bn89 Privacy
Policy

1 Introduction

bn89 ("we", "us", "our") operates the online betting and casino platform accessible at bn89.io (the "Platform"). We are committed to protecting the privacy of all individuals who access, browse, or register on the Platform, including players located in Bangladesh and other jurisdictions where our services are available.

This Privacy Policy ("Policy") describes how bn89 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform. It also explains the rights you hold in relation to your personal data and how you may exercise those rights.

This Policy should be read alongside the bn89 Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By creating an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, you must not use the Platform.

This Policy is written in English. Where any translated version of this Policy conflicts with the English version, the English version shall prevail.

2 Data We Collect

bn89 collects personal data through several channels, including the registration process, account activity, payment transactions, identity verification submissions, and your interactions with customer support. The categories of personal data we collect are described below.

2.1 Registration and Account Data

• Full legal name (as it appears on your government-issued ID);
• Date of birth (used for age verification — players must be 21 or older);
• Email address and mobile phone number;
• Chosen username and hashed password;
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh);
• Preferred currency (Bangladeshi Taka / BDT);
• Account preferences and communication settings.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National Identity Card, Passport, or Driving Licence);
• Proof of address documentation (utility bill, bank statement, or government correspondence);
• Proof of payment method ownership (screenshot of bKash, Nagad, or Rocket account registered in your name);
• Selfie photograph holding your ID document, if requested by our compliance team;
• Any additional documentation requested to satisfy anti-money-laundering obligations.

2.3 Financial Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method identifiers (e.g., bKash mobile number, Nagad account reference, Rocket account reference, Visa or Mastercard last-four digits, Dutch-Bangla Bank or BRAC Bank account reference);
• Transaction history, balance records, and bonus credit/debit logs;
• Currency conversion records where applicable.

2.4 Betting and Gaming Activity Data

• Bet placement history, including event, market, selection, stake, and outcome;
• Casino game session logs, including game titles, rounds played, wager amounts, and results;
• Bonus and promotional offer usage and wagering progress;
• Responsible gaming tool settings (e.g., active deposit limits, self-exclusion status).

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Session timestamps, page views, click patterns, and navigation paths;
• Cookie identifiers and similar tracking technology data (see Section 7);
• Referring URL and search query strings (where applicable).

2.6 Communications Data

• Records of all correspondence between you and bn89 support staff, including live chat transcripts, email exchanges, and complaint records;
• Survey responses, feedback submissions, and promotional opt-in records;
• Records of any disputes, appeals, or escalations raised through our complaints procedure.

3 How We Use Your Data

bn89 uses the personal data collected from you for the following specific purposes. Each purpose is supported by a corresponding legal basis, which is outlined in Section 4.

bn89 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for fraud, bonus abuse, or responsible gaming concerns, a member of the compliance team manually reviews the case before any account action is taken.

4 Legal Basis for Processing

bn89 processes your personal data on the following legal grounds:

4.1 Contractual Necessity

The majority of data processing on the bn89 Platform is necessary to perform the contract between bn89 and you as a registered player. This includes creating and managing your account, processing transactions, delivering gaming services, and handling support requests. Without this processing, we cannot provide the Platform services to you.

4.2 Legal Obligation

bn89 is required by its international gaming licence conditions and applicable anti-money-laundering (AML) standards to collect and retain certain categories of personal data — most notably KYC identity documents and financial transaction records. Compliance with these obligations is non-negotiable and does not require your consent.

4.3 Legitimate Interests

bn89 processes certain data on the basis of its legitimate business interests, provided those interests are not overridden by your privacy rights. Legitimate interest processing includes fraud detection, platform security monitoring, responsible gaming pattern analysis, and aggregated analytics used to improve our services. We carry out a balancing assessment before relying on legitimate interests as a legal basis.

4.4 Consent

Where bn89 wishes to send you direct marketing communications, personalised promotional offers, or conduct optional surveys, we will first obtain your explicit consent. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

5 Data Sharing

bn89 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipients solely to the extent necessary for the purposes described in this Policy:

5.1 Payment Service Providers

To process your deposits and withdrawals, bn89 shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These providers process your data under their own privacy policies and are contractually bound to protect it.

5.2 Game Software Studios

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive game session data necessary to operate their games on the Platform. Game studios do not receive your full identity or payment information; they receive a pseudonymised player session token only.

5.3 Identity Verification Providers

bn89 uses regulated third-party KYC and AML screening services to assist with identity verification. These providers process copies of your identity documents and may perform database checks against sanctions lists and politically exposed persons (PEP) registers. All such providers are contractually bound to comply with applicable data protection standards.

5.4 Regulatory and Law Enforcement Authorities

bn89 may disclose personal data to regulators, law enforcement agencies, or financial intelligence units where required by law, by court order, or by our licensing obligations. Such disclosures are made on a minimum-necessary basis and are documented internally in accordance with our compliance procedures.

5.5 Professional Advisors

bn89 may share personal data with its legal advisors, auditors, and insurers where necessary to obtain professional advice, manage legal claims, or fulfil audit obligations. All such advisors are bound by confidentiality obligations.

6 Data Retention

bn89 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, to comply with our legal obligations, and to resolve any disputes that may arise. The following retention schedules apply:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

7 Cookies & Tracking Technologies

bn89 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to remember your preferences, and to analyse usage patterns so we can improve the player experience.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to operate. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game display options, and notification preferences. These improve the consistency of your experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including pages visited, session duration, and navigation paths. This data is used solely for internal performance optimisation.
• Responsible Gaming Cookies: Used to enforce active responsible gaming settings such as deposit limits and session time-out warnings across your browsing session.

7.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. bn89 does not use third-party advertising or retargeting cookies.

7.3 Do Not Track

bn89 respects Do Not Track (DNT) signals where technically feasible. If your browser sends a DNT signal, bn89 will not activate analytics cookies for your session, though strictly necessary cookies will remain active to maintain Platform functionality.

8 Data Security

bn89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security architecture includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bn89 servers is encrypted in transit using industry-standard TLS protocols.
• Password Hashing: Account passwords are never stored in plaintext. They are processed using a one-way cryptographic hashing algorithm with per-user salting.
• Two-Factor Authentication (2FA): bn89 offers optional 2FA for all player accounts. We strongly recommend enabling this feature to protect against unauthorised access.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. All staff with access to player data undergo mandatory data protection training.
• Intrusion Detection: The Platform is monitored 24/7 by automated intrusion detection and anomaly-alert systems. Any suspicious activity triggers an immediate security review.
• Data Pseudonymisation: Where data is shared with third-party game studios, it is pseudonymised so that the recipient cannot directly identify an individual player.
• Regular Security Audits: bn89 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the Platform infrastructure.

Despite these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, bn89 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

9 Your Rights

As a player on the bn89 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within thirty (30) calendar days.

9.1 Right of Access

You have the right to request a copy of all personal data that bn89 holds about you. We will provide this in a structured, commonly used, machine-readable format upon request.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update many of your account details directly through your account settings panel.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that bn89 is required to retain certain data for a minimum period under AML regulations, and erasure requests cannot override these mandatory retention obligations.

9.4 Right to Restrict Processing

You may request that bn89 restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved, or while an objection to processing is under review.

9.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable format and to have it transmitted to another controller where technically feasible.

9.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. bn89 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawing consent will not affect your account status or access to Platform services.

10 Children's Privacy

The bn89 Platform is strictly intended for adults aged 21 and above. bn89 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any capacity.

If bn89 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and permanently close the associated account. If you are a parent or guardian and believe your child has registered on bn89 without your knowledge, please contact our support team immediately at [email protected].

We encourage parents and guardians in Bangladesh to use reputable parental control software to restrict access to online gambling platforms. A list of available tools is provided on our Responsible Gaming page.

11 Third-Party Links

The bn89 Platform may contain references to third-party game providers and payment partners by name. bn89 does not link to third-party websites, and this Policy applies solely to data collected and processed by bn89 in connection with the bn89.io Platform.

Where you interact directly with a third-party payment provider (such as bKash or Nagad) through their own interfaces to initiate a deposit or withdrawal, that provider's own privacy policy governs the data you submit through their platform. bn89 encourages you to review the privacy policies of any third-party service you use in connection with your bn89 account.

12 International Data Transfers

bn89 operates under an international gaming licence, and some of the personal data we collect may be processed on servers located outside Bangladesh. Where personal data is transferred internationally, bn89 takes appropriate steps to ensure that such transfers are made in accordance with applicable data protection standards, including:

• Entering into data processing agreements with all data recipients that include appropriate contractual protections;
• Applying data pseudonymisation and minimisation prior to any transfer where technically feasible;
• Restricting international transfers to jurisdictions and recipients that provide an adequate level of data protection.

By using the bn89 Platform, you acknowledge that your personal data may be processed in countries outside Bangladesh. If you have questions about the safeguards applied to international data transfers, please contact our support team.

13 Policy Updates

bn89 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, our legal obligations, or the services we offer. The date of the most recent revision is displayed at the top of this document and in the sidebar.

Where changes are material — meaning they significantly affect the way we process your personal data or the rights available to you — bn89 will provide advance notice via a platform notification or email to your registered address, at least fourteen (14) days before the revised Policy takes effect.

Your continued use of the bn89 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bn89 handles your personal data, please contact our Data Protection team using the details below. Our team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.

For information about responsible gaming tools and player protection, please visit our Responsible Gaming page. For general platform terms, see our Terms & Conditions. For answers to common questions, visit our FAQ page.