Privacy Policy

Introduction

Welcome to bd90, Bangladesh's trusted online casino and sports betting platform. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains in plain language how bd90 collects, uses, stores, and shares information when you use our website at https://bd90.one, create an account, place bets, or otherwise interact with our services.

By accessing or using bd90's services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our services. We periodically review and update this policy to reflect changes in our practices or applicable standards; the date of the most recent revision appears at the top of this page.

Information We Collect

bd90 collects information in two primary ways: information you provide directly when you register or transact with us, and information collected automatically when you use our platform. We keep this to the minimum necessary to provide a safe, fair, and efficient service to players across Bangladesh.

Information You Provide Directly

• Full name, date of birth, and contact details (email address, mobile number)
• Username and password (passwords are stored only in hashed form — never in plain text)
• Residential city or district (e.g., Dhaka, Chittagong, Sylhet, Khulna) for geographic eligibility checks
• Identity verification documents submitted during KYC checks (national ID, passport scan, or equivalent)
• Payment method details (bKash mobile number, Nagad account reference, Rocket number, Upay reference, bank account data for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or card information for Visa and Mastercard)

Information Collected Automatically

• Device and browser type, operating system version, and screen resolution
• IP address and approximate geographic location derived from it
• Pages visited, session duration, clicks, scrolling behavior, and navigation path within the bd90 website
• Cookies and similar tracking technologies (see the Cookies section below for full details)

How We Use Your Information

Every piece of data we hold about you is used for a specific, lawful purpose. We do not use your information for any purpose not listed here. The core purposes for which bd90 processes your personal data are as follows:

• Account creation and identity verification — to register you as a player and confirm you are aged 21 or above as required for lawful participation
• Processing deposits and withdrawals — to facilitate instant BDT transactions via bKash, Nagad, Rocket, Upay, and other supported payment channels
• Service delivery and platform improvement — to operate the betting platform, personalise your experience, and continuously improve game performance and site reliability
• Fraud prevention and security — to detect and prevent fraudulent transactions, money laundering, account takeover attempts, and other suspicious activity
• Responsible gaming compliance — to monitor betting patterns and enforce deposit limits, self-exclusion requests, or cooling-off periods under our Responsible Gaming programme
• Customer support and communications — to respond to your queries, complaints, and account-related notifications by email or in-app messaging

If we ever intend to use your data for a purpose not listed above, we will notify you in advance and, where required, seek your explicit consent before doing so.

Sharing Your Information

bd90 does not sell, rent, or trade your personal information. We share data only under the specific, limited circumstances described below.

Trusted Service Providers

We engage carefully vetted third-party service providers — including payment processors, KYC verification partners, cloud hosting providers, and fraud detection services — who process data exclusively on our behalf and under strict contractual data protection obligations. These providers may not use your information for their own purposes.

Legal and Regulatory Obligations

Where we are required by law, court order, or legitimate regulatory authority to disclose information, we will do so. In all such cases we will endeavour to disclose only the minimum data required and, where legally permissible, notify you of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred as part of that transaction. We will notify registered users via email or prominent on-site notice at least 30 days before your data becomes subject to a materially different privacy policy.

Payment Data & Financial Information

All payment transactions on bd90 are processed through encrypted, PCI-DSS compliant channels. When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, we store only the transaction reference and the last four digits (or account shortform) necessary to match the payment to your account.

Full card numbers, full bank account numbers, mobile banking PINs, and full account credentials are never stored by bd90. You are responsible for keeping your payment credentials confidential. If you suspect unauthorised access to your payment method, contact your payment provider and our support team immediately.

Cookies & Tracking Technologies

bd90 uses cookies and similar lightweight tracking technologies (such as local storage tokens and session identifiers) to operate the website correctly, remember your preferences, and measure anonymous site performance. We use three categories of cookies:

• Essential cookies — strictly required for the site to function (login session persistence, security tokens, language preference). These cannot be disabled without breaking site functionality.
• Analytics cookies — used to collect anonymous data about how visitors use bd90 (pages visited, time spent, entry/exit pages) so we can improve the experience. No personal identifiers are included.
• Preference cookies — used to remember your chosen settings such as display language, currency view, and notification preferences across sessions.

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use core features of bd90. We do not use advertising or cross-site tracking cookies.

Data Retention

bd90 retains personal data only for as long as necessary to fulfil the purposes described in this policy, comply with legal and regulatory obligations, resolve disputes, and enforce our terms. The following general retention periods apply:

Active account data is retained throughout the lifetime of your account. KYC and financial records are retained for a minimum of 5 years after account closure to comply with applicable anti-money laundering and financial reporting requirements. Inactive accounts that have not logged in for 24 consecutive months may be closed after written notice; their data is then archived for 3 years before deletion. Server log files are retained for up to 90 days and then automatically purged. If you exercise your right to erasure, we will delete your data within 30 days, subject to legal retention obligations that may override this.

Your Rights

As a user of bd90's services, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered email address and the specific request. We will respond within 30 days.

• Right of access — you may request a copy of all personal data bd90 holds about you
• Right to rectification — you may ask us to correct inaccurate or incomplete information held on your account
• Right to erasure — you may request deletion of your personal data where there is no overriding legal reason for us to retain it
• Right to restriction of processing — you may ask us to pause the processing of your data while a complaint or correction request is being resolved
• Right to data portability — you may request your account data in a structured, machine-readable format so you can transfer it to another service

Please note that certain rights may be limited where bd90 has a legitimate legal obligation that overrides the request — for example, we cannot erase KYC records that applicable anti-money laundering law requires us to retain. In such cases we will explain the specific legal basis for our inability to comply fully.

Security Measures

bd90 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include: SSL/TLS encryption for all data in transit; hashed storage of passwords using industry-standard one-way algorithms; access controls that restrict which staff members can view sensitive account data; regular security audits and penetration tests; and automated monitoring systems that alert our security team to anomalous activity patterns in real time.

No digital system can guarantee absolute security. While we strive to protect your information using best-in-class practices, we cannot warrant that unauthorised third parties will never find a way to defeat our security measures. You play an important role in keeping your account safe: use a strong, unique password for bd90, do not share your login credentials with anyone, and contact us immediately at [email protected] if you believe your account has been compromised.

Third-Party Links

The bd90 website does not contain links to external third-party websites. All navigation within bd90 remains within our own domain at https://bd90.one. If at any point an external link is introduced (for example, a payment provider's help page), it will be clearly labelled, and bd90 accepts no responsibility for the privacy practices or content of any external website. We encourage you to review the privacy policy of any third-party service — such as bKash, Nagad, or Rocket — before providing them with any personal information.

Children's Privacy & Age Restriction

bd90 is strictly an adults-only platform. Our services are intended solely for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not register, deposit, place bets, or use any feature of bd90. We encourage parents and guardians in Dhaka, Chittagong, Sylhet, and across Bangladesh to use parental controls and filtering software to prevent minors from accessing gambling platforms.

If we become aware that a user is under 21, or that personal data has been collected from a minor, we will immediately suspend the account, void any outstanding bets, return any remaining balance through the original deposit method, and delete all associated personal data from our records. If you believe a minor has created a bd90 account, please contact [email protected] immediately.

Changes to This Privacy Policy

bd90 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or a prominent on-site notice at least 14 days before the changes take effect.

Your continued use of bd90 after any update to this Privacy Policy constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically to stay informed about how we protect your information. If you have any questions about a particular change, contact our support team before continuing to use the platform.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd90 handles your personal data, our dedicated support team is available to assist you. We aim to respond to all privacy-related enquiries within 2 business days. You can reach us at: