90bd Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") sets out how 90bd ("we", "us", "our", or "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the 90bd website at https://90bd.io and any associated services, mobile-optimised versions, or features offered under the 90bd brand.

This Policy applies to all personal data collected through:

• The account registration and KYC verification process.
• Deposits, withdrawals, and payment transactions.
• Gameplay activity, betting history, and platform interactions.
• Customer support communications via email, WhatsApp, or live chat.
• Cookies, tracking pixels, and similar technologies used on the 90bd website.

By registering an account or continuing to use the 90bd platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the 90bd Terms & Conditions and Responsible Gaming Policy.

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is 90bd, the operator of the platform accessible at https://90bd.io. As the data controller, 90bd determines the purposes and means by which your personal data is processed.

If you have any questions about how your data is being handled, or if you wish to exercise any of your rights under this Policy, you may contact our designated Data Protection contact using the details provided in Section 13 of this document.

Data We Collect

90bd collects personal data in two ways: data you provide directly, and data collected automatically through your use of the platform. The following table summarises the categories of data we collect and the context in which they are gathered.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (other than where required for identity verification), or health data, except where you voluntarily provide such information in the context of a responsible gaming or self-exclusion request.

How We Use Your Data

90bd uses your personal data only for clearly defined, legitimate purposes. The following list describes how and why your data is used on the platform:

• Account Management: To create, maintain, and secure your 90bd account, verify your identity, and communicate important account-related updates with you.
• Identity Verification (KYC): To comply with our obligations under applicable anti-money laundering (AML) standards and to confirm that all players are aged 21 or above before permitting access to real-money betting or casino games.
• Payment Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions conducted in BDT.
• Platform Personalisation: To present you with game recommendations, promotions, and content that are relevant to your gaming preferences and activity history on 90bd.
• Responsible Gaming: To monitor your gaming activity for signs of problematic gambling behaviour, to enforce deposit limits and self-exclusion requests you have set, and to contact you proactively if our systems detect patterns of concern.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and any other conduct that violates the 90bd Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services based on communication records.
• Legal Compliance: To fulfil any reporting obligations imposed on 90bd by applicable law, including providing transaction records to relevant authorities when legally required.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and features of the 90bd platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates — but only if you have opted in to receive such communications. You may withdraw your marketing consent at any time through your account preference settings or by contacting our support team.

Legal Basis for Processing

Every instance of personal data processing carried out by 90bd is underpinned by one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 90bd — specifically, to operate your account, process transactions, and deliver the gaming services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of 90bd, such as preventing fraud, ensuring platform security, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — in particular, direct marketing communications and optional personalisation features — we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Disclosure

90bd does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process deposits and withdrawals. These providers are contractually bound to use your data solely for payment processing purposes.
• Identity Verification Providers: We use third-party KYC service providers to verify the identity and age of new players. These providers process your identity documents under strict data processing agreements.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, Playtech, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised session data necessary to deliver their games. They do not receive your full personal profile.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law or a valid legal order.
• Fraud Prevention Services: We may share data with industry fraud prevention networks to identify and block fraudulent activity across the online gaming sector.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Cookies and Tracking Technologies

The 90bd website uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the 90bd platform to function correctly. They enable core features such as account login sessions, security tokens, and shopping cart equivalents (active game sessions). These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the platform — for example, which pages are visited most frequently and whether error messages are received. This data helps us improve the platform experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming limits, so that you do not need to re-enter them on every visit.
• Targeting and Personalisation Cookies: With your consent, these cookies allow us to present you with personalised game recommendations and promotional offers based on your activity on 90bd. They are only activated if you opt in to personalisation features.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or accessing certain platform features. For full details of the cookies in use on the 90bd platform, please contact our support team at [email protected].

Data Retention

90bd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years following permanent account closure, to comply with AML and record-keeping obligations.
• Financial Transaction Data: Retained for seven (7) years from the date of the transaction, in line with standard financial record-keeping requirements.
• Gaming Activity Data: Retained for three (3) years from the date of each session, used for responsible gaming monitoring, dispute resolution, and platform improvement.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, to support quality assurance and dispute resolution.
• Technical and Log Data: Retained for ninety (90) days for security and fraud monitoring purposes, after which it is automatically deleted.
• Marketing Preference Data: Retained until you withdraw consent or close your account, whichever occurs first.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

Your Rights

As a player on the 90bd platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing. This right is subject to overriding legal obligations that require us to retain certain data.
• Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Data Security

90bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our current security infrastructure includes:

• Transport Encryption: All data transmitted between your browser or device and the 90bd platform is encrypted using TLS 1.3 with 256-bit SSL certificates.
• At-Rest Encryption: All stored personal data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted to authorised 90bd staff on a strict need-to-know basis. All internal access is logged and audited.
• Intrusion Detection: 90bd operates continuous intrusion detection and prevention systems (IDS/IPS) to identify and neutralise threats in real time.
• Regular Security Audits: The platform undergoes regular penetration testing and security audits conducted by independent third-party specialists.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their accounts for an additional layer of personal security.

While 90bd takes every reasonable precaution to secure your data, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you and the relevant authorities as required by applicable law, without undue delay.

Children and Minors

The 90bd platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as a mandatory step during the KYC process, and any account found to belong to a person under 21 will be closed immediately, with all associated data deleted in accordance with our retention policy.

If you are a parent or guardian and you believe that a minor in your care has registered an account on the 90bd platform, please contact us immediately at [email protected]. We will investigate and close the account without delay. We also encourage parents and guardians to install parental control software on shared devices to prevent minors from accessing online gambling platforms.

Changes to This Policy

90bd reserves the right to update or modify this Privacy Policy at any time. When we make material changes to the Policy — that is, changes that meaningfully affect how your personal data is processed — we will notify registered players via the email address or mobile number on file at least fourteen (14) days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. Where changes are minor or administrative in nature (for example, correcting a typographical error or updating contact details), we may update the Policy without prior individual notification, but the revised effective date will always be updated.

Your continued use of the 90bd platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should stop using the platform and contact us to request account closure.

Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 9, please contact the 90bd data protection team using the details below. All communications are handled in English.

• Email: [email protected]
• WhatsApp: +880 1700-090090
• Support Hours: Available 24 hours a day, 7 days a week, including all Bangladeshi public holidays (Bangladesh Standard Time, BST UTC+6).

We aim to acknowledge all privacy-related requests within five (5) business days and to resolve them fully within thirty (30) calendar days. For complex requests that require additional time, we will notify you in writing with an explanation of the delay and an estimated resolution date.