890bd Privacy Policy — How We Handle Your Personal Data

890bd ("890bd", "we", "us", "our") operates the online betting and casino platform accessible at 890bd.io. 890bd is committed to protecting the privacy and personal data of all players who register and interact with our platform. This Privacy Policy sets out the principles and practices governing the collection, use, storage, transfer, and deletion of personal data relating to players ("you", "your") based in Bangladesh and elsewhere.

This Privacy Policy should be read alongside the 890bd Terms & Conditions and Responsible Gaming Policy, which are available on the respective pages of this website. Together, these documents form the complete framework governing your relationship with 890bd.

890bd processes personal data for the purposes of operating a legitimate online betting and casino platform. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. Our data handling practices are designed to be transparent, proportionate, and consistent with fair information principles.

890bd collects personal data that is necessary to operate the platform, verify player identity, process transactions, and comply with applicable legal obligations. The categories of personal data we collect are set out below.

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth and age verification information;
• Residential address (street, city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh);
• Bangladeshi National ID (NID) number or passport number provided during KYC;
• Mobile phone number registered with your account;
• Email address associated with your 890bd account.

2.2 Account and Transaction Data

• Username and hashed account credentials;
• Account registration date, login history, and session timestamps (Bangladesh Standard Time, UTC+6);
• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (৳), payment method used (bKash, Nagad, Rocket, Upay, bank transfer), and transaction reference numbers;
• Betting and gaming history, including markets wagered on, stake amounts, odds accepted, and settlement outcomes;
• Bonus and promotion redemption records;
• Account balance history and adjustments.

2.3 KYC and Verification Documents

• Scanned or photographed copies of government-issued identity documents (National ID, passport, driving licence);
• Proof of address documents (utility bills, bank statements dated within three months);
• Selfie or liveness-check images submitted for identity verification;
• Source-of-funds documentation where required for enhanced due diligence.

2.4 Technical and Device Data

• IP address at the time of registration and at each login;
• Device type, operating system, and browser version;
• Mobile device identifiers where applicable;
• Geolocation data derived from IP address (country and region level only — 890bd does not collect precise GPS coordinates);
• Pages visited within the 890bd platform, time on page, and click-path data.

2.5 Communications Data

• Records of your communications with the 890bd support team, including live chat transcripts and email correspondence;
• Voluntary feedback, survey responses, or complaint submissions.

890bd collects personal data through the following channels:

3.1 Directly From You

The majority of the personal data 890bd holds about you is provided directly by you during the account registration process, KYC verification, deposit and withdrawal requests, support interactions, and any voluntary communications you initiate with us (e.g., emailing [email protected] or engaging with live chat).

3.2 Automatically During Platform Use

Technical data — including IP address, device information, session data, and browsing behaviour within the 890bd platform — is collected automatically through server logs, cookies, and similar tracking technologies each time you access the 890bd website. Please refer to Section 8 (Cookies and Tracking) for further detail.

3.3 From Third-Party Service Providers

890bd may receive personal data about you from third-party identity verification providers, payment processors (including mobile financial service operators such as bKash, Nagad, and Rocket), fraud detection services, and game content suppliers where such data sharing is necessary to verify your identity, process a transaction, or investigate a suspected compliance concern.

890bd uses your personal data for the following purposes:

890bd does not use your personal data for automated decision-making that produces significant legal effects without a human review step. Responsible gaming alerts and fraud flags generated by automated systems are always reviewed by a member of the 890bd team before consequential action is taken on your account.

890bd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between 890bd and you as a registered player — including account management, bet settlement, and payment processing;
• Legal obligation: Processing necessary for 890bd to comply with applicable legal requirements, including KYC, AML obligations, and data retention mandates;
• Legitimate interests: Processing carried out to pursue 890bd's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your rights and interests;
• Consent: Processing for direct marketing and personalised promotions, where you have provided explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your account communication preferences.

890bd does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

6.1 Service Providers and Data Processors

890bd engages trusted third-party service providers to support platform operations, including identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), cloud infrastructure providers, fraud detection specialists, and customer support tooling providers. These parties process personal data solely on 890bd's instructions and are contractually bound to maintain appropriate security standards.

6.2 Game Content Suppliers

Game studios whose products are offered on the 890bd platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data for game performance monitoring and regulatory audit purposes. No personally identifiable information is shared with game studios beyond what is strictly necessary.

6.3 Legal and Regulatory Authorities

890bd may disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required by applicable law, or where disclosure is necessary to protect the rights, property, or safety of 890bd, its players, or the general public. Such disclosures are made only to the extent required and are not subject to your prior consent where legally compelled.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 890bd's business, personal data held by 890bd may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being imposed on the acquirer.

890bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following indicative retention periods apply:

Where personal data is no longer required, 890bd will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

890bd uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your browser or device. The types of cookies used by 890bd are described below:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session authentication cookies that keep you logged in during your visit, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing the functionality of the 890bd platform.

8.2 Performance and Analytics Cookies

890bd uses analytics cookies to understand how players navigate and use the platform — including which pages are visited most frequently, where errors occur, and how long sessions last. This data is used in aggregate and anonymised form to improve the platform experience. These cookies do not identify you personally.

8.3 Functionality Cookies

Functionality cookies remember your preferences — such as your language setting, preferred payment method, or display configurations — so you do not need to re-enter them on every visit.

8.4 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling certain cookies may affect the functionality of the 890bd platform, including your ability to log in and access your account. Instructions for managing cookies in common browsers are available via each browser's help documentation.

890bd implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and the 890bd platform;
• Encryption of sensitive data at rest, including KYC documents and payment credentials;
• Role-based access controls ensuring that 890bd staff can only access personal data that is relevant to their specific job function;
• Multi-factor authentication requirements for all internal 890bd administrative systems;
• Regular security assessments, penetration testing, and vulnerability scanning of the 890bd infrastructure;
• Incident response procedures that include notification to affected players in the event of a confirmed data breach that poses a risk to their rights.

Whilst 890bd takes the protection of your data seriously, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and should never share your password or one-time passcode (OTP) with any person, including any person claiming to be an 890bd support representative.

As a player whose personal data is processed by 890bd, you have the following rights in relation to that data. To exercise any of these rights, please contact 890bd at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You may request a copy of the personal data 890bd holds about you, along with information about how and why it is being processed;
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete;
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to legal retention obligations — data that must be retained for AML or other compliance purposes cannot be deleted at your request until the applicable retention period has elapsed;
• Right to restriction of processing: You may request that 890bd restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to a particular processing activity;
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal;
• Right to object: You may object to processing based on legitimate interests, and to processing for direct marketing purposes at any time.

890bd will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by a further 60 days, with notification provided to you within the initial 30-day window.

The 890bd platform is strictly intended for adults aged 21 years and above. 890bd does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts. If 890bd becomes aware that personal data has been collected from a person under the minimum age, the relevant account will be immediately closed, all associated data will be deleted to the extent permitted by applicable law, and any balance will be returned to the funding source after identity verification of the appropriate guardian or parent.

If you believe that a minor has registered an account on the 890bd platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The 890bd platform may contain references to or integrations with third-party services, including game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment service providers (bKash, Nagad, Rocket, Upay). When you interact with those third-party services — for example, when launching a game or initiating a mobile money transfer — your interaction is governed by the privacy policy of that third party, not this 890bd Privacy Policy.

890bd is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy notices of any third-party services you use in connection with the 890bd platform. 890bd selects its third-party partners carefully and requires them to maintain data protection standards consistent with our own by contract.

890bd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, the "Last Updated" date at the top of this page will be revised and, where appropriate, registered players will be notified via email or an in-platform notification.

Your continued use of the 890bd platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update to this Privacy Policy, you should cease using the platform and contact [email protected] to arrange closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 890bd processes your personal data, please contact the 890bd Privacy team using the details below. All privacy-related communications should be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Live Chat: Available 24/7 within your logged-in 890bd account dashboard
• Response Time: Within 30 days for data rights requests; within 24 hours for general privacy queries
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

890bd does not conduct privacy-related communications via telephone. Any person claiming to contact you by phone on behalf of 890bd regarding your personal data should be treated with suspicion — please report such contacts to [email protected] immediately.