abba7 Privacy
Policy

§ 1 Who We Are

abba7 is an online betting and casino platform serving players in Bangladesh and other eligible markets. The platform is accessible at https://abba7.io and through any associated mobile applications or downloadable client software distributed under the abba7 brand. In this Privacy Policy, references to "abba7", "we", "us", or "our" refer to the operator of the abba7 platform, which acts as the data controller responsible for your personal information.

As the data controller, abba7 determines the purposes and means by which your personal data is processed. We have appointed a dedicated Data Protection contact who can be reached at [email protected] for all privacy-related enquiries, requests, and complaints. All correspondence will be handled in English and responded to within five (5) business days measured in Bangladesh Standard Time (BST, UTC+6).

§ 2 Scope of This Policy

This Privacy Policy applies to all personal data collected, stored, used, or otherwise processed by abba7 in connection with:

• Your use of the abba7 website at https://abba7.io and any subdomains operated by abba7.
• Your use of any abba7 mobile application, downloadable desktop client, or other software product bearing the abba7 brand.
• Any communications you send to or receive from abba7, including live chat, email, and support ticket exchanges.
• Your registration, account verification (KYC), deposit, withdrawal, bonus claim, and all other transactional activities on the platform.
• Any abba7 promotional activity in which you choose to participate, including referral programmes, tournaments, and seasonal offers.

This Policy does not govern the data practices of third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) whose games are integrated into the abba7 platform. Those providers operate under their own privacy policies. abba7 shares only the minimum data necessary with these providers to facilitate gameplay, and all such sharing is governed by binding data-processing agreements.

This Policy is intended for players based in Bangladesh and reflects the data-handling standards abba7 applies to all users regardless of location. All natural-language communications from abba7, including this Policy, are provided in English.

§ 3 Data We Collect

abba7 collects personal data across several categories. The table below provides a structured overview of what we collect and why each category is needed:

Data You Are Not Required to Provide

abba7 does not require, and strongly discourages you from providing, sensitive personal data beyond what is listed above. Specifically, do not submit health information, religious beliefs, political opinions, biometric data, or sexual orientation data to abba7 through any channel. Such categories of data are not needed for platform use and will be deleted if received inadvertently.

§ 4 How We Collect Your Data

abba7 collects personal data through the following channels and mechanisms:

Directly From You

The majority of the data abba7 holds about you is provided by you directly during the account registration process, when you complete KYC verification, when you make a deposit or withdrawal request, when you contact the support team, or when you opt in to a promotional offer. Providing accurate information in these contexts is a condition of using the abba7 platform.

Automatically Through Platform Use

When you access and use the abba7 platform, our servers and analytics infrastructure automatically log technical data including your IP address, device fingerprint, browser type, session duration, pages and games accessed, and interaction events. This data collection is necessary for platform security, fraud prevention, and performance optimisation. It occurs whether you are a registered player or an unregistered visitor to the site.

From Payment Service Providers

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, the relevant payment provider will share transaction confirmation data with abba7 to reconcile your account balance. abba7 does not receive or store your full payment account credentials — only transaction reference numbers and amounts.

From Identity Verification Partners

abba7 may use third-party KYC verification providers to validate identity documents submitted by players. These partners return a verification result (confirmed / not confirmed) and a risk score to abba7. The underlying document data is processed by the KYC partner under its own data retention policies, and abba7 retains only the verification outcome and the document image you submitted directly to abba7.

§ 5 Legal Basis for Processing

abba7 processes personal data only where a valid legal basis exists. The legal bases relied upon for each major processing activity are as follows:

• Contract Performance: Processing your identity data, contact data, and financial data is necessary to create and manage your abba7 Account, process deposits and withdrawals, and deliver the services described in our Terms & Conditions. Without this processing, we cannot provide you with a functioning account.
• Legal Obligation: Age verification (21+), KYC checks, and anti-money-laundering transaction monitoring are required by applicable legal obligations. abba7 must retain records of this processing to demonstrate compliance.
• Legitimate Interests: abba7 processes technical and usage data on the basis of its legitimate interests in securing the platform, detecting fraud, preventing problem gambling, and improving the service for all players. These interests do not override your fundamental privacy rights.
• Consent: Where abba7 sends you optional marketing communications (promotions, seasonal offers, tournament invitations), this is done on the basis of your explicit consent, which you may withdraw at any time by contacting [email protected] or updating your account preferences. Withdrawal of marketing consent does not affect your ability to use the platform.

§ 6 How We Use Your Data

abba7 uses the personal data described in Section 3 for the following purposes:

• Account Management: Creating, maintaining, and securing your abba7 Account, including sending account-related notifications such as login alerts, password reset confirmations, and balance updates.
• Identity & Age Verification: Verifying that you are who you say you are, and confirming that you meet the 21-year minimum age requirement before allowing deposits or withdrawals.
• Payment Processing: Facilitating deposits from and withdrawals to your registered payment methods (bKash, Nagad, Rocket, Upay, and bank accounts). Maintaining an accurate record of your transaction history for your own reference and for audit purposes.
• Security & Fraud Prevention: Monitoring sessions, login patterns, device fingerprints, and betting behaviour to detect and prevent unauthorised account access, fraudulent deposits, money laundering, bonus abuse, and collusion.
• Responsible Gaming: Analysing usage data to identify behavioural indicators of problem gambling, applying voluntary or mandatory limits where appropriate, and contacting players who may benefit from support resources.
• Customer Support: Using your communication data to resolve support tickets, investigate complaints, and improve the quality of the support team's responses.
• Platform Improvement: Using aggregated and anonymised usage data to understand how players interact with abba7, identify usability issues, and prioritise new features.
• Marketing (with consent): Sending you personalised promotional offers, tournament invitations, and seasonal campaigns via email or in-platform notification, where you have given explicit consent to receive such communications.
• Legal Compliance: Retaining records and producing reports as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing the abba7 Terms & Conditions.

§ 7 Data Sharing & Disclosure

abba7 does not sell your personal data. We share data only as necessary and only with the categories of recipient described below, each of which is bound by contractual confidentiality obligations and/or applicable data protection law:

Payment Processors

To process your deposits and withdrawals, abba7 shares your account identifier and transaction amount with the relevant mobile money or banking provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank). The minimum data required to complete the transaction is shared; your abba7 login credentials and KYC documents are never shared with payment processors.

KYC Verification Providers

For identity and age verification, abba7 may pass your submitted identity documents (NID image, passport scan) and associated metadata to a contracted KYC verification partner. This partner processes the data solely to return a verification result to abba7 and is prohibited from using it for any other purpose.

Game Providers

To launch games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers, abba7 passes a session token and your anonymous player identifier to the relevant provider's game server. Your full name, email address, and payment details are never shared with game providers.

Fraud & Security Partners

abba7 may share IP addresses, device identifiers, and behavioural risk scores with contracted fraud detection and cybersecurity service providers to protect the integrity of the platform and its players.

Legal & Regulatory Authorities

Where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, abba7 will disclose personal data as legally required. abba7 will notify the affected player of such a disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of abba7's business operations, personal data held by abba7 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and any resulting changes to this Privacy Policy with a minimum of thirty (30) days' advance notice.

§ 8 International Data Transfers

The abba7 platform and some of its contracted service providers may process or store data on servers located outside Bangladesh. Where personal data is transferred internationally, abba7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy, including:

• Contractual data-processing agreements incorporating standard privacy and security clauses with all third-party processors.
• Requiring overseas service providers to implement technical and organisational security measures commensurate with the sensitivity of the data being processed.
• Conducting periodic due-diligence reviews of key international data processors to verify continued compliance with abba7's data-handling standards.

If you would like specific information about the safeguards governing a particular international transfer of your data, please contact [email protected] with the subject line "International Transfer Query".

§ 9 Data Retention

abba7 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, personal data is either permanently deleted from abba7's systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where deletion is not immediately technically feasible (for example, in the case of data held in encrypted backup archives), the data will be quarantined from active processing and scheduled for deletion at the next available archive purge cycle.

§ 10 Cookies & Tracking

The abba7 website uses cookies and similar technologies (including local storage and session storage) to keep the platform functioning correctly and to gather performance data. abba7 uses cookies in the following categories only:

Strictly Necessary Cookies

These cookies are essential to the operation of the abba7 platform. They maintain your login session, preserve your language and display preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking the functionality of the platform.

Performance & Analytics Cookies

abba7 uses first-party analytics cookies to understand aggregate usage patterns — such as which games are most popular, which pages have high bounce rates, and where users encounter navigation difficulties. This data is used solely to improve the platform experience. No personal identifiers are included in analytics reports.

What abba7 Does NOT Use

• Third-party behavioural advertising cookies from networks such as Google Ads, Meta Pixel, or similar.
• Cross-site tracking pixels or beacons that follow you across other websites after you leave abba7.
• Fingerprinting scripts deployed for advertising profiling purposes.

You may configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Performance cookies may be blocked without affecting your ability to use the platform, though it may result in less relevant improvements being made over time.

§ 11 Your Rights

As a player on abba7, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and we will respond within five (5) business days.

• Right of Access: You may request a copy of all personal data abba7 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data abba7 holds about you is inaccurate or incomplete, you may request that it be corrected or supplemented.
• Right to Erasure ("Right to Be Forgotten"): You may request that abba7 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where applicable law requires deletion. This right is subject to legal retention obligations — for example, transaction records required for anti-money-laundering compliance cannot be deleted on request.
• Right to Restrict Processing: In certain circumstances (such as where you contest the accuracy of your data or have objected to processing), you may request that abba7 temporarily restrict how your data is used while the matter is investigated.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: Where processing is based on abba7's legitimate interests, you have the right to object on grounds relating to your particular situation. abba7 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without penalty by contacting [email protected]. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

§ 12 Children's Privacy

The abba7 platform is strictly intended for adults aged 21 years and above. abba7 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account creation process, and abba7 employs both automated checks and manual review to enforce this requirement.

If abba7 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false date of birth submitted at registration or any other means — the account will be immediately suspended, all data associated with the account will be securely deleted in accordance with legal obligations, and any funds held in the account will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor may have registered on abba7 using false information, please contact us immediately at [email protected] so that we can investigate and act without delay.

§ 13 Security Measures

abba7 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Key measures include:

• Transport Encryption: All data in transit between your device and abba7 servers is encrypted using TLS 1.3, the current industry gold standard for secure web communications.
• Password Security: Account passwords are stored using a strong one-way cryptographic hash function with per-user salt. abba7 staff cannot read your password in plain text; if you lose access, a password reset flow is required.
• Payment Tokenisation: abba7 does not store raw payment account numbers. References to your bKash, Nagad, Rocket, or Upay accounts are stored as tokenised references only, meaning even a breach of abba7's database would not expose your mobile banking credentials.
• Access Controls: Access to production systems and databases containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication. All access events are logged and reviewed.
• Network Security: The abba7 platform sits behind a web application firewall (WAF), DDoS mitigation infrastructure, and intrusion detection systems that monitor for anomalous traffic patterns in real time.
• Penetration Testing: abba7 conducts periodic security assessments and penetration tests carried out by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Employee Training: All abba7 staff with access to personal data receive mandatory data protection and information security training upon joining and on a recurring annual basis.
• Incident Response: abba7 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

§ 14 Third-Party Links

The abba7 platform may contain references to third-party game providers, payment partners, or other services. Where any outbound link to a third-party website or service is present, please be aware that abba7 has no control over, and accepts no responsibility for, the privacy practices or content of those third-party destinations.

This Privacy Policy applies solely to data processed by abba7 in connection with the abba7 platform. If you follow a link from abba7 to a third-party site, we recommend that you read the privacy policy of that site before submitting any personal data to it.

abba7 does not endorse or make any representations about third-party websites linked from our platform and is not responsible for the content, accuracy, or privacy practices of those sites.

§ 15 Changes to This Policy

abba7 may update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will:

• Update the "Effective Date" and "Last Updated" fields at the top of this document.
• Post a prominent notice on the abba7 platform for a minimum of thirty (30) days following the update, summarising the key changes in plain English.
• Where the change materially affects how we process data for which we rely on your consent, we will contact you directly via your registered email address and request fresh consent before the new processing begins.

Your continued use of the abba7 platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any change to this Policy, you should stop using the platform and contact [email protected] to request account closure and data deletion in accordance with Section 11 of this Policy.

Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected] with the subject line "Privacy Policy Archive Request".

§ 16 Contact & Data Requests

For all privacy-related enquiries, data subject access requests, complaints, or questions about this Privacy Policy, please contact the abba7 Data Protection team using the details below. All communications must be in English and will be responded to within five (5) business days (Bangladesh Standard Time, UTC+6).

abba7 is committed to resolving all privacy concerns directly and transparently. If you feel that your concern has not been addressed satisfactorily after contacting us, you retain the right to escalate the matter to a competent supervisory authority or seek judicial remedy in accordance with applicable law.