89bf Privacy Policy

This Privacy Policy ("Policy") describes how 89bf ("89bf", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", "Player", "User") who access or use the 89bf online casino and sports betting platform at 89bf.io and any related services, mobile applications, or communications channels operated by 89bf.

By registering an account on the 89bf platform, accessing our website, or otherwise using our services, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately and contact our support team to request account closure.

89bf is committed to handling personal data in a manner that is transparent, lawful, and respectful of individual privacy rights. This Policy is written in plain English to ensure that all players — wherever they are located across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — can clearly understand how their information is managed.

89bf collects the following categories of personal data in the course of providing its services:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless such data is volunteered by a player in the context of a responsible gaming support request (for example, disclosing a gambling-related health condition when requesting self-exclusion).

89bf collects personal data through the following channels and mechanisms:

3.1 Direct Collection

The majority of personal data we hold is provided directly by you during the account registration process, during KYC verification, when making deposits or requesting withdrawals, when contacting our support team, and when participating in promotions or surveys. You control what information you provide, subject to the minimum requirements needed to operate your account.

3.2 Automated Collection

When you access the 89bf platform, our servers automatically record certain technical information including your IP address, device identifiers, browser type and version, referring URL, pages visited, and session duration. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 7 of this Policy.

3.3 Third-Party Sources

In certain circumstances, 89bf may receive personal data about you from third-party sources, including:

• Identity verification providers who assist with KYC and age verification checks.
• Payment processors (such as bKash, Nagad, Rocket, and Upay) who confirm transaction status and payment method ownership.
• Fraud prevention services that flag suspicious IP addresses, devices, or account patterns.
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may share technical session data for dispute resolution purposes.

89bf uses personal data for the following purposes. Each purpose is tied to a specific legal basis as described in Section 5:

4.1 Account Management

We use your identity and contact data to create and manage your account, verify your identity and age (21+ verification is mandatory), process password resets, and communicate important account-related information such as transaction confirmations, security alerts, and policy updates.

4.2 Service Delivery

Financial data and behavioural data are used to process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to settle bets and casino game outcomes accurately, and to maintain an accurate real-time account balance for you.

4.3 Legal and Regulatory Compliance

89bf uses identity, financial, and document data to comply with its Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, to verify that players meet the minimum age requirement of 21 years, and to respond to lawful requests from authorities.

4.4 Fraud Prevention and Security

Technical data and behavioural data are analysed by our security systems to detect and prevent fraudulent account activity, multi-accounting, bonus abuse, and unauthorised access attempts. Where fraud is identified, relevant data may be shared with law enforcement agencies.

4.5 Responsible Gaming

Behavioural data — including session duration, bet frequency, deposit patterns, and self-assessment responses — is used by 89bf's responsible gaming team to identify players who may be at risk of problem gambling and to proactively offer support, limit-setting tools, and self-exclusion options.

4.6 Marketing Communications

With your explicit consent, 89bf may send you promotional communications about new games, seasonal offers (such as BPL and IPL cricket promotions, Eid and Pohela Boishakh bonuses), and platform updates via email, SMS, or WhatsApp. You can withdraw your marketing consent at any time by contacting [email protected] or updating your account preferences.

4.7 Platform Improvement

Aggregated and anonymised technical and behavioural data is used to analyse platform performance, identify popular games and features, and improve the overall player experience. This analysis does not involve identifying individual players.

89bf relies on the following legal bases when processing your personal data. Where more than one basis applies to a given activity, all applicable bases are noted:

• Contractual Necessity: Processing required to perform the contract between you and 89bf — including account registration, bet settlement, payment processing, and KYC verification — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and responding to lawful governmental or judicial requests.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of 89bf's legitimate interest in operating a safe, fair, and sustainable platform. We conduct a balancing test to ensure these interests do not override your privacy rights.
• Consent: Processing for marketing communications and optional analytics is carried out solely on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

89bf does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Data sharing is strictly limited to the categories described below, and only where necessary for a defined operational purpose:

6.1 Service Providers

89bf engages carefully selected third-party service providers to assist in operating the platform. These providers act as data processors under contractual obligations that require them to protect personal data and use it only for the specific purpose for which it was shared. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard
• Identity verification and KYC providers
• Fraud detection and cybersecurity service providers
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi

6.2 Legal and Regulatory Disclosure

89bf may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, by valid legal process (such as a court order or subpoena), or where 89bf reasonably believes disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.

6.3 Business Transfers

In the event that 89bf undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. In such circumstances, 89bf will make reasonable efforts to notify affected players and to ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

89bf uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your account balance display, and ensure that security features operate correctly. These cookies cannot be disabled without impairing your ability to use the platform.

7.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised information about how players navigate the 89bf platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve the overall player experience.

7.3 Functional Cookies

These cookies remember your preferences — such as your preferred language, display settings, and last-accessed game category — so that you do not need to reconfigure them on every visit.

7.4 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the 89bf platform. Most modern browsers provide cookie management tools in their settings or preferences menus. Refer to your browser's help documentation for guidance specific to your browser.

89bf retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data (identity, contact, financial) is retained for the duration of your account and for a minimum of five (5) years following account closure, in line with AML and record-keeping requirements.
• KYC documentation (copies of NID, passport, proof of address) is retained for a minimum of five (5) years from the date of submission.
• Transaction records (deposit and withdrawal history, bet history) are retained for a minimum of seven (7) years to support financial auditing and regulatory compliance.
• Support communications are retained for up to three (3) years from the date of the relevant interaction.
• Technical and behavioural logs are typically retained for twelve (12) months and then aggregated or deleted.
• Marketing consent records are retained for as long as your account is active and for one (1) year following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required, 89bf applies secure deletion or anonymisation procedures to ensure that it cannot be reconstructed or linked back to an individual.

89bf implements a layered security framework to protect personal data against unauthorised access, loss, disclosure, alteration, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and 89bf servers is encrypted using 256-bit TLS/SSL protocols. The 89bf.io domain enforces HTTPS at all times.
• Encryption at Rest: Sensitive personal data stored in 89bf databases — including financial records and identity documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to 89bf employees and contractors who have a legitimate need to access it in the performance of their role. All staff with data access undergo privacy and security training.
• Two-Factor Authentication: 89bf's internal systems require two-factor authentication for all staff accessing player data. Players are also strongly encouraged to enable 2FA on their own accounts.
• Penetration Testing: 89bf conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in its platform infrastructure.
• Incident Response: 89bf maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, 89bf will notify affected players and relevant authorities in a timely manner.

As a player on the 89bf platform, you hold the following rights in relation to your personal data. These rights are available to all players regardless of their location within Bangladesh. To exercise any of these rights, please contact our data team at [email protected].

89bf will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or numerous, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it. 89bf will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

89bf employs mandatory age verification checks as part of the account registration and KYC process. Any account found to belong to a person under the age of 21 will be suspended immediately, all funds will be returned in accordance with 89bf's responsible gaming procedures, and all personal data associated with the account will be securely deleted to the extent permitted by law.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account on the 89bf platform using your or their details, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

The 89bf platform may from time to time contain references to or integrations with third-party services, including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment processors such as bKash, Nagad, Rocket, and Upay. When you interact with these third-party services — for example, when launching a live casino game hosted by Evolution Gaming or initiating a deposit via bKash — your data may be processed by that third party in accordance with their own privacy policies.

89bf is not responsible for the privacy practices of third-party service providers or game studios. We encourage you to review the privacy policies of any third-party services you interact with through the 89bf platform. Our contractual agreements with these providers require them to handle data responsibly, but 89bf cannot guarantee compliance on their part beyond our contractual controls.

89bf reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — 89bf will notify you by email to your registered address and/or by displaying a prominent notice on the platform prior to the changes taking effect.

Non-material changes, such as clarifications of existing provisions or corrections of typographical errors, may be made without prior notice. The "Last Updated" date at the top of this document and in the Table of Contents will be revised each time a new version is published. We encourage you to review this Policy periodically to stay informed about how 89bf protects your information.

Your continued use of the 89bf platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should stop using the platform and request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 89bf handles your personal data, please contact our dedicated privacy team using the details below. All privacy-related inquiries are handled by a designated data protection officer who will respond promptly and in confidence.

• Privacy Requests & Data Rights: [email protected]
• General Support: [email protected]
• WhatsApp: +880 1700 000000
• Live Chat: Available inside the platform 24/7

For responsible gaming-related data requests — including activation of self-exclusion, deposit limit adjustments, or requests to review your gaming history — please contact our support team via live chat inside the platform or by emailing [email protected]. A responsible gaming specialist will respond within one (1) business day.