abc22 Privacy Policy —
How We Protect Your Data
At abc22, your privacy is a core responsibility. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a player based in Bangladesh. Please read this document carefully before using our platform.
Key Privacy Commitments
The summary below is provided for convenience only. It does not replace the full legal text. In the event of any inconsistency, the full provisions set out in each numbered section below shall prevail.
Your Data Is Secure
All data transmitted between your device and abc22 is protected by 256-bit SSL encryption. We do not store raw payment credentials such as bKash PINs or full card numbers on our servers.
No Data Sold to Third Parties
abc22 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data sharing with partners is limited to what is necessary to operate our services.
You Control Your Data
You have the right to access, correct, delete, and port your personal data at any time. You may also withdraw consent for non-essential data processing by contacting our support team.
Transparent Cookie Use
abc22 uses cookies to keep your session active, remember your preferences, and analyse platform performance. You can manage non-essential cookie preferences through your browser settings.
Defined Retention Periods
We do not hold your personal data indefinitely. Retention periods are tied to the purpose for which data was collected and to applicable legal obligations, particularly around financial transaction records.
Clear Point of Contact
If you have any question, request, or complaint relating to your personal data, you can reach the abc22 privacy team directly. All requests are acknowledged within five business days.
Data We Collect
When you register an account on abc22, use our Services, or communicate with our support team, we collect certain categories of personal data. The specific data we collect depends on how you interact with the platform. We collect data in three primary ways: directly from you when you register or complete a form, automatically when you use our platform, and occasionally from third-party sources such as payment providers and identity verification services.
The categories of personal data we collect from abc22 players include the following:
- Identity Data: Full legal name, date of birth, gender, nationality, and copies of identity documents provided during KYC verification (such as your Bangladesh National Identity Card, passport, or driving licence).
- Contact Data: Email address, Bangladesh mobile number, and residential address (including city — such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi — and postcode).
- Account Data: Username, encrypted password, account registration date, account status, and communication preferences.
- Financial Data: Deposit and withdrawal history, transaction amounts in BDT (৳), payment method identifiers (e.g., registered bKash or Nagad mobile number, last four digits of card), and balance history. We do not store full payment credentials.
- Gaming Activity Data: Bet history, game sessions, win/loss records, bonus usage, wagering activity, and game preference data.
- Technical Data: IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URLs.
- Communications Data: Records of messages exchanged with abc22 customer support via live chat or email, including timestamps and issue resolution notes.
- Responsible Gaming Data: Any deposit limits, loss limits, self-exclusion requests, cool-off periods, or other responsible gaming settings you have applied to your account.
You are not required to provide all of the data categories listed above to use every feature of abc22. However, certain data — particularly identity and financial data — is mandatory for account registration, KYC compliance, and processing withdrawals. Failure to provide mandatory data may result in restricted access to certain features or inability to process financial transactions.
- Full bKash, Nagad, or Rocket PIN codes or passwords.
- Full credit or debit card numbers (only last 4 digits are retained as a reference).
- Biometric data (fingerprints, facial recognition data) — NID photos are used for identity verification only and are not processed biometrically.
- Sensitive personal data such as racial or ethnic origin, political opinions, or religious beliefs, unless voluntarily disclosed.
- Data relating to children — abc22 strictly does not knowingly collect data from individuals under 18.
How We Use Your Data
abc22 uses the personal data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without first informing you and, where required, obtaining your consent.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact, Account | Contract performance |
| Identity & age verification (KYC) | Identity, Contact, Financial | Legal obligation |
| Processing deposits & withdrawals | Financial, Identity | Contract performance |
| Providing gaming & betting services | Account, Gaming Activity, Technical | Contract performance |
| Fraud prevention & security monitoring | Technical, Financial, Identity | Legitimate interest / Legal obligation |
| Customer support & issue resolution | Identity, Contact, Communications | Contract performance / Legitimate interest |
| Responsible gaming monitoring & tools | Gaming Activity, Responsible Gaming | Legal obligation / Legitimate interest |
| Personalised promotions & bonuses | Account, Gaming Activity, Contact | Consent |
| Platform analytics & performance improvement | Technical, Gaming Activity | Legitimate interest |
| Legal compliance & regulatory reporting | Identity, Financial, Gaming Activity | Legal obligation |
Legal Basis for Processing
abc22 processes your personal data on the basis of one or more of the following legal grounds. For each processing activity, we identify the most appropriate legal basis and rely on that basis consistently.
- Contract Performance: The majority of our data processing is necessary for the performance of the contract between you and abc22 — specifically, to register your account, process your deposits and withdrawals, and deliver the games and betting services you have signed up to use. Without this processing, we cannot provide the Services you have contracted for.
- Legal Obligation: Certain processing activities are required by law, including identity verification (KYC), anti-money-laundering checks, responsible gaming monitoring, and retention of financial transaction records for audit purposes. abc22 cannot waive these obligations regardless of your preferences.
- Legitimate Interest: abc22 processes certain data to pursue its legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, internal analytics, and improving the quality of our customer support. Where we rely on legitimate interest, we conduct a balancing test to confirm that our interest does not unfairly override your privacy rights.
- Consent: Where we process data for optional purposes — such as sending personalised marketing communications or placing non-essential analytics cookies on your device — we rely on your explicit consent. You may withdraw consent at any time, and withdrawal of consent will not affect the lawfulness of processing that occurred before the withdrawal.
If you would like to know the specific legal basis we rely on for any particular processing activity not described in the table in Section 2, please contact the abc22 privacy team using the details provided in Section 10.
Data Sharing & Third Parties
abc22 does not sell your personal data to any third party. We share data with external parties only where strictly necessary to deliver our Services, meet our legal obligations, or protect the integrity of the platform. All third parties who receive your data are required to handle it securely and in accordance with their own privacy obligations.
The following categories of third parties may receive your personal data:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the minimum financial data necessary to process your deposit and withdrawal transactions. They process this data as independent data controllers under their own privacy policies.
- Identity Verification Providers: Our KYC service provider receives copies of your identity documents and performs verification checks to confirm your identity and age. Results are returned to abc22 as pass/fail outcomes along with a reference number.
- Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi receive session identifiers and gameplay data necessary to deliver their games. They do not receive your full name, NID details, or financial data.
- Customer Support Platforms: Our live chat and ticketing system provider stores the content of your support conversations on secure servers. These communications are retained for quality assurance and dispute resolution purposes.
- Analytics Providers: Aggregated, anonymised technical data may be shared with analytics platforms to help us understand platform usage patterns. No personally identifiable information is included in these reports.
- Legal & Regulatory Authorities: abc22 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or in response to a valid legal order.
We do not share your data with any advertising networks for the purpose of serving targeted advertisements on other websites. We do not share data with social media platforms unless you have explicitly used a social login or sharing feature (which abc22 does not currently offer).
Data Retention
abc22 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. When the relevant retention period expires and there is no legal reason to continue holding data, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
The following retention periods apply to the main categories of data processed by abc22:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML / legal compliance |
| Financial Transaction Records | 7 years from transaction date | Financial regulations |
| KYC Documents | 5 years after account closure | Legal obligation |
| Gaming Activity Logs | 3 years from last activity | Responsible gaming / disputes |
| Support Communications | 2 years from resolution | Quality assurance |
| Analytics Data (anonymised) | 24 months rolling | Platform improvement |
| Marketing Consent Records | Until consent withdrawn + 3 years | Compliance evidence |
Where you request deletion of your personal data and abc22 is not legally obligated to retain it, we will action the deletion within 30 calendar days of receiving your verified request. Where we are required to retain certain data by law (for example, financial transaction records), we will inform you of the specific legal obligation that prevents immediate deletion, and we will delete that data as soon as the legal retention period expires.
Anonymised or aggregated data — data that has been irreversibly stripped of all identifiers that could link it back to you — is not subject to these retention limits, as it no longer constitutes personal data. abc22 may retain anonymised analytics data indefinitely for statistical and research purposes.
If your account has been inactive for a continuous period of 24 months with no login, no deposit, and no active bonus, abc22 may classify it as a dormant account. You will receive an email notification before any dormant account action is taken. Dormant account balances are handled in accordance with abc22's dormant account policy as set out in the Terms & Conditions.
Your Privacy Rights
As an abc22 player, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact the abc22 privacy team using the details in Section 10. We will respond to all valid requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Right of Access
You have the right to request a copy of all personal data abc22 holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies.
Right to Restriction
You may request that abc22 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being verified or a processing objection is being assessed.
Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a machine-readable format and to have it transferred to another service provider where technically feasible.
Right to Object
You have the right to object to processing based on legitimate interest, including profiling for marketing purposes. abc22 will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights re: Automated Decisions
You have the right not to be subject to a decision based solely on automated processing where it produces a significant legal or similarly significant effect. You may request a manual review of any such decision.
Right to Withdraw Consent
Where we rely on consent as our legal basis, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
Data Security
abc22 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect the evolving threat landscape.
Our technical security measures include the following:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the abc22 platform is encrypted using industry-standard TLS 1.2 or higher protocols. Our SSL certificate is maintained and renewed to ensure continuous protection.
- Encrypted Password Storage: User passwords are never stored in plain text. They are hashed and salted using a strong cryptographic algorithm before being stored in our database.
- Firewalls & Intrusion Detection: Our server infrastructure is protected by multi-layer firewalls and real-time intrusion detection systems that monitor for and alert on suspicious network activity.
- Access Controls: Access to personal data within abc22's internal systems is restricted on a need-to-know basis. Staff members with legitimate access to player data are subject to confidentiality obligations and regular security training.
- Two-Factor Authentication (2FA): abc22 supports and encourages the use of two-factor authentication on player accounts to add a second layer of protection beyond the username and password.
- Regular Security Audits: abc22 conducts periodic penetration testing and vulnerability assessments on its platform infrastructure to identify and remediate security weaknesses before they can be exploited.
- Data Breach Response: In the event of a data breach that poses a risk to your rights and freedoms, abc22 will notify affected players without undue delay and will take immediate steps to contain and investigate the breach.
While abc22 implements robust security measures, no internet-based system can be guaranteed 100% secure. You also have a responsibility to protect your own account by choosing a strong, unique password, not sharing your login credentials, and logging out of your account when using shared or public devices. If you suspect that your account has been compromised, please contact abc22 customer support immediately.
- Use a unique password for your abc22 account — do not reuse passwords from other sites.
- Enable two-factor authentication (2FA) in your account security settings.
- Never share your password, OTP, or bKash PIN with anyone — abc22 staff will never ask for these.
- Log out of your abc22 account when using a shared device or public Wi-Fi network.
- Be alert to phishing attempts — abc22 will only contact you from official abc22.app email addresses.
- Contact abc22 support immediately if you notice any unusual activity on your account.
Changes to This Policy
abc22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, changes to the services we offer, or improvements to our privacy framework. All updates will be published on this page with a revised "Last Updated" date at the top of the document.
Where we make a material change to this Privacy Policy — for example, a change that significantly affects how we use your data or that reduces your privacy rights — we will notify you in advance by posting a prominent notice on the abc22 platform homepage and, where practicable, by sending an email notification to your registered email address. We will give you reasonable notice before the change takes effect so that you have the opportunity to review the updated Policy.
Minor or administrative changes — such as correcting a typographical error, updating a contact address, or clarifying existing language without changing its meaning — may be made without advance notice, though the "Last Updated" date will always reflect the most recent revision.
Continued use of the abc22 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated document. If you do not agree with any change to this Privacy Policy, you should stop using abc22 and may request account closure by contacting our support team. We maintain a version history of this Privacy Policy; players may request access to previous versions by contacting the abc22 privacy team.
- A prominent notice displayed on the abc22 homepage and login screen.
- An email notification sent to your registered email address (for material changes).
- An in-platform notification displayed when you next log in to your account.
- An updated "Last Updated" date at the top of this Privacy Policy page.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way abc22 handles your personal data, please contact our privacy team. We are committed to responding to all genuine privacy enquiries promptly and thoroughly. Our target response time for all privacy-related communications is five business days, though complex matters may take longer.
You may contact the abc22 privacy team in the following ways:
- Email: [email protected] (please use the subject line "Privacy Request" to ensure your message is routed to the correct team).
- Live Chat: Available 24/7 directly through the abc22 platform. Ask to speak with a Privacy or Data Protection specialist.
- In-Platform Support Ticket: Submit a support ticket through your account dashboard, selecting "Privacy & Data" as the category.
When contacting us about a data rights request, please include your registered email address, account username, and a clear description of your request or concern. For erasure or access requests, identity verification will be required before we can process your request.
If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. abc22 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.
- Submit your complaint to the abc22 privacy team via email at [email protected] with the subject line "Privacy Complaint".
- You will receive an acknowledgement within two business days confirming receipt and providing a reference number.
- A privacy team member will investigate your complaint and provide a substantive response within 20 business days.
- If the matter is complex, we will notify you of the extended timeline and the reason for the delay.
- If you remain unsatisfied after our final response, you may escalate to the relevant regulatory authority.
- General privacy enquiries: Within 5 business days.
- Data access / portability requests: Within 30 calendar days.
- Erasure / correction requests: Within 30 calendar days.
- Formal privacy complaints: Acknowledgement within 2 business days; substantive response within 20 business days.
- Data breach notifications: Without undue delay, no later than 72 hours after abc22 becomes aware of the breach.
Have Questions About Your Privacy?
Our support team is available 24/7 to answer any questions about how abc22 handles your personal data. You can also explore our FAQ for quick answers, or review our Responsible Gaming page for player protection tools. For adults aged 18 and above only.