90jil Privacy Policy — How We Handle Your Personal Data

90jil uses the personal data we collect for the following purposes. We will only use your data where we have a valid legal basis for doing so, as described in Section 3 of this Policy.

• To create, maintain, and manage your 90jil player account, including processing your deposits and withdrawals via bKash, Nagad, Rocket, and partner banks.
• To verify your identity and age (21+) in compliance with our responsible gaming obligations and fraud prevention requirements.
• To provide customer support and respond to your enquiries, complaints, and account-related requests within our target two-hour response window.
• To send you transactional communications such as deposit confirmations, withdrawal status updates, and security alerts relating to your account.
• To send you marketing communications about bonuses, promotions, and new features — where you have opted in to receive such communications, or where we are otherwise lawfully permitted to do so.
• To detect, investigate, and prevent fraud, money laundering, collusion, underage gambling, and any other prohibited conduct as set out in our Terms and Conditions.

We do not use your personal data for automated decision-making that produces significant legal effects without human review. Any account restriction or suspension arising from our fraud detection systems is reviewed by a member of the 90jil compliance team before being made permanent.

90jil does not sell your personal data to any third party under any circumstances. We may share your personal data with the following categories of third parties only where strictly necessary:

• Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Dutch-Bangla Bank, Upay) — to execute your deposit and withdrawal transactions.
• Game software providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) — to the minimum extent necessary to deliver game sessions and resolve disputes.
• Identity verification and KYC service providers — to verify your age, identity, and to screen against sanctions lists and fraud databases.
• Law enforcement, regulatory bodies, or courts — where we are legally required to disclose your data in response to a lawful request, court order, or to protect the rights, property, or safety of 90jil, our players, or the public.

Any third party that receives your personal data from 90jil is contractually required to handle it in a manner consistent with this Policy and to use it only for the specific purpose for which it was shared. We do not allow third-party partners to use your data for their own marketing purposes without your explicit consent.

90jil takes the security of your personal data seriously. We implement industry-standard technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL encryption for all data transmitted between your device and our servers, secure hashed storage of passwords, two-factor authentication options for account access, and regular security reviews of our platform infrastructure.

While 90jil applies robust security practices, no platform can guarantee absolute security over the internet. You also have a role to play in protecting your account: use a strong, unique password that you do not share with any other service; never share your login credentials with another person; and notify us immediately at [email protected] if you suspect unauthorised access to your account. In the event of a data breach that is likely to affect your rights or freedoms, we will notify affected players promptly in accordance with our data breach response procedures.

90jil retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Specifically: account data is retained for the duration of your account and for a minimum of five years after account closure, to satisfy our anti-money laundering record-keeping obligations; transaction records are retained for a minimum of five years; communication records (support tickets, emails) are retained for two years; and anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

When your data is no longer needed for its original purpose and there is no legal obligation requiring its continued storage, 90jil will securely delete or anonymise it. Players who wish to understand what data is held about them at any time may submit a data access request to [email protected].

90jil reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by publishing a prominent notice on the platform or by sending a communication to your registered mobile number or email address.

Your continued use of the 90jil platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you disagree with any material change, you are entitled to close your account and request deletion of your personal data, subject to our legal retention obligations described in Section 8 above.