90bdt Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Who We Are

This Privacy Policy is issued by 90bdt ("the Platform", "we", "us", "our"), operator of the online gambling platform accessible at https://90bdt.io. 90bdt is Bangladesh's leading online cricket betting and live casino platform, offering mobile-first gambling services — including sports betting, live dealer tables, slots, and virtual games — to eligible adult players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data belonging to individuals ("you", "the Player", "the User") who access or register on the 90bdt platform. It applies to all pages, features, games, and services available via the 90bdt website and any mobile web interface.

By registering an account on 90bdt, making a deposit, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy forms part of, and should be read alongside, the 90bdt Terms & Conditions.

2 Personal Data We Collect

90bdt collects the following categories of personal data from players during registration, account use, and platform interactions:

90bdt does not collect email addresses as a primary registration field. The primary contact identifier for all 90bdt accounts is the mobile phone number linked to the player's preferred mobile banking account (bKash, Nagad, Rocket, or Upay).

3 How We Collect Your Data

90bdt collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 90bdt account, you provide identity and contact data directly through the registration form on the platform.
• Account Activity: As you use the platform — depositing funds via bKash or Nagad, placing bets on cricket, basketball or slots, or redeeming bonuses — gaming and financial data is generated and recorded automatically.
• Identity Verification: When you submit KYC documents to verify your age and identity, those documents and the data extracted from them are collected and retained by 90bdt.
• Payment Providers: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, the relevant payment provider confirms transaction status and a minimal transaction reference to 90bdt. We do not receive your full mobile banking PIN or full account number.
• Technical Tracking: Our platform servers automatically collect technical and device data — including IP address, browser type, and session information — whenever any page of the 90bdt website is accessed. This occurs even for visitors who have not registered an account.
• Cookies: The 90bdt platform uses cookies and similar tracking technologies. Full details are provided in Section 8 of this Privacy Policy.
• Support Interactions: When you contact the 90bdt support team via live chat, a record of the conversation is retained for quality assurance and dispute resolution purposes.

4 Purpose & Legal Basis for Processing

90bdt processes your personal data only where a clear and legitimate purpose exists. The following table sets out the purposes for which we process your data and the corresponding legal basis for each processing activity:

5 How We Use Your Personal Data

The personal data collected by 90bdt is used for the following specific operational and compliance purposes:

• Account Operations: To create, maintain, and secure your 90bdt player account, including processing your 90bdt login, managing your session, and updating your account settings.
• Transaction Processing: To facilitate instant deposits and withdrawals via bKash, Nagad, Rocket, and Upay, verify transaction amounts, and maintain accurate account balance records in Bangladeshi Taka (BDT).
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify that the identity information provided at registration is accurate. This is a non-negotiable obligation — 90bdt applies zero tolerance to underage gambling.
• Responsible Gaming: To monitor your gaming patterns and flag indicators of potentially problematic gambling behaviour. Where such indicators are detected, 90bdt may proactively reach out to offer responsible gaming tools including deposit limits, session reminders, cool-off periods, and self-exclusion. For further information, visit the Responsible Gaming page.
• Fraud Prevention: To identify, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, match-fixing involvement, and money laundering. Technical data including IP addresses and device fingerprints is used for this purpose.
• Platform Improvement: To analyse aggregate, anonymised usage data for the purpose of improving the 90bdt platform experience — including game loading performance, navigation flow, and mobile responsiveness for players accessing from Android and iOS devices in Bangladesh.
• Legal Compliance: To meet any applicable legal obligations, including maintaining transaction records, responding to lawful requests from competent authorities, and retaining documentation required for anti-money laundering compliance.
• Marketing Communications: Where you have explicitly opted in, to send you promotional messages about relevant offers — such as BPL cricket betting promotions, Eid bonus campaigns, Pohela Boishakh special offers, and new slot releases from providers including Pragmatic Play, NetEnt, and Microgaming. You may opt out at any time.

6 Data Sharing & Third-Party Disclosure

90bdt does not sell your personal data to any third party. We share your data only in the following limited and necessary circumstances:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the minimum data required to process your deposit and withdrawal transactions — typically your registered mobile number and transaction amount. These providers operate under their own privacy policies and are independent data controllers for the purposes of processing your mobile banking transactions.
• Identity Verification Partners: Third-party KYC service providers engaged by 90bdt to assist with identity document verification and age confirmation. These partners process your NID or passport data solely for the purpose of completing the verification process and are contractually prohibited from retaining or using that data for any other purpose.
• Game Software Providers: Game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session data (such as bet amounts and game outcomes) through their platform APIs as part of delivering the game experience. These providers do not receive your identity or payment data.
• Technology Infrastructure Providers: Cloud hosting, content delivery network (CDN), and platform security partners who provide the technical infrastructure that powers 90bdt. These providers act as data processors on 90bdt's behalf and are bound by contractual data processing agreements that restrict their use of your data.
• Legal & Regulatory Authorities: Where 90bdt is legally compelled to disclose data by a competent authority — for example in connection with a law enforcement investigation or anti-money laundering inquiry — we will comply with that lawful obligation. Where permitted, 90bdt will notify the affected player of such a request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 90bdt's business assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer via an on-platform notice before your data is transferred and becomes subject to a different privacy policy.

In all cases where 90bdt shares your data with a third-party processor, we require contractual assurances that your data will be handled securely and used only for the specified purpose.

7 Payment Data & Financial Privacy

Given that all 90bdt transactions are conducted via Bangladeshi mobile banking platforms — bKash, Nagad, Rocket, and Upay — your financial privacy is of particular importance. The following specific protections apply to your payment data:

• 90bdt does not store your full mobile banking PIN, account password, or complete mobile banking account number. Only a truncated transaction reference is retained for reconciliation purposes.
• All financial transaction records are stored on encrypted servers and are accessible only to authorised 90bdt finance and compliance personnel for the purpose of account management, dispute resolution, and anti-money laundering monitoring.
• Withdrawal requests are processed exclusively to the verified mobile banking account registered under your 90bdt account holder name. Third-party payment redirection is not permitted under any circumstances, which is a core financial privacy protection measure.
• Transaction history within your 90bdt account — including all deposits in BDT and all withdrawal records — is accessible to you at all times via the account dashboard. You may request a full exported transaction history by contacting the support team.
• 90bdt applies transaction monitoring procedures to identify unusual patterns consistent with money laundering or financial abuse. Where such patterns are detected, additional verification may be requested and transactions may be temporarily held pending review.

8 Cookies & Tracking Technologies

The 90bdt platform uses cookies and similar client-side tracking technologies to deliver a functional, personalised, and secure gambling experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 90bdt platform to function. They manage your login session, maintain your account authentication state, and ensure that your deposits and withdrawals are processed correctly. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the 90bdt platform — which game categories are most visited, how long sessions typically last, and which pages experience the highest exit rates. This data is used in aggregate form to improve platform performance and is not linked to your individual identity.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method (bKash, Nagad, or Rocket) and your selected game lobby view — so that the platform can deliver a more personalised experience on your next visit.
• Security Cookies: These cookies support 90bdt's fraud detection and platform security systems. They help identify unusual login patterns, flag potential account takeover attempts, and verify that session tokens have not been tampered with.

Most browsers allow you to manage or delete cookies via the browser settings menu. Blocking strictly necessary cookies will impair your ability to log in and use the 90bdt platform. Blocking performance or functional cookies will not affect platform access but may reduce the quality of your experience.

90bdt does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on the 90bdt platform.

9 Data Retention Periods

90bdt retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregate data — which cannot be linked back to any individual player — may be retained indefinitely for the purpose of platform analytics and business reporting.

10 Your Data Rights

As a registered 90bdt player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the 90bdt support team via live chat or at support at 90bdt.io:

• Right of Access: You may request a copy of all personal data that 90bdt holds about your account. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Name and date-of-birth corrections require re-submission of identity verification documents.
• Right to Erasure: You may request that 90bdt delete your personal data. Note that this right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum of 7 years regardless of an erasure request. Where full erasure is not possible, we will erase all data that can lawfully be erased and explain the basis for retaining the remainder.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we restrict processing of your data while the matter is investigated.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time with immediate effect. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to processing of your personal data where that processing is based on legitimate interest rather than legal obligation or contract performance.

11 Children, Minors & Underage Access Prevention

The 90bdt platform is strictly restricted to individuals aged 21 years and above. 90bdt does not knowingly collect personal data from any individual under the age of 21, and the platform employs both automated and manual verification procedures to prevent underage registration and access.

If 90bdt discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21 — whether through a falsified date of birth at registration, use of a parent's or guardian's identity documents, or any other circumvention method — the following actions will be taken immediately:

• The account will be suspended with immediate effect.
• All personal data associated with the underage account will be securely deleted, subject only to any minimum legal retention obligations that apply regardless of account holder age.
• Any deposits made to the account will be refunded to the source payment method (bKash, Nagad, Rocket, or Upay account used for the original deposit).
• Any winnings accrued while the account was active will be forfeited in full.

If you are a parent or guardian and believe that a minor in your care has registered on the 90bdt platform using false age information, please contact our support team immediately via live chat. We take underage gambling prevention with the utmost seriousness and will act on all credible reports promptly.

12 Security Measures

90bdt implements a multi-layered information security framework to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and the 90bdt platform is encrypted using 256-bit SSL/TLS protocols. This applies to all platform interactions including login, deposit, withdrawal, and gameplay.
• Password Security: User passwords are stored exclusively in cryptographically hashed form using industry-standard hashing algorithms. 90bdt employees cannot view your password in plain text under any circumstances. We strongly recommend that you use a unique, complex password and enable OTP-based two-factor authentication.
• Access Controls: Internal access to personal data is restricted to authorised 90bdt personnel who require that data to perform their job functions. All internal data access is logged and subject to regular audit review.
• Infrastructure Security: 90bdt's hosting infrastructure is protected by enterprise-grade firewalls, distributed denial-of-service (DDoS) mitigation, and intrusion detection systems. Regular vulnerability scanning and penetration testing are conducted to identify and remediate security weaknesses.
• Fraud Detection Systems: Automated systems monitor login activity, transaction patterns, and gameplay behaviour in real time to detect indicators of account compromise, fraudulent transactions, or prohibited conduct.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights, 90bdt will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

While 90bdt takes all reasonable and practicable steps to secure your personal data, no internet-based platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own device, browser, and 90bdt account credentials.

13 Amendments to This Privacy Policy

90bdt reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, changes in our data processing practices, the introduction of new platform features, or the onboarding of new third-party service providers.

When material changes are made to this Privacy Policy — meaning changes that substantively affect how your personal data is collected, used, or shared — 90bdt will notify registered players via a prominent on-platform notice displayed at your next login session. The updated Privacy Policy will also be published on this page with a revised effective date clearly indicated at the top of the document.

Your continued use of the 90bdt platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should discontinue use of the platform and contact the support team to request account closure and data erasure in accordance with your rights under Section 10.

Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of our data practices, or updated contact details — may be made without advance notice. The version number and effective date displayed at the top of this page will always reflect the current published version.

14 Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 90bdt handles your personal data, please contact the 90bdt Data Support Team using the following details:

• Platform: 90bdt — https://90bdt.io
• Support Channel: Live chat available on the platform (recommended for fastest response)
• Email: support at 90bdt.io
• Response Time: Within 5 business days (Bangladesh Standard Time, UTC+6)
• Operating Hours: 24 hours a day, 7 days a week

When submitting a privacy-related request, please include your registered mobile number and a clear description of your request so that our team can locate your account and respond efficiently. Do not include your full NID number, password, or any mobile banking PIN in your written communication.

90bdt is committed to resolving all privacy concerns promptly and transparently. Player trust is the foundation of our platform, and we treat every data-related inquiry with the seriousness it deserves.