Your Privacy Matters at 90bd

1. Information We Collect

90bd collects personal information from players through several channels: directly from you when you register or use the platform, automatically through technical systems as you browse and play, and occasionally from third-party identity verification partners where required by law. We collect only the information that is necessary for the purposes described in this Policy.

1.1 Information You Provide Directly

When you register for a 90bd account or use our services, you may provide us with the following categories of personal information:

• Identity Information: Full legal name, date of birth, gender, and a copy of your government-issued identity document (National ID card, passport, or driving licence) when completing verification.
• Contact Information: Email address, mobile phone number, and city or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Account Credentials: Your chosen username and encrypted password. We never store passwords in plain text.
• Financial Information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals. We do not store full wallet PINs or complete bank account credentials.
• Support Communications: Records of conversations you have with the 90bd support team via live chat or email, including any documents or screenshots you share during a support interaction.

1.2 Information Collected Automatically

When you access the 90bd platform, our technical systems automatically collect certain information about your device and browsing behaviour. This information helps us maintain platform security, optimise performance, and detect fraudulent or abusive activity.

1.3 Information from Third Parties

In some circumstances, 90bd may receive information about you from trusted third-party sources. This includes identity verification agencies that help us confirm the authenticity of documents you submit during the KYC (Know Your Customer) process, and payment processors who confirm the status of deposits or withdrawals. Any third-party data we receive is handled in accordance with this Policy.

2. How We Use Your Data

90bd uses the personal information we collect for clearly defined, lawful purposes. We do not use your data in ways that are inconsistent with the purposes for which it was originally collected. The following table sets out our primary data use purposes and the legal basis for each.

90bd will never use your personal data for purposes that are incompatible with those stated above without first obtaining your explicit consent or notifying you of the change through an updated version of this Policy.

3. Data Sharing & Disclosure

90bd does not sell, rent, trade, or otherwise disclose your personal information to unrelated third parties for commercial purposes. We may, however, share specific information with carefully selected third parties where doing so is necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform.

3.1 Service Providers

We work with a limited number of trusted service providers who process personal data on our behalf under binding data processing agreements. These providers are permitted to use your data only for the specific purposes for which they have been engaged and may not use it for their own commercial purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other financial institutions involved in processing your transactions.
• Identity verification providers: Third-party KYC verification services that help us confirm player identity and age.
• IT infrastructure and hosting providers: Cloud hosting and server infrastructure providers who store platform data in secure data centres.
• Analytics providers: Aggregated, anonymised analytics services that help us understand platform usage patterns. These providers do not receive individually identifiable data.

3.2 Legal Disclosure

90bd may disclose personal information to government authorities, law enforcement agencies, or regulatory bodies when we are legally required to do so. This includes disclosures required in connection with anti-money-laundering investigations, fraud investigations, court orders, or other legally mandated processes under applicable Bangladeshi law. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.

3.3 Business Transfers

In the event that 90bd undergoes a merger, acquisition, restructuring, or sale of assets, player personal data may form part of the transferred assets. In such an event, 90bd will notify registered players via their registered email address prior to the transfer taking place and will ensure that the receiving entity is bound by privacy commitments no less protective than those set out in this Policy.

4. Cookies & Tracking Technologies

90bd uses cookies and similar tracking technologies to operate the platform securely, remember your preferences, and analyse usage patterns. A cookie is a small text file that is placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the 90bd platform to function. They manage your login session, maintain security tokens, and ensure that pages load correctly. Without these cookies, core platform features such as logging in, placing bets, and processing deposits cannot work. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how players use the platform — for example, which pages are visited most frequently and where errors occur. This data helps us improve the platform. These cookies do not identify you personally.
• Functionality Cookies: These cookies remember choices you have made on the platform (such as your preferred language or display settings) so you do not have to reset them on every visit. Disabling these cookies may affect the quality of your user experience.
• Security Cookies: These cookies help 90bd detect and prevent fraudulent logins, bot activity, and suspicious access patterns. They are essential to the platform's fraud prevention system.

4.2 Managing Cookies

You can manage or delete cookies through your browser settings. Most modern browsers allow you to view stored cookies, block cookies from specific sites, or delete all cookies when you close your browser. Please note that disabling strictly necessary cookies will prevent you from logging in and using the 90bd platform.

Instructions for managing cookies are available in the help section of all major browsers, including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari. 90bd does not control third-party cookies that may be set by payment processors (such as bKash or Nagad) when you are redirected to their payment interfaces.

5. Data Retention

90bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

• Account data (name, contact details, login credentials): Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with applicable financial record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 7 years from the date of each transaction to satisfy anti-money-laundering record-keeping obligations.
• Identity verification documents: Retained for the duration of your account and for a minimum of 5 years following account closure.
• Support communications: Retained for up to 3 years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or investigation.
• Technical and usage logs: Retained for up to 12 months, after which they are either deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, data is securely destroyed using industry-standard methods.

6. Data Security Measures

90bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated on a regular basis to address evolving threats.

6.1 Technical Safeguards

• 128-bit SSL/TLS Encryption: All data transmitted between your device and the 90bd servers is encrypted using SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that your connection is secure.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial records — is encrypted at rest in our database systems using AES-256 encryption.
• Tokenised Payment Data: Payment credentials (mobile wallet identifiers, bank account references) are stored in tokenised form. The original sensitive values are not retained in full on 90bd's systems after a transaction is processed.
• Access Controls: Access to player personal data within 90bd's internal systems is restricted on a strict need-to-know basis. Staff members who do not require access to personal data to perform their role are blocked from accessing it.
• Intrusion Detection: 90bd's infrastructure is monitored 24/7 for signs of unauthorised access, unusual traffic patterns, and potential security incidents.

6.2 Organisational Safeguards

All 90bd staff and contractors who handle personal data undergo regular training on data protection obligations and best practices. We conduct periodic internal audits of our data handling processes and engage independent security specialists to conduct penetration testing of our platform on a regular basis.

In the event of a data security incident that affects your personal information, 90bd will notify affected players promptly via their registered email address and will take all necessary steps to contain and remediate the incident.

7. Your Privacy Rights

As a 90bd player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all privacy-related requests within 4 business hours.

• Right of Access: You have the right to request a copy of the personal data that 90bd holds about you. We will provide this in a clear, readable format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as email address or mobile number) directly in your account settings, or contact support for other corrections.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected. Please note that some data must be retained by law (such as financial transaction records) and cannot be erased on request.
• Right to Restrict Processing: You have the right to request that 90bd restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on 90bd's legitimate interests. You also have the absolute right to opt out of receiving marketing communications from 90bd at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

8. Policy Updates

90bd reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, our business practices, or the nature of the services we provide. When we make material changes to this Policy — meaning changes that significantly affect how we collect or use your personal data — we will notify registered players via their registered email address prior to the changes taking effect.

The "Effective Date" displayed at the top of this Policy will be updated to reflect the date on which the current version came into force. We encourage you to review this Policy periodically to stay informed about how 90bd protects your information.

Your continued use of the 90bd platform after a revised Privacy Policy has been published constitutes your acceptance of the revised Policy. If you disagree with any changes, you should discontinue use of the platform and contact support to request account closure.

For any questions, concerns, or feedback regarding this Privacy Policy or our data handling practices, please contact the 90bd support team at any time. We are committed to addressing all privacy enquiries promptly and transparently.