90jile Privacy Policy

1. Information We Collect

90jile collects personal data from players in Bangladesh through several channels, including during account registration, identity verification, payment processing, gameplay activity, and customer support interactions. The categories of data we collect are described below.

1.1 Registration and Identity Data

When you create a 90jile account, we collect the following information: your full legal name as it appears on your Bangladesh National Identity (NID) card, date of birth, gender, residential address (including district, division, and postal code), email address, and mobile phone number. This information is collected to establish your identity, verify your eligibility to use the platform, and comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

To comply with anti-money-laundering (AML) obligations and to verify player age and identity, we may request copies of: your Bangladesh NID card (front and back), a recent utility bill or bank statement as proof of residential address, a passport-style selfie photograph, and in some cases a signed declaration form. These documents are processed securely and retained in accordance with Section 6 of this policy.

1.3 Financial and Transaction Data

We collect details of all financial transactions conducted via your 90jile account, including deposit and withdrawal amounts, payment method identifiers (such as your bKash wallet number, Nagad account reference, Rocket account, or Upay reference), transaction timestamps, and transaction reference numbers. We do not store full payment card numbers or bKash PINs. Financial data is retained for a minimum of five years in accordance with applicable anti-money-laundering regulations.

1.4 Gameplay and Betting Data

We collect comprehensive records of your activity on the 90jile platform, including all bets placed, games played, wager amounts, outcomes, session duration, bet history, and casino bonus usage. This data is used for account management, dispute resolution, bonus wagering compliance, responsible gaming monitoring, and statistical analysis to improve our services.

1.5 Technical and Device Data

When you access 90jile, our servers automatically record certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, time zone, referring URL, and pages visited within the platform. This data helps us detect fraud, prevent unauthorised access, and optimise the platform's performance for Bangladeshi players accessing the site from Dhaka, Chittagong, Sylhet, Khulna, and other cities across the country.

1.6 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain records of those communications, including the content of your messages, the date and time of contact, and the resolution outcome. These records allow us to provide consistent, high-quality support and to maintain an audit trail of player interactions.

2. How We Use Your Data

90jile uses the personal data we collect for the following purposes. We process only the minimum data necessary for each purpose in accordance with the principle of data minimisation.

Purpose	Data Used	Retention Period
Account registration and management	Identity data, contact data	Duration of account + 5 years
KYC and age verification	NID documents, selfie, address proof	5 years from last transaction
Payment processing	Financial data, transaction records	5 years minimum (AML compliance)
Fraud detection and AML monitoring	Technical data, transaction data, gameplay data	5 years from last activity
Responsible gaming monitoring	Gameplay data, session data	Duration of account + 2 years
Customer support	Communications data, account data	3 years from last contact
Marketing and promotions (with consent)	Contact data, preference data	Until consent withdrawn
Platform analytics and improvement	Technical data, gameplay data (anonymised)	Anonymised indefinitely

Where we send you promotional communications about 90jile bonuses, BPL cricket betting offers, seasonal promotions such as Eid or Pohela Boishakh specials, or new game launches, we will only do so where you have provided consent at registration or subsequently opted in. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

3. Legal Basis for Processing

Every instance of personal data processing at 90jile is carried out on one or more of the following legal bases:

• Contractual necessity: Processing is required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, gameplay provision, and dispute resolution.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we process data for marketing communications or optional personalisation features, we do so only with your freely given, informed, and specific consent. You retain the right to withdraw this consent at any time without detriment to your account standing.

Where processing is based solely on consent and you withdraw that consent, 90jile will cease the relevant processing activity promptly. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

4. Data Sharing & Third Parties

90jile does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the limited circumstances described below, and only where a lawful basis exists for doing so.

4.1 Payment Service Providers

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, we share the minimum necessary financial data with those payment providers. These providers operate their own privacy and security frameworks and are contractually bound to process your data only for the purposes of completing your transaction.

4.2 Game Studio and Platform Partners

90jile's casino and live dealer games are powered by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. To deliver these games within your session, certain technical data (such as a session token and wagering parameters) is exchanged with the relevant studio platform. These partners do not receive your NID data or full payment details.

4.3 Regulatory and Law Enforcement Authorities

90jile will disclose your personal data to relevant regulatory bodies, financial intelligence units, or law enforcement agencies where we are legally required to do so, where disclosure is necessary to prevent or detect crime, or where we are responding to a valid legal order or court directive. In such cases, we disclose only the data that is specifically requested and required.

4.4 Professional Advisers

We may share data with our legal advisers, auditors, and accountants where necessary for compliance, legal proceedings, or the preparation of financial accounts. These parties are bound by professional confidentiality obligations and contractual data processing agreements.

4.5 Business Transfers

In the event that 90jile undergoes a merger, acquisition, restructuring, or sale of business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected players by email in advance and the acquiring entity will be required to honour the terms of this Privacy Policy or provide you with a reasonable opportunity to delete your account before any change in data handling practices takes effect.

5. Cookies & Tracking Technologies

90jile uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyse usage patterns. The following categories of cookies are in use on the 90jile website:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: These cookies remember your preferences, such as your selected language, login state, and display settings, to provide a more personalised experience across your sessions.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data is aggregated and does not identify individual users.
• Security and fraud-prevention cookies: These cookies help our systems identify suspicious login activity, detect bots, and prevent credential stuffing attacks by tracking device fingerprint signals across sessions.

You can manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 90jile account. For detailed guidance on how to manage cookies in your specific browser, refer to your browser's help documentation.

6. Data Retention

90jile retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements. The general retention schedule is as follows:

• Active account data: Retained for the full duration of your account, plus five years following account closure, to meet AML and regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of your last transaction or account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five years in line with anti-money-laundering obligations applicable in Bangladesh.
• Customer support communications: Retained for three years from the date of the last interaction.
• Marketing preference records: Retained until consent is withdrawn, and for one year thereafter as evidence of prior consent status.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form for statistical and product improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction procedures. Backup copies are purged on a rolling schedule aligned with the primary retention timeline.

7. Your Privacy Rights

As a 90jile player, you hold a number of rights with respect to your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 72 hours and aim to fulfil it within 30 days.

Where you submit a rights request, we may need to verify your identity before processing it. This is to ensure that personal data is not disclosed to or deleted by an unauthorised party. Verification will typically involve confirming details that only the account holder would know. We will not charge a fee for exercising your rights except in cases of manifestly unfounded or excessive requests, in which case we reserve the right to apply a reasonable administrative fee.

8. Data Security Measures

90jile implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security controls include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the 90jile platform, protecting login credentials, payment data, and session activity in transit.
• Encrypted data storage for sensitive fields including passwords (hashed using bcrypt), payment identifiers, and KYC documents, using AES-256 encryption at rest.
• Two-factor authentication (2FA) available to all players from the account security settings panel, adding an additional layer of protection to the login process.
• Access controls and role-based permissions ensuring that internal staff can only access player data strictly necessary for their role. All internal data access is logged and audited.
• Fraud detection systems that monitor login patterns, transaction behaviour, and device signals in real time to flag and investigate suspicious activity.
• Regular security testing including vulnerability assessments and penetration testing conducted by independent security professionals.
• Incident response procedures that enable us to detect, contain, and notify affected players of any data breach within the timeframes required by applicable law.

While 90jile takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us immediately if you suspect any unauthorised access to your account. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, 90jile will notify affected players without undue delay via the email address registered to their account.