Privacy Policy
How ab388 Protects Your Data

1 Data We Collect

ab388 collects personal data that is necessary to operate a safe, compliant, and high-quality online gaming platform. We collect data only where it serves a clear and legitimate purpose, and we do not collect more information than is required for those purposes.

1.1 Registration Data

When you create an ab388 account, we collect the following information:

• Full name as it appears on your government-issued identity document.
• Date of birth (required to verify that you are aged 18 or above).
• Email address (used as your primary account identifier and for communications).
• Mobile phone number (used for account verification and support contact).
• Preferred payment method and associated account details (e.g., bKash number, Nagad number, USDT wallet address).
• Username and encrypted password.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of identity documents such as your National Identity Card (NID), passport, or driving licence, as well as proof of address and proof of payment method. KYC documents are stored securely and processed solely for the purpose of account verification and fraud prevention. 18+ Only

1.3 Transaction Data

ab388 retains a full record of all financial transactions carried out through your account. This includes deposits via bKash, Nagad, Rocket, Upay, and USDT; withdrawal requests and completions; bonus credits and debits; and any adjustments made by our compliance team. Transaction records are maintained for regulatory and fraud-prevention purposes.

1.4 Usage and Behavioural Data

When you use the ab388 platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and features used.
• Game session data — titles played, bet amounts, outcomes, and session duration.
• Referral source (how you arrived at ab388, e.g., direct URL, search engine).

1.5 Communications Data

If you contact ab388 support via email or live chat, we retain records of those communications. This helps us resolve disputes, provide accurate follow-up support, and improve the quality of our customer service over time.

2 How We Use Your Data

ab388 uses the personal data we collect for specific, transparent purposes. We do not use your data for purposes beyond those listed here without obtaining your prior consent.

ab388 does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated tools are used to flag unusual account activity, all flagged cases are reviewed by a member of the ab388 compliance team before any account action is taken.

3 Data Sharing & Disclosure

ab388 does not sell, rent, or trade your personal data with third parties for commercial or marketing purposes. We share data only under the limited and defined circumstances described below.

3.1 Payment Processors

To process deposits and withdrawals, ab388 shares the minimum necessary financial data with payment providers such as bKash, Nagad, Rocket, Upay, and USDT network processors. Each of these providers operates under its own privacy and data-handling policies. ab388 selects payment partners who demonstrate a commitment to data security and user privacy.

3.2 Game Studio Providers

Game session data — including bet amounts, outcomes, and RNG results — may be processed by the third-party game studios whose titles are hosted on the ab388 platform (for example, Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Ezugi). This data is shared solely to facilitate gameplay and resolve disputes. Game providers do not receive your full personal profile or payment account details.

3.3 Fraud Prevention and Security Services

ab388 may share IP addresses, device fingerprints, and account behavioural data with specialist fraud prevention and cybersecurity service providers. This sharing is strictly limited to the data necessary to detect and prevent fraudulent activity, and all such providers are bound by confidentiality obligations.

3.4 Legal and Regulatory Disclosure

ab388 may be required to disclose personal data to law enforcement agencies, financial intelligence authorities, or other government bodies where we receive a lawful request to do so, or where disclosure is necessary to protect the safety and rights of ab388 players or staff. In such circumstances, we disclose only the specific data requested and will, where legally permitted, inform the affected player.

4 Cookies & Tracking

ab388 uses cookies and similar tracking technologies to maintain platform functionality, improve user experience, and gather aggregated analytics. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot directly access files on your device.

4.1 Types of Cookies We Use

ab388 does not deploy third-party advertising cookies or cross-site tracking technologies. You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may impair platform functionality, including the ability to remain logged in to your ab388 account.

5 Data Retention

ab388 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations.

• Active accounts: All personal and transactional data is retained for the full duration of your registered account relationship with ab388.
• Closed accounts: Following account closure, core identity and transaction records are retained for a minimum of five (5) years for anti-money laundering (AML) and fraud-prevention compliance purposes.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, or longer if required by a specific legal obligation or ongoing investigation.
• Support communications: Customer support records are retained for three (3) years from the date of the last interaction.
• Analytics data: Aggregated, anonymised usage data may be retained indefinitely as it cannot be linked to any individual player.

Once the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

6 Data Security

ab388 takes the security of your personal data seriously and maintains a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

• All data in transit is encrypted using TLS 1.2 or higher, enforced across all platform endpoints.
• Passwords are stored as salted cryptographic hashes — they are never stored or transmitted in plain text.
• Access to personal data within ab388's internal systems is restricted on a strict need-to-know basis, with role-based access controls and full audit logging.
• Payment account details (bKash numbers, Nagad numbers, USDT wallet addresses) are tokenised and are not stored in plain text in our primary databases.
• ab388 undergoes periodic internal security reviews to assess the effectiveness of our data protection controls.
• In the event of a data breach that is likely to affect player privacy, ab388 will notify affected players and take all reasonable steps to contain the breach and mitigate harm as promptly as possible.

While ab388 employs robust security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ab388 accounts and to enable any additional account protection features made available through the platform.

7 Your Privacy Rights

As an ab388 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the ab388 support team with your request and your registered account details for identity verification.

7.1 Right of Access

You have the right to request a copy of the personal data ab388 holds about you. We will provide this information in a clear and readable format within a reasonable timeframe following identity verification.

7.2 Right to Rectification

If any personal data held by ab388 is inaccurate or incomplete, you have the right to request that it be corrected. Where feasible, corrections will be applied promptly. Note that certain corrections (e.g., name changes) may require supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data. This right is subject to certain limitations — ab388 is legally required to retain transaction records and KYC documents for a minimum of five years as described in Section 5. Outside of these legally mandated retention requirements, we will honour erasure requests within a reasonable period.

7.4 Right to Restrict Processing

You may request that ab388 restrict the processing of your personal data in specific circumstances, such as while a correction request is being resolved or where you contest the lawfulness of processing. During a restriction period, we will continue to store your data but will not actively process it beyond what is legally required.

7.5 Right to Withdraw Consent

Where ab388 processes your personal data on the basis of your consent (for example, sending you promotional emails about new games, tournaments, or seasonal offers), you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. To opt out of promotional communications, contact support or use the unsubscribe option included in any marketing email.

8 Changes to This Policy

ab388 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this document will be revised. Where changes are significant, ab388 will make reasonable efforts to notify registered players via their registered email address or through a prominent notice on the platform.

Your continued use of the ab388 platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how ab388 handles your personal data.

If you have any questions about this Privacy Policy, how your data is handled, or wish to submit a data-related request, please do not hesitate to contact the ab388 support team. We are committed to responding promptly and transparently to all privacy-related enquiries from our Bangladeshi player community.