abv8 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how abv8 ("we", "us", "our") collects, uses, stores, and discloses personal information about you when you access or use our website at abv8.lat and all associated services, games, and features (collectively, the "Platform"). By creating an account or using the Platform, you acknowledge that you have read and understood this Policy and that your personal data will be processed as described herein.

We are committed to handling your personal data responsibly and in accordance with applicable data protection standards. We will never sell your personal information to third parties for their own marketing purposes. This Policy should be read alongside our Terms and Conditions, which govern the overall use of the abv8 Platform.

We use the personal data we collect for the following specific purposes. Where we rely on your consent, you may withdraw that consent at any time by contacting us at [email protected].

abv8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to create and manage your account, process transactions, and deliver the services you have signed up for.
• Legal obligation — processing required to comply with applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations.
• Legitimate interests — processing carried out for fraud prevention, security monitoring, platform improvement, and the responsible gaming programme.
• Consent — where we send you marketing communications or use non-essential cookies. You may withdraw consent at any time without penalty.

abv8 does not sell your personal information. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors — we share transaction data with bKash, Nagad, Rocket, and other integrated payment providers solely to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your payment data.
• Game providers — game session data (but not financial or identity data) may be shared with licensed game providers such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe for game integrity and RTP auditing purposes.
• Legal and regulatory authorities — we may disclose personal data to law enforcement, regulators, or other competent authorities when required to do so by law, court order, or to protect the safety of any person.
• Service providers — trusted technical service providers (e.g. cloud hosting, analytics, fraud detection) who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.

abv8 requires all third-party data processors to implement appropriate technical and organisational security measures and to process personal data only as instructed. We do not authorise any third party to use your personal data for their own direct marketing.

abv8 does not store your full bKash, Nagad, or Rocket account credentials on our servers. When you initiate a deposit or withdrawal, you authenticate directly with your mobile financial service provider using their own secure interface. abv8 receives only a confirmation token and transaction reference number from the payment provider, along with the transaction amount and status.

All financial transaction records are retained for a minimum of five years from the date of the transaction. This retention period is required for anti-money laundering compliance and may be extended where required by applicable law or ongoing investigations.

abv8 uses cookies and similar technologies to operate and improve the Platform. Some cookies are strictly necessary for the Platform to function; others help us understand how the Platform is used so we can improve it over time. We use the following categories of cookies:

• Strictly necessary cookies — essential for core functionality such as user authentication, session management, and security. These cannot be disabled without breaking the Platform.
• Performance and analytics cookies — collect anonymised data about how pages are used, load times, and error rates, helping us optimise the mobile experience for Bangladeshi players on 4G and Wi-Fi connections.
• Functional cookies — remember your preferences such as your chosen language (English or Bengali) so you do not need to re-select them on every visit.

Most modern mobile browsers allow you to control or block cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging into your account or completing transactions.

We retain your personal data for as long as your account is active and for a reasonable period thereafter, or for as long as is necessary to fulfil the purposes described in this Policy. The following specific retention periods apply: account registration data is held for the lifetime of the account plus 5 years after closure; financial transaction records are held for a minimum of 5 years; KYC documentation is held for 5 years from the date of verification or account closure, whichever is later; support correspondence is held for 2 years from the date of the last interaction.

Upon account closure, we will delete or anonymise your personal data within 90 days, subject to the mandatory retention periods above. Anonymised and aggregated statistical data (which cannot identify you) may be retained indefinitely for Platform analytics and improvement purposes.

abv8 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, access controls limiting which staff members can view personal account data, regular security testing and vulnerability assessments of the Platform, and secure storage of KYC documents with restricted staff access.

While we take security seriously and apply industry-standard protections, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify affected players and take appropriate remedial action as quickly as reasonably practicable.

Subject to applicable law, you have the following rights in relation to the personal data abv8 holds about you. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a clear description of your request. We will respond within a reasonable timeframe:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold.
• Right to erasure — you may request deletion of your personal data, subject to mandatory retention obligations (e.g. financial records required by AML law).
• Right to restrict processing — you may request that we limit how we use your data in certain circumstances (e.g. while a correction request is being reviewed).
• Right to data portability — you may request a structured, machine-readable copy of the personal data you have provided to abv8.
• Right to withdraw consent — where processing is based on your consent (e.g. marketing emails), you may withdraw that consent at any time with immediate effect going forward.

abv8 will endeavour to respond to all data rights requests within 30 days of receipt. In complex cases we may extend this by a further 30 days, in which case we will inform you of the extension and the reason for it.

abv8 is strictly an adults-only platform for persons aged 21 and above. We do not knowingly collect, use, or retain personal information from any person under the age of 21. If we discover or are notified that an account has been created by a person under 21, we will immediately close that account, delete the associated personal data (subject only to mandatory financial record retention), and void any associated transactions.

The abv8 Platform does not contain links to third-party websites. All content and navigation on the Platform remains within the abv8 domain. However, integrated game content (e.g. games streamed from Pragmatic Play or Evolution Gaming studios) is delivered via their own secure infrastructure. abv8 is not responsible for the data practices of third-party game providers; please review their own privacy policies if you have concerns about how they handle data generated during game sessions.

abv8 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes, we will post the updated Policy on the Platform with a revised effective date and, where practicable, notify registered players via their registered contact details. We encourage you to review this Policy periodically.

Your continued use of the Platform after the revised Policy's effective date constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way abv8 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Email: [email protected]