90jali Privacy
Policy

1 Overview & Scope

This Privacy Policy ("Policy") is issued by 90jali ("90jali", "we", "us", "our") and applies to all personal data collected through the 90jali website at 90jali.com, including all sub-pages, account dashboards, payment portals, promotional landing pages, and any other digital properties operated under the 90jali brand name.

This Policy governs the collection, use, storage, sharing, and disposal of personal data relating to individuals who visit the 90jali website or register as players ("you", "your", "the Player"). It is intended to provide you with clear and honest information about how your data is handled so that you can make informed decisions about your use of the platform.

90jali is committed to protecting the privacy and personal data of its players, particularly given the sensitive nature of online gaming and financial transactions. We recognise that players based in Bangladesh trust us with personal and financial information, and we take that responsibility seriously.

This Policy should be read in conjunction with the 90jali Terms & Conditions, which govern the broader contractual relationship between you and 90jali, and the Responsible Gaming policy, which addresses how we use data to identify and support players who may be experiencing gambling-related harm.

2 Data We Collect

90jali collects personal data from you in the following ways: directly when you provide it to us during registration or account management; automatically when you use the platform; and from third parties such as payment processors and identity verification services. The categories of data we collect are set out below.

2.1 Registration & Account Data

When you create a 90jali account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (required to verify that you are aged 18 or above)
• Mobile phone number (used for account verification and SMS notifications)
• Email address (used for account correspondence and, if opted in, promotional communications)
• Username and encrypted password (for account access authentication)
• Residential address (required for KYC verification for accounts reaching certain deposit thresholds)

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) and responsible gaming obligations, we may request and retain copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid passport (photo page)
• Driving licence issued by BRTA
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing the registered mobile number)
• Any additional document reasonably required by our compliance team

2.3 Financial Transaction Data

When you make deposits or withdraw funds, we record the following:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳ / BDT)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet numbers or partial card numbers associated with the transaction
• Transaction reference numbers and timestamps
• Account balance history

2.4 Gaming & Betting Activity Data

We maintain detailed records of your gaming activity on the platform, including:

• Bets placed, markets selected, stake amounts, and outcomes
• Casino game sessions, including game titles, bet sizes, and results
• Session start and end times, total session duration, and wager totals
• Bonus credits claimed, wagering progress, and bonus outcomes
• Responsible gaming settings you have activated, including deposit limits and self-exclusion periods

2.5 Technical & Device Data

When you access 90jali, our servers automatically collect certain technical information:

• IP address and approximate geographic location derived from IP
• Browser type and version, operating system, and device type
• Screen resolution and device language settings
• Pages visited on 90jali, time spent on each page, and navigation paths
• Referral URL (the page you were on before arriving at 90jali)
• Error logs generated during your session

2.6 Communications Data

If you contact 90jali support, we retain records of that correspondence including:

• Live chat transcripts
• Email correspondence sent to or received from [email protected]
• Complaint and dispute records, including the nature of the complaint and its resolution

3 How We Use Your Data

90jali uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy with reasonable notice.

4 Legal Basis for Processing

Every instance of personal data processing at 90jali is conducted on one of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and 90jali — specifically, to operate your account, process bets, and handle your deposits and withdrawals. Without this processing, 90jali cannot deliver its services to you.
• Legal Obligation: Processing required to comply with applicable laws, including age verification requirements, anti-money laundering (AML) obligations, KYC requirements, and the retention of financial transaction records for audit purposes.
• Legitimate Interests: Processing carried out in the legitimate interests of 90jali or our players, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and responsible gaming monitoring.
• Consent: Processing carried out only where you have given clear, specific, and freely given consent — primarily for sending you promotional offers, bonus notifications, and marketing communications. You may withdraw consent at any time by updating your account notification preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

5 Data Sharing & Third Parties

90jali does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors

To process your deposits and withdrawals, we share relevant financial data with our payment partners including bKash, Nagad, Rocket, Upay, and the card networks Visa and Mastercard. Data shared is limited to what is strictly necessary to execute the payment transaction. Each payment partner operates under its own privacy policy and data protection obligations.

5.2 Game Providers

To deliver live casino, slots, and other gaming content, 90jali integrates with third-party game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. A session token and anonymised player identifier are shared with these providers when you launch a game. We do not share your full name, mobile number, or KYC documents with game providers.

5.3 Identity Verification Services

To perform KYC and age verification checks, 90jali may use third-party identity verification services. These providers receive the documents you submit for verification purposes only and are contractually prohibited from using those documents for any other purpose.

5.4 Fraud Prevention & Security Services

We use third-party fraud detection and cybersecurity tools that process technical and device data (IP address, browser fingerprint, session behaviour) to identify suspicious activity. These services operate under strict data processing agreements with 90jali.

5.5 Legal & Regulatory Disclosure

90jali may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by applicable law, court order, or regulatory direction. We will endeavour to notify you of such a disclosure request where we are legally permitted to do so.

5.6 Business Transfers

In the event that 90jali undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed as a result, with a reasonable opportunity to close your account if you do not consent.

6 Cookies & Tracking Technologies

90jali uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform effectively, maintain your logged-in session, and understand how players use the site. The categories of cookies we use are as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the 90jali website to function correctly. They include your session authentication token (which keeps you logged in as you navigate the site), security tokens (which protect against CSRF attacks), and load-balancing cookies. These cookies cannot be disabled without making the site non-functional.

6.2 Functional Cookies

Functional cookies remember your preferences and personalisation choices — for example, your preferred language setting or the last game category you browsed. They improve your experience on 90jali but are not essential to core functionality.

6.3 Analytics Cookies

Analytics cookies help us understand how players navigate the 90jali platform — which pages are visited most, where players drop off in the registration flow, and how different features are used. This data is collected in aggregated, anonymised form and is used solely to improve the platform. 90jali does not use third-party advertising analytics networks that track you across other websites.

6.4 Managing Your Cookie Preferences

You can manage your cookie preferences directly through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your 90jali account. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the quality of your experience.

7 Data Retention

90jali retains your personal data for different periods depending on the category of data and the purpose for which it was collected. The table below summarises our standard retention periods:

At the end of the applicable retention period, personal data is either securely deleted using certified data destruction procedures or anonymised so that it can no longer be linked to any individual player. Anonymised data may be retained indefinitely for platform analytics and improvement purposes.

8 Your Data Rights

As a player whose personal data is processed by 90jali, you have the following rights in relation to your data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data 90jali holds about you, along with information about how it is being used and with whom it has been shared. We provide this in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For KYC-verified data (such as your legal name), corrections require submission of updated documentary evidence.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, financial transaction records required for AML compliance). Where deletion is not possible, we will explain why and provide the applicable retention period.
• Right to Restriction of Processing: You may ask us to restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing pending our determination.
• Right to Data Portability: For data you have provided to us directly and which is processed on the basis of consent or contractual necessity, you have the right to receive a copy in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests — including the responsible gaming profiling described in Section 3. You may also object at any time to the use of your data for marketing communications by updating your account notification settings.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

9 Data Security

90jali implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your device and 90jali's servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this encryption is active whenever you access 90jali.
• Encryption at Rest: Sensitive data stored on 90jali's servers — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within 90jali's internal systems is restricted on a strict need-to-know basis. Staff who handle player data undergo regular data protection and security training.
• Password Hashing: Account passwords are stored only in hashed form using a robust one-way hashing algorithm. 90jali staff cannot view your password in plain text — this is why password resets require generating a new password rather than retrieving the old one.
• Intrusion Detection: 90jali operates continuous server monitoring and intrusion detection systems to identify and respond to unauthorised access attempts in real time.
• Regular Security Audits: 90jali conducts periodic security audits and vulnerability assessments to identify and remediate weaknesses in our technical infrastructure.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights or interests, 90jali will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

10 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 90jali handles your personal data, please contact us using the details below. All privacy-related communications must be in English.

• General Privacy Enquiries: [email protected] — Subject line: "Privacy Enquiry"
• Data Rights Requests: [email protected] — Subject line: "Data Rights Request"
• Formal Privacy Complaints: [email protected] — Subject line: "Formal Privacy Complaint"

We aim to acknowledge all privacy-related communications within 5 business days and to provide a full response within 30 calendar days. For complex requests — for example, a full data access request covering multiple years of account activity — we may request a short extension and will inform you if that is the case.

If you are not satisfied with how 90jali has handled a privacy concern after raising it directly with us, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 90jali will cooperate fully with any regulatory investigation into our data processing practices.