90ji Privacy Policy

1 Who We Are

90ji is an online sports betting and casino gaming platform accessible at https://90ji.io, operated by the 90ji team under an international gaming licence. For the purposes of this Privacy Policy, 90ji acts as the data controller in respect of personal data collected from players who access the platform, including players based in Bangladesh.

This Privacy Policy applies to all users of the 90ji platform — whether you have registered a full account, are browsing as a guest, or have contacted our support team. By continuing to use 90ji, you acknowledge that you have read and understood this policy.

If you have any questions about how 90ji handles your personal data, or wish to exercise any of the rights described in this policy, you may contact us at any time through the details provided in Section 15.

2 Data We Collect

90ji collects the following categories of personal data, depending on the nature of your interaction with the platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth
• Residential address (including city, district, and postal code within Bangladesh)
• Bangladesh mobile number
• Email address
• National Identity Card (NID) number or passport number (collected during KYC verification)

2.2 Account & Transaction Data

• Username and encrypted password
• Account registration date and time
• Deposit and withdrawal history, including amounts in BDT (৳), transaction IDs, and payment method identifiers (e.g., bKash wallet number, Nagad account reference, Rocket number, Visa or Mastercard last four digits)
• Betting and gaming history, including wager amounts, game types, outcomes, and timestamps
• Bonus and promotional activity records
• Account balance history

2.3 Technical & Usage Data

• IP address at the time of login and each significant account action
• Device type, operating system, and browser version
• Mobile network operator (if accessing via mobile browser in Bangladesh)
• Session duration, pages visited, and navigation paths within the platform
• Clickstream data and game interaction logs
• Referrer URL (the page from which you arrived at 90ji, if applicable)

2.4 Communication Data

• Records of all communications with the 90ji support team, including live chat transcripts, email correspondence, and support ticket content
• Feedback, complaints, and dispute records
• Marketing preference records (opt-in and opt-out history)

2.5 Verification Documents

• Scanned or photographed copies of government-issued identity documents submitted as part of KYC verification (NID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)
• Source-of-funds documentation where required by internal compliance procedures

3 How We Collect Data

90ji collects personal data through the following channels:

• Direct collection: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer.
• Automated collection: When you browse or interact with the 90ji platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies (see Section 7 for full cookie details).
• Third-party payment providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider may share transaction confirmation data with 90ji to reconcile deposits and withdrawals. 90ji does not receive your full payment credentials from these providers.
• Identity verification services: In the course of KYC checks, 90ji may use third-party verification services to confirm the authenticity of identity documents. These services process your document data under strict data processing agreements.
• Fraud and compliance tools: 90ji uses automated screening tools to detect suspicious activity, which may process device fingerprint data, IP geolocation data, and behavioural patterns.

4 Why We Use Your Data

90ji uses your personal data for the following purposes:

90ji does not use personal data for automated decision-making that produces significant legal effects on players, except where required by fraud detection or regulatory screening systems. In such cases, players have the right to request human review of any adverse decision.

5 Legal Bases for Processing

90ji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 90ji — including account management, payment processing, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering laws, age verification requirements, and licence conditions under 90ji's international gaming licence.
• Legitimate interests: Processing carried out in 90ji's legitimate interests where those interests are not overridden by your rights — including fraud prevention, security monitoring, platform analytics, and responsible gaming oversight.
• Consent: Where you have given specific, informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

90ji shares personal data only in the circumstances set out below, and only to the extent strictly necessary for each purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data required to process your deposit or withdrawal transactions.
• KYC and identity verification providers: Third-party verification services receive identity document data for the sole purpose of confirming authenticity and age.
• Game content providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and anonymised player identifier to deliver their games within the 90ji platform. They do not receive your full identity or payment data.
• Fraud and compliance tools: Specialist fraud prevention and AML screening service providers process relevant data under strict data processing agreements with 90ji.
• IT infrastructure providers: Cloud hosting and data centre providers who store 90ji platform data under contractual obligations to maintain appropriate security standards.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, 90ji may disclose personal data to law enforcement agencies, financial intelligence units, or licensing authorities.

7 Cookies & Tracking Technologies

90ji uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary or fraud prevention cookies may affect your ability to log in or use core platform features. 90ji does not use third-party advertising cookies or behavioural retargeting technologies.

8 Data Retention

90ji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and internal policy obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with AML and financial record obligations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification check.
• Support and communication records: Retained for three (3) years from the date of the last communication, or longer where required by an ongoing dispute or legal matter.
• Technical and usage logs: Generally retained for up to thirteen (13) months in identifiable form, after which they are anonymised or deleted.
• Marketing preference records: Retained for as long as you hold an account, plus a reasonable period thereafter to evidence consent and opt-out records.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

9 Data Security

90ji implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 128-bit SSL/TLS encryption for all data transmitted between your device and the 90ji platform
• Encrypted storage of sensitive account data, including passwords (which are stored as salted hashes and never in plain text)
• Role-based access controls ensuring that 90ji staff can access personal data only to the extent required by their specific job function
• Automatic suspicious login detection and two-factor authentication options for account access
• Regular internal security reviews and vulnerability assessments of platform infrastructure
• Contractual data security obligations imposed on all third-party service providers who process player data on 90ji's behalf

While 90ji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 90ji will notify affected players without undue delay through your registered contact details.

10 Your Rights

As a 90ji player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We aim to respond to all verified requests within 30 calendar days:

• Right of access: You have the right to request a copy of the personal data 90ji holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: In certain circumstances, you may request that 90ji delete your personal data. This right is subject to overriding legal retention obligations — for example, we cannot delete transaction records that are required to be retained under AML laws.
• Right to restriction of processing: You may request that 90ji restrict the processing of your data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that 90ji provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. Note that such processing may continue if 90ji can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right not to be subject to solely automated decisions: You have the right to request human review of any significant decision made about your account solely through automated means, such as an automated fraud flag that results in account restriction.

11 Children's Privacy

The 90ji platform is strictly intended for individuals who are 21 years of age or older. 90ji does not knowingly collect personal data from any person under the age of 21. If you believe that a person under 21 has registered an account or provided personal data to 90ji, please contact us immediately at [email protected] so that we may take prompt action to close the account and delete the associated data.

90ji conducts age verification as part of its KYC process and reserves the right to request proof of age from any player at any time. Accounts confirmed to belong to individuals under 21 will be immediately closed and all activity will be voided in accordance with the age restriction policy set out in our Terms & Conditions.

12 International Data Transfers

As 90ji operates under an international gaming licence and uses globally distributed technology infrastructure, your personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, 90ji ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy, including:

• Contractual data protection clauses binding the recipient to appropriate security and handling standards
• Transfers only to service providers whose data protection practices have been reviewed and approved by 90ji's compliance team
• Minimisation of data transferred internationally — only the data strictly necessary for the specific service is shared across borders

If you would like further information about the specific safeguards applied to international transfers of your data, please contact us at [email protected].

13 Third-Party Links

The 90ji platform may from time to time display informational references to third-party game providers or payment services. This Privacy Policy applies solely to the 90ji platform itself. 90ji is not responsible for the privacy practices of third-party game studios, payment processors, or any other external organisations whose services are integrated within the platform. Each of these providers maintains its own privacy policy, and we encourage you to review those policies where relevant to your use of their services.

14 Policy Amendments

90ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever a material revision is made.

Where amendments are significant, 90ji will notify players through the platform or via the registered email address or Bangladesh mobile number associated with your account. Your continued use of the 90ji platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revision, you should cease use of the platform and contact us to request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed about how 90ji protects your information.

15 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way 90ji handles your personal data, please contact our support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Hours: Available 24 hours a day, 7 days a week
• Languages: English and Bengali

All privacy-related queries will be acknowledged within 48 hours. We aim to resolve data rights requests and complaints within 30 calendar days, or to provide a substantive update where resolution within that timeframe is not possible.

If you are not satisfied with how 90ji has handled your data rights request or complaint, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.