abc7 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Introduction

abc7 operates the online betting and casino platform accessible at https://abc7.io (the "Platform"). In the course of providing our services — including sports betting, live casino, poker, slots, and account management — abc7 necessarily collects and processes certain personal data relating to the individuals who register for and use the Platform.

This Privacy Policy ("Policy") describes how abc7 (referred to herein as "we", "us", "our", or the "Company") collects, receives, stores, uses, shares, and otherwise processes personal data relating to users of the Platform ("you", "your", or the "Player"). It also explains the rights available to you in relation to your personal data and how to exercise them.

This Policy should be read alongside the abc7 Terms & Conditions, which constitute the primary contractual agreement governing your use of the Platform. By registering for an abc7 account or by continuing to use the Platform following publication of this Policy, you acknowledge that you have read and understood its contents.

We are committed to handling your personal data with care, transparency, and integrity. If at any point you have questions about how we handle your information, our support team is available 24/7 at [email protected].

Data We Collect

The categories of personal data we collect depend on how you interact with the abc7 Platform. The table below summarises the principal categories of data collected and representative examples of each:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless this is voluntarily disclosed to our responsible gaming team in the context of a self-exclusion or problem gambling support request. Any such information disclosed in that context is treated with the highest level of confidentiality and is used solely to provide you with appropriate support.

How We Collect Data

abc7 collects personal data through the following channels and mechanisms:

Direct Collection

The majority of personal data we hold is provided directly by you when you register for an account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion. You are under no legal obligation to provide this data, but certain data is a prerequisite for specific services — for example, KYC documentation is required before your first withdrawal can be processed.

Automated Collection

When you access the abc7 Platform, our servers and analytics tools automatically record technical and usage data. This includes your IP address, device identifiers, browser configuration, and a record of the pages and games you interact with during each session. This data collection is necessary for the secure and stable operation of the Platform, and for our fraud prevention and responsible gaming monitoring systems.

Cookies and Similar Technologies

abc7 uses cookies and similar tracking technologies as described in Section 9 of this Policy. These technologies allow us to maintain your session, remember your preferences, analyse Platform usage patterns, and deliver relevant content. You can manage your cookie preferences through your browser settings; however, disabling certain cookies may affect the functionality of the Platform.

Third-Party Sources

In certain circumstances, abc7 may receive personal data about you from third-party sources. These include identity verification service providers (for KYC processing), payment processing partners (for transaction confirmation and fraud screening), and responsible gaming databases (for self-exclusion cross-checks). Data received from these sources is handled in accordance with this Policy and is used only for the purpose for which it was obtained.

Why We Process Your Data

abc7 processes your personal data for the following specific purposes:

• Account Registration and Management: To create and maintain your abc7 account, authenticate your identity at login, and administer your account settings and preferences.
• Identity Verification (KYC): To verify that you meet the eligibility requirements set out in the Terms & Conditions, including age verification (21+), and to comply with applicable anti-money laundering (AML) obligations.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your designated payment account.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, collusion, and other prohibited activities as defined in the Terms & Conditions.
• Customer Support: To respond to your queries, resolve complaints, and provide assistance through live chat, email, and other supported communication channels.
• Responsible Gaming: To monitor account behaviour for indicators of problem gambling, to administer responsible gaming tools you have activated (such as deposit limits and self-exclusion), and to provide proactive outreach where patterns of concern are identified.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from government authorities, and fulfil record-keeping obligations under applicable financial regulations.
• Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall quality and reliability of the abc7 Platform.
• Marketing Communications (with consent): Where you have expressly opted in, to send you promotional offers, bonus notifications, tournament announcements, and other marketing communications relevant to your interests as an abc7 player. You may withdraw this consent at any time by contacting support or updating your account notification preferences.

Legal Basis for Processing

Every instance of personal data processing carried out by abc7 rests on one of the following recognised legal bases:

• Contract Performance: Processing that is necessary to fulfil the contractual obligations set out in the Terms & Conditions — including account management, payment processing, and game delivery — is carried out on the basis of contract performance.
• Legal Obligation: Processing carried out to comply with applicable laws — including KYC identity verification, AML record-keeping, and responses to lawful government requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of our legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing carried out for direct marketing communications is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

abc7 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following strictly defined circumstances:

• Payment Service Providers: We share the minimum necessary financial data with payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks — solely to facilitate deposits and withdrawals. These partners are contractually bound to process your data only for payment-related purposes.
• Identity Verification Providers: To fulfil our KYC obligations, we share identity documents and personal details with accredited third-party identity verification service providers. These providers act as data processors on our behalf and are prohibited from using your data for any other purpose.
• Game Content Providers: Live casino and slot games are delivered through licensed third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, Microgaming, and NetEnt. Limited technical and session data may be shared with these providers to enable game delivery and resolve disputes. These providers do not receive your financial or full identity data.
• Fraud Prevention Networks: We may share transaction data and account behaviour indicators with industry fraud prevention services and self-exclusion databases to identify and act on patterns of fraudulent or problem gambling behaviour.
• Legal and Regulatory Authorities: Where required by applicable law or in response to a lawful request from a competent government authority, regulatory body, or law enforcement agency, abc7 will disclose personal data to the extent required by that legal obligation. We will notify you of such requests where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of abc7's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the Privacy Policy applicable to your data following the transfer.

In all cases where we share personal data with third parties acting as processors on our behalf, we require those parties to maintain appropriate technical and organisational security measures and to process your data strictly in accordance with our documented instructions.

International Data Transfers

The abc7 Platform serves players located in Bangladesh, and our primary data processing infrastructure is operated with this audience in mind. However, certain third-party service providers — including game content platforms, cloud infrastructure providers, and identity verification services — may process your data on servers located outside Bangladesh.

Where personal data is transferred internationally, abc7 takes appropriate steps to ensure that your data receives a level of protection consistent with the principles set out in this Policy. These steps may include contractual data processing agreements with applicable security and confidentiality requirements, the use of providers operating under internationally recognised data protection standards, and technical safeguards including encryption of data in transit and at rest.

By using the abc7 Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh. If you have specific concerns about international data transfers, please contact us at [email protected].

Data Retention

abc7 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with abc7, plus a minimum of five (5) years following account closure, to comply with applicable AML record-keeping obligations.
• Transaction and Payment Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of verification, or longer where required by applicable law or ongoing regulatory proceedings.
• Customer Support Records: Retained for three (3) years from the date of each support interaction, to enable resolution of any subsequent complaints or disputes.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool activation history are retained for the full duration of any exclusion period plus a minimum of five (5) years, to prevent re-registration in breach of an active exclusion.
• Marketing Preference Data: Retained for the duration of your account, or until you withdraw consent for marketing communications, whichever is earlier. Opt-out records are retained indefinitely to ensure your preference is honoured.

Where personal data is no longer required and the applicable retention period has expired, we will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

Cookies & Tracking Technologies

abc7 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform. Cookies are small text files placed on your device when you visit a website. They serve a range of functions that are essential to the operation and improvement of the Platform.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are required for the Platform to function correctly. They manage your login session, maintain security tokens, and enable core features such as account navigation and the betting slip. These cookies cannot be disabled without significantly impairing your experience on the Platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and previously viewed game categories — to provide a more personalised experience on return visits.
• Analytics Cookies: We use anonymised analytics cookies to understand how players navigate and interact with the Platform. This data helps us identify popular game categories, diagnose technical issues, and prioritise improvements. Analytics data is aggregated and does not identify individual users.
• Security and Fraud Prevention Cookies: These cookies help us detect and prevent suspicious activity, including automated bot access, credential stuffing attacks, and unusual betting patterns associated with fraudulent accounts.

You can manage your cookie preferences through your browser's privacy or cookie settings. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that blocking strictly necessary cookies will prevent you from accessing account features on the abc7 Platform.

abc7 does not use cookies to serve third-party advertising or share your browsing activity with external advertising networks.

Your Rights

You hold the following rights in relation to the personal data that abc7 holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge your request within 24 hours and respond in full within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any personal data we hold that is inaccurate or incomplete. You may update basic account details directly through your account settings without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing on the basis of legitimate interests. This right is subject to our legal obligation to retain certain data for the periods described in Section 8.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed or where you have objected to processing.
• Right to Data Portability: Where processing is carried out on the basis of contract or consent, and by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights are subject to exceptions and limitations under applicable law. Where we are unable to fulfil a request in full, we will explain the reason in our response.

Children's Privacy

The abc7 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register for an abc7 account or attempt to access any services on the Platform.

If abc7 becomes aware that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposits made to the original payment method, in accordance with our age restriction policy set out in the Terms & Conditions.

If you believe that a minor has registered for or is using an abc7 account, please report this to us immediately at [email protected]. We treat all such reports as a priority and will investigate and act within 24 hours of receiving a report.

Security Measures

abc7 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the abc7 Platform is encrypted using 256-bit SSL/TLS protocols — the same encryption standard applied by international financial institutions and banking platforms.
• Encrypted Data Storage: Sensitive personal data and financial records stored on our servers are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo security training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): abc7's internal systems use multi-factor authentication for all administrative access. Players are also encouraged to enable 2FA on their accounts for an additional layer of protection.
• Intrusion Detection and Monitoring: Our Platform is continuously monitored for unauthorised access attempts, suspicious activity, and potential security vulnerabilities. Security patches are applied promptly upon availability.
• Incident Response: In the event of a data security incident that poses a risk to your rights and interests, abc7 will notify affected individuals and, where required, the relevant regulatory authority, within the timeframes mandated by applicable law.

While abc7 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect your account has been compromised.

Third-Party Services

The abc7 Platform integrates with a number of third-party service providers to deliver its full range of features. These include game content platforms (such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming), payment processing networks (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and identity verification and analytics providers.

Each of these third-party providers operates under its own privacy policy and data processing terms. abc7 conducts due diligence on all third-party providers before integration and requires each provider to maintain data protection standards consistent with the principles in this Policy. However, abc7 is not responsible for the privacy practices of third-party providers beyond the scope of the data processing agreements in place between us.

The abc7 Platform does not contain links to third-party websites. All content and functionality are contained within the abc7.io domain. If you navigate away from the Platform through means outside our control, any data you share with external sites is governed by those sites' own privacy policies, for which abc7 bears no responsibility.

Policy Changes

abc7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Reviewed" date displayed at the top of this page and, where the change is significant, notify active players via email or an in-Platform notification prior to the change taking effect.

We encourage you to review this Policy periodically to stay informed about how abc7 collects and uses your personal data. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any material change to this Policy, you should discontinue use of the Platform and request account closure by contacting our support team.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data abc7 holds about you, please contact our Data Support team through any of the following channels:

• Email: [email protected] — subject line: "Privacy Request — [Your Account Username]"
• Live Chat: Available 24/7 via the Platform. For data rights requests, our support agents will escalate your query to the appropriate team within one business day.
• Response Times: Acknowledgement within 24 hours; full written response within 30 days of receipt of a complete request.