Your Privacy Matters at 89ok

This Privacy Policy ("Policy") describes how 89ok ("we", "us", "our") collects, uses, stores, and protects personal data provided by or generated by users ("you", "your") of the 89ok platform, accessible at https://89ok.im and any associated mobile or desktop applications. By registering an account or otherwise using the 89ok platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all players who access the 89ok platform, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and other cities and regions across Bangladesh, as well as any other jurisdiction from which the platform is accessed. It covers data collected through the website, through live chat, through payment processing flows, and through any other interaction you have with 89ok's services.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which form part of the overall agreement governing your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters relating specifically to data processing, this Policy shall prevail.

89ok collects personal data through several means: information you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data received from third-party service providers such as payment processors and identity verification agencies. The categories of data we collect include the following:

89ok processes personal data only for defined, legitimate purposes. We do not use your data for purposes that are incompatible with those set out below, and we do not process more data than is necessary for the stated purpose. The primary purposes for which we use your personal data are as follows:

89ok processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual necessity:  Processing required to fulfil our obligations to you under the Terms & Conditions — including account creation, payment processing, and customer support.
• Consent:  Where you have provided explicit, informed consent for a specific processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting our support team.
• Legitimate interests:  Processing necessary for our legitimate business interests — such as fraud prevention, platform security, and improving our services — where those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation:  Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and responses to lawful orders from competent authorities.

89ok does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only with trusted service providers and in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors:  bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard, and other integrated payment partners receive transaction data necessary to process deposits and withdrawals to and from your account.
• Identity verification providers:  Third-party KYC and age verification service providers receive copies of identification documents and related data to perform identity and age checks on our behalf.
• Fraud and AML screening services:  Specialist risk and compliance screening providers receive transaction and identity data to assist in detecting suspicious activity and ensuring compliance with anti-money laundering obligations.
• Game providers:  Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and gameplay data necessary to deliver their respective games. These providers operate under their own privacy policies and data processing agreements.
• Legal and regulatory authorities:  We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or by a valid legal order. We will notify you of any such disclosure where permitted by law.
• Business transfers:  In the event of a merger, acquisition, or sale of substantially all of the assets of 89ok, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and your rights in relation to the new data controller.

89ok uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to help us understand how the platform is used so we can continue to improve it. By using the 89ok platform, you consent to the use of cookies as described in this section.

You can manage cookie preferences through your browser settings at any time. Disabling certain categories of cookies may affect the functionality of the platform. Instructions for managing cookies in the most common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation. 89ok does not use cookies to track your activity on third-party websites.

89ok retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines, subject to variation where a longer retention period is required by law or regulation:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

89ok implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, we are committed to maintaining industry-standard protections across all systems that process personal data.

• All data transmitted between your device and the 89ok platform is encrypted in transit using TLS (Transport Layer Security) with a minimum of TLS 1.2. Connections are secured with an SSL certificate verifiable via your browser's security indicator.
• Passwords are stored using industry-standard one-way cryptographic hashing algorithms. Plain-text passwords are never stored or transmitted by 89ok's systems.
• Payment card numbers, mobile banking PINs, and other sensitive payment credentials are processed directly by our PCI-DSS compliant payment partners. 89ok does not store such credentials on its own servers.
• Access to personal data within 89ok's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access privileges are reviewed regularly and revoked promptly when no longer required.
• 89ok conducts regular internal reviews of its data security practices and engages third-party security assessments to identify and address potential vulnerabilities.
• In the event of a data security incident that poses a risk to your rights and freedoms, 89ok will notify affected users and relevant authorities in accordance with applicable legal requirements.

As an individual whose personal data is processed by 89ok, you hold a number of rights in relation to that data. 89ok is committed to honouring these rights promptly and without unnecessary obstacle. The following rights are available to you:

• Right of access:  You have the right to request a copy of the personal data that 89ok holds about you, along with information about how that data is used and with whom it is shared.
• Right to rectification:  If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update many account details directly from your account dashboard.
• Right to erasure:  In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request that your personal data be deleted. Note that we are unable to delete data that must be retained under AML or other legal obligations.
• Right to restriction of processing:  In certain circumstances, you may request that processing of your data be temporarily restricted while a dispute or correction request is being resolved.
• Right to data portability:  Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object:  You have the right to object to processing based on legitimate interests, and to object to processing for direct marketing purposes at any time.
• Right to withdraw consent:  Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or by emailing [email protected] (as plain text — not a clickable link). We will respond to all data rights requests within a reasonable period and in any case within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

The 89ok platform is strictly restricted to individuals who are 21 years of age or older. 89ok does not knowingly collect or process personal data from any person under the age of 21. Age verification is performed as part of the registration and KYC process for all accounts.

If 89ok becomes aware that personal data has been collected from an individual who is under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and the data will be deleted to the extent not required to be retained by applicable law. If you have reason to believe that a person under 21 has registered an account on the 89ok platform, please contact our support team immediately via live chat.

The 89ok platform may contain references or links to third-party game providers' interfaces and payment provider portals in the ordinary course of using platform features. These third-party environments operate under their own privacy policies and data protection practices, for which 89ok accepts no responsibility. We recommend that you review the privacy policy of any third-party service through which you interact when using the 89ok platform.

89ok does not embed third-party advertising networks, social media tracking pixels, or external analytics services that collect data about your activity across other websites. Our data collection is limited to your activity on the 89ok platform itself.

89ok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, we will update the "Last Reviewed" date at the top of this page and, where the changes significantly affect your rights or the way we use your data, we will notify registered account holders via the platform or by email.

Your continued use of the 89ok platform after any amendment to this Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed of any updates. Previous versions of this Policy are available on request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 89ok handles your personal data, our dedicated support team is available 24 hours a day, 7 days a week, every day of the year including all Bangladeshi public holidays.

When submitting a data rights request, please provide your registered account username and email address so we can locate your account and respond efficiently. For security purposes, we may ask you to verify your identity before actioning a data rights request.