90bdt Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how 90bdt ("we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "the Player") who access or use the 90bdt website and associated services ("the Platform"). By creating an account or using any part of the Platform, you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein.

90bdt is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need to operate the Platform, comply with our legal and anti-money laundering obligations, and provide you with a safe gaming experience. We do not sell your personal data to third parties for marketing purposes.

This Policy applies to all users of the Platform regardless of the device or method of access. It should be read alongside our Terms and Conditions and Responsible Gaming Policy, which together constitute the full agreement between you and 90bdt. If you do not agree with this Policy, you must not use the Platform.

90bdt uses your personal data only for the purposes for which it was collected or for directly compatible purposes. The primary purposes for which we process your data are:

• Account registration, identity verification, and age verification to confirm you meet the 21+ eligibility requirement before permitting any real-money activity.
• Processing deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and maintaining accurate financial records.
• Providing customer support, responding to account queries, and resolving disputes or complaints in a fair and timely manner.
• Fulfilling anti-money laundering (AML) and Know Your Customer (KYC) obligations, including monitoring transaction patterns for suspicious activity and reporting as required by applicable law.
• Monitoring gaming behaviour to deliver responsible gaming interventions — including surfacing deposit limit prompts, time-out reminders, and self-exclusion options — to players who may be showing signs of problem gambling.
• Improving Platform functionality, user experience, and game offerings based on aggregated, anonymised analytics of how players use the service.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis. We do not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review.

90bdt does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers — bKash, Nagad, Rocket, Upay, and card processors receive transaction data strictly limited to what is required to process your deposit or withdrawal.
• Game technology providers — third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive a session token and account tier identifier so that games can be launched in your account. They do not receive your full identity or financial data.
• Regulatory and law enforcement authorities — 90bdt will disclose personal data to competent authorities where required by law, including in response to valid court orders, regulatory requests, or AML reporting obligations.
• Professional advisors — legal counsel, auditors, or fraud prevention specialists may access limited personal data where strictly necessary to provide their services to 90bdt, subject to binding confidentiality obligations.

All third parties with whom 90bdt shares your data are contractually required to maintain appropriate data security measures and to use your data only for the specified purpose. 90bdt does not authorise any third party to further share your data without our explicit written approval.

90bdt implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include 256-bit SSL encryption on all data transmitted between your device and the Platform, encrypted storage of sensitive account data including payment method identifiers, access controls that restrict which staff members can view personal data based on strict need-to-know principles , and regular security audits conducted by independent specialists.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure. 90bdt cannot guarantee absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights, 90bdt will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach. You also play a role in keeping your data safe — never share your account password with anyone, and contact support immediately at [email protected] if you suspect unauthorised access to your account.

90bdt retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal obligations. Account data, transaction records, and KYC documentation are retained for a minimum of 5 years following account closure, in accordance with standard financial record-keeping requirements. Gaming activity logs are retained for a minimum of 3 years for responsible gaming and dispute resolution purposes.

Where 90bdt no longer has a lawful basis to retain your data, it will be securely deleted or anonymised so that it can no longer be linked to you as an individual. You may request early deletion of non-legally-mandated data at any time by contacting [email protected], subject to the retention obligations described above.

90bdt may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. When we make material changes, we will post a prominent notice on the Platform and, where appropriate, notify you by email to your registered address. The date at the top of this Policy indicates when it was last updated.

Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure by contacting [email protected]. Archived versions of this Policy are available upon written request.