bl89 Privacy Policy — How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how bl89 ("bl89", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of users ("you", "your", "Player") who access or use the bl89.pro website, its mobile interface, and all associated services (collectively, the "Platform"). By registering an account on bl89 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

bl89 operates as an online casino and sports betting platform serving the Bangladesh market. As a data controller, bl89 is responsible for ensuring that personal data entrusted to us by players is handled with integrity, used only for the purposes stated in this Policy, and protected against unauthorised access or disclosure. This Policy applies to all personal data collected through the Platform, including data collected during the registration process, KYC verification, financial transactions, customer support interactions, and regular platform usage.

Our Privacy Commitments

These five principles guide how bl89 handles every piece of personal data it receives from players across Bangladesh.

2. Personal Data We Collect

bl89 collects personal data across five categories, depending on how you interact with the Platform. The data collected is the minimum necessary to deliver, secure, and improve the Services.

bl89 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data (other than what may be present in a government-issued ID submitted for KYC), or health data, except where specifically required by applicable law.

3. How We Collect Your Data

bl89 collects personal data through the following channels. In each case, the collection is limited to what is necessary for the purpose identified.

• Directly from you during account registration, KYC submission, deposit or withdrawal initiation, and customer support contact.
• Automatically via server logs, session tracking, and cookies when you access or use the Platform. This includes IP address, device identifiers, and browsing behaviour within bl89.pro.
• From payment processors (bKash, Nagad, Rocket, Dutch-Bangla Bank, etc.) who confirm transaction completion and provide transaction reference data to bl89 for reconciliation purposes.
• From identity verification providers used during the KYC process to confirm the authenticity of documents submitted by players.
• From anti-fraud and AML screening services that cross-reference player data against known risk indicators and compliance watchlists.

4. How We Use Your Personal Data

bl89 uses personal data collected from players for the following purposes. Each use is grounded in one of the legal bases identified in Section 5 of this Policy.

• Account creation and management: registering your account, verifying your identity, and maintaining accurate account records throughout the lifecycle of your bl89 account.
• Financial transaction processing: facilitating deposits via bKash, Nagad, Rocket, and bank transfer; processing withdrawal requests; and maintaining transaction records for regulatory and accounting purposes.
• KYC and compliance: verifying that players meet the 21+ age eligibility requirement, confirming identity to prevent fraud, conducting AML screening, and complying with financial compliance obligations.
• Responsible gaming: monitoring account activity to identify signs of problem gambling behaviour, enabling self-exclusion and limit-setting tools, and contacting players where there is reasonable cause for concern about their wellbeing.
• Customer support: responding to enquiries, resolving disputes, processing complaints, and maintaining records of all support interactions for quality assurance and audit purposes.
• Platform security and fraud prevention: detecting and investigating unauthorised access, identifying fraudulent account activity, enforcing the single-account-per-player policy, and protecting the integrity of the games and betting markets.

bl89 does not use personal data for automated individual decision-making (including profiling) that produces legal or similarly significant effects on players, except where this is strictly necessary for fraud detection or responsible gaming interventions, in which case players may request human review of any automated decision by contacting support.

5. Legal Basis for Processing

bl89 processes personal data only where a lawful basis exists for doing so. The legal bases applicable to our data processing activities are:

• Contractual necessity: processing required to perform the contract between bl89 and the player — including account creation, transaction processing, and game delivery.
• Legal obligation: processing required to comply with applicable financial compliance, anti-money laundering, age verification, and data retention obligations.
• Legitimate interests: processing for fraud detection, platform security, responsible gaming monitoring, and product improvement, where these interests are not overridden by your fundamental privacy rights.
• Consent: where bl89 relies on consent (e.g. for optional marketing communications), you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Personal Data

bl89 does not sell your personal data. We share personal data with third parties only in the following circumstances, and only to the extent necessary for the identified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and is independently responsible for data it holds.
• Game providers: Pragmatic Play, Evolution Gaming, Jili, CQ9, Ezugi, Spribe, and other certified studios receive session data (bet amounts, round IDs, outcomes) necessary to operate and certify game fairness. They do not receive your identity documents or financial account details.
• KYC and compliance partners: identity verification providers and AML screening services receive the minimum identity data required to complete verification and compliance checks on behalf of bl89.
• Legal and regulatory authorities: bl89 may disclose personal data to law enforcement agencies, financial regulators, or other government bodies where required to do so by applicable law, court order, or regulatory directive.

All third parties with whom bl89 shares personal data are required to process that data only for the specified purpose, to maintain appropriate security standards, and to refrain from using bl89 player data for their own marketing or commercial purposes. Where data is transferred outside Bangladesh, bl89 applies appropriate contractual safeguards to protect your data during the transfer.

7. Cookies and Tracking Technologies

bl89.pro uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and analyse aggregate usage patterns. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential to the operation of bl89.pro and cannot be disabled. They maintain your authenticated session, store your language preference, and enable core security features including CSRF protection. No personal data collected by these cookies is used for marketing purposes.

Functional Cookies

Functional cookies remember your preferences (such as your selected game category or most recently used payment method) to provide a more personalised experience on bl89. These cookies do not track your activity across external sites and are retained only for the duration of your account session or up to 30 days, whichever is shorter.

Analytics Cookies

bl89 uses aggregated, anonymised analytics data to understand how players interact with the Platform — for example, which game categories are most accessed, where in the registration flow players drop off, and how long typical sessions last. This data does not identify individual players and is used solely to improve Platform performance and user experience. You may opt out of analytics cookies by contacting support, though doing so may affect certain Platform features.

8. Data Retention

bl89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any mandatory legal retention obligations. The following general retention periods apply: Registration and KYC data is retained for the lifetime of the account plus five (5) years following account closure, in compliance with financial record-keeping requirements. Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction. Customer support records are retained for three (3) years from the date of the interaction. Analytics and usage data in anonymised, aggregated form may be retained indefinitely for product improvement purposes.

When personal data is no longer required and no legal retention obligation applies, bl89 securely deletes or anonymises the data in accordance with its internal data lifecycle procedures. Players may request early deletion of their data (subject to any overriding legal obligations) by submitting a request to [email protected]. bl89 will confirm receipt of the request within five (5) business days and will complete the deletion within thirty (30) calendar days.

9. Data Security

bl89 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include: 256-bit SSL/TLS encryption on all data in transit; AES-256 encryption for sensitive data at rest (including KYC documents); bcrypt hashing for all stored passwords (passwords are never stored or transmitted in plain text); role-based access controls limiting staff access to personal data on a strict need-to-know basis; regular security audits and vulnerability assessments of the Platform infrastructure; and secure, access-controlled storage for all KYC documents.

Despite these measures, no system connected to the internet can guarantee absolute security against all threats. bl89 will notify affected players without undue delay in the event of a personal data breach that is likely to result in a high risk to their rights and freedoms, as required by applicable data protection law. Notification will be provided via the registered mobile number or email address on the player's account.

10. Your Data Rights

As a player on bl89, you hold the following rights with respect to your personal data. To exercise any of these rights, contact [email protected] with a clear description of your request. bl89 will respond within five (5) business days and will fulfil verified requests within thirty (30) calendar days.

bl89 will not charge a fee for handling data rights requests submitted in good faith. If a request is manifestly unfounded or excessive, bl89 reserves the right to charge a reasonable administrative fee or to decline the request, with written reasons provided to you.

11. Children and Age Restrictions

bl89 is strictly an adult platform. The Services are not directed at, and may not be used by, any person under 21 years of age. bl89 does not knowingly collect personal data from individuals under 21. If bl89 discovers that it has inadvertently collected personal data from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on bl89, please contact [email protected] immediately. Parents and guardians are encouraged to use internet filtering tools and to monitor the online activity of minors in their care.

12. Third-Party Links

bl89.pro does not contain links to external third-party websites in its primary navigation or content areas. Where references to third-party payment providers (bKash, Nagad, Rocket) or game studios (Pragmatic Play, Evolution Gaming) appear in content, these are informational references only and do not constitute endorsement of or responsibility for the privacy practices of those third parties. bl89 is not responsible for the content, privacy policies, or data practices of any third-party service, including your mobile wallet provider or bank.

13. Changes to This Privacy Policy

bl89 reserves the right to update this Privacy Policy at any time. When we make material changes — changes that affect your rights or the way we process your personal data in a significant manner — we will update the effective date at the top of this page and, where practicable, notify registered players via their registered mobile number or through a notice displayed on the Platform at login.

The current version of this Privacy Policy is always the version published at bl89.pro/privacy-policy. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may request account closure by contacting [email protected].

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the bl89 data team. All privacy-related requests should be submitted in writing to ensure a clear audit trail.

Privacy enquiries: [email protected]