aba999 Monster Hi-Lo — Bangladesh's Most Thrilling Card Prediction Game

aba999 processes your personal data on the following legal bases, each of which applies to different categories of processing activity described in this Privacy Policy:

• Contractual necessity: Processing your identity, contact, payment, account, and gameplay data is necessary to perform our contractual obligations to you under the aba999 Terms & Conditions. Without this processing, we cannot operate your account, accept deposits, pay out winnings, or provide access to games and betting markets.
• Legal obligation: We are required to collect and retain certain data — including identity verification records and transaction histories — to comply with anti-money laundering obligations, age verification requirements, and any lawful direction from Bangladeshi authorities.
• Legitimate interests: We process technical data, gameplay analytics, and communication records on the basis of our legitimate interests in operating a secure, fraud-resistant platform, improving our services, and protecting our players and business from financial crime. We have assessed that these legitimate interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, to send you promotional communications or to place non-essential cookies on your device — we will obtain that consent clearly and separately. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

aba999 does not sell, rent, or lease your personal data to any third party for commercial purposes. We share your personal data only in the following limited and clearly defined circumstances:

• Payment providers: We share necessary payment data (such as your mobile financial service account reference) with bKash, Nagad, Rocket, Upay, and our banking partners solely to process your deposit and withdrawal transactions.
• Game software providers: Your account identifier and gameplay session data may be shared with our certified game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of delivering game content and recording verified outcomes. These providers operate under their own data protection frameworks and are contractually bound to use data only for stated purposes.
• Identity verification services: Where required by our KYC process, we may share identity document data with trusted, contracted verification service providers to confirm your age and identity. These providers process data strictly in accordance with our instructions.
• Legal and regulatory authorities: We may disclose your personal data to courts, government agencies, law enforcement authorities, or financial intelligence units in Bangladesh where we are legally compelled to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect our rights, or ensure the safety of our players.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of aba999's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations continuing to apply to your data.

aba999 uses cookies and similar browser-based technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. The cookies used by aba999 fall into the following categories:

aba999 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. You can manage or delete cookies through your browser settings at any time. Please be aware that disabling essential cookies will impair your ability to log in and use the aba999 platform.

aba999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to provide you with our services, and to comply with applicable legal obligations. Once data is no longer required for these purposes, it is securely and permanently deleted or anonymised.

The following retention periods apply to the main categories of personal data held by aba999:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and payment records: Retained for a minimum of 5 years from the date of each transaction to support financial audit, fraud investigation, and regulatory compliance obligations.
• Gameplay and betting history: Retained for 3 years from the date of each session. Aggregated, anonymised game statistics may be retained indefinitely for platform analytics purposes.
• KYC documents: Identity verification documents are retained for the period your account is active and for 5 years after closure, after which they are securely deleted.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of each interaction, unless the content relates to an ongoing dispute, in which case records are retained until the dispute is fully resolved.
• Marketing consent records: Records of your consent or opt-out to marketing communications are retained for as long as your account is active and for 1 year after closure, to evidence compliance with your stated preferences.

aba999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes the following layers of protection:

• Transport Layer Security (TLS): All data transmitted between your device and the aba999 platform is encrypted using current TLS protocols, ensuring that your login credentials, payment data, and account information cannot be intercepted in transit.
• Encrypted password storage: aba999 never stores your password in plain text. Passwords are hashed using industry-standard one-way cryptographic algorithms. Even aba999 staff cannot retrieve your original password.
• Access controls: Access to personal data within aba999's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories are granted that access, and all access is logged and audited.
• Intrusion detection and monitoring: aba999's platform is monitored around the clock for suspicious access patterns, unusual transaction volumes, and other indicators of potential security incidents.
• Third-party security assessments: aba999 engages independent security professionals to conduct periodic assessments of our platform's infrastructure and data handling practices.
• Incident response: In the event of a data security incident that may affect your personal data, aba999 will notify affected players without undue delay, providing details of the nature of the incident, the data potentially affected, and the steps we are taking to address it.

As a player on the aba999 platform, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting us at [email protected]. We will respond to all valid requests within a reasonable timeframe and at no charge to you:

• Right of access: You have the right to request a copy of the personal data aba999 holds about you, together with a summary of the purposes for which it is being processed. We will provide this in a clear, readable format.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure: In certain circumstances — such as where your data is no longer necessary for the purpose it was collected, or where you withdraw consent and no overriding legal basis applies — you may request that we delete your personal data. We will assess all erasure requests and inform you of the outcome, including any data categories we are legally required to retain.
• Right to restrict processing: You may request that we temporarily suspend the processing of your personal data in specific circumstances, such as while we investigate an accuracy dispute or assess an objection you have raised.
• Right to data portability: Where processing is based on your consent or a contractual obligation, you may request a structured, machine-readable copy of your personal data so that it can be transferred to another service provider of your choice.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of aba999's legitimate interests. We will cease such processing unless we can demonstrate compelling grounds that override your interests.
• Right to withdraw consent: Where you have provided consent for a specific processing activity (such as receiving marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request", along with sufficient information to identify your account. We may ask you to verify your identity before acting on a request to protect against unauthorised access to your data.

The aba999 platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. Our registration process includes age verification steps designed to identify and prevent underage users from creating accounts.

If aba999 becomes aware that personal data has been collected from a player who is under 18 years of age, we will take immediate steps to delete that data, close the associated account, and return any deposits made (less any applicable processing costs) to the payment source, provided that no fraud or misrepresentation was involved.

If you are a parent or guardian and you believe that a minor for whom you are responsible has registered on aba999 or provided personal data to our platform without your knowledge, please contact us immediately at [email protected]. We will prioritise your report and act swiftly to investigate and remediate the situation.

aba999 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes to the platform, or to comply with evolving legal requirements. When we make material changes to this policy, we will notify active players by posting a prominent notice on the aba999 platform and, where appropriate, by sending an email to your registered address.

The effective date displayed at the top of this document reflects the date on which the most recent version came into force. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of aba999 after any update constitutes your acknowledgement of the revised policy.

Previous versions of this Privacy Policy are available on request by contacting our support team. We maintain a version history to ensure full transparency about how our data practices have evolved over time.

If you have any questions, concerns, or requests related to this Privacy Policy or the way aba999 handles your personal data, please contact us using the details below. All privacy-related enquiries are handled confidentially and with priority by our dedicated support team, available around the clock in Bangladesh Standard Time (BST, UTC+6):

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24/7 directly through the aba999 platform
• Response time: We aim to acknowledge all privacy-related correspondence within 2 business days and to resolve requests within 10 business days