Privacy Policy

abba77 ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at abba77.app. We are the data controller responsible for the personal information collected through the abba77 platform and its associated services.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our dedicated data support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including public holidays in Bangladesh (Bangladesh Standard Time, UTC+6).
• Response Time: We aim to respond to all privacy-related enquiries within 2 business days.

All communications regarding data privacy must be submitted in writing to the above email address. Verbal requests cannot be actioned for data protection and audit purposes.

abba77 collects personal data in three principal ways: information you provide directly, information generated automatically through your use of the platform, and information received from third-party payment or verification partners.

Information you provide directly:

• Full legal name, date of birth, and gender (required for age verification and account registration).
• Residential address, including city and district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Mobile number registered with your bKash, Nagad, Rocket, or Upay account.
• National ID number, passport number, or other government-issued identification document details (collected only where KYC verification is required).
• Account credentials including username and encrypted password hash.
• Communication records: messages and correspondence submitted to our support team.

Information collected automatically:

• Device identifiers, operating system, browser type and version, and screen resolution.
• IP address and approximate geolocation derived from IP.
• Session timestamps, pages visited, games played, wagers placed, and transaction history.
• Cookies and similar tracking technologies (see Clause 7 for full cookie details).

Information from third parties:

• Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank.
• Identity verification outcomes from KYC service providers where applicable.

abba77 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions.

abba77 processes your personal data for the following specific and lawful purposes:

• Account creation and management: To register your account, verify your identity, enforce the 21+ age requirement, and manage your ongoing relationship with abba77.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records of all transactions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities. This includes automated risk scoring and manual review by our security team.
• Legal compliance: To meet obligations imposed by applicable law, including responding to lawful orders from competent authorities and maintaining transaction records for the legally required retention period.
• Customer support: To respond to your queries, resolve account issues, and maintain a record of your support interactions for quality assurance.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to administer self-exclusion, deposit limit, and session time-out requests made by Players.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the abba77 platform, fixing bugs, and developing new features. This analysis does not involve individually identifiable data.
• Promotional communications: To send you bonus offers, tournament invitations, and promotional updates — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].

abba77 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or where required by law.

abba77 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. We share personal data only in the following limited and necessary circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank partners receive only the minimum transaction data required to process your deposit or withdrawal. These partners operate under their own privacy policies and data protection obligations.
• Identity verification providers: Where KYC verification is required, your identification document details may be shared with a third-party verification service for the sole purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and wagering data to facilitate gameplay. No directly identifiable personal data (name, address, phone number) is shared with game studios.
• Law enforcement and regulatory authorities: We may disclose personal data where required by a valid legal order, court order, or regulatory demand from a competent authority. abba77 will notify affected Players of such disclosures where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or part of abba77's business, Player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer.

All third-party partners who receive Player data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those specified in their data processing agreements with abba77.

abba77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active accounts: Personal data is retained for the full duration of your account's active status and for a period of 5 years following account closure, to satisfy legal and financial record-keeping requirements.
• Transaction records: Financial transaction logs (deposit and withdrawal history) are retained for a minimum of 7 years in accordance with standard financial record-keeping practice.
• KYC documents: Identity verification documents are retained for 5 years following account closure or the date of the last transaction, whichever is later.
• Support communications: Customer support correspondence is retained for 3 years from the date of the last interaction in the relevant support thread.
• Marketing consent records: Records of marketing consent (and withdrawal of consent) are retained for 5 years to demonstrate compliance.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

abba77 respects your rights as a data subject. Depending on applicable law and the specific circumstances of your request, you may exercise the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data abba77 holds about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. You can update basic account details (such as your mobile number) directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to legal retention obligations — abba77 cannot delete data that must be retained under applicable law.
• Right to Restrict Processing: You may request that abba77 restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to abba77, for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to abba77 demonstrating compelling grounds for continued processing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. We will respond within 10 business days. We may ask you to verify your identity before processing your request to protect against unauthorised data access.

abba77 uses cookies and similar tracking technologies to operate, secure, and improve the platform. A cookie is a small text file stored on your device when you visit the abba77 platform. We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and login state management cookies. No consent is required for these cookies as they are technically indispensable.
• Functional Cookies: These remember your preferences (such as language settings and game history) to personalise your experience. They are set with your consent.
• Analytics Cookies: We use anonymised, aggregated analytics to understand how Players navigate the platform, which games are most popular, and where technical issues arise. These cookies do not identify you personally and are used solely to improve the abba77 experience.
• Security Cookies: These support our fraud detection systems by tracking session anomalies and suspicious login patterns. They are necessary for the safety of your account and cannot be disabled without compromising account security.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional cookies may affect the personalised features of the abba77 platform. Disabling security cookies is not recommended and may result in additional authentication steps being required at login.

abba77 does not use third-party advertising cookies or allow ad networks to track your activity on the platform.

abba77 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and abba77 servers is encrypted using SSL/TLS protocols. This applies to all login sessions, deposit and withdrawal transactions, and account management actions.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard cryptographic algorithms before storage, meaning that even in the unlikely event of a data breach, your actual password cannot be recovered.
• Two-Factor Authentication (2FA): OTP-based two-factor authentication is available for all accounts and is strongly recommended. Players who enable 2FA benefit from an additional layer of login security beyond their password.
• Access Controls: Access to Player personal data within the abba77 organisation is strictly role-based. Only personnel with a legitimate operational need are permitted access to personally identifiable information, and all such access is logged and audited.
• Incident Response: In the event of a data security incident that poses a risk to Player rights and freedoms, abba77 will notify affected Players as promptly as possible and take immediate steps to contain and remediate the incident.

While abba77 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. Please refer to Clause 3 of the Terms & Conditions for your account security obligations.

The abba77 platform is strictly restricted to individuals who are 21 years of age or older. abba77 does not knowingly collect personal data from individuals under the age of 21, and we take proactive steps to prevent underage access through mandatory age verification at the point of registration.

If abba77 becomes aware — or has reasonable grounds to suspect — that an Account has been opened by or on behalf of a person under 21 years of age, we will:

• Immediately suspend the Account and block all further access.
• Void any bets placed and withhold any associated winnings.
• Return any deposits made, less any applicable processing fees, to the originating payment method where technically possible.
• Permanently delete all personal data associated with the underage account, except where retention is required for legal or fraud prevention purposes.

Parents and guardians who become aware that a minor has accessed the abba77 platform using their device or credentials are urged to contact [email protected] immediately so that the Account can be investigated and closed without delay.

abba77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The date of the most recent update is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice to registered Players via the mobile number or email address on file, or by displaying a prominent notice on the abba77 platform, no less than 7 days before the changes take effect.

Your continued use of the abba77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the platform and may request account closure in accordance with the account termination provisions in our Terms & Conditions.

We encourage all Players to review this Privacy Policy periodically to stay informed about how abba77 protects their personal data.