Privacy Policy — abba7

01 Information We Collect

abba7 collects personal data through several channels: directly from you when you register or use our services, automatically as you browse and interact with the platform, and from trusted third-party sources used for identity verification and fraud prevention. We collect only the information that is necessary for the legitimate purposes described in this Privacy Policy.

Information you provide directly:

• Registration data: Full name, date of birth, email address, mobile phone number, and preferred currency (BDT);
• Identity verification (KYC): National ID card (NID) number, passport, or other government-issued identification document; a recent utility bill or bank statement as proof of address; and a selfie photograph where required;
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile wallet numbers, or bank account details for Dutch-Bangla Bank, City Bank, or BRAC Bank. Note that abba7 does not store full card or wallet PINs — payment processing is handled by the respective payment provider;
• Communications: Messages sent to our support team via live chat or email, including any attachments or screenshots you provide;
• Responsible gaming inputs: Deposit limits, session reminders, and self-exclusion requests you submit through account settings.

Information collected automatically:

• IP address, device type, operating system, browser type and version;
• Pages visited, time spent on each page, clickstream data, and feature interactions;
• Betting history, game session logs, deposit and withdrawal records, and bonus redemption history;
• Geolocation data (city-level, derived from IP address — not GPS coordinates);
• Session tokens and authentication timestamps.

Summary of Data Categories

02 How We Use Your Data

abba7 processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: (a) contractual necessity — processing required to provide you with the services you have signed up for; (b) legal obligation — processing required to comply with applicable laws, including anti-money laundering and responsible gaming regulations; (c) legitimate interests — processing necessary for fraud prevention, platform security, and business operations; and (d) consent — where you have actively opted in to a specific use, such as receiving promotional communications.

The specific purposes for which abba7 uses your data are as follows:

• Account management: Creating and maintaining your member account, processing login requests, and managing account settings and preferences;
• Service delivery: Processing deposits and withdrawals, settling bets, crediting casino winnings, applying bonus offers, and providing access to all platform features;
• Identity and age verification: Confirming that you are who you claim to be and that you meet the 18+ age requirement before allowing real-money activity;
• Fraud detection and security: Monitoring account activity, detecting suspicious patterns, preventing unauthorised access, and protecting the integrity of sporting events from match-fixing;
• Responsible gaming: Identifying signs of problem gambling behaviour, enforcing self-exclusion requests, and proactively reaching out to members who may benefit from support resources;
• Customer support: Responding to your queries, resolving complaints, and maintaining records of our communications for quality assurance;
• Platform improvement: Analysing usage data to improve navigation, game performance, payment flows, and overall user experience;
• Legal compliance: Maintaining records required by anti-money laundering regulations, responding to lawful requests from competent authorities, and fulfilling our obligations under applicable law;
• Marketing communications: Sending you promotional offers, tournament notifications (BPL, IPL, T20 World Cup), and platform news — but only where you have consented or where we have a legitimate interest and you have not opted out.

03 Data Sharing & Third Parties

abba7 does not sell your personal data to any third party. However, to operate the platform effectively and comply with legal obligations, we share data with a limited number of trusted partners and service providers. All third parties who receive personal data from abba7 are contractually required to handle it in accordance with applicable data protection principles and to use it solely for the purpose for which it was shared.

Categories of third parties with whom abba7 shares data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum payment information necessary to process your transactions. Each provider operates under its own privacy policy;
• Identity verification providers: Third-party KYC service providers receive identity document data solely to verify your age and identity as part of our compliance process;
• Game and platform providers: Where games are delivered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Spribe, Ezugi, Microgaming, BGaming), anonymised session data may be shared with those providers for game performance and integrity purposes. These providers do not receive your full identity data;
• Fraud prevention services: Anonymised or pseudonymised technical data (IP address, device fingerprint) may be shared with fraud prevention networks to identify patterns associated with prohibited conduct;
• Legal and regulatory authorities: abba7 will disclose personal data to competent authorities, law enforcement bodies, or courts where required to do so by law, pursuant to a valid legal order, or to protect the rights and safety of our members and staff;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of abba7's business, member data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

04 Cookies & Tracking Technologies

abba7 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device when you visit a website. It allows the website to remember certain information about your session or preferences between visits.

Types of cookies used by abba7:

abba7 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Analytics data collected via our own cookies is processed in aggregate and is not linked back to your individual identity without cause.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block all cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling essential cookies will prevent you from logging in or using core platform features. Disabling preference cookies will mean your settings are not saved between sessions.

05 Data Security & Retention

abba7 takes the security of your personal data seriously. We implement a multi-layered security framework designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. Our core security measures include:

• Transport layer encryption: All data transmitted between your device and abba7's servers is encrypted using TLS 1.2 or higher;
• Database encryption: Sensitive fields including identity document numbers and payment references are stored in encrypted form within our databases;
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff who handle member data receive regular data protection training;
• Two-factor authentication: OTP-based authentication is available for all member accounts and is required for all administrative staff accounts;
• Regular security audits: abba7 conducts periodic internal security reviews and engages third-party security specialists to perform independent penetration testing;
• Incident response plan: In the event of a data breach that poses a risk to your rights, abba7 will notify affected members by email within 72 hours of becoming aware of the incident, describing the nature of the breach and the steps being taken to mitigate it.

Data retention periods: abba7 retains personal data for the following periods:

• Active account data: Retained for the duration of your membership plus 5 years after account closure, to meet legal and audit obligations;
• Transaction records: Deposit, withdrawal, and betting records are retained for a minimum of 5 years from the date of the transaction;
• KYC documents: Identity verification documents are retained for 5 years from the date of submission or account closure, whichever is later;
• Support communications: Chat transcripts and email correspondence are retained for 2 years;
• Technical logs: Server and access logs are retained for 12 months and then deleted or anonymised.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to your individual identity. Anonymised aggregate data may be retained indefinitely for statistical and business analysis purposes.

06 Your Privacy Rights

As a member of abba7, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered email address and a description of your request.

• Right of access: You may request a copy of the personal data abba7 holds about you. We will provide this in a structured, commonly used format within 10 business days;
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor corrections (such as a phone number update) can be made directly through your account settings;
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that we may be required by law to retain certain data even after an erasure request — for example, transaction records for anti-money laundering compliance;
• Right to restriction of processing: You may ask us to pause processing of your data while a dispute regarding its accuracy or lawfulness is being resolved;
• Right to data portability: You may request that we provide your personal data in a machine-readable format so that you can transfer it to another service provider;
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, we will cease sending promotional communications within 5 business days;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

07 Children & Minors

abba7 is strictly an adult platform. Our services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18. All registration flows include a mandatory date-of-birth confirmation step, and accounts are subject to age verification checks.

If you are a parent or guardian and believe that a minor in your care has registered an account with abba7 or has submitted personal data to us without your knowledge, please contact us immediately at [email protected]. Upon verification of your report, abba7 will:

• Immediately suspend the account in question;
• Permanently close the account and void all activity associated with it;
• Return any deposits to the original payment source where technically possible;
• Permanently delete all personal data associated with the account from our active systems within 30 days, subject to any legal obligations that require us to retain evidence of the breach.

08 Policy Updates & Contact

abba7 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect the way we collect or use your data — we will notify registered members via the email address on file at least 14 days before the changes take effect. For non-material updates (such as clarifications of existing language), the revised Policy will be published on this page without prior individual notification.

The effective date displayed at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how abba7 protects your personal data. Continued use of the platform following any update constitutes your acceptance of the revised Privacy Policy.

How to contact abba7 about privacy matters:

• Email: [email protected] — use the subject line "Privacy Rights Request" for data access, erasure, or rectification requests, or "Privacy Concern" for general inquiries;
• Response time: We aim to acknowledge all privacy-related correspondence within 2 business days and to resolve requests within 10 business days (Bangladesh Standard Time, UTC+6);
• Scope: Our support team can assist with all matters covered by this Policy. For formal complaints that remain unresolved after engaging with our support team, you may escalate the matter through any competent data protection authority with jurisdiction over your location.

Contact: [email protected]  •  Platform: abba7.app  •  Last updated: 1 January 2026  •  18+ Adults only