abd7 Privacy Policy

1Introduction

This Privacy Policy (hereinafter "Policy") describes how abd7 (hereinafter "abd7", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access the abd7 platform at https://abd7.io and all associated subdomains and mobile interfaces (collectively, "the Platform").

abd7 is committed to safeguarding the privacy of every individual who interacts with our Platform. We operate in accordance with internationally recognised data protection principles and are aligned with the requirements of the General Data Protection Regulation (GDPR) as a benchmark for responsible data handling, even where local legislation may not yet mandate equivalent standards.

By registering an account, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read in conjunction with abd7's Terms and Conditions and Responsible Gaming Policy, both of which are available on the Platform.

2Data We Collect

abd7 collects personal data through several channels: information you provide directly during registration and KYC verification, data generated automatically through your use of the Platform, and information received from third-party service providers such as payment processors and identity verification agencies.

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, country of residence, and preferred currency (BDT or INR).
• KYC verification documents: Government-issued photo identification (National ID card, passport, or driving licence), proof of address (utility bill, bank statement), and selfie photographs where required.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and card numbers (stored in tokenised form only — full card numbers are never held on abd7 servers).
• Communication records: Content of live chat conversations, email correspondence, and any support tickets raised with the abd7 team.
• Responsible gaming preferences: Deposit limits, session reminders, cool-off periods, and self-exclusion elections made through the account dashboard.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, games played, bet history, session duration, click patterns, and feature interactions.
• Geolocation data: Approximate geographic location derived from your IP address, used for jurisdictional compliance and fraud detection. Precise GPS-level location is not collected.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.

2.3 Data Received from Third Parties

• Identity verification providers: Confirmation of identity checks, watchlist screening results, and politically exposed person (PEP) status assessments.
• Payment processors: Transaction confirmation references, payment method validation results, and chargeback notifications.
• Game providers: Game session records, round-level data, and payout confirmations from providers including Pragmatic Play, Evolution Gaming, Ezugi, Habanero, and Spribe.
• Fraud prevention services: Risk scores, device fingerprint signals, and flagging data used to detect suspicious account activity.

3How We Use Your Data

abd7 processes personal data only for specific, legitimate purposes. We do not use your data for purposes incompatible with those stated below. The primary purposes for which we process personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account balance, and provide you with access to all Platform features.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, verify that payment accounts are held in your name, and maintain accurate financial records.
• KYC and compliance: To verify your age (minimum 21 years), confirm your identity, screen against sanctions and PEP lists, and meet applicable anti-money laundering (AML) obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and any other activity that may harm the Platform, other players, or the integrity of sporting events.
• Service delivery and improvement: To operate the betting and gaming Platform, resolve technical issues, improve game performance, and develop new features based on aggregated usage patterns.
• Customer support: To respond to your enquiries, resolve complaints, process account closure requests, and provide assistance via live chat and email.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, enforce self-exclusion elections, apply deposit limits, and send session reminders where you have requested them.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions via email or SMS — only where you have given explicit consent and only to the extent permitted by applicable law. You may withdraw marketing consent at any time.
• Legal and regulatory obligations: To retain records as required by applicable law, respond to lawful requests from regulatory authorities, and fulfil reporting obligations under AML and counter-financing of terrorism (CFT) frameworks.

4Legal Basis for Processing

Where GDPR-aligned legal bases apply, abd7 processes personal data under one or more of the following lawful grounds:

• Contractual necessity: Processing required to perform the contract between abd7 and the Player — including account registration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing necessary for abd7's legitimate interests in fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided those interests are not overridden by the Player's rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — including marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5Data Sharing and Disclosure

abd7 does not sell your personal data. We share personal data with third parties only where strictly necessary to operate the Platform and fulfil our legal obligations. All third-party recipients are contractually bound to process your data only for the purposes for which it was shared and to maintain appropriate security standards.

5.1 Categories of Recipients

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other accepted payment partners — solely for the purpose of processing deposits and withdrawals.
• Identity and KYC verification agencies: Third-party services used to verify identity documents, confirm date of birth, and conduct AML screening.
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, Habanero, Spribe, and other certified providers — for the purpose of delivering game sessions and maintaining game integrity records.
• Technology and hosting providers: Cloud infrastructure, CDN, and data centre providers who host and maintain the Platform's technical infrastructure under strict data processing agreements.
• Fraud prevention and security services: Providers of device fingerprinting, risk scoring, and account security services used to protect the Platform from abuse.
• Customer support platform providers: Live chat and ticketing system providers who process communication data on abd7's behalf to facilitate player support.

5.2 Disclosure to Authorities

abd7 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent or detect crime, protect the safety of players or third parties, or fulfil AML reporting obligations. Where legally permitted, abd7 will notify affected players of any such disclosure.

6Cookies and Tracking Technologies

abd7 uses cookies and similar tracking technologies to operate certain Platform features, remember your preferences, maintain your login session, and gather aggregated analytics about how players use the Platform. A cookie is a small text file placed on your device by the Platform.

6.1 Types of Cookies Used

You may manage optional cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect certain non-essential Platform features. Strictly necessary and fraud prevention cookies cannot be disabled without materially impairing the security and functionality of the Platform.

abd7 does not use advertising cookies or retargeting pixels. No third-party advertising network has access to cookie data from the abd7 Platform.

7Data Security

abd7 applies a comprehensive, layered approach to data security designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit TLS/SSL encryption across all Platform pages, API endpoints, and data transmission channels.
• Encryption at rest for all sensitive personal data including identity documents, payment references, and KYC records stored on abd7 servers.
• Access controls based on the principle of least privilege — Platform employees access only the data required to perform their specific role, with access rights reviewed quarterly.
• Multi-factor authentication (MFA) for all internal administrative systems and strongly recommended for player accounts.
• Continuous security monitoring including intrusion detection, anomaly alerting, and automated threat response systems operating 24 hours a day, 7 days a week.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Incident response procedures with defined escalation paths and player notification protocols in the event of a confirmed data breach.

8Data Retention

abd7 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual. Where data is anonymised rather than deleted, the anonymised data set may be retained indefinitely for statistical and platform improvement purposes.

9Your Rights

As a player whose personal data is processed by abd7, you hold the following rights in relation to your personal data. These rights may be subject to certain limitations under applicable law, but abd7 will always respond to requests in good faith and within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data abd7 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data held by abd7 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful — subject to abd7's legal retention obligations.
• Right to restriction of processing: You may request that abd7 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified following a rectification request.
• Right to data portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted directly to another controller where technically feasible.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes, where you believe your individual circumstances warrant an override of those interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right not to be subject to automated decisions: abd7 does not make solely automated decisions with significant legal or similarly significant effects on players without human review in the decision process.

10Children and Minors

The abd7 Platform is strictly intended for adults aged 21 years and above. abd7 does not knowingly collect personal data from individuals under 21 years of age. Where we have reason to believe that a player is under the minimum age requirement, the account will be suspended immediately and any personal data collected will be deleted in accordance with our data retention procedures once the investigation is concluded.

Parents and guardians who believe that a minor in their care has registered an account on abd7 are strongly encouraged to contact our support team immediately at [email protected]. abd7 will take swift action to close any such account and will not retain the minor's personal data beyond what is required for the purpose of the investigation and any related legal obligations.

11International Data Transfers

abd7 operates across multiple markets in South Asia, including Bangladesh and India. In the course of providing Platform services, personal data may be transferred to and processed in countries outside the player's country of residence. Where such transfers occur, abd7 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which would apply in your home jurisdiction.

Safeguards used for international transfers include contractual clauses that impose GDPR-equivalent data protection obligations on the receiving party, and where applicable, transfers to countries that have been assessed as providing an adequate level of data protection. Abd7 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate contractual or technical safeguards.

12Third-Party Services and Links

The abd7 Platform integrates with a number of third-party service providers to deliver games, process payments, and provide customer support. While abd7 takes care to work only with reputable, vetted partners, we are not responsible for the data practices of third-party platforms or services that operate independently from abd7.

Game content delivered through providers such as Pragmatic Play, Evolution Gaming, Ezugi, Habanero, and Spribe is subject to those providers' own privacy policies in relation to game session data transmitted to their servers. abd7 ensures that all game provider agreements include data protection clauses consistent with this Policy.

Payment services provided by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard are governed by the respective privacy policies of those payment institutions. abd7 shares with payment providers only the minimum data necessary to process a specific transaction and does not provide payment providers with access to your betting history or account activity beyond what is required for the transaction itself.

13Policy Updates

abd7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal obligations, or changes to the services offered on the Platform. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — abd7 will notify registered players by email to their registered address and will display a prominent notice on the Platform for a period of not less than 14 days before the changes take effect. Continued use of the Platform following the effective date of any revision constitutes acceptance of the revised Policy.

We encourage players to review this Policy periodically to remain informed about how abd7 protects personal data. The current version of this Policy supersedes all prior versions and applies to all data held by abd7 at the time of publication.

14Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which abd7 handles your personal data, please contact our Data Protection team using the details below. All enquiries will be acknowledged within 5 business days and resolved within 30 calendar days.

• Email: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: Acknowledgement within 5 business days; full response within 30 calendar days
• Support hours: Available 24 hours a day, 7 days a week via live chat on the Platform
• Platform address: https://abd7.io

If you are not satisfied with abd7's response to a data protection concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. abd7 will cooperate fully with any such authority in the investigation of a complaint.