900bet Privacy Policy
— How We Protect Your Data

When you interact with 900bet — whether you are browsing the platform, registering an account, making a deposit, placing a bet, or contacting our support team — we may collect and process the following categories of personal data:

Identity & Registration Data

When you create a 900bet account, we collect your full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number. This information is required to create and verify your account, and to ensure compliance with our age verification obligations (18+ only policy).

Identity Verification (KYC) Documents

Before processing withdrawals above ৳10,000 — or where our compliance team deems verification necessary — we may request a copy of your National Identity Card (NID), passport, or other government-issued photo identification, and a document confirming your registered address (such as a utility bill or bank statement). These documents are stored securely and used solely for identity verification purposes in line with our anti-money laundering (AML) obligations.

Payment & Transaction Data

We collect information about your deposits and withdrawals, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the mobile wallet number or card details used (stored in tokenised form only — we do not store raw card numbers), transaction amounts, timestamps, and transaction reference numbers. This data is required for payment processing, fraud prevention, and financial record-keeping.

Technical & Usage Data

When you access the 900bet platform, our servers automatically collect certain technical information including your IP address, device type and operating system, browser type and version, session duration, pages visited, games played, bet history, and login timestamps. This data is used for platform security, fraud detection, technical troubleshooting, and service improvement. It also supports our responsible gaming obligations — for example, identifying patterns that may indicate problem gambling behaviour.

Communications Data

If you contact our support team via live chat, email, or phone, we will retain a record of that communication, including the content of the conversation and any attachments shared. This data is used to resolve your query, improve our customer service quality, and maintain compliance records.

900bet uses your personal data only for the purposes described below. We rely on one or more of the following legal bases for each processing activity: performance of a contract (processing necessary to provide you with our betting and casino services), legal obligation (processing required by applicable AML or compliance law), legitimate interests (processing necessary for fraud prevention, platform security, and service improvement), and consent (where you have explicitly opted in, such as for marketing communications).

Marketing Communications

900bet may send you promotional emails or SMS notifications about bonuses, new game releases, BPL and IPL betting markets, and seasonal offers (such as Eid or Pohela Boishakh promotions) only if you have explicitly opted in to receive such communications during registration or through your account notification settings. You may withdraw your consent and opt out of marketing communications at any time by updating your account preferences or by contacting our support team.

Cookies are small text files stored on your device when you visit the 900bet platform. We use cookies and similar technologies (such as local storage and session tokens) to maintain the following functions:

Strictly Necessary Cookies

These cookies are essential for the platform to function correctly and cannot be disabled. They include session authentication cookies (which keep you logged in during your visit), security tokens (which protect your session against hijacking), and load-balancing cookies (which distribute your requests across our server infrastructure for optimal performance). Without these cookies, core platform functionality — including making deposits and placing bets — would not be possible.

Functional Cookies

Functional cookies remember your preferences — such as your preferred payment method, language setting (English), and responsible gaming dashboard configuration — so that you do not need to re-enter them on each visit. These cookies are not essential to platform operation but significantly improve your user experience.

Analytics Cookies

900bet uses anonymised analytics cookies to understand how players navigate the platform, which game categories are most visited, and where technical issues arise. This data is aggregated and never linked back to an individual user's identity. Analytics data is used solely to improve platform performance and content relevance.

Managing Cookies

You may manage or disable non-essential cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the 900bet platform. Instructions for managing cookies in commonly used browsers (Chrome, Firefox, Safari, Edge) are available in the respective browser's help documentation. Continued use of the 900bet platform without changing your cookie settings constitutes acceptance of our use of cookies as described in this section.

900bet does not sell, rent, or trade your personal data to third parties. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose. All third parties who process your data on our behalf are contractually bound by data processing agreements that require them to handle your information with the same level of care as 900bet itself.

Payment Service Providers

To process your deposits and withdrawals, 900bet shares necessary transaction data with our payment processing partners, which include the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks. This data is limited to the information required to authenticate and complete the transaction, and is governed by each provider's own published privacy terms.

Game Studio Providers

The casino and slot games available on the 900bet platform are delivered by certified third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming. When you launch and play a game, the relevant studio's servers process your gameplay data (bets placed, rounds played, wins/losses) in order to deliver the game and calculate outcomes. Game studios do not receive your full identity profile — only the anonymised player ID required to run the game session.

Identity Verification & Fraud Prevention Partners

For KYC verification and anti-fraud screening, 900bet may share identity data with specialist compliance and fraud-prevention service providers. These partners operate under strict contractual data-processing obligations and are prohibited from using your data for any purpose beyond the specific verification or screening task.

Legal & Regulatory Disclosure

900bet may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law — for example, in connection with a criminal investigation, money laundering report, or court order. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that 900bet undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address registered to your account before the transfer occurs, and you will be given the opportunity to close your account if you do not wish your data to be transferred.

900bet implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include the following:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, including login sessions, payment flows, and account management actions.
• Encrypted database storage for all sensitive personal data fields, including identity documents, payment method tokens, and account credentials.
• Access controls and role-based permissions that restrict access to personal data to only those members of the 900bet team who require it for legitimate operational purposes.
• Two-factor authentication (2FA) available for player accounts via SMS OTP, providing an additional layer of protection against unauthorised login attempts.
• Automated fraud detection systems that continuously monitor account activity for patterns consistent with account takeover, identity fraud, or money laundering.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that define the steps 900bet will take in the event of a data breach — including notification to affected players within 72 hours where the breach poses a risk to their rights and freedoms.

While 900bet takes every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect your account has been compromised.

900bet retains your personal data only for as long as is necessary for the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

When the applicable retention period expires, personal data is either permanently deleted from our systems or anonymised in a manner that makes it impossible to re-identify the individual. Anonymised aggregate data (such as statistical analysis of game popularity or platform usage trends) may be retained indefinitely as it no longer constitutes personal data.

In the event that your account is suspended due to suspected fraud, breach of our Terms & Conditions, or an ongoing legal investigation, retention periods may be extended as required by our compliance team or by instruction from a relevant authority.

As a 900bet player, you hold a number of rights in relation to your personal data. We are committed to honouring these rights promptly and without unnecessary barriers. All rights requests are handled by our support team and will be responded to within five business days. Complex requests may require up to 30 days; in such cases we will acknowledge your request within five days and keep you informed of progress.

To exercise any of the rights listed above, please contact the 900bet support team via our 24/7 live chat service or by emailing [email protected]. We may ask you to verify your identity before processing a rights request to ensure that personal data is not disclosed to an unauthorised party.

Please note that certain rights are subject to exemptions. For example, the right to erasure does not apply where 900bet is required to retain data to comply with a legal obligation (such as AML record-keeping requirements). Where an exemption applies, we will explain this clearly in our response to your request.

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have concerns about how 900bet handles your personal data, please contact our support team using the details below. All privacy-related communications are handled in strict confidence.

Complaints Process

If you are dissatisfied with how 900bet has handled your personal data or responded to a rights request, we encourage you to raise the matter with our support team in the first instance. We will investigate all privacy complaints thoroughly and aim to resolve them within 15 business days of receipt.

If you remain dissatisfied following our internal review, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 900bet takes all privacy complaints seriously and will co-operate fully with any regulatory investigation.

Changes to This Privacy Policy

900bet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The most current version will always be published at /privacy-policy with the effective date clearly stated at the top. Where material changes are made — for example, changes that expand the categories of data we collect or introduce new sharing arrangements — we will notify registered players via email using the address on their account before the changes take effect. Continued use of the platform following notification constitutes your acceptance of the revised Privacy Policy.