089bd Privacy Policy —
How We Protect Your Personal Data

Introduction

089bd ("we", "us", "our") is committed to protecting the personal data of every individual who accesses or uses the 089bd platform at 089bd.io. This Privacy Policy sets out, in formal and transparent terms, how we handle personal information belonging to registered players, prospective users, and visitors to our platform.

This policy applies to all data processing activities conducted by 089bd in connection with the provision of our online sports betting, live casino, slots, and gaming services primarily directed at players located in Bangladesh. It covers data collected via the 089bd website, mobile-optimised interfaces, customer support channels, and any associated APIs or integrations.

This Privacy Policy should be read alongside the 089bd Terms & Conditions and Responsible Gaming Policy, all of which are available on the platform and collectively form the agreement between 089bd and its players. In the event of any conflict between this policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.

Data Controller

For the purposes of data protection law, 089bd is the data controller in respect of personal data collected from players and users of the 089bd platform. As data controller, 089bd determines the purposes and means of processing personal data and is accountable for ensuring that such processing is conducted lawfully, fairly, and transparently.

All data protection enquiries, access requests, correction requests, and erasure requests should be directed to the 089bd support team via the contact details provided in Section 14 of this policy. We aim to acknowledge all formal data-related requests within five (5) business days and to respond substantively within thirty (30) calendar days of verified receipt.

Personal Data We Collect

089bd collects personal data from players through several channels, including direct account registration, ongoing platform usage, customer support interactions, and automated technical systems. The categories of personal data we collect are detailed in the table below.

3.1 Special Category Data

089bd does not intentionally collect special category data (sometimes called sensitive personal data), which includes racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation. If you voluntarily disclose such information during support interactions, it will be handled with the highest level of care and will not be processed for any purpose beyond resolving your immediate support query.

3.2 Data from Third Parties

In some instances, 089bd may receive personal data about you from third parties, including identity verification agencies (for KYC/AML checks), payment processors confirming transaction outcomes, fraud detection services, and analytics partners providing aggregated demographic insights. Data received from third parties is subject to the same protections as data collected directly from you.

How We Use Your Personal Data

089bd uses personal data only for specific, defined purposes. For each purpose, we rely on a lawful basis as required by applicable data protection principles. The table below summarises our primary processing purposes and the legal basis for each.

089bd does not use your personal data for any purpose that is incompatible with those listed above. Where we wish to use your data for a new purpose not covered by this policy, we will provide you with a separate notice and, where required, seek your consent before proceeding.

Data Sharing & Third-Party Disclosure

5.1 089bd does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared externally only in the specific circumstances described in this section.

5.2 Service Providers

We share personal data with carefully selected service providers who process data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — for processing deposits and withdrawals
• KYC/AML verification providers: Third-party identity verification agencies used to authenticate player identity documents and screen against sanctions lists
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive session tokens and minimum player identifiers necessary to deliver game content
• Fraud detection services: Providers who analyse transaction patterns and device fingerprints to identify suspicious activity
• Analytics providers: Platforms used to analyse aggregated, anonymised platform usage data to improve user experience
• Customer support tools: Live chat and helpdesk software providers used to manage support interactions

All service providers engaged by 089bd are required to process personal data strictly in accordance with our instructions, maintain appropriate technical and organisational security measures, and refrain from using player data for their own independent purposes.

5.3 Legal and Regulatory Disclosure

089bd may be required to disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the minimum data necessary to comply with the specific legal requirement.

5.4 Business Transfers

In the event of a merger, acquisition, business restructuring, or sale of all or part of 089bd's assets, personal data held by 089bd may be transferred to the relevant successor entity. Affected players will be notified of any such transfer and the privacy implications before data is transferred.

5.5 Consent-Based Sharing

Outside the categories above, 089bd will share your personal data with any other party only with your explicit prior consent. You may withdraw such consent at any time without affecting the lawfulness of sharing that occurred before the withdrawal.

Cookies & Tracking Technologies

6.1 089bd uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) on the 089bd platform to deliver and improve our services, maintain session continuity, and collect analytical data about platform usage.

6.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the platform, including maintaining your login session, preserving your game state, and processing transactions. These cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players interact with the platform — including pages visited, features used, and error logs — to help us improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so you do not need to reconfigure them on each visit.
• Marketing Cookies: Used only where you have consented to personalised communications. These track your interests and activity to tailor promotional content to your profile. Marketing cookies can be disabled via your account settings at any time.

6.3 Managing Cookies

You may control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use core platform features such as logging in, placing bets, and processing transactions. Instructions for managing cookies are available in your browser's help documentation.

Data Retention

7.1 089bd retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

7.2 Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with our data disposal procedures. Anonymised data derived from your account activity may be retained indefinitely for aggregated statistical and analytical purposes.

7.3 Where you request account closure, we will begin the deletion process for non-legally-required data within 30 days of account closure confirmation. Data subject to mandatory retention periods will be retained for those periods and then deleted in the ordinary course.

Data Security

8.1 089bd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes, but is not limited to, the following measures:

• Encryption in Transit: All data transmitted between your device and 089bd servers is encrypted using TLS 1.3 with strong cipher suites. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data stored on 089bd infrastructure, including identity documents and payment references, is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to player personal data is restricted to authorised personnel only, on a role-based, need-to-know basis. All internal access events are logged and subject to periodic audit.
• Password Security: Player passwords are stored as salted cryptographic hashes. 089bd staff cannot retrieve your password in plain text under any circumstances.
• Intrusion Detection: 089bd operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Penetration Testing: The 089bd platform undergoes regular security assessments and penetration testing by qualified independent security professionals.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 089bd will notify affected players without undue delay and take immediate remedial action.

8.2 While 089bd takes all reasonable measures to protect your personal data, no system is entirely immune from security threats. You are responsible for maintaining the confidentiality of your 089bd account credentials. You must notify us immediately at [email protected] if you suspect your account has been accessed without authorisation.

Your Data Rights

9.1 As a player on the 089bd platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with sufficient information to verify your identity and specify your request clearly.

• Right of Access: You have the right to request a copy of the personal data 089bd holds about you, along with information about how it is being used. We will provide this in a commonly used, machine-readable format within 30 days of verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For some data fields (such as name and date of birth), supporting documentation may be required.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to our legal retention obligations, as described in Section 7.
• Right to Restriction of Processing: In certain circumstances (such as while we are verifying the accuracy of data you have disputed), you may request that we restrict processing of your personal data to storage only.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format, or transfer it directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests. You may object to direct marketing at any time, and we will act on that objection immediately.
• Rights Related to Automated Decision-Making: Where 089bd makes decisions about you solely through automated means that produce legal or similarly significant effects, you have the right to request human review of those decisions.

9.2 089bd will not charge a fee for handling a data rights request unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. We will inform you of any fee before processing the request.

Children's Privacy

10.1 The 089bd platform is strictly for adults aged 21 years and older. 089bd does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the platform or submit any personal information to us.

10.2 If 089bd becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that their child may have registered on 089bd should contact us immediately at [email protected] so that we can take prompt action.

10.3 Age verification is a mandatory step in the 089bd account lifecycle. 089bd may request documentary proof of age at any point and will suspend or terminate any account where the player cannot demonstrate that they meet the 21+ age requirement.

Third-Party Links

11.1 The 089bd platform may contain references to third-party services, payment providers, or game studios. Where such references include navigable links (for example, to payment gateway interfaces operated by bKash, Nagad, Rocket, or Upay), please be aware that those external platforms operate under their own privacy policies and data practices, which are entirely independent of this Privacy Policy.

11.2 089bd does not control, and accepts no responsibility for, the privacy practices, data collection, or content of any third-party platform you may access in connection with using our payment or gaming services. We strongly recommend that you review the privacy policy of any third-party service before providing them with your personal data.

11.3 The inclusion of a reference to a third-party service provider within the 089bd platform does not constitute an endorsement of that provider's privacy or data security practices. If you have concerns about how a third-party processor handles your data, please contact that provider directly.

Marketing Communications

12.1 089bd will only send you direct marketing communications — including promotional emails, SMS notifications, and personalised in-platform offers — where you have explicitly opted in to receive such communications at the time of registration or through your account settings panel.

12.2 Each marketing communication sent by 089bd will include a clear and accessible mechanism for you to withdraw your consent and unsubscribe from future communications. Alternatively, you may update your marketing preferences at any time by logging in to your 089bd account and navigating to the Notifications section of your account settings.

12.3 Withdrawing consent for marketing communications will not affect your ability to use any 089bd service, and it will not affect the processing of personal data for non-marketing purposes such as account management, transaction processing, and legal compliance.

12.4 Please allow up to five (5) business days for a marketing opt-out request to take full effect across all communication channels. You may continue to receive communications already scheduled at the time of your opt-out request during this processing window.

12.5 089bd does not share your contact details with any third-party marketers for the purpose of direct marketing, and no third party is authorised to contact you on our behalf for marketing purposes without your separate, explicit consent.

Updates to This Privacy Policy

13.1 089bd reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or the services we provide. The most current version of this policy will always be available at 089bd.io/privacy-policy, with the revision date updated at the top of the document.

13.2 Where an amendment to this Privacy Policy is material — meaning it significantly affects the way we collect, use, or share your personal data, or meaningfully diminishes your rights under this policy — 089bd will provide reasonable advance notice of the change via a platform notification banner or registered email address at least seven (7) days before the revised policy takes effect.

13.3 Non-material amendments, such as typographical corrections, structural reformatting, or clarifications that do not alter the substance of any clause, take effect immediately upon publication and do not require prior notice.

13.4 Your continued use of the 089bd platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update to this policy, you must cease using the platform and contact us to initiate account closure before the effective date of the revision.

13.5 We recommend that you review this Privacy Policy periodically, particularly before providing any additional personal data to the platform, to remain informed about how your information is being used and protected.

Contact Us

14.1 If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way 089bd handles your personal data, please contact our support team using the details below. All privacy-related communications should be submitted in English to ensure they are handled efficiently by the appropriate team.

Email: [email protected]

14.2 When contacting us regarding a data rights request, please include your registered account username or email address and a clear description of the request or concern. We may ask you to provide additional information to verify your identity before processing your request.

14.3 089bd aims to acknowledge all data-related enquiries within five (5) business days and to resolve them substantively within thirty (30) calendar days of verified receipt. Complex requests may require additional time, in which case we will inform you of the expected timeline and reason for the delay.

14.4 For further guidance on player protections, responsible gaming tools, and self-exclusion options, please visit our Responsible Gaming page. For answers to common questions about account management, deposits, and withdrawals, please refer to our FAQ page.