98ab Privacy Policy

1. Who We Are

This Privacy Policy is issued by 98ab ("98ab", "the Platform", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://98ab.io. 98ab is an internationally licensed platform providing sports betting, live casino, slots, and related gaming services to players, with particular focus on the Bangladesh market.

98ab acts as the data controller in respect of all personal data collected from users who register accounts, make deposits, place bets, or otherwise interact with the Platform. All data processing activities described in this policy are carried out by 98ab or by carefully selected third-party processors acting under instruction from 98ab and bound by appropriate data processing agreements.

For all data protection enquiries, please contact us at: [email protected]

2. Data We Collect

98ab collects personal data in the following categories. We collect only what is necessary for the stated purposes set out in Section 4 of this policy.

98ab does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is strictly required for identity verification purposes under our KYC obligations. We do not store raw payment credentials such as full wallet PINs or full bank account numbers.

3. How We Collect Your Data

98ab collects personal data through the following channels:

• Direct interactions: Data you provide when you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or participate in a promotion or survey.
• Automated technologies: When you access the 98ab platform, our servers automatically record technical and usage data including your IP address, browser fingerprint, device identifiers, and session activity. This collection is performed via server logs, cookies, and similar tracking mechanisms described in Section 7.
• Payment processors: When you complete a transaction via bKash, Nagad, Rocket, Upay, or a partner bank, we receive a transaction confirmation and reference number from the payment provider. We do not receive your wallet PIN or full banking credentials.
• Identity verification partners: Where 98ab uses a third-party KYC verification service to validate government-issued identity documents, that service may return a verification result and a confidence score to 98ab. The document image itself may be retained by the KYC provider subject to their own privacy policy.
• Publicly available sources: In cases of suspected fraud or money laundering, 98ab may cross-reference publicly available information (such as court records or sanctions lists) to verify account information.

4. Purposes & Legal Bases for Processing

98ab processes your personal data only when there is a lawful basis for doing so. The table below maps each processing purpose to its legal basis.

Where processing is based on legitimate interests, 98ab has assessed that those interests are not overridden by your rights and freedoms as a data subject, taking into account the reasonable expectations of a player using an online betting platform.

5. Sharing Your Data

98ab does not sell your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank receive only the transaction data required to process your deposit or withdrawal. Each payment provider operates under its own privacy policy.
• Game providers: Third-party game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive a pseudonymous player identifier and session token to launch games. They do not receive your full name, address, or payment details.
• KYC & identity verification partners: Where a third-party identity verification service is used, your submitted document images and extracted identity data are shared for the purpose of verifying your identity against our 21+ age requirement and anti-fraud obligations.
• Fraud prevention and security services: Technical data (including IP address and device fingerprint) may be shared with fraud detection services to identify and block suspicious account activity.
• Legal and regulatory authorities: 98ab will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or equivalent legal process. 98ab will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of 98ab's business or assets, personal data held by 98ab may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where possible.

6. International Data Transfers

The 98ab platform serves players primarily located in Bangladesh. Some of the third-party service providers we engage — including game studios, fraud detection services, and cloud infrastructure providers — may be located in jurisdictions outside Bangladesh. Where personal data is transferred internationally, 98ab takes steps to ensure that appropriate safeguards are in place, including:

• Entering into data processing agreements that incorporate standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection frameworks.
• Selecting processors who operate under privacy frameworks that provide an adequate level of protection for personal data.
• Applying data minimisation principles so that only the minimum necessary data is transferred to international processors, often in pseudonymised form.

If you require further information about the specific safeguards applied to any international data transfer, please contact us at [email protected].

7. Cookies & Tracking Technologies

98ab uses cookies and similar technologies (such as local storage and session tokens) on the Platform. The following cookie categories are in use:

98ab does not use advertising cookies or third-party retargeting pixels. You can control cookie behaviour through your browser settings. Blocking strictly necessary cookies may prevent the Platform from functioning correctly. Blocking functional or analytical cookies will not affect your ability to place bets or access casino games.

8. Data Retention

98ab retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as we are required to retain it under applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with 98ab, plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC documents: Retained for the duration of the account relationship plus 5 years post-closure, or longer where required by law.
• Customer support communications: Retained for 3 years from the date of the interaction, for audit and dispute resolution purposes.
• Technical and usage data (server logs): Retained for up to 12 months in identifiable form, then anonymised for aggregate analytics purposes.
• Marketing consent records: Retained for as long as the consent is active, plus 3 years following withdrawal of consent, for compliance audit purposes.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

9. Security Measures

98ab implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction:

• SSL/TLS encryption: All data transmitted between your browser or mobile device and the 98ab platform is encrypted using industry-standard TLS protocols. The platform operates exclusively over HTTPS.
• Access controls: Personal data is accessible only to 98ab staff and authorised processors who have a legitimate need to access it for the purposes described in this policy. Access is granted on a least-privilege basis and is subject to regular access reviews.
• Password security: Player account passwords are stored as salted cryptographic hashes. 98ab staff cannot view your password in plain text. If you forget your password, it must be reset, not retrieved.
• Fraud detection: Automated and manual fraud monitoring tools are applied to player account activity to detect and respond to suspicious behaviour, including unusual login locations, atypical transaction patterns, and indicators of account takeover.
• Incident response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 98ab will take prompt remedial action, assess the scope and severity of the breach, and notify affected individuals as required.

While 98ab takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for notifying 98ab immediately if you suspect any unauthorised access to your account.

10. Your Data Rights

As a player on the 98ab platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. 98ab will acknowledge your request within 3 business days and respond substantively within 30 days, or notify you if additional time is required.

• Right of access: You may request a copy of the personal data 98ab holds about you, along with information about how it is processed and the legal bases applied.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account name and date of birth corrections, you will be required to provide supporting documentation.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to exceptions — for example, where we are required to retain data to comply with anti-money laundering legislation, resolve an outstanding dispute, or enforce our Terms & Conditions.
• Right to restrict processing: In certain circumstances, you may request that 98ab restrict the processing of your data while a dispute about its accuracy or the lawfulness of its processing is resolved.
• Right to data portability: Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you may request that 98ab provide your personal data to you in a structured, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes. 98ab will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (for example, consent to receive marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

11. Children & Minors

The 98ab platform is strictly intended for adults aged 21 years and above. 98ab does not knowingly collect or process personal data belonging to persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If 98ab discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, return any funds to the originating payment method where technically possible, and document the incident in accordance with our compliance obligations.

If you believe that a minor has successfully registered an account on the 98ab platform, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly.

12. Marketing Communications

With your consent, 98ab may send you promotional communications about new games, bonuses, seasonal promotions (such as BPL cricket season offers, Eid specials, or Pohela Boishakh offers), and platform updates. These communications may be sent via email or SMS to the contact details registered on your account.

You can withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by 98ab.
• Updating your communication preferences in your account settings.
• Sending a written opt-out request to [email protected], specifying that you wish to stop receiving marketing communications.

Withdrawal of consent for marketing communications will not affect your ability to continue using the 98ab platform or receiving essential service communications such as deposit confirmations, withdrawal notifications, security alerts, or important policy update notices. These service communications are sent on the basis of contract performance and cannot be opted out of while your account remains active.

Players who are on active self-exclusion will automatically be suppressed from all marketing communications for the duration of the self-exclusion period.

13. Third-Party Links

The 98ab platform may contain references to third-party game providers, payment services, or informational resources. While 98ab selects its partners carefully, we do not control and are not responsible for the privacy practices of third-party websites or services. This Privacy Policy applies solely to data processed by 98ab in connection with the operation of the 98ab platform at https://98ab.io.

When you interact with a third-party payment provider such as bKash or Nagad via their own interface or application, that interaction is governed by the privacy policy of the relevant payment provider. 98ab strongly encourages you to read the privacy notices of any third-party services you use.

14. Changes to This Privacy Policy

98ab may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material — meaning they affect your rights or the way we process your personal data in a significant way — 98ab will notify registered players via the email address on their account, or via a prominent notice displayed upon login to the Platform, at least 14 days before the change takes effect.

Non-material changes (such as typographical corrections, formatting improvements, or clarifications that do not alter the substance of any provision) may be made without prior notice. The "Effective" date at the top of this policy will be updated each time the policy is revised. Continued use of the 98ab platform after the effective date of any revised policy constitutes acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically to stay informed about how 98ab protects your personal data.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 98ab holds about you, please contact our support team using the details below. All privacy-related communications are handled with strict confidentiality by dedicated support staff.

• Email: [email protected] (plain text — not a clickable link)
• Website: https://98ab.io
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Response time: Privacy queries acknowledged within 3 business days; substantive response within 30 days.