89dd Privacy Policy

89dd ("we", "us", "our", "the Platform") is an online betting and gaming platform operated for players in Bangladesh. The platform provides sports betting (with a primary focus on cricket including the BPL, IPL, T20 World Cup, and bilateral series involving the Bangladesh Tigers), live casino games, slot games, and crash-style games including Plants vs Dino and Monster Fight.

For the purposes of this Privacy Policy, 89dd acts as the data controller in respect of personal data collected from players. This means 89dd determines the purposes and means by which your personal data is processed. Where 89dd engages third-party suppliers to process data on its behalf, those parties act as data processors and are subject to contractual obligations that restrict them to processing your data only in accordance with 89dd's documented instructions.

The primary contact for all data privacy matters is the 89dd support team, reachable at [email protected]. Correspondence regarding data privacy should be clearly marked "Privacy Request" in the subject line to ensure prompt routing to the appropriate team.

89dd collects the following categories of personal data from players:

89dd does not collect or process special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless a specific legal obligation requires it. Where age verification requires examination of a government-issued identity document, the document image is processed solely for the purpose of confirming age and identity and is not retained beyond the period necessary for that verification.

89dd collects personal data through the following channels:

• Account registration: When you create a 89dd account, you provide identity, contact, and initial financial data directly through the registration form.
• Identity verification (KYC): When you upload a copy of your NID, passport, or other identification document to complete the KYC process.
• Deposits and withdrawals: When you conduct a transaction via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or any other supported payment method, financial data associated with that transaction is recorded.
• Platform use: Technical and behavioural data is collected automatically via server logs and first-party analytics tools as you navigate and interact with the 89dd platform.
• Customer support interactions: When you contact 89dd support by email or live chat, the content of that communication is recorded and linked to your account.
• Cookies and similar technologies: As described in Section 7, 89dd uses cookies and browser storage technologies to support platform functionality and to analyse usage patterns.

89dd does not acquire personal data about you from data brokers, social media platforms, or third-party marketing databases.

89dd uses your personal data for the following purposes:

• Account management: Creating, maintaining, and closing your 89dd player account; processing logins and securing access to your account.
• Transaction processing: Executing deposits, withdrawals, and bonus credits accurately and in a timely manner via your chosen payment method.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years before granting full account access.
• Fraud and money-laundering prevention: Monitoring transaction patterns, IP addresses, and betting behaviour to detect and investigate suspected fraud, collusion, match-fixing, money laundering, or other prohibited activities. Where required, suspicious activity reports may be filed with relevant authorities.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing responsible gaming assistance.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, optimise platform performance, and develop new features.
• Marketing communications: Sending you promotional offers, bonus announcements, and platform updates by email or SMS — only where you have provided consent as described in Section 12.
• Responsible gaming compliance: Monitoring betting patterns to identify signs of problem gambling behaviour and, where appropriate, proactively applying responsible gaming tools in accordance with our Responsible Gaming Policy.
• Legal compliance: Meeting record-keeping, reporting, and audit obligations imposed by applicable law.

89dd processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 89dd — specifically, to operate your account, process bets and payments, and provide customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements, identity verification obligations, and tax record-keeping duties.
• Legitimate interests: Processing carried out in pursuit of 89dd's legitimate business interests, including fraud prevention, platform security, abuse detection, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

89dd shares personal data with third parties only in the following circumstances:

• Payment processors: Your financial data is shared with bKash, Nagad, Rocket, Upay, and banking partners solely to execute deposit and withdrawal transactions.
• Identity verification providers: Identity documents submitted for KYC are processed by 89dd's contracted identity verification service provider. This provider is bound by strict data processing agreements and may not use your data for any independent purpose.
• Game content suppliers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive your account identifier and game session data to facilitate real-time gameplay. These suppliers do not receive your full identity or financial data.
• Fraud detection and security services: Technical data including IP address and device fingerprint may be shared with anti-fraud and cybersecurity service providers to protect the platform and its players.
• Legal and regulatory authorities: Where required by law, regulation, court order, or governmental authority, 89dd will disclose personal data to the relevant body. 89dd will, where legally permitted, notify you before making such a disclosure.

89dd uses cookies and similar browser-based storage technologies to support the operation and improvement of the platform. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account balance display, and ensure secure authentication. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language and display settings — to provide a more personalised experience on return visits.
• Analytics cookies: 89dd uses first-party analytics cookies to understand how players navigate the platform, which pages are most frequently visited, and where technical errors occur. This data is processed in aggregated form and does not identify you personally.

89dd does not deploy third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into or using the platform.

89dd retains your personal data for the following periods:

• Active account data: Retained for the lifetime of your account plus a minimum of five years following account closure, in order to satisfy anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five years following the date of the transaction, or longer if required by applicable law.
• Identity verification documents: Retained for the period required to satisfy KYC and regulatory obligations, and for no longer than seven years following account closure.
• Support communications: Retained for three years from the date of the last communication, or longer if the communication relates to an unresolved dispute or complaint.
• Technical and behavioural data: Retained in identifiable form for up to 24 months; thereafter anonymised and retained indefinitely for aggregated analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for three years following withdrawal, as evidence of the consent given.

Following the expiry of the applicable retention period, 89dd will securely delete or irreversibly anonymise your personal data.

89dd implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 89dd servers;
• Encryption at rest for all sensitive data stored on 89dd infrastructure, including identity documents and payment details;
• Role-based access controls ensuring that 89dd staff can access personal data only to the extent required by their specific job function;
• Regular security assessments and penetration testing of the platform infrastructure;
• Multi-factor authentication for all 89dd staff accessing production systems that hold player data;
• Secure password hashing using industry-standard algorithms — 89dd does not store passwords in plain text;
• Automated intrusion detection and anomaly-monitoring systems that alert the security team to suspicious access patterns in real time.

As a player on the 89dd platform, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data 89dd holds about you. We will respond within 30 calendar days of receiving a verified request.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. Basic account details (name, contact number) can be updated directly in your account settings; corrections to identity or financial data require support team assistance.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to legal retention obligations — data that must be retained under anti-money-laundering or other regulatory requirements cannot be erased during the mandatory retention period.
• Right to restriction: You may request that 89dd temporarily restrict the processing of your data while a correction request or objection is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to 89dd in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, and to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by following the unsubscribe instructions in any marketing email or by contacting [email protected].

To exercise any of the rights listed above, contact 89dd at [email protected] with the subject line "Data Rights Request" and describe the right you wish to exercise. We will acknowledge receipt within three business days and provide a full response within 30 calendar days. We may need to verify your identity before processing the request.

The 89dd platform is strictly for adults aged 21 and over. 89dd does not knowingly collect personal data from individuals under the age of 21. If 89dd discovers that an account has been registered by a person under 21, the account will be immediately closed, all data associated with that account will be deleted (subject to any overriding legal retention obligations), and any balance held in the account will be returned to the payment source used for deposits.

If you believe that a minor has registered a 89dd account, please notify us immediately at [email protected] so that corrective action can be taken without delay.

89dd may send you promotional emails and SMS messages about bonuses, new games, seasonal offers (such as those tied to Eid, Pohela Boishakh, or the BPL season), and platform updates — but only where you have explicitly opted in to receive such communications during registration or through your account settings.

You may withdraw consent for marketing communications at any time by:

• Clicking the "Unsubscribe" link present in every promotional email 89dd sends you;
• Replying "STOP" to any promotional SMS;
• Updating your communication preferences in the Notifications section of your 89dd account settings; or
• Emailing [email protected] with the subject line "Unsubscribe".

Withdrawal of marketing consent does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts — these are sent on the basis of contractual necessity and cannot be turned off while your account is active.

89dd reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, operational practices, or the services offered on the platform. Where a material change is made, 89dd will post the updated policy on this page and, where practicable, notify registered players by email to their registered address at least 14 days before the change takes effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the 89dd platform after an updated policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with an amendment, you must cease using the platform and may close your account by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 89dd, please contact the support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Use "Privacy Request" for data rights requests, or "Privacy Complaint" for complaints
• Response time: Acknowledgement within 3 Bangladeshi business days; full response within 30 calendar days
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

89dd takes all privacy complaints seriously and will investigate each one thoroughly. If you are not satisfied with 89dd's response to a privacy complaint, you may escalate the matter through any dispute resolution process available under applicable Bangladeshi law.