90jeli Privacy
Policy

90jeli collects personal data from you in several ways: directly when you provide it during registration or account management; automatically when you use the Platform; and occasionally from third parties such as payment processors and identity verification services. The categories of personal data we collect include:

Identity Data: Your full legal name, date of birth, gender, and copies of identity documents you submit during Know Your Customer (KYC) verification (such as your National Identity Card, passport, or driving licence). This data is collected to confirm that you are who you say you are and that you meet the 18+ age requirement for using 90jeli.

Contact Data: Your registered email address, Bangladesh mobile phone number, and residential address (including city — whether Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or elsewhere). This data is used to communicate with you about your account, process transactions, and send service-related notifications.

Financial Data: Transaction records including deposit amounts, withdrawal requests, payment method identifiers (such as your bKash or Nagad registered number), and bank account details where applicable. Note that 90jeli does not store full card numbers — card payments are processed through PCI-DSS-compliant third-party payment gateways that tokenise your card details.

Technical Data: Your IP address, browser type and version, device type, operating system, time zone setting, screen resolution, and session duration. This data is collected automatically via server logs and cookies each time you access the 90jeli Platform.

Usage Data: Information about how you interact with the Platform, including the games you play, bets placed, betting history, session start and end times, pages visited, and features used. This data is used to personalise your experience, detect unusual activity, and improve our services.

Communications Data: Records of any correspondence you send to 90jeli through the support email, live chat, or any other contact channel. This includes the content of your messages and any attachments you provide.

Data We Do Not Collect: 90jeli does not knowingly collect data from individuals under the age of 18. We do not collect sensitive personal data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, or health information, except where disclosure of a health-related matter is voluntarily made by a player in the context of a responsible gaming request.

90jeli uses your personal data only for legitimate, clearly defined purposes. We process your data under one or more of the following legal bases: performance of a contract (your account agreement with 90jeli), compliance with a legal obligation, pursuit of our legitimate business interests, or — where required — your explicit consent.

Account Management: We use your identity and contact data to create and manage your 90jeli account, verify your eligibility to play, authenticate your login sessions, and communicate important account-related notices such as password reset confirmations, deposit receipts, and withdrawal updates.

Payment Processing: Your financial data is used to process deposits and withdrawal requests, verify that funds are being sent to and received from payment methods registered in your name, and maintain an auditable record of all transactions for your protection and ours.

Identity and Age Verification (KYC): We process your identity documents to confirm that you are aged 18 or above and that your identity matches the details on your registered account. KYC verification may be conducted at registration or at any point during your relationship with 90jeli, particularly before processing a significant withdrawal.

Fraud Prevention and Security: Technical and usage data is analysed to detect patterns consistent with fraudulent activity, money laundering, duplicate accounts, bonus abuse, or unauthorised access attempts. Where suspicious activity is identified, we may suspend the affected account pending investigation and report the matter to relevant authorities where required by law.

Service Improvement and Personalisation: Aggregate usage data helps us understand which games, features, and promotions are most popular with our Bangladesh player base, enabling us to develop and improve the Platform. We may use your individual usage data to personalise your homepage experience — for example, showing recently played games or relevant promotions.

Responsible Gaming Compliance: We monitor gameplay patterns and account activity to identify signs of problem gambling behaviour. Where our responsible gaming systems flag a concern, we may proactively contact you with information about available support tools — including deposit limits, session reminders, and self-exclusion. For more information, visit our Responsible Gaming page.

Marketing Communications: Where you have given explicit consent during registration or through your account settings, we may send you promotional emails or SMS messages about bonuses, new games, and seasonal offers — for example, special promotions during BPL, Eid, or Pohela Boishakh. You may withdraw consent and unsubscribe at any time by contacting [email protected] or updating your communication preferences in your account settings.

Legal and Regulatory Compliance: We are required by law to retain certain data — particularly financial transaction records — for defined periods to support anti-money laundering (AML) obligations and to cooperate with lawful requests from law enforcement or regulatory authorities.

90jeli does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to deliver our services effectively, we share certain categories of data with carefully selected third-party partners who are contractually bound to process it only for the specified purpose and in accordance with applicable data protection standards.

Payment Service Providers: When you make a deposit or request a withdrawal, we share the minimum necessary financial data with your chosen payment provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard — to authorise and complete the transaction. These providers operate under their own privacy policies and security standards.

Identity Verification Partners: To fulfil our KYC obligations, we may share identity documents and personal details with third-party identity verification service providers. These partners process your data solely for the purpose of verifying your identity on our behalf and are prohibited from using it for any other purpose.

Game Technology Providers: Games available on the 90jeli Platform are supplied by independent studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, your player session data (such as your player ID and bet amounts) is transmitted to the relevant provider to run the game. These providers do not receive your full personal profile and are contractually restricted in how they may use session data.

Technology and Infrastructure Partners: We use third-party cloud hosting, content delivery, analytics, and cybersecurity services to operate the Platform. These service providers may process technical data (such as IP addresses and server logs) in the course of providing their services to 90jeli.

Legal and Regulatory Disclosure: 90jeli will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so — for example, in response to a court order, a lawful information request under anti-money laundering legislation, or an investigation into suspected criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers: In the event that 90jeli undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you via your registered email address prior to any such transfer and inform you of any changes to this Privacy Policy that may result.

The 90jeli Platform uses cookies and similar tracking technologies to ensure the website functions correctly, to remember your preferences, and to gather analytical insights that help us improve the Platform. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programmes or transmit viruses; they are simply a data-storage mechanism.

Essential Cookies: These cookies are strictly necessary for the Platform to function. They manage your login session, keep your account authenticated during a browsing session, maintain your game state, and remember your language and display preferences. Without essential cookies, the Platform cannot operate. Because they are strictly necessary, they do not require your consent.

Analytics Cookies: We use anonymised analytics cookies to understand how players navigate the Platform — which pages are most visited, where users typically exit, and how long sessions last. This data is aggregated and cannot be used to identify you individually. Analytics cookies help us prioritise improvements to the 90jeli user experience.

Preference Cookies: These cookies remember choices you have made on the Platform, such as your preferred game category, recent searches, or display settings. They make your experience more convenient by reducing the need to re-enter the same preferences each time you visit.

Security Cookies: Certain cookies support our fraud detection and account security systems. For example, a security cookie may record whether a login was made from a recognised device so that an additional authentication step can be triggered when access is attempted from an unfamiliar location.

Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from logging in and using the Platform. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Opera Mini, or any mobile browser commonly used on Grameenphone, Robi, and Banglalink networks in Bangladesh).

No Third-Party Advertising Cookies: 90jeli does not use third-party advertising networks or retargeting cookies that track your browsing activity across other websites. Any cookies set on the 90jeli domain are first-party and are used solely for the operational and analytical purposes described above.

90jeli retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The table on the right outlines the standard retention periods for each category of personal data. Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with you.

Active Accounts: While your 90jeli account remains open and active, we retain all personal data associated with the account — including identity documents, transaction records, and gameplay history — to provide you with uninterrupted service and to meet our ongoing legal obligations.

Closed Accounts: When an account is closed — whether at your request, as a result of a self-exclusion, or following a breach of our Terms & Conditions — we enter a post-closure retention period. Financial transaction records are retained for a minimum of five (5) years following account closure to satisfy anti-money laundering and financial reporting obligations. Identity verification documents are retained for the same five-year period. General account and gameplay data is retained for two (2) years post-closure and then permanently deleted.

Self-Exclusion Records: If you self-exclude from the 90jeli Platform, your self-exclusion record is retained indefinitely (or for the duration of the exclusion plus a prudent additional period) to prevent the inadvertent re-registration of an excluded player. This is a protective measure in your interest and in compliance with responsible gaming best practices.

Support Communications: Records of support interactions are retained for two (2) years from the date of the last communication in a given case, to allow us to reference prior context if you contact us again and to resolve any late-arising disputes.

Marketing Data: If you have opted in to marketing communications, your marketing preferences and the associated contact data are retained until you withdraw consent or until your account is closed, whichever comes first.

As a player on the 90jeli Platform, you have a number of rights in relation to the personal data we hold about you. These rights are explained below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account username. We will respond within 30 days of receiving a valid request.

Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format where feasible. This is commonly known as a Subject Access Request (SAR).

Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. You can update basic contact details directly through your account settings; for corrections to identity documents, please contact our support team.

Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no overriding legal basis for continued processing. Please note that this right is not absolute — we may be required to retain certain data (particularly financial records) for legal compliance reasons even after an erasure request, and we will explain any such limitation clearly in our response to you.

Right to Restrict Processing: You may ask us to temporarily stop processing your data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a restriction period, we will store your data but will not use it except in limited, legally permitted circumstances.

Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to request that we transmit it directly to another service provider where technically feasible.

Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for fraud prevention purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.

Right to Withdraw Consent: Where processing is based on your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

Protecting the personal data of our players is a technical and organisational priority at 90jeli. We implement a layered security framework combining industry-standard technologies with internal access controls and staff training to minimise the risk of unauthorised access, loss, or misuse of your information.

Encryption in Transit: All data exchanged between your device and the 90jeli Platform is encrypted using TLS (Transport Layer Security) protocol. This means that even if network traffic were intercepted — for example, over a shared WiFi connection in Dhaka or any other location — the data would be unreadable to any third party.

Encryption at Rest: Sensitive personal data stored on our servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption, which is the same standard used by financial institutions worldwide.

Access Controls: Access to personal data within 90jeli's internal systems is restricted on a strict need-to-know basis. Only staff members whose roles require access to personal data are granted the necessary permissions, and all access is logged and audited. Administrative access to production systems requires multi-factor authentication.

Password Security: Account passwords are stored using a one-way cryptographic hashing algorithm — they are never stored in plain text. 90jeli staff cannot read your password. If you forget your password, it must be reset rather than retrieved. We strongly recommend using a unique, complex password for your 90jeli account and enabling any available two-factor authentication options.

Fraud and Intrusion Monitoring: Our security systems continuously monitor Platform activity for signs of intrusion, suspicious login patterns, and unusual account behaviour. Automated alerts trigger immediate investigation by our security team when anomalies are detected.

Third-Party Security Standards: All third-party service providers who process personal data on our behalf are required to demonstrate adequate data security standards as a condition of their engagement with 90jeli. Payment processors handling card data must be PCI-DSS compliant.

Your Responsibilities: Data security is a shared responsibility. You should keep your 90jeli login credentials confidential, log out of your account on shared or public devices, use a strong password, and notify us immediately at [email protected] if you suspect your account has been accessed without your authorisation. 90jeli will never ask you to share your password via email, chat, or any other channel.

Data Breach Procedure: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 90jeli will notify affected players without undue delay and will take immediate remediation steps including, where appropriate, forcing password resets, suspending affected accounts, and engaging external cybersecurity specialists to investigate and contain the breach.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about the way 90jeli handles your personal data, please contact our support team in the first instance. We are committed to resolving privacy concerns promptly and fairly.

Primary Contact: All privacy-related enquiries should be directed to [email protected]. Please include "Privacy" or "Privacy Rights Request" in the subject line so your message is routed to the appropriate team. Include your registered account username or the email address associated with your 90jeli account to help us locate your record efficiently.

Response Times: We aim to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days. For complex requests — for example, a Subject Access Request involving a large volume of data — we may require up to 60 days, and we will inform you of the extension within the initial 30-day window.

Complaints Process: If you are not satisfied with our response to your privacy enquiry, you may escalate your complaint by replying to the original support thread and requesting that your case be reviewed by a senior member of our team. We will complete a secondary review within 15 business days of the escalation request.

Policy Updates: 90jeli reserves the right to update this Privacy Policy at any time. When we make a material change — one that significantly affects how we collect or use your data — we will notify you via your registered email address at least 14 days before the change takes effect. Continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. The current effective date is always displayed in the Hero section at the top of this page.

Governing Language: This Privacy Policy is written in English. In the event of any ambiguity or inconsistency, the English-language version shall be the authoritative text.