Your Privacy Matters
at 90xo — Here's Our Commitment
This Privacy Policy explains exactly what personal information 90xo collects from players in Bangladesh, why we collect it, how it is stored and protected, and what rights you have over your own data. We are committed to handling all player data with transparency, integrity, and the highest standards of digital security.
End-to-End SSL Encryption
Every connection between your browser and the 90xo platform is encrypted using industry-standard SSL/TLS technology. Your personal details, payment information, and account credentials are never transmitted in plain text.
No Data Sold to Third Parties
90xo does not sell, rent, or trade your personal information to advertisers or unrelated third parties. Your data is used solely to operate your account and improve your gaming experience.
KYC Data Handled Securely
Identity documents submitted during KYC verification are stored on secured, access-controlled servers. Only authorised compliance personnel can access verification documents, and only for the purpose of account verification.
Transparent Cookie Use
We use cookies and similar tracking technologies strictly to maintain your session, remember your preferences, and analyse platform performance. We do not use cookies to build advertising profiles or track you across unrelated websites.
Your Right to Access & Delete
As a 90xo player, you have the right to request a copy of the personal data we hold about you, to correct inaccurate data, and to request deletion of your data subject to our legal retention obligations.
Strict 18+ Age Enforcement
90xo does not knowingly collect or process personal data from individuals under the age of 18. Any account found to belong to a minor is closed immediately and associated data is handled in accordance with applicable regulations.
01 Information We Collect
When you register and use the 90xo platform, we collect certain categories of personal data that are necessary to operate your account, process transactions, verify your identity, and comply with our legal obligations. We collect only the information that is genuinely required for these purposes and do not engage in speculative or excessive data collection.
| Data Category | Examples | Why We Collect It |
|---|---|---|
| Registration Data | Full name, date of birth, email address, mobile number | Account creation, identity verification, communications |
| KYC Documents | National ID (NID), passport, driver's licence scan | Mandatory age and identity verification before first withdrawal |
| Payment Data | bKash/Nagad/Rocket mobile number, card last 4 digits, bank account reference | Processing deposits and withdrawals in BDT |
| Transaction History | Deposit amounts, withdrawal requests, wagering activity, bonus claims | Account management, fraud detection, AML compliance |
| Device & Technical Data | IP address, browser type, operating system, device model, session timestamps | Security monitoring, fraud prevention, platform optimisation |
| Communication Data | Live chat transcripts, support email threads, WhatsApp messages to support | Dispute resolution, service quality, training |
| Behavioural Data | Pages visited, games played, session duration, click patterns | Platform improvements, responsible gaming monitoring, personalisation |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information (beyond what you voluntarily disclose in a responsible gaming context), or biometric data. Where you choose to share sensitive information voluntarily — for instance, disclosing a gambling-related health concern to our responsible gaming team — that information is treated with the strictest confidentiality and used only to support your wellbeing.
Information collected passively through your use of the platform (device data, IP address, behavioural patterns) is collected automatically via our platform infrastructure and analytics systems. This data helps us detect fraud, prevent account compromise, and ensure the platform operates correctly across different devices and network environments common in Bangladesh, including mobile connections via Grameenphone, Robi, Banglalink, and Airtel.
02 How We Use Your Data
90xo processes player data based on one of the following legal grounds: (a) contractual necessity — the processing is required to fulfil our obligations to you as an account holder; (b) legal obligation — the processing is required by applicable law, including anti-money laundering (AML) and Know Your Customer (KYC) regulations; (c) legitimate interests — the processing serves a genuine business interest (such as fraud prevention or platform security) that does not override your privacy rights; or (d) your consent, where explicitly provided.
The following is a detailed account of how 90xo uses the personal data we collect:
- Account operation: Your registration data is used to create and maintain your account, authenticate your identity at login, and personalise your platform experience based on your game preferences and history.
- Transaction processing: Payment data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks. Transaction records are maintained for accounting, dispute resolution, and regulatory compliance.
- Identity and age verification: KYC documents are reviewed to confirm that you meet the minimum age requirement of 18 years and that your identity matches the payment methods registered on your account.
- Fraud prevention and security: Device data, IP addresses, and behavioural patterns are analysed by our security systems to detect unusual activity, prevent account takeover, identify duplicate accounts, and flag potential fraudulent or money-laundering behaviour.
- Responsible gaming: Behavioural data including session length, deposit frequency, and wagering patterns is monitored to identify signs of problem gambling. Where patterns of concern are detected, our responsible gaming team may reach out proactively. See our Responsible Gaming page for full details.
- Customer support: Communication data from live chat, email, and WhatsApp interactions is retained so that our support team can provide consistent, informed assistance and resolve disputes effectively.
- Platform improvement: Aggregated and anonymised behavioural data is used to understand how players navigate the platform, which games are most popular, and where the user experience can be improved. This analysis does not involve processing individually identifiable information.
- Marketing communications: If you have opted in to receive promotional communications, your email address and/or mobile number may be used to send information about bonuses, new games, seasonal promotions (such as Eid or BPL season offers), and platform news. You can opt out of marketing communications at any time by contacting support or using the unsubscribe link in any email.
Automated decision-making: Some fraud detection and responsible gaming monitoring functions involve automated processing of your data. Where an automated system flags your account for review, a human member of the 90xo team will always conduct a manual assessment before any significant action (such as account restriction or withdrawal hold) is taken. You have the right to request human review of any automated decision that affects your account.
03 Data Sharing & Third Parties
90xo does not sell your personal data to any third party under any circumstances. We share your data only in the specific situations described below, and only to the extent necessary for the stated purpose.
Payment Processors
To process your deposits and withdrawals, 90xo shares relevant payment details with our payment processing partners including bKash, Nagad, Rocket, Upay, and our card-processing gateway. These partners are contractually obligated to handle your data securely and use it only to execute the transaction.
Game Providers
Games on the 90xo platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to deliver the game but do not receive your full personal profile or payment details.
Identity Verification Services
90xo may use third-party KYC service providers to assist with the verification of identity documents. These providers operate under strict data processing agreements and are authorised to use your documents only for the purpose of identity verification on behalf of 90xo.
Legal & Regulatory Authorities
90xo may be required by law, court order, or regulatory directive to disclose player information to relevant authorities. In such cases, we will disclose only the minimum information required by the applicable legal obligation and will notify the affected player where permitted by law to do so.
All third-party data processors engaged by 90xo are required to enter into data processing agreements that impose binding obligations regarding the confidentiality, security, and permissible use of any player data shared with them. 90xo does not transfer player data to processors located in jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.
Where 90xo undergoes a merger, acquisition, or sale of assets in which player data forms part of the transferred assets, you will be notified in advance via the email address registered on your account. The acquiring entity will be bound by the terms of this Privacy Policy or will be required to present you with a new policy before processing your data under different terms.
No sharing with advertisers. 90xo does not share your personal data with advertising networks, data brokers, social media platforms, or any entity whose primary business involves selling advertising. Any promotional communications you receive from 90xo are sent directly by 90xo and are not the result of your data being shared with a third-party advertiser.
05 Data Security & Retention
90xo employs a multi-layered approach to data security designed to protect player information against unauthorised access, disclosure, alteration, and destruction. Our security measures include but are not limited to:
- SSL/TLS encryption on all data transmitted between your device and the 90xo platform, ensuring that your login credentials, payment details, and personal information are protected in transit.
- Encrypted storage of sensitive fields including passwords (hashed using a modern algorithm with salting), KYC document files, and payment references on our database infrastructure.
- Access controls: Player data is accessible only to authorised 90xo personnel on a need-to-know basis. All internal access to player records is logged and subject to audit.
- Intrusion detection and monitoring: The platform infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, or attempts to extract data in bulk.
- Two-factor authentication (2FA) is available for player accounts and is mandatory for all 90xo administrative accounts that have access to player data.
Despite the robust measures described above, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to player rights or freedoms, 90xo will notify affected players as promptly as possible via the email address registered on their account, and will take immediate steps to contain and remediate the breach.
Data retention periods vary depending on the category of data and the purpose for which it was collected:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years after closure | Contractual obligation, legal compliance |
| KYC Documents | Duration of account + 5 years after closure | AML regulatory requirements |
| Transaction Records | 7 years from transaction date | Financial regulatory compliance |
| Support Communications | 3 years from last interaction | Dispute resolution, service quality |
| Analytics Data | Up to 24 months (anonymised) | Platform improvement (legitimate interest) |
| Marketing Preferences | Until opt-out or account closure | Consent |
After the applicable retention period has elapsed and there is no legal or regulatory basis for continued storage, personal data is securely deleted or irreversibly anonymised. Players who have closed their accounts and wish to confirm that their data has been deleted may contact the 90xo privacy team at [email protected].
06 Your Rights as a Player
90xo recognises that your personal data belongs to you and that you have meaningful rights over how it is collected, used, and stored. The following rights are available to all registered 90xo players:
Right of Access
You have the right to request a copy of all personal data that 90xo holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of receiving a verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a mobile number) can be made directly through your account settings. More significant corrections require a support request.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires its continued retention. Note that AML and KYC regulations require us to retain certain records for a minimum period even after account closure.
Right to Restrict Processing
In certain circumstances — such as where you contest the accuracy of data or object to its processing — you may request that 90xo restrict processing of your data while the matter is being resolved. During a restriction, we may continue to store your data but will not actively process it beyond what is legally required.
Right to Data Portability
You have the right to receive your personal data in a portable format and to request that it be transmitted to another service provider where technically feasible. This right applies to data that you provided directly and that is processed on the basis of consent or contractual necessity.
Right to Object
You have the right to object to processing based on 90xo's legitimate interests — including direct marketing and profiling for personalisation. Where you object to marketing, we will cease sending promotional communications immediately. Where you object to other forms of processing, we will cease unless we can demonstrate a compelling legitimate ground that overrides your interests.
To exercise any of the rights described above, contact the 90xo privacy team by emailing [email protected] with the subject line "Privacy Rights Request" and a description of your request. We may ask you to verify your identity before processing the request to ensure that data is not disclosed to an unauthorised party. We will respond to all verified privacy rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days with notification.
If you are not satisfied with 90xo's response to a privacy rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
07 Minors & Age Restriction
The 90xo platform is strictly intended for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18. Age verification is a mandatory step in the account lifecycle, and 90xo enforces this requirement rigorously through its KYC process.
If a parent or guardian becomes aware that their child has registered an account on 90xo or has submitted personal information to the platform without consent, they should contact us immediately at [email protected]. Upon receiving such a notification and verifying the claim, 90xo will:
- Immediately suspend the account pending investigation.
- Permanently close the account upon confirmation that the account holder is under 18.
- Void all wagers placed from the account.
- Delete all personal data associated with the minor's account from our active systems, subject to any minimum legal retention requirements.
- Return any deposited funds to the original payment source in accordance with applicable regulations.
18+ only — no exceptions. Gambling and casino games are adult entertainment products. 90xo is committed to maintaining an environment that is safe, legal, and appropriate only for adults. If you are under 18 years of age, you must not attempt to register an account, access the 90xo platform, or use any of its services. For guidance on protecting young people from online gambling, visit our Responsible Gaming page.
08 Policy Updates & Contact
90xo reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and by posting a notice on the 90xo platform at least 14 days before the changes take effect.
The effective date at the top of this Policy will always reflect when the current version became active. We encourage you to review this Policy periodically so that you remain informed about how your data is being handled. Your continued use of the 90xo platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.
If you have questions, concerns, or requests relating to this Privacy Policy or to the way 90xo processes your personal data, please contact our privacy team using the details below:
- General support and privacy enquiries: [email protected]
- Payment-related queries: [email protected]
- Live chat: Available 24/7 via the platform
- WhatsApp support: Available 06:00–24:00 BST (UTC+6)
When contacting us about a privacy matter, please include "Privacy Policy" or "Data Request" in your subject line and provide your registered email address and account username so we can locate your record efficiently and respond without delay.
This Privacy Policy was last updated on January 1, 2026. It supersedes all previous versions. By using the 90xo platform after this date, you acknowledge that you have read and understood this Policy and agree to the data practices described herein.
Ready to Play on a Safe Platform?
Your data is protected. Your games are fair. Your transactions are fast. Explore 90xo's full range of cricket betting, live casino, and slots — all with bKash, Nagad, and Rocket support.