Privacy Policy — How abc22 Collects, Uses, and Protects Your Data

abc22 is Bangladesh's premier online betting and casino platform, accessible at abc22.io. We take your privacy seriously and are committed to handling all personal data collected through our platform with the utmost care, transparency, and security.

This Privacy Policy sets out the principles and procedures that govern how abc22 manages the personal data of its users — including registered players, prospective users who browse the platform, and individuals who contact our support team. It details what data we collect, the purposes for which it is used, the conditions under which it may be shared with third parties, and the rights you have in relation to your personal information.

References to "abc22", "we", "us", or "our" in this document refer to the abc22 platform and its operating entity. References to "you" or "your" refer to any person who accesses or uses the abc22 platform, whether as a registered account holder or as a visitor.

This policy should be read alongside the abc22 Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. In the event of a conflict between this Privacy Policy and any other document, this Privacy Policy shall prevail with respect to matters concerning personal data.

abc22 collects personal data from you in several ways: directly when you register or interact with the platform, automatically through your use of the website and its technical infrastructure, and occasionally from third-party sources where permitted. The categories of personal data we collect include the following:

Identity and Contact Data:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify you are aged 21 or above)
• Residential address in Bangladesh (city, district, postal code)
• Mobile phone number (used for account verification and communications)
• Email address (if provided during registration or support contact)
• Copies of identity documents submitted during Know Your Customer (KYC) verification, such as National Identity Card (NID), passport, or driving licence

Account and Transaction Data:

• Username and encrypted account credentials
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment method identifiers (e.g., bKash, Nagad, Rocket, or Upay account references — we do not store full mobile wallet credentials)
• Betting and gaming history, including markets wagered on, stake amounts, and outcomes
• Bonus and promotion activity linked to your account
• Account balance history and responsible gaming limit configurations

Technical and Usage Data:

• IP address and approximate geolocation (used to verify you are accessing from Bangladesh)
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session duration, pages visited, and interaction logs
• Referral source (how you arrived at the abc22 platform)

Communications Data:

• Records of support correspondence sent to or received from [email protected]
• Feedback, complaints, or dispute resolution communications
• Responsible gaming requests and self-exclusion submissions

abc22 does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records (other than those voluntarily shared in a responsible gaming context), or biometric data, unless specifically required by law or for the purposes of mandatory identity verification.

abc22 uses the personal data it collects strictly for the purposes described in this policy. We do not sell, rent, or commercially exploit your personal data to any third party for their own marketing purposes. The primary purposes for which we use your data are as follows:

Where abc22 intends to use your data for a purpose not listed above or materially different from the purpose for which it was originally collected, we will provide you with prior written notice and, where required, seek your explicit consent before proceeding.

abc22 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing your data is necessary to fulfil the contract between you and abc22 — specifically, to provide you with access to the platform, manage your account, process transactions, and deliver the services you have registered to use.
• Legal Obligation: abc22 is required to collect and retain certain categories of personal data in order to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, identity verification mandates, and financial record-keeping obligations.
• Legitimate Interests: abc22 processes certain categories of data — particularly technical and usage data — on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. This includes fraud prevention, platform security, and service improvement activities, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where abc22 relies on your consent as the legal basis for a specific processing activity (for example, sending optional promotional communications), we will obtain that consent clearly and separately. You may withdraw your consent at any time by contacting [email protected], without affecting the lawfulness of processing carried out before withdrawal.

abc22 does not share your personal data with third parties except in the strictly limited circumstances described in this section. All third-party recipients of personal data from abc22 are required to handle that data in accordance with applicable privacy obligations and may only use it for the purposes for which it was shared.

• Payment Processors: Your transaction data is shared with mobile financial service providers — including bKash, Nagad, Rocket, and Upay — solely to the extent necessary to process your deposit and withdrawal requests. These providers operate under their own privacy frameworks and are independently regulated.
• Game Providers: Technical identifiers and gameplay data may be shared with certified third-party game studios (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) to facilitate the delivery of their games within the abc22 platform. These providers do not receive your full identity or financial data.
• Identity Verification Services: Where abc22 engages a third-party KYC verification service provider to assist with identity and age verification, your identity documents and verification data may be processed by that provider on abc22's behalf under a strict data processing agreement.
• Legal and Regulatory Authorities: abc22 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, legal process, or in response to a lawful authority request.
• Fraud and Security Services: abc22 may share limited technical and transaction data with third-party fraud detection and cyber-security service providers to protect the platform and its users from fraudulent or harmful activity.

abc22 will never sell, lease, or trade your personal data to any unaffiliated third party for their independent commercial or marketing purposes.

abc22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: All personal data associated with an active abc22 account is retained for the full duration of the account relationship.
• Closed Account Data: Following closure of an account — whether initiated by you or by abc22 — your personal data, transaction records, and identity verification documents are retained for a period of five (5) years from the date of account closure. This retention period is primarily driven by our obligations under anti-money laundering and financial record-keeping requirements.
• Support and Communications Records: Records of support correspondence are retained for a period of two (2) years from the date of the most recent interaction in a given support thread, unless the matter relates to an unresolved dispute or legal claim, in which case records are retained until that matter is fully resolved.
• Technical and Usage Logs: Server logs and session data are retained for a period of twelve (12) months for security monitoring and fraud investigation purposes, after which they are automatically deleted or anonymised.
• Marketing Consent Records: Where you have provided consent to receive optional marketing communications, a record of that consent is retained for the duration of the consent plus two (2) years thereafter.

At the end of the applicable retention period, your personal data is securely deleted or irreversibly anonymised in accordance with abc22's data disposal procedures.

abc22 employs robust technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the abc22 platform is encrypted using industry-standard 256-bit SSL/TLS technology, ensuring that data in transit cannot be intercepted by unauthorised parties.
• Encrypted Data Storage: Personal data held in abc22's databases — including identity documents, account credentials, and financial records — is stored in encrypted form using strong encryption standards.
• Access Controls: Access to personal data within abc22's internal systems is restricted on a strict need-to-know basis. Only authorised personnel who require access to personal data to perform their legitimate job functions are granted access, and all such access is logged and periodically audited.
• Password Security: Account passwords are stored using one-way cryptographic hashing. abc22 does not store plain-text passwords and cannot retrieve your password if it is forgotten — only a secure reset process is available.
• Fraud and Intrusion Detection: abc22 operates continuous automated monitoring systems designed to detect and respond to suspicious activity, unauthorised access attempts, and potential data security incidents in real time.

While abc22 takes all reasonable and practical steps to protect your data, no digital platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your account credentials and for notifying abc22 immediately at [email protected] if you suspect that your account or personal data has been compromised.

abc22 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to enhance your experience on the platform, maintain session continuity, and analyse how users interact with the site. The following categories of cookies are used on abc22.io:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as session management (keeping you logged in), security token validation, and remembering your responsible gaming limit preferences. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as language settings and display choices — to provide a more personalised experience. Disabling them may affect how certain features of the platform display or function.
• Analytics Cookies: abc22 uses first-party analytics tools to understand how visitors navigate the platform. This data is collected in aggregate and anonymised form and is used solely to improve platform design, content, and performance. We do not share analytics data with any advertising networks.
• Security Cookies: These cookies assist abc22's fraud detection and security monitoring systems by maintaining a persistent session fingerprint that helps identify suspicious login behaviour or account access from unrecognised devices.

abc22 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. The cookies placed on abc22.io are limited to those necessary for platform functionality, security, and internal analytics.

Most web browsers allow you to control cookie settings through their preferences menu. You may choose to block or delete cookies at any time; however, doing so may impair the functionality of the abc22 platform, including the ability to remain logged in during a session.

As a user of the abc22 platform, you hold a number of rights in relation to the personal data that abc22 holds about you. These rights are described below. To exercise any of these rights, please contact abc22 at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of all personal data that abc22 holds about you, along with information about how it is being used and on what legal basis.
• Right to Rectification: If any personal data that abc22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies — you may request that abc22 delete your personal data. This right is subject to exceptions, including where abc22 is required to retain data under legal obligations such as anti-money laundering regulations.
• Right to Restriction of Processing: You may request that abc22 restrict the processing of your personal data in certain situations — for example, while a dispute over data accuracy is being resolved, or where you have objected to processing and abc22 is assessing whether its legitimate interests override your rights.
• Right to Data Portability: Where abc22 processes your data on the basis of consent or contract and by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format, so that you can transfer it to another service provider if you wish.
• Right to Object: Where abc22 relies on legitimate interests as the legal basis for processing your data, you have the right to object to that processing at any time on grounds relating to your particular situation. abc22 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

abc22 aims to respond to all privacy rights requests within 48 hours of receipt and will endeavour to fulfil all valid requests within 30 days. Where a request is complex or abc22 is handling a high volume of requests, this period may be extended by up to a further 60 days, and you will be notified accordingly.

The abc22 platform is strictly intended for adults aged 21 years and above. abc22 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration and KYC process on abc22.

If abc22 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, all such data will be deleted promptly, the associated account will be closed, and any funds held in that account will be dealt with in accordance with applicable legal requirements.

Adults who share a household or device with minors are responsible for ensuring that minors do not access the abc22 platform or any account credentials. abc22 recommends the use of parental control software where necessary to prevent underage access to gambling websites.

The abc22 platform serves users located in Bangladesh. In certain circumstances, the operation of the platform may involve the processing of personal data by third-party service providers whose technical infrastructure is located outside Bangladesh — for example, game providers, cloud infrastructure vendors, or KYC verification partners operating internationally.

Where personal data is transferred outside Bangladesh, abc22 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include contractual data processing agreements with the relevant service providers that impose obligations consistent with applicable data protection principles.

abc22 does not transfer your personal data to any jurisdiction for the purpose of circumventing your privacy rights or the applicable legal framework governing your data. All international data transfers are carried out strictly in connection with the legitimate operational requirements of the abc22 platform.

abc22 reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes will be published on this page with an updated effective date displayed prominently at the top of the document. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — abc22 will endeavour to notify registered account holders via the contact details associated with their account prior to the changes taking effect.

Your continued use of the abc22 platform following the publication of any updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you should cease using the platform and contact abc22 to request account closure and data deletion in accordance with your rights under Section 9.

We recommend that you review this Privacy Policy periodically to stay informed of any updates. All previous versions of this policy are archived and available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data abc22 holds about you, or the exercise of any of your privacy rights, please contact the abc22 privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Rights Request" for data access, erasure, or portability requests; use "Privacy Policy Enquiry" for general questions
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: abc22 aims to acknowledge all privacy requests within 48 hours and to fulfil them within 30 days
• Language: English

abc22 is committed to resolving all privacy-related queries and complaints fairly, transparently, and within a reasonable timeframe. All privacy correspondence is treated as strictly confidential and handled only by authorised personnel.