Data & Privacy
89cd Privacy Policy
At 89cd, protecting the personal data of every player in Bangladesh is a core obligation — not an afterthought. This Privacy Policy sets out exactly what data we collect, why we collect it, how we use and safeguard it, and what rights you hold over your own information. Please read it in full before using the platform.
At a Glance
How 89cd Handles Your Privacy
The following six cards summarise the most important privacy commitments 89cd makes to every player. The full detail for each commitment is set out in the numbered sections below. Where there is any conflict between a card summary and the full section text, the full section text governs.
89cd collects personal data that is strictly necessary to operate the platform, verify player identity, process payments via bKash and Nagad, and comply with applicable legal obligations. We do not collect data speculatively or sell personal profiles to third-party advertisers.
All data transmitted between your device and the 89cd platform is protected by 256-bit SSL/TLS encryption. Sensitive data stored on our servers — including payment details and identity documents — is encrypted at rest using industry-standard protocols. Access is restricted to authorised personnel only.
89cd does not sell, rent, or lease your personal data to any third party for commercial gain. Where data is shared with third parties — such as payment processors and game software providers — it is shared only to the extent necessary to deliver the service and under strict contractual data protection obligations.
You have the right to access, correct, and — in certain circumstances — request deletion of the personal data 89cd holds about you. You can also request a copy of your data in a portable format. These rights are exercised by contacting our support team, which processes data requests within 30 days of receipt.
89cd uses essential cookies to keep you logged in and maintain platform functionality. We also use analytical cookies to understand how players navigate the platform so we can improve the experience. No third-party advertising cookies are placed on your device without your knowledge. You can manage cookie preferences in your browser settings.
89cd retains personal data only for as long as it is needed to deliver our services or fulfil legal obligations. Account data is retained for a minimum of five years following account closure to comply with anti-money laundering and financial record-keeping requirements. After this period, data is securely deleted or anonymised.
Section 1
Data We Collect
When you register and use the 89cd platform, we collect personal data in several ways — directly from you, automatically through your use of the platform, and occasionally from third-party verification services. The categories of data we collect are set out below.
Data You Provide Directly
When you create an account or interact with the 89cd platform, you provide us with information including:
- Identity data: full legal name, date of birth, gender, and nationality
- Contact data: residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), mobile number, and email address
- Verification documents: scanned copies or photographs of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate
- Financial data: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), transaction amounts, and withdrawal details
- Communications data: the content of messages you send to our support team via live chat or email
Data Collected Automatically
When you access the 89cd platform, we automatically collect certain technical and behavioural data, including:
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings
- Usage data: pages visited, games played, session duration, bets placed, wagering amounts, deposit and withdrawal history, and click-path through the platform
- Log data: server access logs, error logs, and security event logs
- Cookie and tracking data: see the Cookies & Tracking section below for full details
Data from Third Parties
In certain circumstances, 89cd may receive personal data about you from third-party sources, including identity verification service providers, payment processing partners, and fraud prevention databases. Data received from these sources is used solely for the purposes described in this Privacy Policy and is subject to the same protections as data you provide directly.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity | Full name, date of birth, NID number | Registration form, KYC verification |
| Contact | Mobile number, email, home address | Registration form, account settings |
| Financial | bKash / Nagad number, transaction history | Deposit and withdrawal flows |
| Technical | IP address, browser type, device model | Automatic — platform access logs |
| Behavioural | Games played, session length, bet amounts | Automatic — platform analytics |
| Verification | ID document scans, selfie verification | KYC process, third-party providers |
Section 2
How We Use Your Data
89cd processes personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those listed here. Our primary purposes for processing personal data are as follows:
Service Delivery
We use your data to create and manage your 89cd account, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, provide access to casino games and sports betting features, and deliver customer support. Without this processing, the platform cannot function for you as an individual player.
Identity Verification and Compliance
89cd is committed to operating a safe and compliant platform. We use your identity and financial data to verify that you meet the 18+ age requirement, confirm that you are who you say you are (Know Your Customer — KYC), screen against sanctions and politically exposed persons (PEP) lists, and comply with anti-money laundering (AML) obligations. This processing is mandatory — 89cd cannot provide services to players who have not completed the required verification steps.
Platform Security and Fraud Prevention
We analyse technical and behavioural data to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, collusion between players, and other forms of conduct that violate our Terms & Conditions. Where fraud is detected, we may share relevant data with law enforcement authorities.
Responsible Gaming
89cd uses behavioural data — including session frequency, bet amounts, deposit patterns, and self-exclusion history — to identify players who may be exhibiting signs of problem gambling. Where such signs are present, we may proactively apply responsible gaming interventions, including mandatory cooling-off periods or direct outreach from our support team. This processing is carried out in the interests of player welfare.
Platform Improvement and Analytics
Aggregated, anonymised usage data is analysed to understand how players interact with the 89cd platform, which games are most popular, where technical issues occur, and how the overall experience can be improved. This analysis does not involve processing data in a way that identifies individual players.
Marketing Communications
With your consent, 89cd may send you promotional communications about new games, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates. You may withdraw consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect our ability to send you transactional communications (such as deposit confirmations and withdrawal notifications), which are sent as part of the service.
Your consent matters. Where our processing of your personal data is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Section 3
Data Sharing & Disclosure
89cd does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processing Partners
To process deposits and withdrawals, 89cd shares the minimum necessary financial data with our payment partners — including bKash, Nagad, Rocket, Upay, and international card processors. These partners operate under strict contractual data protection obligations and are permitted to use your data solely to process the specific transaction.
Game Software Providers
Games on the 89cd platform are supplied by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, limited session data (such as a pseudonymous player identifier and bet amounts) is transmitted to the relevant provider to operate the game. Providers are not permitted to use this data for any purpose beyond game delivery.
Identity Verification Services
To meet KYC and AML obligations, 89cd works with third-party identity verification providers. Your identity documents and personal details may be transmitted to these providers for verification purposes. All such providers are contractually required to maintain the confidentiality and security of your data.
Legal and Regulatory Disclosure
89cd may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or in response to a lawful request. We will notify you of any such disclosure to the extent permitted by law.
Business Transfers
In the event that 89cd undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the successor entity before the transfer takes effect.
Important: 89cd does not share personal data with third-party advertisers, data brokers, or marketing networks. Any third party that receives your data under the arrangements described above is bound by contractual obligations at least as protective as those set out in this Privacy Policy.
Section 5
Data Security
89cd takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, and destruction.
Technical Measures
- 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
- Encryption at rest for all sensitive data stored on 89cd infrastructure, including identity documents and payment credentials
- Multi-factor authentication options available for player accounts and mandatory for all 89cd staff with access to personal data systems
- Firewall and intrusion detection systems monitoring for unauthorised access attempts 24 hours a day, seven days a week
- Regular security audits and penetration testing conducted by independent third-party security professionals
Organisational Measures
- Access to personal data is restricted on a strict need-to-know basis — only staff members whose job function requires access to specific categories of data are granted that access
- All 89cd staff who handle personal data receive regular data protection and security training
- Third-party vendors with access to personal data are vetted and required to maintain security standards equivalent to or exceeding 89cd's own standards under contractual data processing agreements
Data Breach Response
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 89cd will notify affected players without undue delay and, in any event, within 72 hours of becoming aware of the breach. Notification will be sent to the email address registered on your account and will include a description of the nature of the breach, the data affected, and the steps 89cd is taking to address it.
Your role in security: While 89cd takes extensive technical measures to protect your account, you play an important part too. Use a strong, unique password for your 89cd account, enable any available multi-factor authentication, and never share your login credentials with another person. If you suspect your account has been compromised, contact our support team immediately.
Section 6
Data Retention
89cd retains personal data for as long as it is needed to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of data we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML compliance, legal obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| KYC / verification documents | Duration of account + 5 years after closure | Regulatory and AML obligations |
| Support communications | 3 years from last contact | Dispute resolution, service improvement |
| Platform usage and behavioural data | 24 months from collection | Analytics, responsible gaming monitoring |
| Marketing consent records | Until consent withdrawn + 1 year | Evidence of consent basis |
After the applicable retention period has expired, personal data is either securely and permanently deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Where you request deletion of your personal data before the end of the applicable retention period, 89cd will assess whether any legal or regulatory obligation requires us to continue holding the data. Where no such obligation exists, we will process your deletion request promptly. Where a legal obligation does apply, we will inform you of the minimum period for which we must retain the data and delete it as soon as that obligation is fulfilled.
Section 7
Your Privacy Rights
As a player on the 89cd platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our support team at [email protected]. We will respond to all data rights requests within thirty (30) calendar days of receipt.
Right of Access
You have the right to request a copy of the personal data 89cd holds about you, together with information about how and why it is being processed. This is sometimes called a Subject Access Request (SAR). We will provide your data in a commonly used, machine-readable format where technically feasible.
Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine account details such as your email address or mobile number, you can make corrections directly in your account settings. For identity data, contact our support team to initiate a verified correction process.
Right to Erasure
In certain circumstances, you have the right to request that 89cd delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other legal basis for processing, or where the data has been unlawfully processed. This right does not apply where retention is required by law — for example, financial transaction records subject to AML retention obligations.
Right to Restriction of Processing
You have the right to request that 89cd restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while 89cd is investigating, or where you object to processing and 89cd is assessing whether legitimate grounds override your objection.
Right to Data Portability
Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of the personal data you have provided to 89cd in a structured, commonly used, machine-readable format, and to transmit that data to another data controller without hindrance from 89cd.
Right to Object
You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, 89cd will cease all marketing processing immediately. You also have the right to object to processing based on legitimate interests — 89cd will then assess whether its legitimate interests are overridden by your interests, rights, and freedoms.
How to exercise your rights: Email [email protected] with the subject line "Data Rights Request" and specify which right(s) you wish to exercise. We may need to verify your identity before processing the request. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.
Section 8
Policy Updates & Contact
89cd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email to the address associated with their account and by posting a prominent notice on the platform for a period of at least 30 days before the changes take effect.
The version of the Privacy Policy in force at any given time is the version currently published at https://89cd.app/privacy-policy. The effective date at the top of this page indicates when this version came into force. We encourage you to review the Privacy Policy periodically to stay informed about how 89cd protects your personal data.
Contact for Privacy Matters
If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how 89cd handles your personal data, please contact our support team:
- Email: [email protected]
- Live Chat: Available 24/7 inside your account dashboard
- Response time: All privacy-related enquiries are acknowledged within 2 business days and resolved within 30 calendar days
- Support hours: 00:00–24:00 BST (UTC+6), every day
If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint through any applicable dispute resolution mechanism available in your jurisdiction.
Your Privacy is Protected at 89cd
Now that you understand how we safeguard your data, explore everything 89cd has to offer — cricket betting, live casino games, slots, and more, all backed by 256-bit SSL encryption and instant bKash and Nagad payments. 18+ only.