ab111 Privacy
Policy

1 Introduction

ab111 ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in connection with your use of the ab111 platform at ab111.io.

This policy applies to all users of the ab111 website, mobile interface, and associated services, including registered players, visitors who browse the platform without registering, and individuals who contact our support team. By accessing ab111.io or creating an account, you acknowledge that you have read, understood, and agree to the data practices described in this policy.

This Privacy Policy should be read alongside the ab111 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined in this policy carry the meanings assigned to them in the Terms & Conditions.

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is the operating entity behind the ab111 platform. All data protection queries, access requests, and erasure requests should be directed to our dedicated privacy contact:

• Email: support@ab111.io
• Subject Line: Privacy Request — [Your Registered Username]
• Response Time: We aim to acknowledge all privacy-related requests within 5 business days and resolve them within 30 days of receipt.

ab111 operates as an internationally licensed offshore betting platform. Users are responsible for satisfying themselves that their use of ab111 is permitted under the laws of their own jurisdiction.

3 Data We Collect

ab111 collects personal data through several channels: directly from you when you register or interact with the platform, automatically when you visit our website, and from third-party partners such as payment processors and KYC verification services. The categories of data we collect include the following:

ab111 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data. We do not collect data from individuals we know to be under 21 years of age.

4 How We Use Your Data

ab111 uses the personal data we collect for the following specific purposes:

• Account Management: To create, verify, and maintain your registered player account, including processing login authentication and enabling account security features.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in BDT.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our anti-money-laundering obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and any other conduct prohibited under our Terms & Conditions.
• Platform Improvement: To analyse aggregate usage patterns, improve our product offering, fix technical issues, and develop new features that better serve the needs of our Bangladeshi player base.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to queries, complaints, and requests submitted through our support channels, and to maintain records of support interactions for quality assurance.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities, including obligations under international anti-money-laundering frameworks.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. Players may opt out at any time.

5 Legal Basis for Processing

ab111 processes your personal data on the following legal bases as recognised under internationally applicable data protection frameworks:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and ab111 — specifically to operate your account, process your bets, and facilitate deposits and withdrawals.
• Legal Obligation: KYC verification, transaction record-keeping, and certain fraud-prevention activities are required by applicable anti-money-laundering and know-your-customer regulations to which ab111 is subject as a licensed operator.
• Legitimate Interests: Technical data and usage data are processed on the basis of ab111's legitimate interest in maintaining platform security, preventing fraud, improving services, and ensuring fair play for all users. These interests are balanced against your right to privacy.
• Consent: Marketing communications and optional analytics cookies are processed only where you have given clear, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third-Party Disclosure

ab111 does not sell, rent, or otherwise commercially disclose your personal data to third parties. Personal data is shared only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks receive the minimum financial data necessary to process your transaction. These partners operate under their own privacy policies and data protection obligations.
• KYC & Identity Verification Providers: Third-party KYC service providers receive copies of identity documents submitted by players solely for the purpose of verifying age, identity, and payment method ownership.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token or anonymised player identifier to launch their games within the ab111 environment. They do not receive your full name, financial data, or contact details.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory authority, ab111 may disclose personal data to competent authorities. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the ab111 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer.

7 Cookies & Tracking Technologies

ab111 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the platform. The following categories of cookies are used on ab111.io:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, keep your account authenticated across page navigation, and enable core security features. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, game display settings, and responsible gaming limits applied to your account. They improve your experience but are not essential.
• Analytics Cookies: ab111 uses first-party analytics to understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised. We do not use Google Analytics or third-party advertising analytics.

ab111 does not use advertising or retargeting cookies. We do not share cookie data with ad networks, social media platforms, or any third-party commercial tracking services.

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in to your ab111 account. For guidance on managing cookies in your browser, refer to your browser's official support documentation.

8 Data Retention

ab111 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Identity, contact, and financial data associated with an active player account is retained for the duration of the account's active status plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC Documentation: Copies of identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of submission, and may be retained for longer if required by applicable regulatory obligation.
• Transaction Records: Records of all deposits, withdrawals, bets placed, and casino game sessions are retained for a minimum of 5 years from the date of the transaction.
• Support Communications: Live chat transcripts, support ticket records, and email correspondence are retained for 3 years from the date of the interaction.
• Technical & Usage Data: Server log data and anonymised usage analytics are retained for up to 24 months, after which they are permanently deleted or fully anonymised.
• Marketing Consent Records: Records of your consent to (or withdrawal from) marketing communications are retained for the duration of your account plus 2 years, to demonstrate compliance with consent requirements.

When personal data is no longer required and has met its minimum retention period, it is securely deleted or anonymised so that it can no longer be attributed to an identified individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

9 Data Security

ab111 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and ab111 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all pages of ab111.io, not only login and payment pages.
• Encrypted Data Storage: Sensitive data fields — including passwords, payment method identifiers, and identity document copies — are stored in encrypted form at rest using AES-256 encryption.
• Password Hashing: Player passwords are never stored in plain text. Passwords are hashed using a one-way cryptographic algorithm with a unique salt per account, meaning that even in the event of a data breach, raw passwords are not exposed.
• Two-Factor Authentication: ab111 supports two-factor authentication (2FA) for player accounts, providing an additional layer of protection against unauthorised login attempts from unrecognised devices.
• Access Controls: Access to personal data within ab111's internal systems is restricted on a strict need-to-know basis. Staff access logs are maintained and reviewed periodically. No employee can access a player's full payment card details.
• Security Monitoring: ab111 operates continuous server-side monitoring for anomalous access patterns, suspicious login attempts, and potential data breach indicators. Security incidents are escalated immediately to our technical team.

10 Your Data Rights

As a player on the ab111 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at support@ab111.io with the subject line "Privacy Request — [Your Registered Username]":

• Right of Access: You have the right to request a copy of the personal data ab111 holds about you. We will provide this in a structured, commonly used format within 30 days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Some corrections (e.g., name changes) require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing has no legal basis. Please note that some data must be retained by law (e.g., KYC and transaction records for a minimum of 5 years) and cannot be deleted upon request.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is resolved.
• Right to Portability: Where processing is based on your consent or contractual necessity, you may request that your data be provided to you in a machine-readable format (CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including the use of your data for direct marketing purposes. Objections to marketing will be acted upon immediately and unconditionally.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

11 International Data Transfers

ab111 operates as an internationally licensed offshore platform. As a result, your personal data may be transferred to, and stored on, servers located outside Bangladesh. In particular, data may be processed in the jurisdiction where ab111 holds its operating licence, and by third-party service providers whose infrastructure is located in other countries.

Where personal data is transferred internationally, ab111 takes steps to ensure that an appropriate level of data protection is maintained throughout the transfer chain. This may include reliance on standard contractual clauses, data processing agreements with binding privacy obligations, or transfers to processors located in jurisdictions recognised as providing an adequate level of data protection.

By using the ab111 platform, you acknowledge and consent to the international transfer of your personal data as described in this section. If you have concerns about cross-border data transfers, please contact us at support@ab111.io before registering an account.

12 Minors

ab111 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification steps, and players are required to declare that they are 21 years of age or older at the time of account creation.

If ab111 becomes aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be returned via the original payment method after verification of the circumstances.

If you believe that a minor has created an account on ab111, or that personal data belonging to a person under 21 has been submitted to our platform, please notify us immediately at support@ab111.io. We will investigate and act on all such reports promptly.

13 Marketing Communications

With your explicit consent, ab111 may send you promotional communications including bonus offers, seasonal promotions (such as Eid special bonuses, BPL season offers, or Pohela Boishakh promotions), new game announcements, and platform updates. Marketing communications may be delivered via:

• Email to your registered email address
• SMS to your registered mobile phone number
• On-platform notifications displayed within your ab111 account dashboard

Consent to marketing communications is given at the time of account registration and can be withdrawn at any time by:

• Clicking the "Unsubscribe" link at the bottom of any ab111 marketing email
• Updating your communication preferences within your account settings
• Contacting our support team at support@ab111.io with the subject line "Unsubscribe — [Your Registered Username]"

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawal of marketing consent does not affect transactional communications — ab111 will continue to send you account-related messages such as deposit confirmations, withdrawal notifications, and security alerts regardless of your marketing preference.

14 Third-Party Links

The ab111 platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose software is integrated into our platform. While these game engines operate within the ab111 environment, their underlying software is developed and maintained by their respective studios.

Where the ab111 platform links to or integrates third-party content, those third parties operate under their own privacy policies and data practices. ab111 is not responsible for the privacy practices of third-party game studios or payment processing partners beyond the contractual obligations we impose on them as described in Section 6 of this policy.

ab111 does not link to external third-party websites for commercial, affiliate, or advertising purposes. All links within ab111.io lead to pages within the ab111 domain or to the integrated game environments described above.

15 Changes to This Privacy Policy

ab111 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. The most current version of this policy is always available at ab111.io/privacy-policy.

When we make material changes to this policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by email to their registered address and by displaying a prominent notice on the ab111 platform for a period of no less than 14 days prior to the changes taking effect.

For minor, non-material changes (such as clarifications of existing language or corrections of typographical errors), we will update the "Last Updated" date at the top of this document without individual notification. We encourage you to review this policy periodically to stay informed of our current data practices.

Your continued use of the ab111 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you must discontinue use of the platform and may request account closure by contacting our support team.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ab111 processes your personal data, please contact our privacy team using the details below:

• Email: support@ab111.io
• Subject Line: Privacy Request — [Your Registered Username]
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays (Bangladesh Standard Time, UTC+6)
• Acknowledgement: All privacy-related enquiries are acknowledged within 5 business days
• Resolution Target: ab111 aims to fully resolve all privacy requests within 30 days of receipt