abe356 Privacy Policy

Data Controller Contact

📧 Email: [email protected]

Support is available 24 hours a day, seven days a week. Privacy-related queries will be acknowledged within two business hours and resolved within five business days. All correspondence should be in English and should clearly state that your query relates to a privacy or data protection matter.

2.1 Registration Data

When you create an abe356 account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Mobile phone number (used as your primary account identifier)
• Email address
• Residential address (district, division, and postal code within Bangladesh)
• Username and encrypted password
• Preferred language (English)

2.2 Identity Verification Data

To comply with know-your-customer (KYC) obligations and to prevent underage gambling, abe356 may request one or more of the following identity documents:

• National ID card (NID) — front and back image
• Passport — biographical data page
• Birth registration certificate (for age confirmation where NID is unavailable)
• Selfie photograph for liveness verification
• Proof of address — recent utility bill or bank statement issued in Bangladesh

2.3 Financial Data

When you make a deposit or withdrawal, we collect transaction-level data including:

• bKash, Nagad, Rocket, or Upay mobile wallet number (last four digits stored; full number used only for transaction routing)
• Bank account name and last four digits of account number (for bank-transfer players)
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history associated with your account

abe356 does not store full payment card numbers. Visa and Mastercard transactions are processed via PCI-DSS compliant third-party payment gateways; card data is never stored on abe356 servers.

2.4 Technical and Usage Data

When you access the abe356 platform, our servers automatically record certain technical information:

• IP address and approximate geographic location (city-level, Bangladesh)
• Browser type, version, and operating system
• Device type (mobile, tablet, or desktop)
• Pages visited, time spent, click sequences, and session duration
• Referring URL (the page you visited immediately before abe356)
• Error logs and performance metrics

2.5 Communications Data

If you contact our support team by email or live chat, we retain records of that correspondence, including your messages, our replies, and any attachments you provide. This allows us to maintain continuity of service and to resolve disputes accurately. Support records are kept for a minimum of two years from the date of the last interaction.

2.6 Cookies and Similar Technologies

abe356 uses cookies and similar browser-based storage technologies to maintain your session, remember your preferences, and gather analytics data. Essential session cookies are required for the platform to function. You may disable non-essential cookies through your browser settings; however, doing so may affect certain platform features. We do not use third-party advertising cookies or cross-site tracking pixels.

4.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank, and Visa/Mastercard gateway partners. These providers are contractually bound to process your data solely for payment execution purposes and to maintain equivalent data security standards.

4.2 Identity Verification Partners

Where automated KYC checks are performed, your identity document images and selfie photographs may be processed by a third-party identity verification service. This service operates under strict data processing agreements and does not retain your documents beyond the verification window. Results are communicated to abe356 as a pass/fail outcome with reference to the document type verified.

4.3 Game Content Providers

Casino game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — receive a pseudonymous player identifier and session token to load and record game activity. These providers do not receive your full name, mobile number, or financial details. Game outcome data returned to abe356 is used solely to settle bets and credit winnings to your account.

4.4 Legal and Regulatory Obligations

abe356 may disclose your personal data to law enforcement authorities, regulatory bodies, or other government agencies where required to do so by applicable law, court order, or legitimate official request. In such cases, we will disclose only the minimum information required and will notify you of the disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving abe356, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via email or a prominent notice on the platform prior to the transfer taking effect, and the successor entity will be bound by the terms of this Privacy Policy.

Retention Schedule

• Account registration data — retained for the duration of your account plus five years following account closure, to meet anti-money-laundering record-keeping requirements.
• Identity verification documents — retained for five years from the date of verification or from account closure, whichever is later.
• Transaction records — retained for seven years from the date of each transaction, in line with financial record-keeping best practice.
• Support correspondence — retained for two years from the date of the last interaction in each case.
• Technical and usage logs — retained for twelve months on a rolling basis, then automatically purged.
• Marketing preferences — retained until you unsubscribe or close your account, whichever comes first.

6.1 Encryption in Transit and at Rest

All data transmitted between your browser and abe356 servers is encrypted using TLS 1.2 or higher. Sensitive data fields — including passwords, payment references, and identity document metadata — are encrypted at rest using industry-standard AES-256 encryption.

6.2 Access Controls

Access to systems that hold personal data is restricted to authorised abe356 personnel on a strict need-to-know basis. All staff with access to personal data undergo security awareness training and are bound by confidentiality obligations. Administrative access is protected by multi-factor authentication.

6.3 Monitoring and Incident Response

Our systems are monitored continuously for unusual access patterns, potential breaches, and security anomalies. In the unlikely event of a data breach that poses a risk to your rights or freedoms, abe356 will notify affected players by email without undue delay and will outline the nature of the breach, the data affected, and the steps we are taking to address it.

Right of Access

You may request a copy of all personal data that abe356 holds about you. We will provide this information in a clear, readable format within 14 business days of receiving your verified request at no charge for the first request per year.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please log in to your account to update basic profile details, or contact support for changes to verified identity data.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that we may be required to retain certain data for legal, regulatory, or fraud-prevention purposes even after an erasure request. In such cases, we will inform you of the specific retention obligation that applies.

Right to Object to Marketing

You have the right to object to the use of your personal data for direct marketing purposes at any time. Email [email protected] with the subject "Unsubscribe" and we will cease all marketing communications within two business days. This does not affect transactional messages such as deposit confirmations, withdrawal notifications, or security alerts.

Right to Data Portability

Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider. Requests for data portability will be assessed on a case-by-case basis and fulfilled within 30 business days.