bl89 Privacy Policy

1 Introduction

bl89 is an online betting and casino platform operated at https://bl89.io, serving players in Bangladesh and the wider South Asian region. We take the privacy of our players seriously and are committed to protecting the personal data you provide to us in the course of using the bl89 platform.

This Privacy Policy applies to all personal data we collect through the bl89 website, mobile-optimised site, any related communications (including support emails and account notifications), and any other interaction you have with bl89 as a registered or prospective player.

This policy should be read alongside the bl89 Terms and Conditions and Responsible Gaming Policy, both of which are available on the bl89 website. In the event of any inconsistency between this Privacy Policy and those documents regarding the handling of personal data, this Privacy Policy shall take precedence.

We may update this Privacy Policy from time to time. The most recent version will always be available at https://bl89.io/privacy-policy. The "Last Updated" date at the top of this page indicates when the current version was published. Material changes will be communicated to registered players via email or account notification prior to taking effect.

2 Personal Data We Collect

bl89 collects the minimum personal data necessary to provide a safe, compliant, and fully functional platform. The categories of personal data we collect include the following:

Account and Identity Data

• Full legal name
• Date of birth (used to verify that you are 21 years of age or older)
• Email address
• Mobile phone number
• Username and hashed password
• Copies of government-issued identity documents (e.g., National ID card, passport) submitted during KYC verification
• Proof of residential address documents (e.g., utility bill, bank statement)

Financial and Payment Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
• Bank account details or card numbers (where bank transfer or card payment is used) — card numbers are tokenised and the full number is never stored by bl89 directly
• Transaction history, including deposit amounts, withdrawal requests, and associated timestamps
• Current account balance information

Platform Usage Data

• Betting history, including markets selected, stake amounts, odds accepted, and settlement outcomes
• Casino game history, including games played, bet sizes, and session durations
• Login timestamps and session duration data
• Responsible gaming settings you have applied to your account (e.g., deposit limits, self-exclusion requests)

Technical and Device Data

• IP address at the time of account registration and subsequent logins
• Device type, operating system, and browser type
• Approximate geographic location derived from IP address
• Cookie identifiers and session tokens (see Section 6 for full cookie information)

Communications Data

• Content of support enquiries submitted to [email protected]
• Records of account notifications, bonus offer communications, and marketing preferences

3 How We Collect Your Data

bl89 collects personal data through the following channels:

Directly From You

The majority of personal data bl89 holds about you is provided directly by you during the account registration process, during KYC verification, when you make a deposit or withdrawal, when you contact our support team, or when you update your account settings or responsible gaming preferences.

Automatically Through Platform Use

When you visit https://bl89.io or use the bl89 platform, we automatically collect certain technical and usage data. This includes your IP address, browser type, device information, pages visited, session duration, and interactions with the platform interface. This data is collected through server logs, cookies, and similar tracking technologies described in Section 6.

From Third-Party Verification Providers

Where bl89 engages third-party KYC or identity verification service providers to verify your identity or age, those providers may share the results of their verification checks with bl89. bl89 uses this information solely for the purpose of completing the account verification process and meeting our responsible gaming and anti-fraud obligations.

From Payment Processors

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer partner, the relevant payment processor will confirm the transaction status and the associated payment details to bl89. We receive only the information necessary to reconcile the transaction against your bl89 account.

4 Purpose and Legal Basis for Processing

bl89 processes your personal data only where a lawful basis exists for doing so. The table below sets out our primary processing activities, the purpose of each, and the legal basis on which we rely:

Where processing is based on your consent (for example, receiving marketing emails), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link included in every marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

5 Sharing Your Personal Data

bl89 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We may share your personal data with the following categories of recipients only where necessary and subject to appropriate safeguards:

Service Providers and Data Processors

bl89 works with a limited number of trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• KYC and identity verification providers — to complete the account verification process
• Payment processing partners (bKash, Nagad, Rocket, Upay, banking partners) — to facilitate deposits and withdrawals
• Game studio partners (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and others) — to deliver live casino and slot game content
• IT infrastructure and hosting providers — to support the technical operation of the bl89 platform
• Fraud detection and anti-money-laundering screening services

All service providers are required to process personal data only for the specific purposes for which it was shared and in accordance with bl89's instructions.

Legal and Regulatory Disclosure

bl89 may disclose personal data to competent authorities, courts, or regulators where required to do so by applicable law, by a court order, or by a legitimate regulatory inquiry. In such cases, bl89 will disclose only the minimum data required to comply with the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of bl89's assets, personal data held by bl89 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the impact on their personal data prior to the transfer taking effect.

6 Cookies and Tracking Technologies

bl89 uses cookies and similar browser-based technologies to ensure the platform functions correctly, to maintain the security of your session, and to collect aggregated analytics data that helps us understand and improve the platform.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the bl89 platform to function. They maintain your login session, remember your account preferences, and enable secure navigation between pages. The platform cannot operate without these cookies and they cannot be disabled.
• Functional Cookies: These cookies remember choices you have made on the platform — such as your preferred language, display settings, and recently played games — to provide a more personalised experience on return visits.
• Analytics Cookies: bl89 uses aggregated, anonymised analytics data to understand how players interact with the platform, which pages are most frequently visited, and where technical improvements can be made. This data does not identify individual users.

What We Do Not Use

bl89 does not use third-party advertising cookies, social media tracking pixels, or behavioural profiling technologies of any kind. Your browsing activity on bl89 is not shared with advertising networks.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the bl89 platform, including your ability to log in and maintain an active session. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Security

bl89 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Technical Measures

• All data in transit between your device and bl89 is encrypted using TLS 1.3 with 256-bit AES encryption.
• Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. bl89 staff cannot access your password in plain text.
• Payment card details are tokenised at the point of entry. Full card numbers are never stored on bl89 servers.
• Access to production systems containing personal data is restricted to authorised personnel only, on a strict need-to-know basis, and is protected by multi-factor authentication.
• bl89 systems are monitored continuously for anomalous activity, and security assessments are conducted on a regular basis.

Organisational Measures

• All bl89 staff and contractors with access to personal data are bound by confidentiality obligations.
• Internal data handling procedures are reviewed and updated regularly to reflect current best practices.
• In the event of a data security incident affecting your personal data, bl89 will notify you and any applicable authorities as required by law, and will take immediate steps to contain and remediate the incident.

While bl89 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You also have a responsibility to keep your bl89 login credentials secure and to notify us immediately at [email protected] if you suspect that your account has been compromised.

8 Data Retention

bl89 retains personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following general retention principles apply:

• Active account data: Personal data associated with an active bl89 account is retained for the full duration of the account relationship.
• Closed account data: Following account closure, bl89 retains certain personal data (including identity documents, transaction records, and account history) for a minimum period of five years to comply with anti-money-laundering, responsible gaming, and financial record-keeping obligations. Data that is no longer required for any legitimate purpose will be securely deleted or anonymised at the end of the applicable retention period.
• KYC documentation: Identity documents submitted during the verification process are retained for the duration required by applicable law and are securely deleted thereafter.
• Support correspondence: Records of support interactions are retained for up to three years following the resolution of the relevant enquiry.
• Marketing consent records: Records of marketing consent and opt-out requests are retained for the period necessary to demonstrate compliance with consent obligations.

Where bl89 retains data in anonymised or aggregated form (i.e., data from which individual players cannot be identified), it may be retained indefinitely for the purposes of statistical analysis and platform improvement.

9 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data bl89 holds about you:

• Right of Access: You may request a copy of the personal data bl89 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data bl89 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request that bl89 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where the data has been processed unlawfully. Note that bl89 may be required to retain certain data for legal compliance purposes even where an erasure request is made.
• Right to Restriction: You may request that bl89 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. Objecting to direct marketing will always be honoured without question.
• Right to Data Portability: Where processing is based on consent or on a contractual relationship, you may request that bl89 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact bl89 in writing at [email protected] with the subject line "Data Rights Request". bl89 will acknowledge your request within five business days and aim to respond substantively within thirty days. In some cases, we may need to verify your identity before processing your request.

10 Children and Minors

bl89 strictly prohibits the use of its platform by any person under the age of 21. The bl89 platform is not directed at, designed for, or intended to be used by individuals under 21 years of age. bl89 does not knowingly collect personal data from minors.

If bl89 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be suspended immediately, all personal data associated with that account will be deleted to the extent permitted by law, and any funds held in the account will be subject to review.

If you are a parent or guardian and believe that your child has registered an account with bl89, please contact us immediately at [email protected] so that we can take appropriate action without delay.

11 Third-Party Services and Links

The bl89 platform integrates with third-party game studio providers to deliver its casino and slot content. When you play games provided by studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, or Microgaming, certain technical data (such as session identifiers and game round data) may be processed by those providers as part of delivering the game content. These providers operate under contractual data processing agreements with bl89 and are not permitted to use this data for their own independent purposes.

bl89 does not include hyperlinks to external third-party websites. However, if you independently navigate to any external website, bl89 has no control over and accepts no responsibility for the privacy practices or content of those external sites. You should review the privacy policies of any third-party platforms you choose to visit independently.

12 International Data Transfers

bl89 operates primarily in Bangladesh and processes most player data within the region. In some cases, personal data may be transferred to and processed in jurisdictions outside Bangladesh — for example, where a game studio provider or KYC verification partner operates infrastructure in another country.

Where personal data is transferred internationally, bl89 takes appropriate steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual safeguards such as standard contractual clauses or equivalent binding arrangements. bl89 will not transfer personal data to any jurisdiction that does not meet a minimum standard of data protection adequacy.

If you would like further information about the safeguards in place for international data transfers involving your personal data, please contact us at [email protected].

13 Updates to This Privacy Policy

bl89 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the bl89 platform. The most current version of this policy will always be published at https://bl89.io/privacy-policy.

Where changes to this Privacy Policy are material — meaning they affect the nature, scope, or legal basis of our processing activities in a way that could meaningfully impact your rights — bl89 will notify registered players by email or via an account notification at least fourteen days before the updated policy takes effect. For minor or administrative amendments that do not affect your rights, the updated policy will take effect on publication without prior notice.

Continued use of the bl89 platform after an updated Privacy Policy has taken effect constitutes acceptance of the revised document. If you do not agree with the updated policy, you may close your account by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bl89 handles your personal data, please contact us using the details below. All privacy-related correspondence should be submitted in English.

Platform: bl89 — https://bl89.io

Privacy and Data Enquiries:

[email protected]

Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your email so that your message is directed to the appropriate team without delay. bl89 aims to acknowledge all privacy-related enquiries within five business days and to provide a full response within thirty days.

bl89's support team is available around the clock, every day of the year, including Bangladeshi public holidays such as Victory Day (December 16), Independence Day (March 26), and Eid periods.