bd90 Privacy Policy

bd90 ("we", "us", "our") is an online casino and sports betting platform operated at bd90.io, serving adult players across Bangladesh. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or otherwise interacts with the bd90 platform.

This Privacy Policy describes how bd90 collects, uses, stores, shares, and protects personal data in connection with your use of the bd90 website and all associated services. It also outlines the rights you have in relation to your personal data and the mechanisms available for exercising those rights.

By accessing the bd90 platform or creating a registered account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should refrain from using the bd90 platform and may request account closure by contacting [email protected].

This Privacy Policy should be read together with the bd90 Terms & Conditions, which govern the overall contractual relationship between bd90 and registered players.

bd90 collects personal data across several categories depending on your interaction with the platform. The categories of personal data we may collect and process are set out below.

bd90 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless directly relevant to a responsible gambling support request submitted voluntarily by the player.

bd90 collects personal data through the following primary channels:

Direct Submission by You

The majority of the personal data held by bd90 is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion. You are in control of the accuracy of this data and are obligated under the Terms & Conditions to keep it current.

Automated Technical Collection

When you access the bd90 platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This data is collected regardless of whether you are logged in to a registered account. See Section 9 for a detailed explanation of our cookie practices.

Third-Party Payment Processors

When you transact via bKash, Nagad, Rocket, Upay, or a bank partner, the relevant payment processor may share transaction confirmation data — including transaction reference numbers, timestamps, and sending account identifiers — with bd90 for the purpose of crediting or debiting your account balance.

Identity Verification Providers

bd90 may engage third-party identity verification services to assist in confirming the authenticity of identity documents submitted during the KYC process. These services process your document data under strict data processing agreements with bd90 and are not permitted to use your data for their own purposes.

Publicly Available Sources

In limited circumstances related to fraud prevention or anti-money laundering checks, bd90 may consult publicly available databases, sanctions lists, or adverse media sources to verify information associated with an account.

bd90 processes personal data only for defined, legitimate purposes. The primary purposes for which we use your data are as follows:

• Account management: Creating, maintaining, and administering your registered player account, including password recovery and account security notifications.
• Age and identity verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information provided is authentic and consistent across all submitted documents.
• Payment processing: Facilitating deposits and withdrawals, reconciling transactions, and resolving payment disputes or discrepancies.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other criminal conduct that may affect the bd90 platform or its players.
• Regulatory and legal compliance: Meeting obligations under applicable laws, responding to lawful requests from competent authorities, and maintaining records required by law.
• Responsible gambling: Monitoring account activity patterns for indicators of problem gambling behaviour, enforcing self-exclusion or cooling-off requests, and providing appropriate support resources.
• Customer support: Responding to enquiries, complaints, and support requests in a timely and effective manner.
• Platform improvement: Analysing aggregated usage data to identify and resolve technical issues, improve platform performance, and develop new features that enhance the player experience.
• Personalised promotions: Where you have given explicit consent, delivering targeted promotional offers, bonus notifications, and product updates that are relevant to your gaming preferences and account activity.
• Legal proceedings: Establishing, exercising, or defending legal claims in the event of a dispute between you and bd90.

bd90 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to perform the contract between you and bd90 — namely, operating your player account, processing deposits and withdrawals, and delivering the games and betting services you have requested.
• Legal obligation: Processing is required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, and record-keeping requirements imposed by relevant laws.
• Legitimate interests: Processing is necessary for the legitimate interests of bd90, including fraud prevention, platform security, business analytics, and the defence of legal claims, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — primarily for the delivery of direct marketing communications — you have the right to withdraw that consent at any time by updating your account preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bd90 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the specified purpose:

Game Providers

Licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive your account identifier and session data in order to deliver the game content you request. These providers do not receive your full identity or financial data.

Payment Processors

Mobile money operators (bKash, Nagad, Rocket, Upay) and banking partners receive the financial data necessary to process your deposit and withdrawal instructions. All such processors are contractually bound to use this data exclusively for payment execution.

Identity Verification Services

Third-party KYC providers receive copies of identity documents and associated data for the sole purpose of verifying your identity and age on behalf of bd90.

IT Infrastructure and Security Providers

bd90 uses cloud hosting, cybersecurity, and platform monitoring services whose personnel may have technical access to platform data as part of their contracted service delivery. All such providers operate under data processing agreements that prohibit independent use of your data.

Legal and Regulatory Authorities

bd90 will disclose personal data to law enforcement agencies, courts, regulatory bodies, or other competent authorities where required to do so by law, court order, or where bd90 has a good-faith belief that disclosure is necessary to prevent imminent harm or financial crime.

bd90 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data, which can no longer identify any individual, may be retained indefinitely for statistical and analytical purposes.

bd90 employs a layered, defence-in-depth approach to personal data security. The technical and organisational measures currently in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the bd90 platform, preventing interception by third parties.
• One-way cryptographic hashing (bcrypt with per-user salting) for the storage of all account passwords. bd90 staff cannot retrieve or read your password in plain text.
• Database encryption at rest for all tables containing personally identifiable information and financial records.
• Access controls based on the principle of least privilege: only those employees and contractors whose specific role requires access to personal data are granted such access, and all access events are logged.
• Multi-factor authentication required for all internal administrative access to systems that hold player data.
• Intrusion detection and prevention systems that monitor the bd90 infrastructure in real time for anomalous behaviour patterns indicative of a security breach or cyber-attack.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified independent security professionals.
• Data breach response protocol: in the event of a confirmed personal data breach that poses a risk to players, bd90 will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach.

The bd90 platform uses cookies and similar tracking technologies to support the proper functioning of the site, analyse usage patterns, and where consent has been given, to personalise the content and promotions you see.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the bd90 platform. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as preferred language, currency display, and notification settings to provide a more personalised experience across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are most visited, where users encounter errors, and how features are used. This data is used exclusively for platform improvement.
• Marketing Cookies: Track your activity across sessions to build a profile of your gaming preferences, enabling bd90 to present you with relevant promotional offers. These are only deployed with your explicit consent.

Managing Cookie Preferences

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of the bd90 platform and may prevent you from logging in or completing transactions. Detailed cookie management instructions are available through your browser's help documentation.

Third-Party Trackers

bd90 does not permit third-party advertising networks or data brokers to place tracking cookies on the bd90 platform. Any analytical tools deployed by bd90 are configured to anonymise IP addresses and restrict data sharing to aggregated reports only.

bd90 respects your rights in relation to your personal data. The following rights are available to you and may be exercised at any time by submitting a request to [email protected]:

bd90 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, with prior notification to you. There is no fee for exercising any of the above rights under normal circumstances. bd90 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The bd90 platform is strictly for individuals aged 21 years and above. bd90 does not knowingly collect or process personal data from any person under the age of 21. If bd90 becomes aware that personal data has been submitted by or on behalf of an individual under 21 years of age, that data will be deleted immediately and the associated account permanently closed.

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms. If you have reason to believe that a minor has registered on bd90 using falsified information, please notify us immediately at [email protected] and we will investigate and act without delay.

bd90 primarily processes personal data within the region of its operational infrastructure. However, some of our third-party service providers — including cloud hosting providers, identity verification services, and game studios — may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, bd90 takes all reasonable steps to ensure that the receiving party provides an adequate level of data protection, including through:

• Data processing agreements incorporating standardised data protection clauses.
• Contractual assurances that the recipient will process data only for the purposes specified by bd90 and will apply technical and organisational security measures at least equivalent to those described in this policy.
• Verification that the destination jurisdiction has data protection laws that provide a standard of protection broadly comparable to that afforded to players under this policy.

By using the bd90 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence, and you consent to such transfers on the terms described in this section.

bd90 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and update the "Last updated" date displayed at the top of this page.

We encourage you to review this page periodically to stay informed about how bd90 protects your personal data. Your continued use of the bd90 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

Minor changes — such as corrections of typographical errors, clarifications of existing language that do not alter the substance of the policy, or updates to contact information — may be made without individual notification, though the "Last updated" date will always be revised to reflect any change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bd90 holds about you, please contact our support team using the details below. All privacy-related enquiries are handled with priority and in strict confidence.

Email: [email protected]

Response time: Within 2 business days for general enquiries; within 30 calendar days for formal data rights requests.

Availability: 24/7 — Bangladesh Standard Time (UTC+6)