v89 Privacy Policy

1 Data We Collect

v89 collects personal data through several channels: directly from you when you register an account, make a deposit, contact support, or participate in a promotion; automatically through your use of the platform (device and session data); and from third-party sources such as payment processors and fraud-prevention services where necessary for compliance and security purposes.

Registration and Account Data

• Full legal name (as it appears on your government-issued identity document).
• Date of birth (used for age verification — players must be 18 or older).
• Email address (used for account verification, security alerts, and service communications).
• Phone number, including WhatsApp contact where provided voluntarily.
• Residential address (city, district, division — Bangladesh-specific fields where applicable).
• Chosen username and hashed account password (v89 never stores passwords in plain text).

KYC and Identity Verification Data

• Scanned or photographed copy of a government-issued photo ID: National Identity Card (NID), passport, or driver's licence.
• Selfie or liveness check image (where required for enhanced verification).
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account, bank statement header).
• Source of funds documentation where a compliance review is triggered by transaction volume or regulatory requirement.

Financial and Transaction Data

• Payment method type and account reference (e.g., bKash mobile number, last four digits of a Visa card — never full card numbers).
• Deposit amounts, withdrawal requests, transaction timestamps, and transaction reference IDs.
• Account wallet balance and wagering history (required for bonus auditing and responsible gaming monitoring).

Technical and Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session start and end times, pages visited, features used, and click-path data.
• Referral source (how you arrived at v89.bio — direct, search, affiliate link, etc.).

Communications Data

• Content of live chat conversations, email correspondence, and WhatsApp messages with the v89 support team.
• Records of complaints, dispute submissions, and their resolutions.
• Marketing preference settings (opt-in or opt-out status for promotional emails and SMS).

2 How We Use Your Data

v89 uses your personal data only for the specific, documented purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent or establishing a separate legal basis.

Marketing Communications

v89 sends promotional communications — including bonus offers, seasonal campaigns tied to events such as Eid, Pohela Boishakh, BPL season, and Victory Day, as well as new game announcements — only to players who have explicitly opted in to receiving such communications. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by replying "STOP" to any v89 SMS. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.

Automated Decision-Making

v89 uses automated systems to flag potentially suspicious account activity, detect duplicate account registrations, and enforce self-exclusion restrictions. Where an automated flag results in an account restriction, you have the right to request human review of that decision by contacting our compliance team. v89 does not make any fully automated decisions that produce significant legal effects on players without human oversight.

3 Legal Basis for Processing

v89 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to fulfil the contract between v89 and the player — for example, to create and manage an account, process deposits and withdrawals, and deliver the gaming services requested.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification requirements, anti-money laundering (AML) obligations, counter-terrorism financing (CTF) rules, and responsible gaming mandates.
• Legitimate Interest: Processing is in v89's legitimate business interest — for example, fraud detection, platform security, abuse prevention, and improving service quality — provided those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: For optional data processing activities such as marketing communications and non-essential cookies, v89 relies on your freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without penalty, though withdrawal does not affect prior processing.

Where v89 relies on legitimate interest as a legal basis, a legitimate interest assessment (LIA) has been conducted and documented internally to confirm that the processing is proportionate and does not unduly prejudice player rights. Players may request a summary of the relevant LIA by contacting our data enquiries team.

4 Data Sharing and Disclosure

v89 does not sell your personal data. We share data only in the following circumstances, and only with recipients who are bound by appropriate confidentiality and data processing agreements:

Service Partners and Processors

• Payment Processors: bKash, Nagad, Rocket, Upay, and international card processors (Visa, Mastercard networks) receive the minimum data necessary to authenticate and complete your transactions. All payment partners are contractually required to comply with applicable financial data security standards (PCI-DSS where applicable).
• Game Providers: Third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others receive your player session token and bet data in order to deliver and settle game outcomes. These providers are contractually bound to use this data solely for game delivery and RNG certification purposes.
• KYC and Identity Verification Services: Where v89 uses a third-party identity verification provider to assist with document checks and liveness verification, your KYC documents are transmitted to that provider under a data processing agreement that restricts their use to the verification purpose only.
• Fraud Prevention and AML Services: v89 may share transaction patterns and device fingerprint data with third-party fraud-prevention platforms and AML screening services to fulfil its compliance obligations. These services act as data processors under contract.
• Analytics Providers: Anonymised, aggregated usage data may be shared with platform analytics services to help v89 understand user behaviour and improve the platform. No personally identifiable information is included in analytics data transfers.

Legal and Regulatory Disclosure

v89 may disclose your personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where such disclosure is required by law, court order, or in response to a lawful formal request. v89 will, where legally permitted, notify you of any such disclosure request prior to responding.

Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of the v89 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the new data controller prior to your data being transferred, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

5 Cookies and Tracking Technologies

v89 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the platform, remember your session preferences, and analyse usage patterns. This section explains the types of cookies used and how you can manage them.

Types of Cookies Used

Managing Your Cookie Preferences

You may manage non-essential cookie preferences at any time through your v89 account settings. You may also control cookies at the browser level by adjusting your browser's privacy settings to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using the platform.

Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide granular cookie management controls under their privacy or security settings menus. For mobile users in Bangladesh accessing v89 via Chrome for Android or Samsung Internet, cookie preferences can be managed in the browser's "Site Settings" section.

Third-Party Cookies

Some third-party service providers integrated into the v89 platform — including game providers and analytics services — may set their own cookies. These are governed by the respective provider's privacy policy. v89 does not have control over third-party cookies beyond restricting or prohibiting their use in partner contracts where possible.

6 Data Retention

v89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account relationship with v89 plus a post-closure period as described below.
• Account and KYC Data (post-closure): Retained for a minimum of 5 years following account closure to satisfy AML and financial crime investigation obligations. In some cases, applicable regulation may require retention for up to 7 years.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, unless a dispute or regulatory inquiry requires extended retention.
• Marketing Preference Records: Opt-in and opt-out records retained for 5 years to demonstrate compliance with marketing consent obligations.
• Technical and Usage Logs: Anonymised aggregated analytics data may be retained indefinitely. Raw server logs containing IP addresses are typically retained for 90 days.
• Self-Exclusion Records: Retained for the full duration of the exclusion period plus 7 years, to prevent re-registration during or after a self-exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with v89's data deletion protocols. Anonymised data that cannot be re-linked to an individual may be retained for longer periods for legitimate statistical and research purposes.

7 Your Data Rights

As a player whose personal data is processed by v89, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact v89's data enquiries team using the details in Section 9 of this Policy. v89 will respond to all valid rights requests within 30 calendar days. In complex cases, the response period may be extended by a further 30 days, and you will be notified of the extension and the reason for it.

• Right of Access: You may request a copy of all personal data that v89 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data held by v89 about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact number) may be made directly in account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interest and v89 has no overriding grounds. This right is subject to v89's legal retention obligations — data required for AML, age verification, or ongoing dispute purposes cannot be deleted early.
• Right to Restriction of Processing: You may request that v89 restricts its processing of your personal data — for example, while a rectification request is being investigated, or where you have objected to processing pending a determination of whether legitimate grounds override your interests.
• Right to Data Portability: Where processing is based on your consent or contract performance, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) for transfer to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data that is based on legitimate interest, including profiling based on legitimate interest. v89 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right Not to Be Subject to Solely Automated Decisions: Where an automated decision produces a significant effect on your account (e.g., account restriction triggered by a fraud-detection algorithm), you have the right to request human review of that decision.

8 Data Security

v89 employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• Transport Encryption: All data in transit between your browser or device and the v89 platform is protected by TLS 1.2 or TLS 1.3 encryption. HTTP connections are automatically redirected to HTTPS. The v89 domain uses HSTS (HTTP Strict Transport Security) to prevent protocol downgrade attacks.
• Data at Rest Encryption: Sensitive data stored in v89's databases — including KYC documents, financial transaction records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within v89's internal systems is restricted on a strict need-to-know basis. Role-based access controls (RBAC) ensure that only authorised personnel — such as compliance officers and verified support agents — can access sensitive player records. All internal data access is logged and auditable.
• Password Security: Player passwords are never stored in plain text. v89 uses adaptive hashing algorithms (bcrypt) with salting to store password credentials. v89 staff cannot retrieve your password — only a password reset is possible.
• Two-Factor Authentication: v89 offers two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA for an additional layer of security against unauthorised login attempts.
• Penetration Testing and Security Audits: v89's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.
• Incident Response: In the event of a confirmed data security incident affecting player personal data, v89 has an incident response plan in place that includes internal escalation, root cause analysis, and player notification procedures. Players whose data is materially affected by a breach will be notified without undue delay in accordance with applicable data protection obligations.

While v89 takes all reasonable and technically appropriate measures to protect your data, no system connected to the internet can be guaranteed to be completely secure. Players are equally responsible for maintaining the security of their own account credentials and devices. v89 recommends using a strong, unique password, enabling 2FA, and logging out of your account when using shared or public devices.

9 Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how v89 handles your personal data, please contact us through one of the following channels:

• Email (Data Enquiries): support at v89.bio — please include "Privacy Request" or "Data Rights" in the subject line of your message so it can be routed to the appropriate team promptly. Response time is 2–6 hours during Bangladesh Standard Time (BST, UTC+6) business hours.
• Live Chat: Available 24/7 inside your v89 account dashboard. For data rights requests, our support agents will escalate your request to the data enquiries team on your behalf. Average initial response time under 3 minutes.
• WhatsApp: +880 1700 000 000 (plain text — not a link). Available during BST business hours for general data enquiries.

Changes to This Privacy Policy

v89 reviews this Privacy Policy periodically and may update it to reflect changes in data processing practices, legal requirements, or platform features. The effective date at the top of this document will be updated whenever a material change is made. Where a change is significant — for example, a new category of data being collected or a new purpose being introduced — v89 will notify registered players via email to their registered address before the change takes effect. Continued use of the v89 platform after notification of a Privacy Policy update constitutes acceptance of the revised Policy. If you do not agree with the changes, you should contact support to arrange account closure before the updated Policy takes effect.

Governing Language

This Privacy Policy is written in English and the English text is the binding version. Any translation or informal summary provided for convenience does not constitute a separate legal document and does not override the English text in any respect.