Privacy Policy for 90bdt

1. Information We Collect

90bdt collects personal data in three principal ways: information you provide directly during registration and account use, information generated automatically as you interact with the platform, and information received from trusted third-party partners such as payment processors. The categories below describe each type in detail.

1.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit, request a withdrawal, or contact our support team, you may provide us with:

• Identity data: Full legal name, date of birth, nationality, and National ID Card (NID) or passport number
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postal code)
• Financial data: bKash account number, Nagad account number, Rocket number, Upay ID, bank account details (account holder name, account number, bank name, branch), and transaction reference numbers
• KYC documents: Scanned or photographed copies of identity documents, proof of address documents, and payment method ownership confirmations
• Support communications: The content of live chat conversations, emails, and any other correspondence you send to 90bdt support
• Responsible gaming data: Deposit limits, time-out elections, and self-exclusion requests that you submit through the platform's responsible gaming tools

1.2 Information Collected Automatically

When you access or use the 90bdt platform, certain technical data is collected automatically by our servers and analytics systems:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings
• Usage data: Pages visited, games played, session duration, click patterns, bet history, game round IDs, and wagering activity
• Log data: Server access logs including timestamps, request URLs, HTTP status codes, and referrer URLs
• Cookie and tracking data: Session identifiers, authentication tokens, and preference cookies — see Section 4 for full details
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud prevention and access control purposes

1.3 Information from Third Parties

We may receive supplementary information about you from the following third-party sources, which we combine with data already held in your 90bdt account:

• Payment processors: Transaction confirmation data, payment status, and payer identity confirmation from bKash, Nagad, Rocket, Upay, and banking partners
• Identity verification providers: Results of automated or manual identity and age verification checks
• Fraud prevention services: Risk scores, device fingerprint assessments, and flagged transaction alerts from our fraud detection partners
• Game providers: Game session data, round outcomes, and RTP audit logs provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios

---

2. How We Use Your Data

90bdt processes your personal data only where we have a lawful basis to do so. The table below maps each processing purpose to the personal data categories involved and the legal basis relied upon.

Where we rely on consent as our legal basis (e.g., promotional communications), you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

---

3. Data Sharing & Disclosure

90bdt does not sell your personal data. We share your information only with the categories of recipients listed below, and only to the extent necessary for each specific purpose.

3.1 Service Providers and Technology Partners

We engage carefully vetted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process deposit and withdrawal transactions
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — to deliver and audit game sessions
• Identity verification providers: To carry out automated KYC and age verification checks
• Cloud infrastructure providers: To host the platform's servers, databases, and content delivery networks
• Customer support software providers: To operate our live chat and ticketing systems
• Fraud prevention and analytics providers: To detect suspicious activity and protect player accounts

All service providers are bound by contractual obligations that restrict their use of your data to the specific services they provide to 90bdt and prohibit any independent use of your information for their own commercial purposes.

3.2 Legal and Regulatory Disclosure

90bdt may disclose personal data to law enforcement agencies, regulatory authorities, courts, or government bodies where we are legally required to do so, or where such disclosure is necessary to:

• Comply with a legal obligation, court order, or binding regulatory directive
• Investigate or prevent fraud, money laundering, or other criminal activity
• Protect the rights, property, or safety of 90bdt, our players, or the public
• Enforce our Terms & Conditions or respond to legal claims

3.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of 90bdt's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to how your data is processed as a result.

---

4. Cookies & Tracking Technologies

90bdt uses cookies and similar tracking technologies to keep the platform functioning correctly, to maintain your session, and to understand how players interact with different parts of the site. The following table describes the cookie categories we use.

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. For all other cookie categories, you may manage your preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the platform, but may affect your experience (for example, your preferred settings may not be saved between sessions).

90bdt does not use third-party advertising cookies or cross-site tracking pixels for the purpose of serving targeted advertisements on other websites.

---

5. Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any applicable legal, regulatory, accounting, or reporting requirements. The following retention periods apply to the main data categories held by 90bdt:

• Account and identity data: Retained for the duration of your active account relationship with 90bdt, plus a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulations.
• KYC documents: Retained for a minimum of 5 years following the completion of the verification check, or 5 years after account closure, whichever is later.
• Support communications: Retained for up to 3 years following the resolution of the relevant support interaction, to assist with any subsequent disputes or queries.
• Game session logs: Retained for up to 2 years for auditing and dispute resolution purposes.
• Marketing preferences and consent records: Retained until you withdraw consent, plus 1 year to maintain a record of your withdrawal.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual user.

When a retention period expires, the relevant data is securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with your identity. Secure deletion follows industry best-practice standards for data destruction.

---

6. Data Security Measures

90bdt implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is kept current and renewed proactively.
• Data encryption at rest: Sensitive data fields, including financial account details and identity document references, are encrypted within our databases using AES-256 encryption.
• Access controls: Access to personal data by 90bdt staff is strictly role-based and limited to those whose job functions require it. All internal access is logged and subject to periodic audit.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. 2FA is mandatory for all 90bdt staff with access to production systems or player data.
• Penetration testing: Our platform undergoes periodic security assessments by independent security professionals to identify and remediate vulnerabilities.
• Incident response: 90bdt maintains a documented data breach response procedure. In the event of a breach that poses a material risk to your rights and freedoms, we will notify affected players without undue delay.
• Third-party security requirements: All third-party service providers who process personal data on our behalf are required to maintain security standards equivalent to or greater than those we apply internally.

---

7. Your Privacy Rights

As a player on the 90bdt platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update many data fields directly within your account profile.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. Note that this right may be limited where we have legal obligations to retain certain data (e.g., AML record-keeping requirements).
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling. You also have the right to object to receiving direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will not discriminate against you for exercising any of the rights listed above. If you are not satisfied with our response to a data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

---

8. Contact & Data Controller

90bdt is the data controller responsible for the personal data processed in connection with the platform at https://90bdt.club. If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly within the 90bdt platform
• Support Hours: Around the clock, Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered email address and a brief description of your request so we can locate your account and respond efficiently. We may need to verify your identity before processing certain types of request.

This Privacy Policy was last reviewed and updated on 1 January 2026. 90bdt reserves the right to amend this policy at any time. Material changes will be communicated to registered players via email and/or a notice on the platform. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised policy.