98ab Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how 98ab ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data in connection with the online casino, sports betting, and gaming services available at https://98ab.win and any associated mobile or sub-domain interfaces. It applies to all registered players, prospective registrants, and visitors who interact with any part of the 98ab digital ecosystem.

98ab is operated as an international online gaming platform serving the Bangladesh market. We are committed to handling all personal data responsibly, transparently, and in accordance with internationally recognised data protection standards. While Bangladesh does not currently have a comprehensive personal data protection statute equivalent to the European GDPR, 98ab voluntarily aligns its data practices with international best-practice frameworks to ensure the highest level of user data protection for all players.

1.1 What This Policy Covers

This Policy covers personal data collected and processed in the following contexts:

• Registration and account creation on the 98ab platform
• Identity verification (KYC) processes, including document submission and review
• Deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and local bank transfers
• Gameplay activity, betting history, and platform usage analytics
• Customer support communications via email or live chat
• Promotional and bonus programme participation
• Responsible gaming tool usage, including self-exclusion and deposit limit requests
• Technical data collected automatically through cookies and server logs

1.2 Relationship to Other Policies

This Privacy Policy should be read alongside the 98ab Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and 98ab. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall take precedence for that matter.

2. Data We Collect

98ab collects personal data through three primary channels: information you provide directly, information generated through your use of the platform, and technical data collected automatically by our systems. The following table summarises the categories of data we collect and the context in which each category arises.

2.1 Data You Provide Voluntarily

The largest portion of personal data 98ab holds is data you provide directly — most importantly during registration, when submitting KYC documents, when contacting support, and when configuring responsible gaming tools. You are under no obligation to provide this data, but without it, 98ab cannot create or maintain your account, process transactions, or deliver the services described on this platform.

2.2 Data Collected Automatically

When you visit the 98ab website, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, the type of device and browser you are using, the pages you access, the duration of your visit, and your approximate geographic location derived from your IP address. This data helps 98ab maintain platform security, detect unusual or fraudulent access patterns, and optimise the user experience for players accessing from Bangladesh.

2.3 Data from Payment Partners

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a local bank, our payment processing partners may share transaction reference data — such as confirmation codes, transaction timestamps, and sender wallet identifiers — with 98ab to reconcile your account balance. 98ab does not receive or store full mobile wallet PINs, full card numbers, or internet banking passwords from these transactions.

3. How We Use Your Data

98ab uses the personal data it collects only for clearly defined, legitimate purposes directly related to the operation of the platform and the delivery of services to you. We do not use your data for purposes that would be incompatible with the context in which it was originally provided.

3.1 Core Service Delivery

• Creating, verifying, and maintaining your 98ab player account
• Processing deposits and withdrawals in Bangladeshi Taka via your chosen payment method
• Settling bets, distributing winnings, and maintaining accurate account balance records
• Delivering customer support, responding to queries, and resolving complaints
• Enforcing the one-account policy and detecting duplicate registrations

3.2 Legal and Regulatory Compliance

• Conducting Know Your Customer (KYC) identity and age verification to ensure only players aged 18 and above access real-money services
• Meeting anti-money laundering (AML) obligations by monitoring transaction patterns and maintaining transaction records
• Responding to lawful requests from financial intelligence authorities or law enforcement agencies
• Maintaining financial records for audit, tax, and regulatory purposes for the required retention periods

3.3 Platform Security and Fraud Prevention

• Detecting and preventing unauthorised account access, credential theft, and identity fraud
• Identifying and blocking the use of automated bots, scripts, or multi-account exploitation schemes
• Monitoring for unusual betting patterns indicative of bonus abuse, collusion, or match-fixing activity
• Investigating and acting upon player reports of suspicious account activity

3.4 Responsible Gaming

• Monitoring gameplay patterns to identify indicators of problem gambling behaviour
• Enforcing self-exclusion requests, deposit limits, and session time limits set by the player
• Contacting players proactively where gameplay data suggests a potential gambling problem
• Maintaining records of self-exclusion to prevent re-registration during an active exclusion period

3.5 Platform Improvement and Analytics

98ab uses aggregated and anonymised usage data to understand how players interact with the platform, which features are most valued, and where the user experience can be improved. This analytics activity does not involve identifying individual players from their browsing behaviour — it operates at a population level to inform product development decisions.

3.6 Direct Communications

98ab may send transactional communications to your registered email address or mobile number — including account confirmation emails, deposit receipts, withdrawal confirmations, and important policy update notifications. These communications are essential to the operation of your account and cannot be opted out of while your account remains active. Promotional communications (bonus offers, seasonal promotions) are sent only where you have not objected to receiving them. You may opt out of promotional communications at any time by contacting [email protected].

4. Data Sharing & Third Parties

98ab does not sell or rent your personal data to third parties. However, in order to operate the platform and deliver its services, 98ab works with a limited set of trusted third-party partners who may process certain categories of your data on our behalf. All such partners are bound by strict data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to 98ab.

4.1 Categories of Third-Party Data Recipients

• Payment Processors: Mobile money operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive transaction reference data necessary to process deposits and withdrawals. Card scheme operators (Visa, Mastercard) may also be involved for international card transactions.
• Identity Verification Providers: 98ab may engage specialist KYC service providers to assist in verifying the authenticity of identity documents. These providers process your KYC documents under strict data security conditions and are prohibited from retaining your documents beyond the verification task.
• Game Software Providers: Third-party game studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi operate the game engines embedded within 98ab. These providers may receive a session token and basic account metadata to authenticate your game session. They do not receive your full identity, payment, or KYC data.
• Cloud Infrastructure Providers: 98ab uses cloud hosting and content delivery infrastructure to operate the platform. Data stored on these systems remains under 98ab's control and is subject to the access restrictions and encryption standards described in Section 8.
• Analytics Providers: Aggregated, anonymised usage data may be processed by analytics platforms to help 98ab understand platform performance. This data does not identify individual players.

4.2 Legal Disclosure

98ab may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. In such cases, 98ab will disclose only the minimum data necessary to fulfil the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

4.3 Business Transfers

In the event that 98ab undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 98ab will notify affected players in advance and ensure that any acquiring entity is bound by data protection obligations at least equivalent to those described in this Policy.

5. Cookies & Tracking Technologies

98ab uses cookies and similar tracking technologies to operate the platform correctly, maintain your login session, remember your preferences, and collect usage analytics. Cookies are small text files placed on your device by your browser when you visit a website. They do not carry viruses and cannot access other data on your device.

5.1 Types of Cookies Used by 98ab

5.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Blocking essential cookies — particularly session and authentication cookies — will prevent you from logging in and using real-money features on 98ab. Blocking analytics and preference cookies will not affect your ability to use the platform's core features but may result in a less personalised experience.

5.3 No Cross-Site Tracking

98ab does not use third-party tracking pixels, social media tracking cookies, or cross-site behavioural profiling technologies to track your activity outside of the 98ab platform. The cookies described above are scoped exclusively to the 98ab.win domain and do not follow you to other websites.

6. Data Retention

98ab retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following table outlines the standard retention periods applied to each major category of data.

6.1 Secure Deletion

When personal data reaches the end of its retention period and there is no ongoing legal or regulatory basis for continued storage, 98ab securely deletes or irreversibly anonymises that data. Secure deletion means that the data cannot be recovered or reconstructed by any party after the deletion process is complete.

6.2 Extended Retention for Active Investigations

Where personal data is relevant to an active fraud investigation, dispute resolution process, or regulatory inquiry, 98ab may retain that data beyond the standard retention periods described above until the matter is fully resolved. Players will be informed of any extended retention where it is legally permissible to do so.

7. Your Privacy Rights

98ab respects your rights over your personal data. As a player on the 98ab platform, you have the following rights, which you may exercise at any time by contacting our support team at [email protected]. We will respond to all privacy rights requests within 30 days of receipt.

7.1 How to Exercise Your Rights

To submit a privacy rights request, send an email to [email protected] with the subject line "Privacy Rights Request — [Type of Request]". Include your registered account username and a brief description of the data you are requesting access to, correction of, or deletion of. For security purposes, 98ab may ask you to verify your identity before processing the request by confirming certain account details.

7.2 Limitations on the Right to Erasure

The right to erasure is not absolute. 98ab may decline a deletion request — or may delete some but not all of the requested data — where retention is required to comply with a legal obligation, to pursue or defend a legal claim, to enforce the Terms & Conditions, or to maintain records required under AML or financial regulations. In such cases, 98ab will provide a written explanation of the specific legal basis for retaining the data in question.

7.3 Opting Out of Marketing Communications

If you no longer wish to receive promotional emails or SMS messages from 98ab, you may opt out at any time by emailing [email protected] with the subject "Unsubscribe — Marketing". Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are essential to the operation of your account.

8. Data Security

98ab implements a layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. No online platform can guarantee absolute security, but 98ab applies industry-standard measures appropriate to the sensitivity of the data it processes.

8.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and 98ab's servers is encrypted using TLS 1.2 or higher, preventing interception of data in transit.
• Data Encryption at Rest: Sensitive data stored in 98ab's databases — including KYC document references and financial transaction records — is encrypted at the storage level using industry-standard encryption algorithms.
• Access Controls: Access to personal data within 98ab's internal systems is restricted on a strict need-to-know basis. Only staff members whose role requires them to process specific categories of data are granted access to those records.
• Two-Factor Authentication: All administrative access to 98ab's backend systems requires multi-factor authentication, preventing unauthorised access even if login credentials are compromised.
• Intrusion Detection: 98ab's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, or attempted data exfiltration, with automated alerts triggering immediate security review.
• Regular Security Audits: 98ab conducts periodic technical security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

8.2 Organisational Security Measures

• All staff and contractors who handle personal data are subject to confidentiality obligations and receive regular training on data protection best practices.
• Third-party service providers are assessed for data security compliance before being engaged and are bound by contractual data protection requirements.
• 98ab maintains an incident response plan that defines the steps to be taken in the event of a data breach, including internal escalation procedures and player notification processes.

8.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights or interests, 98ab will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — providing a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it. Notification will be sent to the registered email address associated with your 98ab account.

8.4 Your Role in Account Security

While 98ab takes comprehensive steps to secure the platform, account security also depends on the actions you take as a player. You are responsible for keeping your 98ab login credentials confidential and for using a strong, unique password that you do not reuse on other platforms. If you suspect your account has been accessed without your authorisation, contact 98ab support immediately at [email protected] so that your account can be secured promptly.

9. Minors & Age Restriction

98ab is strictly an adults-only platform. Access to real-money gambling services on 98ab is permitted only to individuals who are 18 years of age or older. 98ab does not knowingly collect personal data from any person under the age of 18. The KYC identity verification process that all players must complete before making a deposit is designed in part to confirm that the player meets the minimum age requirement.

9.1 Age Verification Process

As part of the KYC process, every 98ab player is required to submit a government-issued identity document confirming their date of birth. Acceptable documents for Bangladeshi players include a National Identity Card (NID), passport, or birth certificate accompanied by a supporting photo ID. Accounts where age verification fails — or where the submitted documents indicate that the holder is under 18 — will be immediately restricted and any deposits returned, less any applicable processing fees charged by the payment provider.

9.2 Underage Data Discovered Post-Registration

If 98ab discovers or has reasonable grounds to believe that a registered player is under the age of 18, the following steps will be taken immediately:

• The player's account will be suspended pending investigation.
• All personal data associated with the account will be reviewed and, following account closure, deleted as soon as legally permissible — subject only to any mandatory retention obligations under AML or financial regulations.
• Any real-money balance held in the account will be returned to the deposit source, less any wins generated during the period of underage access, which will be forfeited.
• The incident will be documented internally for security review purposes.

9.3 Parental Controls

98ab strongly encourages parents and guardians in Bangladesh to use parental control software to restrict minors' access to online gambling platforms. If you believe a minor in your household has registered on 98ab or accessed the platform, please contact [email protected] immediately with details so that the account can be investigated and closed without delay.

10. Policy Updates

98ab reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, platform features, applicable law, or regulatory guidance. The most current version of this Privacy Policy is always available at https://98ab.win/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

10.1 Notification of Material Changes

Where 98ab makes a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — you will be notified via the email address registered to your 98ab account at least 14 days before the change takes effect. The notification will summarise the nature of the change and direct you to the updated Policy for full details.

10.2 Minor Updates

Non-material updates — such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without prior individual notification. The "Last Updated" date will be revised to reflect any such change, and players are encouraged to check this page periodically to stay informed of the current Policy.

10.3 Continued Use as Acceptance

Your continued use of the 98ab platform following notification of a material Privacy Policy update constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure by contacting [email protected]. Please note that account closure does not immediately erase all personal data — data retained for legal and regulatory compliance purposes will continue to be held for the periods specified in Section 6.

11. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights as described in Section 7, or have a concern about how 98ab has handled your personal data, please reach out to us using the contact details below. Our team is available around the clock and aims to acknowledge all privacy-related enquiries within 5 business days.

11.1 Privacy Contact Details

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Privacy Rights Request" for faster routing to the relevant team.
• Help Centre: Visit the FAQ page for answers to common questions about account data, KYC, and payment security.
• Responsible Gaming: If your privacy concern relates to self-exclusion or problem gambling data, visit the Responsible Gaming page for specific guidance.

11.2 What to Include in Your Request

To help 98ab process your privacy request as quickly and accurately as possible, please include the following information in your email:

• Your registered 98ab username or account email address
• A clear description of your request (access, correction, deletion, objection, portability, or restriction)
• The specific data categories or time periods your request relates to, if relevant
• Any supporting context that will help our team understand and prioritise your request

11.3 Identity Verification for Privacy Requests

To protect the privacy of all players, 98ab verifies the identity of anyone submitting a data access or deletion request before processing it. This verification step ensures that personal data is never disclosed to or deleted at the request of an unauthorised third party. Verification typically requires you to confirm two or more account details — such as your registered email address and the last deposit method used — rather than submitting additional documents.