89bad Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 89bad ("89bad", "we", "us", "our") collects, uses, stores, and shares personal information about users ("you", "your") who access or interact with the 89bad online betting and casino platform, accessible at https://89bad.io ("the Platform"). 89bad is committed to handling your personal data with care, transparency, and respect.

This Policy forms part of our Terms and Conditions. By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy applies to all personal data collected through the Platform, including data collected during registration, KYC verification, deposits and withdrawals, gameplay, and customer support interactions. It also applies to data collected through any mobile application associated with the 89bad Platform.

2. Personal Data We Collect

2.1 Identity and Contact Information

When you register an account on 89bad, we collect information necessary to establish and manage your account. This includes your full legal name, date of birth, residential address (including city and district within Bangladesh), mobile phone number, and email address. This information is mandatory — without it, we cannot create or maintain a functional account for you.

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identification documents (such as your National Identity Card, passport, or driving licence), a selfie photograph for facial verification, and proof of residential address (such as a utility bill or bank statement). These documents are handled with the highest level of security and are used solely for identity verification and age confirmation (minimum 21 years).

2.3 Financial Information

To process deposits and withdrawals, we collect information about the payment methods you use. For mobile financial services (bKash, Nagad, Rocket, Upay, SureCash), this includes your registered mobile number associated with the wallet. For bank transfers via Dutch-Bangla Bank (DBBL), City Bank, or BRAC Bank, this includes your account reference information. We do not store full card numbers or mobile PIN codes. All financial data is handled through encrypted, tokenised channels.

2.4 Technical and Device Data

When you access the Platform, we automatically collect certain technical information from your device and browser. This includes your Internet Protocol (IP) address, device type and model, operating system version, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and referring URL. This data helps us secure the Platform, detect fraudulent access, and ensure compatibility across devices.

2.5 Usage and Behavioural Data

We collect data about how you interact with the Platform. This includes which pages and game categories you visit, the games you play, the wagers you place, your betting history, session start and end times, and any features or tools you use (such as deposit limit settings or self-exclusion requests). This data is used to monitor responsible gaming compliance, improve Platform performance, and personalise your experience.

2.6 Customer Support Data

When you contact our support team — whether by email, live chat, or any other communication channel — we collect and retain records of those interactions, including the content of your messages, the nature of your query or complaint, and the resolution outcome. These records are maintained for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

89bad collects personal data through the following channels and methods:

• Direct Submission: Data you enter into the registration form, KYC upload tool, deposit/withdrawal forms, or customer support channels.
• Automatic Collection: Technical and usage data collected automatically when you access the Platform, via server logs, session tracking tools, and browser-based technologies.
• Third-Party Sources: Identity verification data confirmed or supplemented by our KYC partner services; payment confirmation data received from mobile financial service providers (bKash, Nagad, Rocket, Upay, SureCash, DBBL).
• Cookies and Similar Technologies: Data collected through cookies, session tokens, and local storage as described in Section 6 of this Policy.

4. How We Use Your Personal Data

89bad uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and operate your player account, including processing your registration, authenticating your identity at login, and managing your account settings and preferences.
• Age and Identity Verification: To confirm that you are at least 21 years of age and that your identity details are accurate, in compliance with our responsible gaming obligations.
• Transaction Processing: To process your deposits and withdrawal requests accurately and securely, including communicating with your mobile financial service provider to confirm transaction status.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account hijacking, and other forms of abuse on the Platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide support to at-risk players.
• Customer Support: To respond to your queries, complaints, and requests in a timely and accurate manner.
• Platform Improvement: To analyse aggregate usage data and improve the performance, design, and content of the Platform.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including record-keeping and responding to lawful requests from authorities.
• Communications: To send you transactional communications (e.g., deposit confirmation, withdrawal status, account security alerts). We will only send promotional communications if you have separately opted in to receive them.

5. Data Sharing and Disclosure

5.1 Operational Partners

89bad shares personal data on a need-to-know basis with third-party service providers who assist us in operating the Platform. These partners are contractually required to handle your data securely and may only use it for the specific purpose for which it was shared. Categories of operational partners include:

• Payment Processors: bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank (DBBL), and other mobile financial service providers — for processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying the authenticity of identity documents submitted during the verification process.
• Game Studio Partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data (such as session tokens) is shared to facilitate gameplay in their respective game environments.
• IT Infrastructure Providers: Cloud hosting and data centre providers who store Platform data in secure, encrypted environments.

5.2 Legal Disclosure

89bad may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to prevent imminent harm, fraud, or criminal activity. We will notify you of any such disclosure where permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 89bad's business assets, your personal data may be transferred to the acquiring entity. We will provide advance notice of any such transfer and ensure that the acquiring entity is bound by privacy obligations at least as protective as those set out in this Policy.

5.4 No Sale of Data

89bad does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party. Your data is not shared with advertisers, data brokers, or marketing platforms under any circumstances.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device across sessions, remember your preferences, and collect information about how you interact with the site. 89bad uses first-party cookies only — we do not use third-party advertising cookies.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in, CSRF protection tokens, and cookies that remember your language and display preferences. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Used to collect aggregate, anonymised information about how players navigate and use the Platform. This data helps us identify slow-loading pages, technical errors, and underperforming features so we can improve your experience.
• Functional Cookies: Used to remember choices you have made on the Platform, such as your preferred deposit method or responsible gaming limit settings, so you do not need to re-enter them on each visit.

6.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in and use the Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Retention

89bad retains personal data for the minimum period necessary to fulfil the purpose for which it was collected. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC Documents: Retained for five years from the date of submission or account closure, whichever is later.
• Financial Transaction Records: Retained for seven years from the date of each transaction, in line with standard financial record-keeping practices.
• Customer Support Records: Retained for three years from the date of the interaction, or until the resolution of any related dispute.
• Technical Logs: Retained for 12 months, after which they are automatically deleted or anonymised.

When personal data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

8. Data Security

89bad implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security practices include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Multi-factor authentication (MFA) for all internal staff accessing systems that contain player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Strict role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Automated monitoring and alerting systems that detect and flag suspicious access patterns in real time.

In the event of a data breach that is likely to result in risk to your rights or freedoms, 89bad will notify affected players without undue delay and will take immediate remedial action to contain and mitigate the breach.

9. Your Data Rights

As a player on the 89bad Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data we are required by law to retain cannot be deleted upon request.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interest, including any profiling that may affect your account status.
• Right to Withdraw Consent: Where processing is based on your consent (such as opt-in marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Minors and Age Restriction

The 89bad Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we discover that personal data has been submitted by or on behalf of a minor, we will immediately close the associated account, delete the data, and forfeit any associated funds in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor in your care has registered an account on 89bad, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. International Data Transfers

89bad primarily processes and stores data on servers located within secure data centres serving the Bangladesh region. In certain operational circumstances — for example, when using internationally based game studio partners such as Evolution Gaming, Pragmatic Play, or NetEnt — limited technical data (such as session tokens) may be processed on servers located outside Bangladesh.

Where any such international transfer occurs, 89bad ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with all international partners that require them to maintain data security standards equivalent to those described in this Policy.

12. Changes to This Privacy Policy

89bad reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where the changes are significant, notify active account holders by email or via an in-Platform notification.

Your continued use of the Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically — at least once every three months or whenever you receive a notification of update.

Archived versions of previous Privacy Policies are available upon written request to [email protected].

13. Contact & Data Enquiries

If you have any questions, concerns, or requests related to this Privacy Policy or the way 89bad processes your personal data, please contact us using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Privacy Request — [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response Time: Within 30 days for data subject requests; within 24 hours for general privacy queries
• Language: English

All data subject requests must be submitted in writing and will require identity verification before we can action them, to ensure that we do not disclose or delete data in response to an unauthorised request.