90ok Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how 90ok ("we", "us", "our") collects, uses, stores, and shares personal information when you access or use the 90ok betting platform available at https://90ok.bar ("the Platform"). It applies to all registered users, visitors, and any other individuals whose personal information we process in connection with the Platform.

By registering an account on 90ok, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, you must not use the 90ok platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and 90ok. Where there is any conflict between this Policy and the Terms & Conditions regarding privacy matters, this Policy shall prevail.

90ok collects personal information through several channels during the course of your use of the Platform. The categories of information we collect are set out below.

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, residential address, email address, and mobile phone number provided when you create your 90ok account.
• Identity Verification (KYC) Documents: Copies of government-issued photo identification (National Identity Card, passport, or driving licence), proof of address documents, and payment method ownership documentation submitted to satisfy our Know Your Customer requirements.
• Financial Information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), card details (where applicable), deposit and withdrawal transaction records, and account balance history.
• Communications: Records of correspondence between you and the 90ok support team, including emails, chat transcripts, and complaint submissions.
• Responsible Gaming Data: Self-imposed deposit limits, session time restrictions, self-exclusion requests, and any information you provide when seeking responsible gaming support.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage Data: Pages visited, games played, bets placed, session duration, navigation paths, features accessed, and search queries made within the Platform.
• Cookies & Similar Technologies: Data collected via cookies, web beacons, pixels, and local storage as described in Section 6 of this Policy.
• Transaction Logs: Timestamps, amounts, payment method references, and status records for all deposit and withdrawal transactions processed through the Platform.

90ok uses the personal information we collect for the following purposes. We process data only where we have a legitimate legal basis to do so, as described in Section 4.

• Account Management: Creating, maintaining, and administering your 90ok account, including authentication, password resets, and account security monitoring.
• Identity Verification: Conducting KYC checks to verify your identity and age (21+) before allowing deposits, withdrawals, and access to certain platform features, in line with our anti-money-laundering obligations.
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, including communicating with payment processors to complete and verify transactions.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Platform Improvement: Analysing usage data, identifying technical issues, testing new features, and improving the overall quality, performance, and security of the 90ok platform.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeovers, money laundering, bet manipulation, and other forms of prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators, enforcing self-imposed limits and self-exclusion requests, and facilitating access to responsible gaming resources.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have expressly opted in to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].
• Legal Compliance: Meeting applicable legal, regulatory, and financial record-keeping obligations, and responding to lawful requests from competent authorities.

90ok processes your personal information on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contract with you — including account creation, transaction processing, KYC verification, and customer support — is carried out because it is necessary to deliver the services you have requested.
• Legitimate Interests: Processing for fraud prevention, platform security, anti-money-laundering monitoring, responsible gaming oversight, and platform improvement is carried out in 90ok's legitimate interests as a betting platform operator, where those interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable financial, anti-money-laundering, and record-keeping obligations is carried out because we are legally required to do so.
• Consent: Processing for marketing communications is carried out on the basis of your explicit consent, given at the time of account registration or at a subsequent point. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

90ok does not sell, rent, or transfer your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processors: We share financial data with payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposits and withdrawals. These providers process data solely to complete your financial transactions and are bound by their own privacy commitments.
• Identity Verification Providers: We share KYC documentation with third-party identity verification services to confirm your identity and age. These providers act as data processors under our instruction and are prohibited from using your data for any other purpose.
• Fraud Prevention & Security Partners: We may share technical data (IP addresses, device identifiers, transaction patterns) with fraud detection services to protect the platform and its users from criminal activity.
• Game Software Providers: Third-party game providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) may receive session data necessary to deliver their game content. These providers do not receive your full personal profile.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required by law, regulation, or a valid legal order.
• Business Transfers: In the event that 90ok undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and of any change in the applicable privacy terms.

All third parties with whom 90ok shares personal data are required to maintain appropriate confidentiality and security measures consistent with the standards described in this Policy.

90ok uses cookies and similar tracking technologies to operate and improve the Platform, remember your preferences, and gather analytical data about usage patterns. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your account authentication state, and enable core security features. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as language settings, display preferences, and responsible gaming settings — to provide a more personalised experience. You may disable these via your browser settings, though some platform features may be affected.
• Analytical Cookies: We use analytical cookies to understand how users interact with the Platform — which pages are visited most, where users drop off, and how features perform. This data is aggregated and anonymised where possible and is used solely to improve the Platform.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts by analysing behavioural patterns during your session.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

90ok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and the 90ok platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using 90ok.
• Encryption at Rest: Sensitive data stored in our systems — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within the 90ok organisation is granted on a strict need-to-know basis. All staff access is authenticated, logged, and periodically audited.
• Intrusion Detection: 90ok employs automated monitoring systems to detect unusual access patterns, potential intrusions, and security anomalies in real time.
• Password Security: Account passwords are stored as salted cryptographic hashes. 90ok staff cannot view your password in plain text. We strongly recommend using a unique, complex password for your 90ok account and enabling two-factor authentication.

While 90ok takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 90ok login credentials. If you suspect that your account has been compromised, contact our support team immediately at [email protected].

90ok retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any overriding legal, regulatory, or financial record-keeping obligations. The following retention periods apply:

• Active Accounts: All personal data associated with an active 90ok account is retained for the full duration of the account's active status.
• Closed Accounts: Following account closure — whether voluntary or due to a Terms & Conditions breach — 90ok retains account records, KYC documents, and transaction history for a minimum of 5 years to satisfy financial record-keeping and anti-money-laundering obligations.
• Marketing Preferences: Marketing consent records are retained for as long as required to demonstrate compliance with consent obligations, typically for 3 years following the withdrawal of consent.
• Support Communications: Customer support correspondence is retained for a minimum of 2 years from the date of the last interaction, to support dispute resolution and service quality review.
• Technical Logs: Server logs and security audit logs are retained for a rolling period of 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

90ok respects your rights in relation to the personal data we hold about you. Depending on applicable data protection principles, you may have the following rights:

• Right of Access: You may request a copy of the personal data 90ok holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to statutory retention requirements cannot be erased until those obligations are satisfied.
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances, for example while a correction request is being verified.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". Include your registered username and a description of your request. 90ok will respond within 30 days of receipt. We may request identity verification before processing your request.

The 90ok platform is strictly intended for adults aged 21 years and above. 90ok does not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and KYC verification is used to confirm the age of all users before enabling deposits and full platform access.

If 90ok becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 90ok platform, please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. 90ok supports responsible platform use and strongly advocates for the protection of minors from exposure to gambling content.

The 90ok platform may contain references to or integrations with third-party services, including game software providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. While we take care in selecting platform partners, 90ok does not control and is not responsible for the privacy practices of third-party services.

This Privacy Policy applies solely to the 90ok platform at https://90ok.bar. If you interact with any third-party service through the platform — including embedded game interfaces — we encourage you to review the privacy policy of that third party independently. 90ok bears no liability for the data practices of external providers.

90ok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this document will be updated whenever a material change is made.

For significant changes — such as new categories of data collection, new sharing arrangements, or changes to your rights — 90ok will provide notice via a prominent announcement on the platform and, where practical, by email to your registered contact address. Your continued use of the 90ok platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically. Archived versions of previous policies are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 90ok processes your personal data, please contact our data support team using the details below. All communications should be submitted in English.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Response Time: Within 30 days for formal data rights requests; within 48 hours for general privacy enquiries
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

Please include your registered 90ok username and a clear description of your enquiry in all correspondence. For data rights requests, we may require identity verification before we can action your request.