abv8 Privacy Policy

1. Introduction

abv8 is committed to protecting the privacy and personal data of every player who interacts with the platform. We recognise that the information you share with us when registering, depositing, or playing is sensitive, and we treat it accordingly. This Policy sets out a transparent account of our data practices, written in plain English so that every player in Bangladesh can understand how their information is handled.

This Policy applies to all personal data processed by abv8 in connection with the operation of the abv8 platform, including data collected through the website abv8.io, any associated mobile interface, customer support communications, and marketing communications where you have consented to receive them. It applies regardless of how you access the platform — whether via a desktop browser, mobile browser, or any other device.

abv8 operates as the data controller for all personal data processed under this Policy. This means abv8 determines the purposes for which personal data is collected and the manner in which it is processed. Where abv8 engages third-party data processors (such as payment service providers or game studios), those parties process data on our behalf and under our instruction, subject to binding data processing agreements.

This Policy was last updated on 1 January 2026 and supersedes all prior versions. Any material changes will be communicated to registered players via the email address on file.

---

2. Data We Collect

2.1 Information You Provide Directly

When you register an account on abv8, complete the KYC verification process, contact our support team, or otherwise interact with the platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, national identity card (NID) number, passport number, or driver's licence number as provided during KYC verification.
• Contact Data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh) and postcode.
• Account Credentials: Username and a hashed representation of your password. abv8 does not store passwords in plain text.
• Financial Data: Payment method details sufficient to process transactions, including mobile wallet numbers for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Full payment instrument details (e.g., full card numbers) are not retained by abv8 beyond what is required to complete a transaction.
• KYC Documentation: Copies of identity documents and proof of address submitted during the account verification process, as well as selfie photographs where required to confirm document ownership.
• Support Communications: The content of any emails, live chat messages, or other communications you send to the abv8 support team, together with associated metadata such as the date and time of contact.

2.2 Information Collected Automatically

When you access or use the abv8 platform, we automatically collect certain technical and behavioural data about your interaction with the site:

• Device and Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited on abv8.io, features accessed, games played, bets placed, session duration, click patterns, and navigation paths through the platform.
• Transaction Logs: A complete record of all deposits, withdrawals, bets, game rounds, bonus claims, and balance adjustments associated with your abv8 account, including timestamps and amounts in Bangladeshi Taka (৳).
• Geolocation Data: Approximate location data derived from your IP address, used to verify that you are accessing the platform from Bangladesh.
• Cookie Data: Information collected via cookies and similar tracking technologies as described in Section 6 of this Policy.

2.3 Information From Third Parties

abv8 may receive personal data about you from third-party sources in the following circumstances:

• Payment Providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners when you make a deposit or withdrawal.
• Identity Verification Services: Confirmation of identity and age from third-party KYC verification providers engaged by abv8 to validate documents submitted during registration.
• Fraud Prevention Services: Risk scores and flagged indicators from fraud detection services used to protect the platform and its players from financial crime.
• Game Providers: Session data and game results from third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, where such data is necessary to resolve disputes or calculate payouts.

---

3. How We Use Your Data

abv8 uses the personal data collected from and about you for the following purposes:

• Account Registration and Management: To create and maintain your abv8 account, verify your identity and age (21+), manage your account settings, and communicate essential account information to you.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; to maintain accurate financial records; and to resolve any transaction disputes.
• Service Delivery: To provide access to the full range of abv8 services including the cricket sportsbook, live casino, slots, Win Drop, Demon Hunter, and all other platform features.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, including identity verification and transaction monitoring.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, and other prohibited activities as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming behaviour, apply responsible gaming tools such as deposit limits and self-exclusion, and identify players who may be exhibiting signs of problem gambling.
• Customer Support: To respond to your queries, investigate complaints, and improve the quality of our support services.
• Platform Improvement: To analyse usage patterns, identify technical issues, and develop improvements to the abv8 platform based on aggregated behavioural data.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about the abv8 platform via email or SMS. You may withdraw this consent at any time by contacting [email protected].

---

4. Legal Basis for Processing

abv8 processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity in question:

• Contractual Necessity: Processing that is required to perform our contract with you — namely, operating your abv8 account, processing transactions, and delivering the platform's services.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and the retention of financial records.
• Legitimate Interests: Processing carried out in the legitimate interests of abv8, such as detecting and preventing fraud, maintaining platform security, and improving our services, provided that such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as the receipt of marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

---

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

abv8 engages a limited number of carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include payment processing partners (bKash, Nagad, Rocket, Upay, and banking institutions), KYC and identity verification providers, fraud detection services, game technology providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), IT infrastructure and hosting providers, and customer support platform operators. All such providers are bound by contractual obligations to process data only as instructed by abv8, to maintain appropriate security standards, and not to use the data for their own independent purposes.

5.2 Legal and Regulatory Disclosure

abv8 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or lawful request. abv8 will, where legally permitted, notify affected players of any such disclosure. We may also disclose data where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of abv8, our players, or the public.

5.3 Business Transfers

In the event that abv8 undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, personal data held by abv8 may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the acquiring entity's commitment to maintain the same standard of data protection as described in this Policy. Registered players will be notified of any material change in data controller identity via the email address on file.

5.4 No Sale of Personal Data

abv8 does not sell, rent, or trade the personal data of its players to unaffiliated third parties for their own commercial purposes under any circumstances. Your data is not a commercial commodity on abv8's platform.

---

6. Cookies and Tracking Technologies

6.1 What Cookies Are

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide analytical information to site operators. abv8 uses cookies and similar technologies (such as web beacons and pixel tags) on the abv8.io website.

6.2 Types of Cookies Used by abv8

• Strictly Necessary Cookies: These cookies are essential for the abv8 platform to function. They enable core features such as session management, account authentication, and security. These cookies cannot be disabled without preventing you from using the platform.
• Performance and Analytics Cookies: These cookies collect information about how visitors use abv8.io, such as which pages are visited most frequently and how users navigate between sections. This data is used in aggregated, anonymised form to improve the platform.
• Functional Cookies: These cookies allow abv8 to remember your preferences (such as your preferred language and display settings) and to provide a more personalised experience.
• Marketing Cookies: Where you have consented, these cookies are used to deliver promotional content relevant to your interests based on your browsing behaviour on abv8.io.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be alerted when new cookies are set. Please note that disabling strictly necessary cookies will impair your ability to use the abv8 platform, including the ability to log in to your account. Detailed instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

---

7. Data Retention

abv8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention principles apply:

• Account Data: Personal data associated with your abv8 account is retained for the duration of your account's active status and for a period of five (5) years following account closure, in order to satisfy legal, regulatory, and audit obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, bets, and game history) are retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC Documentation: Identity and address verification documents are retained for the period required by applicable AML regulations, typically five (5) years from the end of the business relationship.
• Support Communications: Customer support records are retained for three (3) years from the date of the interaction.
• Marketing Data: Data held solely for marketing purposes is retained until you withdraw consent or request deletion, whichever is earlier.

When personal data is no longer required for any legitimate purpose, abv8 will securely delete or anonymise it so that it can no longer be attributed to any individual.

---

8. Data Security

abv8 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your browser or device and the abv8 servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. abv8 staff members are granted access only to the data required to perform their specific job functions, and all access is logged and auditable.
• Password Hashing: Account passwords are never stored in plain text. abv8 uses strong cryptographic hashing algorithms to store password credentials, meaning that even in the unlikely event of a data breach, your raw password cannot be recovered.
• Intrusion Detection: abv8 operates network-level intrusion detection and prevention systems that monitor for unusual access patterns and potential security threats in real time.
• Regular Security Reviews: abv8 conducts periodic internal and third-party security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

---

9. Your Rights

As a player on the abv8 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the abv8 Data Privacy team at [email protected]. abv8 will respond to all valid requests within 30 calendar days of receipt, and at no charge, unless a request is manifestly unfounded, excessive, or repetitive.

• Right of Access: You have the right to request confirmation of whether abv8 processes personal data about you, and if so, to obtain a copy of that data together with information about how it is used.
• Right to Rectification: You have the right to request that abv8 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to abv8's legal obligation to retain certain data under applicable regulations.
• Right to Restriction: You have the right to request that abv8 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified or while a legitimate interest objection is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where abv8 relies on legitimate interests as the legal basis, and to object to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

---

10. Children's Privacy

The abv8 platform is strictly intended for individuals who are 21 years of age or older. abv8 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If abv8 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data from our systems and close the associated account. Any funds deposited by an underage user will be handled in accordance with the age verification provisions set out in our Terms & Conditions.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on abv8 without authorisation, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

---

11. Third-Party Services and Links

The abv8 platform integrates with third-party services including payment processors, game technology providers, and analytics tools. While abv8 takes care to engage only reputable and security-conscious third-party partners, abv8 is not responsible for the privacy practices of those third parties once data is processed under their own systems and policies. Each third-party provider operates under its own privacy documentation, which governs data it processes independently.

The abv8 website does not contain outbound links to third-party websites for the purpose of user navigation. Any third-party integrations visible within the abv8 platform (such as embedded game content from Pragmatic Play, Evolution Gaming, Spribe, or other studios) are subject to data-sharing arrangements governed by abv8's processor agreements with those studios, as described in Section 5.1 of this Policy.

---

12. International Data Transfers

abv8 primarily stores and processes personal data on servers located in jurisdictions with data protection frameworks considered adequate for the purposes of this Policy. In certain circumstances, personal data may be transferred to or processed by third-party service providers operating in other countries, for example where a game studio or payment technology provider maintains infrastructure outside Bangladesh.

Where such international transfers occur, abv8 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those described in this Policy. abv8 does not transfer personal data to jurisdictions where adequate protections cannot be confirmed.

---

13. Changes to This Privacy Policy

abv8 reserves the right to update or revise this Privacy Policy at any time. When changes are made, the revised Policy will be posted on abv8.io with an updated effective date. Where changes are material — meaning they affect the way in which abv8 processes your personal data in a manner that may affect your rights — abv8 will notify registered players via the email address associated with their account at least 14 days before the changes take effect.

Your continued use of the abv8 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure as described in our Terms & Conditions.

---

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to abv8's data processing practices generally, please contact our Data Privacy team using the details below. All privacy-related communications must be submitted in English and directed to the email address provided.