeping obligations, respond to lawful requests from competent authorities, and fulfil anti-money-laundering due diligence requirements applicable to offshore gaming operators serving Bangladesh.

5.6 Marketing Communications

Where you have explicitly opted in to receive promotional communications, abu8 may send you information about bonuses, new games, and seasonal promotions relevant to Bangladeshi players (for example, Eid offers or BPL cricket promotions). You may opt out of marketing communications at any time by contacting our support team. Opting out of marketing does not affect the delivery of essential account communications.

6. Legal Basis for Processing

abu8 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at account registration — including account management, payment processing, and game delivery.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering record-keeping requirements and responses to lawful authority requests.
• Consent: Processing based on your freely given, specific consent — principally for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7. Data Sharing

7.1 Service Providers

abu8 may share your personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay), KYC and identity verification providers, cloud infrastructure providers, and customer support software vendors. All such providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they perform for abu8.

7.2 Game Studio Providers

Some games on the abu8 Platform are operated by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive limited technical session data (such as a pseudonymous session token and stake amount) to facilitate game delivery. They do not receive your full name, contact details, or payment information.

7.3 Legal and Regulatory Disclosures

abu8 may disclose your personal data where required to do so by applicable law, court order, or lawful request from a competent authority. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of abu8's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it.

7.5 No Sale of Data

abu8 does not sell, rent, or otherwise trade your personal data to third parties for their own marketing or commercial purposes. This is an unconditional commitment.

8. Data Retention

abu8 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following retention standards:

• Active Account Data: Retained for the duration of your active relationship with abu8.
• Closed Account Data: Identity, contact, financial, and transaction records are retained for a minimum of 5 years following account closure, in line with anti-money-laundering record-keeping obligations.
• Support and Communications Data: Live chat transcripts and support ticket records are retained for 2 years from the date of the interaction.
• Marketing Preference Records: Opt-in and opt-out records are retained for 3 years after your last interaction with a marketing communication, to demonstrate compliance with consent requirements.
• Technical and Log Data: Server logs and IP records are retained for 12 months for security and fraud investigation purposes.

When data is no longer required, abu8 deletes or anonymises it using secure data disposal methods.

9. Security Measures

abu8 implements a layered approach to data security that includes the following technical and organisational measures:

• Encryption in Transit: All data exchanged between your browser or app and abu8 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data — including identity documents, payment details, and account credentials — is encrypted at rest in our database infrastructure.
• Access Controls: Access to personal data within abu8 is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role.
• Two-Factor Authentication: Internal administrative access to systems holding player data requires multi-factor authentication.
• Regular Security Reviews: abu8 conducts periodic security assessments of its infrastructure, data handling processes, and third-party service providers.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, abu8 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

While abu8 employs robust security measures, no internet-based system can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying abu8 immediately if you suspect your account has been compromised.

10. Cookies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and store information about your preferences and session state.

10.2 Cookies Used by abu8

abu8 uses only the following limited categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session authentication cookies that keep you logged in and security cookies that help detect fraudulent activity. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language setting (English) and your responsible gaming limits configuration. These improve your experience but are not essential.
• Analytics Cookies (First-Party Only): abu8 uses first-party analytics to understand aggregate usage patterns — such as which game categories are most popular among Bangladeshi players — in order to improve the Platform. These cookies do not track you across other websites and are not shared with third-party analytics providers.

abu8 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies of any kind.

10.3 Managing Cookies

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytics cookies will not prevent you from accessing core services.

11. Your Privacy Rights

As a player on the abu8 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 15.

• Right of Access: You have the right to request a copy of all personal data abu8 holds about you. We will provide this within 30 days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure: You may request that abu8 delete your personal data where it is no longer necessary for the purpose for which it was collected, and where no legal retention obligation requires us to keep it.
• Right to Restrict Processing: You may ask abu8 to pause the processing of your data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. abu8 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

abu8 will respond to all valid privacy rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

12. Children's Privacy

The abu8 Platform is strictly restricted to individuals who are 21 years of age or older. abu8 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the relevant account, delete the associated data, and — if applicable — refund any deposits to the payment source.

If you believe that a minor has created an abu8 account or provided personal data to the Platform, please notify us immediately at the contact details provided in Section 15.

13. International Data Transfers

abu8 operates as an internationally licensed offshore platform. As such, personal data collected from Bangladeshi players may be stored and processed on servers located outside Bangladesh. Where personal data is transferred to servers in other jurisdictions, abu8 ensures that appropriate safeguards are in place — including contractual data transfer agreements — to maintain a level of data protection equivalent to the standards described in this Policy.

By using the abu8 Platform, you acknowledge and consent to the transfer of your personal data to servers outside Bangladesh for the purposes described in this Policy.

14. Changes to This Policy

abu8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform functionality. Where changes are material, abu8 will provide at least 7 days' prior notice by displaying a prominent notice on the Platform and, where practicable, by notifying registered players via their account contact details.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent version took effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept an updated Policy, you must cease using the Platform and request account closure.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data abu8 holds about you, please contact our support team through any of the following channels:

Live Chat: Available 24/7 directly on the abu8 Platform
Email: [email protected]
Support Hours: 24/7 (BST priority hours 10:00–02:00)
Response Time: We aim to acknowledge all written privacy requests within 24 hours and to provide a substantive response within 30 days.

When submitting a privacy rights request, please include your registered account username and mobile number so we can identify your account record promptly. Do not include your password in any written communication to abu8.