90jale Privacy Policy — How We Protect Your Data

Section 1

Information We Collect

When you register for a 90jale account, interact with our games, place bets, initiate payment transactions, or contact our support team, we collect certain categories of personal information. The table below summarises the categories of data we collect, the specific data points within each category, and the primary reason for collection.

Data You Provide Directly

The majority of personal data 90jale holds is provided directly by you during the registration process, during KYC verification, when you contact support, or when you update your account settings. You are under no legal obligation to provide this data, but without it, 90jale cannot open or maintain a real-money account on your behalf.

Data Collected Automatically

When you browse or use the 90jale platform, certain technical and usage data is collected automatically through server logs, cookies, and session tracking technologies. This data is collected to maintain platform security, detect fraud, and improve the user experience. See the Cookies & Tracking Technologies section for full details.

Section 2

How We Use Your Data

90jale uses your personal data only for purposes that are directly connected to operating your account, providing our services, maintaining platform security, and complying with our obligations as a responsible online platform. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

Core Service Delivery

• Opening, maintaining, and administering your 90jale player account.
• Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks.
• Verifying your age and identity as part of our 18+ age restriction policy and KYC requirements.
• Making games, sports betting markets, and live casino tables available and accessible to your account.
• Calculating, applying, and tracking bonus wagering requirements and promotional eligibility.
• Communicating account-related information including deposit confirmations, withdrawal receipts, and security alerts.

Platform Security & Fraud Prevention

• Detecting and preventing duplicate account registrations in breach of our one-account policy.
• Identifying and investigating potentially fraudulent transactions, collusion, match-fixing, or bonus abuse.
• Monitoring login activity for signs of unauthorised access and triggering security alerts where appropriate.
• Cooperating with payment providers in the investigation of disputed transactions or chargebacks.

Responsible Gaming

Usage data — including session duration, betting patterns, deposit frequency, and self-exclusion history — is analysed by our responsible gaming monitoring systems to identify players who may be exhibiting signs of problem gambling. Where our systems flag a concern, a member of the 90jale support team may reach out to the player proactively. This processing is carried out in the legitimate interests of player welfare and cannot be opted out of while you hold an active account.

Legal & Regulatory Compliance

We retain and process personal data to the extent required to meet our obligations under applicable financial crime prevention frameworks, including anti-money laundering (AML) procedures and know-your-customer (KYC) protocols. Records of transactions and identity verification documents may be retained for a legally mandated period after account closure.

Marketing Communications

Section 3

Data Sharing & Third Parties

90jale does not sell, trade, or otherwise transfer your personal information to third parties for their own commercial purposes. We share personal data only with the specific categories of third parties listed below, and only to the extent necessary for them to perform their contracted functions.

Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial and identity information with your selected payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, or Mastercard. These providers operate under their own privacy policies and are independently regulated. 90jale is not responsible for the data handling practices of third-party payment providers once data has been transmitted to them for the purpose of executing a transaction.

Game Software Providers

Games on the 90jale platform are delivered by certified software providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (device type, session token, game round ID) necessary to deliver the game to your browser and to log game outcomes for audit purposes. Game providers do not receive your full identity data or financial account details.

KYC & Identity Verification Services

Where 90jale uses a third-party identity verification service to assist in processing KYC checks, identity documents you submit may be shared with that provider solely for the purpose of verification. Such providers are contractually prohibited from retaining or using your documents for any other purpose.

Legal & Regulatory Authorities

90jale may be required by applicable law, court order, or regulatory directive to disclose personal data to competent legal or governmental authorities. In such cases, we will disclose only the specific data requested and will, where legally permitted, notify the affected player of the disclosure request.

Section 4

Cookies & Tracking Technologies

90jale uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with the site so we can improve the experience. This section describes the types of cookies we use and the purpose of each.

What Are Cookies?

A cookie is a small text file placed on your device by a website server when you visit that site. Cookies allow the website to recognise your device on subsequent visits and to remember certain information about your session or preferences. Cookies cannot execute code or deliver viruses to your device.

Types of Cookies Used on 90jale

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only first-party cookies, or delete cookies after each browsing session. Please note that disabling strictly necessary cookies will prevent you from logging in to your 90jale account. For browser-specific instructions on managing cookies, refer to the help documentation of your browser (Chrome, Firefox, Samsung Internet, Opera Mini, or similar). Since 90jale targets Bangladesh-based players using a wide variety of devices, we recommend checking your mobile browser's settings if you primarily access the platform from a smartphone.

Section 5

Data Security & Storage

90jale takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Security Measures

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and 90jale's servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Look for the padlock icon in your browser's address bar when visiting 90jale.net.
• Encrypted Storage: Sensitive data fields — including passwords (stored as salted hashes, never plain text) and payment account identifiers — are encrypted at rest in our databases using AES-256 encryption.
• Access Controls: Access to personal data within 90jale's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data categories relevant to their specific operational role.
• Session Management: Player sessions expire after a defined period of inactivity, and session tokens are rotated on each new login to prevent session fixation attacks.
• Penetration Testing: 90jale engages independent security professionals to conduct periodic vulnerability assessments and penetration tests of the platform infrastructure.

Data Retention

90jale retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or financial record-keeping obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's existence.
• Account closure data: Core identity and transaction records are retained for a minimum of 5 years post-closure to satisfy AML and financial audit requirements.
• Support communications: Retained for up to 3 years from the date of the last communication in a thread.
• Marketing opt-in records: Retained for the duration of your account, plus 1 year post-closure as evidence of consent.
• Technical/log data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and interests, 90jale will take immediate steps to contain the breach, assess the scope of impact, and notify affected players without undue delay. Notification will be sent to the email address registered on your account and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the remedial measures taken.

Section 6

Your Privacy Rights

As a registered player on 90jale, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, contact our support team in writing at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and respond in full within 30 days.

Right of Access

You have the right to request a copy of the personal data 90jale holds about you, the purposes for which it is processed, the categories of recipients to whom it has been disclosed, and the retention period applied to it. Requests for access are fulfilled free of charge. If a request is manifestly unfounded or repetitive, a reasonable administrative fee may be applied.

Right to Rectification

If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the inaccurate data has been shared with a third party, we will notify that party of the correction where technically feasible.

Right to Erasure

You may request that 90jale delete your personal data where: (a) the data is no longer necessary for the purpose it was collected; (b) you withdraw consent and there is no other lawful basis for processing; or (c) the data has been unlawfully processed. Note that this right is not absolute — we may be required to retain certain data to fulfil legal obligations (such as AML record-keeping requirements) even after you request erasure. In such cases, we will inform you of the data we are legally required to retain and the basis for doing so.

Right to Restriction of Processing

You may request that we restrict processing of your personal data — meaning we will continue to store it but cease active use — in circumstances where you contest the accuracy of the data, object to processing based on legitimate interests, or require the data to be retained for the establishment or defence of legal claims.

Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid marketing objection, we will cease all promotional communications to you within 5 business days. This does not affect transactional communications related to your account (deposit confirmations, security alerts, withdrawal receipts).

Right to Data Portability

Where your data is processed by automated means on the basis of your consent or for the performance of a contract, you have the right to receive a structured, commonly used, machine-readable copy of that data which you may transmit to another service provider.

Section 7

Minors & Age Restriction

Age verification is carried out during the registration process and may be repeated at any point during a player's account lifetime. If 90jale discovers that personal data has been collected from a person under the age of 18 — whether as a result of the minor providing a false date of birth or through any other means — the following actions will be taken immediately:

• The account will be suspended pending full investigation.
• All bets placed and bonuses claimed by the minor's account will be voided.
• Any funds deposited by the account will be returned to the payment source, minus any gaming losses that occurred prior to detection.
• All personal data associated with the minor's account will be permanently deleted from our systems, with the exception of records required to document the detection and response to the underage access incident.

Parental Guidance

If you are a parent or guardian and believe that a minor in your household has registered a 90jale account, please contact us immediately at [email protected] with the registered email address or mobile number associated with the account so we can take immediate action. We recommend that parents and guardians in Dhaka, Chittagong, Sylhet, and across Bangladesh make use of device-level parental controls to prevent minors from accessing online gambling platforms.

Section 8

Contact & Policy Updates

How to Contact Us About Privacy

For any questions, concerns, or requests related to this Privacy Policy or the personal data 90jale holds about you, please contact our privacy support team using the details below. All privacy-related communications must be submitted in writing. We do not handle privacy requests over chat or telephone.

Updates to This Privacy Policy

90jale may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make a material change to this policy, we will update the "Last Updated" date at the top of this page and, where the change significantly affects your rights or our data processing activities, we will notify registered players via the email address on their account.

Your continued use of the 90jale platform after any Privacy Policy update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically — particularly if you are a regular player based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, or Cox's Bazar, as local regulatory developments may periodically influence how we handle player data.