01About Abet and this policy
This policy covers the Abet mobile application, this site, and the host site at host.playabet.app. It explains what Abet holds about you, why, who else can see it, and how to have it removed.
Abet helps friends, families and communities in Ethiopia enjoy football together through prediction games hosted by people they know and trust. Abet publishes the contests and the rules they are scored by; hosts run them for their own group.
A host may ask players for an entry amount, and a contest can have a prize. That is arranged directly between you and your host, outside the app. Abet does not provide an in-app wallet or process prize payments inside the app, and holds no financial account for anyone.
What Abet does keep is the record: the entry amount of each contest, how the prize pool is divided between the winner prize, the host share and the Abet share, and whether each payment has been marked paid and confirmed.
Awaiting legal confirmationThe legal entity that operates Abet, its registered address, and its data-controller role are not named in this draft.
02Your account
To create a player account you give a display name, an email address and a password. If your account has a phone number, you may sign in with that instead. You choose English or Amharic, and Abet stores that choice so it writes to you in the language you read.
Your password is never stored. What is stored is an Argon2id hash of it, which cannot be turned back into the password — so nobody at Abet can read it, and nobody can tell it to you if you forget it.
Applying to become a host asks for more, because a host is a person Abet takes on trust: your full name, date of birth, phone number, city and region, Telegram username, the channel or group you run, the type and number of an identity document, and a photograph of that document.
Identity photographs are held in private storage. They are never handed out as a public or shareable link; an administrator reads one only by streaming it through the API, and every such read is written to the audit record.
03Predictions and contest activity
Playing produces records, and those records are the contest: which contests you entered, the entries your host allocated to you, each version of your predictions, your scores, your position on the table, and any winner record and settlement note your host keeps against you.
Predictions are sealed until the contest locks. Abet does not show them to anyone before then — not to other players, and not to your host. After the lock they are visible to the people in that contest, which is what makes the result checkable.
04Your host, and what they see
Playing on Abet means belonging to a host. Abet records which hosts you follow, which you are a member of, the invitations and join requests between you, and the messages you exchange with that host inside the app.
Your host sees your display name, the entries they allocated you, your predictions once the contest has locked, your results, your messages with them, and the settlement records they keep. They do not see your password, your email verification state, or anything about contests you play with a different host.
Photos you attach — a screenshot in a message or a report, proof of a prize handover, or evidence in a dispute — are kept in private storage and shown only to the people that record belongs to: you, your host's team for messages and payment records, and Abet support and administrators. A photo a host adds to their public profile is shown publicly on that profile.
Abet does not pass your details to any other host, and does not sell or rent anything about you to anybody.
05Messages and notifications
Abet writes to you in the app, and by email for the things an account needs: a host invitation, a password reset. Email is sent through external email-delivery infrastructure, which receives your address and the message in order to deliver it.
Abet may also notify you through the channels the app and your device support. If you allow notifications on your phone, Abet stores a device token so your phone's notification service can deliver them; that service receives the token and the notification. Where a notification setting is offered to you, you control it there. Nothing in this section is a statement that any particular channel is switched on for you.
Abet staff receive operational alerts over Telegram — jobs that failed, contests about to lock, conditions that need attention. Those alerts are about the running of the platform and go only to staff accounts that have connected Telegram themselves.
06Security, logs and the audit record
Everything travels over HTTPS. Passwords are stored only as Argon2id hashes. Administrator accounts carry a second factor, and its secret is encrypted with a key held separately. You can end your other sessions at any time from the app.
Server logs record the path of a request, an identifier that links the steps of one request together, and the details of any error. The network address a request came from is used to limit how often the same source can call sensitive endpoints. Where external error monitoring is configured, it receives error details and that same identifier.
Abet keeps an append-only audit record of who did what and when: an administrator opening an identity document, a host allocating an entry, an account being closed. By design that record cannot be edited or deleted — not by a host, not by an administrator, and not by Abet — because a contest platform that can rewrite its own history cannot be checked.
07How long things are kept
Your account and its activity are kept while the account exists. Contest records — entries, predictions after lock, scoring and results — are kept so a finished contest stays reconstructable, and they survive the closing of an account in the anonymized form described below.
Encrypted database backups are held in external object storage and retained on a fixed schedule: a daily backup for 35 days, and the first backup of each month for a year. Information you removed can still exist in a backup until those windows pass.
The audit record is not deleted, because it cannot be.
Awaiting legal confirmationHow long an inactive account may be kept before it is closed, and whether any record must be kept or destroyed by law, are not decided here.
08Closing your account
You can close your account yourself, from the Profile tab in the Abet app. It asks you to type a confirmation word first, because it cannot be undone.
What happens is this. Your email address and phone number are replaced with an unreachable placeholder, your display name becomes "Deleted account" with a random marker, and your password hash is replaced with a value no password can ever match. Every session is revoked, every unused password-reset code is spent, any second-factor credential is deleted outright, notification device registrations are revoked, and your roles are made inactive. Conversation text held by the internal assistant is cleared.
Your contest records stay, attached to the anonymized account rather than to you: the entries, the results and the settlement history of a contest other people played in cannot be removed without rewriting their contest too. The audit record stays for the same reason.
The email address you used is freed, so you can open a new account with it later. If you cannot reach the app, write to the address at the end of this policy.
09Changes to this policy
The version below changes whenever any statement here changes. A change that widens what Abet collects, or sends something new to an outside service, will be made in this document before it is made in the product.