Data Security

XX 90 Privacy Policy

Your personal data matters to us. Here you'll find a clear, transparent account of what information is collected when you use the XX 90 platform, how it is stored, and how it is kept secure.

Last Updated: January 2026
256-bit
SSL encryption
Zero
Third-Party Sharing
24/7
Data Monitoring
GDPR
Compliant

How We Protect Your Information

The Core Pillars of XX 90's Privacy Protection

End-to-End Encryption

Every transaction and piece of personal information you share is protected with 256-bit SSL encryption. Even if your data were intercepted, it would be completely unreadable.

Secure Data Storage

Your data is stored on internationally certified secure servers. Regular security audits and backups are conducted to ensure ongoing protection.

Restricted access controls

Only authorized personnel can access the necessary data. Every access is logged and monitored.

No data shared with third parties

XX 90 never sells or shares your personal data with advertisers or third parties. This is our core commitment.

Right to Erasure

You can request the deletion of your account and associated data at any time. We will fulfill the request within 30 days.

Data Breach Notification

In the event of a data security incident, affected users will be notified within 72 hours. Transparency is central to how we operate.

1 Introduction & Scope

Welcome to the Privacy Policy of XX 90 (https://xx90.app). This policy explains how we collect your personal information, how we use it, and how we keep it secure. By using the XX 90 platform, you agree to this Privacy Policy.

This Privacy Policy applies to the XX 90 website, mobile app, and all digital communications with us. While specifically designed for users in Bangladesh, this policy adheres to international data protection standards.

XX 90's core principles: We believe your data belongs to you. We only collect what's necessary to provide our services — nothing more. Your privacy is a right, not a privilege.

This Privacy Policy is available in both Bengali and English. In the event of any conflict, the English version shall prevail. XX 90 reserves the right to update this policy at any time and users will be notified of any changes.

2 What Information We Collect

When you register and use the XX 90 platform, various types of information are collected. All data collection is transparent and purpose-driven.

Data Type Example Reason for Collection
Identity Information Name, date of birth, NID number KYC Verification
Contact Information Mobile number, email Account Registration & Support
Financial Information BKash/Nagad/Rocket number Payment Processing
Device information IP address, browser, OS Security & Fraud Prevention
Usage Information Game history, betting patterns Service improvement & responsible gaming
Location Data Country, city (approximate) Ensuring Legal Compliance

Important: XX 90 never stores your full bank account number or card number. Payment details are processed directly through certified payment gateways.

Automatically collected data includes cookie data, session information, click patterns, and page visit logs. This data does not directly identify you but is used to improve the quality of our services.

3 How Your Information Is Used

XX 90 uses collected data only for specific, legitimate purposes. We never use your information for anything beyond what is necessary.

  • To create and manage accounts and complete KYC verification
  • To process deposits, withdrawals, and other financial transactions
  • To manage gaming services, bonuses, and promotional offers
  • To provide customer support and resolve complaints
  • To prevent fraud, money laundering, and other illegal activities
  • To support responsible gaming policy enforcement and addiction prevention
  • To analyze and improve platform performance
  • To meet legal obligations and fulfill regulatory requirements
  • To detect and prevent security threats
  • To personalize the user experience

Marketing Communications: XX 90 only sends promotional messages with your consent. You can opt out at any time and we will action your request immediately.

4 Data Sharing & Third Parties

XX 90 never sells your personal data. However, limited information may be shared with trusted third parties in specific circumstances:

  • Payment Processors: Only the information necessary to complete transactions is shared with bKash, Nagad, and Rocket
  • Game Providers: Only the minimum data required to run the games (such as account ID) is shared
  • Law Enforcement Agencies: Data may be disclosed in response to a court order or valid legal demand
  • KYC verification services: Data is shared with approved service providers for identity verification purposes
  • Cybersecurity partners: Limited data is used for fraud detection and security purposes

Any information shared with third parties is governed by strict agreements that restrict its use to the specified purpose only — it cannot be retained or passed on to others. XX 90 does not work with any third party that does not meet our privacy standards.

5 Cookie Policy

XX 90's website and app use cookies and similar technologies. Cookies are small text files stored on your device that help the platform remember your preferences.

  • Essential Cookies: Login sessions, security tokens — the platform cannot function properly without these
  • Functionality Cookies: Used to remember language preferences and display settings
  • Analytics Cookies: To understand which pages are used most — without identifying you personally
  • Security Cookies: For fraud detection and monitoring multiple connections on the same account

Cookie Controls: You can disable or limit cookies through your browser settings. Note that disabling essential cookies may cause some features to stop working properly. Contact our support team to learn more about cookies.

XX 90 does not use third-party tracking cookies. Our analytics run entirely on our own internal systems, so your browsing behavior is never shared with any external advertising network.

6 Data Retention Period

XX 90 only retains your data for as long as necessary. Retention periods vary depending on the type of information:

Data Type Retention Period
Account information (active accounts) Until account closure
Transaction Records 5 years after account closure
KYC documents 7 years as required by law
Customer support records 2 years after last contact
Logs & security data Up to 12 months
Cookies & Session Data At session end or after 30 days, whichever comes first

Once the retention period expires, data is securely deleted or anonymized. If any data needs to be retained longer for legal reasons, you will be notified separately.

7 Your Rights

Under XX 90's Privacy Policy, you have the following rights. Contact us at any time to exercise them:

  • Right to Access: The right to know what information XX 90 holds about you
  • Right to Rectification: The right to request correction of inaccurate or incomplete information
  • Right to Erasure: The right to request erasure of your data under certain circumstances
  • Right to Restrict Processing: Right to request that data processing be paused under certain circumstances
  • Right to Portability: Right to receive your data in a machine-readable format
  • Right to Object: Right to object to the use of your data for marketing or profiling purposes
  • Right to Withdraw Consent: Right to withdraw consent at any time

Request Process: Send any data-related requests to support@xx90.app. We typically respond within 30 days. For complex requests, it may take up to 60 days, and you will be informed in advance if that is the case.

8 Security Measures

XX 90 uses industry-leading security technology to protect your data. Our security framework operates across the following layers:

  • 256-bit AES encryption — applied to all data storage and transmission
  • TLS 1.3 protocol — applied to all network communications
  • Two-factor authentication (2FA) — on account login
  • Real-time threat monitoring — 24 hours a day, 7 days a week
  • Regular penetration testing — conducted by third-party cybersecurity specialists
  • Access control — role-based, least-privilege access policy
  • DDoS protection — to defend against high-traffic attacks
  • Data Backup — Secured daily backups across multiple locations

Your responsibilities: Security is a shared responsibility. Never share your password with anyone, use a strong password, and report any suspicious activity to support@xx90.app immediately.

XX 90 regularly reviews and strengthens its security measures. In the event of a security incident, affected users will be notified within 72 hours via email and mobile message with guidance on the steps to take.

9 Minor Protection

XX 90 is strictly not intended for anyone under the age of 18. We do not knowingly collect or store any data from minors.

Age verification is mandatory during registration. If we discover that an account has been created by someone under 18, it will be closed immediately and all collected data will be permanently deleted.

For parents: If you believe your child is using the XX 90 platform, contact us immediately at support@xx90.app. We will investigate the account within 24 hours and take the necessary action.

10 Contact Us

For any questions, concerns, or requests regarding our Privacy Policy, please reach out to our dedicated Data Privacy Team:

  • Email: support@xx90.app
  • Response Time: 24 hours for general queries, 30 days for data requests
  • Language: Support available in Bengali and English

This Privacy Policy was last updated in January 2026. Any future changes will be published on the website and registered users will be notified by email.

FAQ

Frequently Asked Questions About Our Privacy Policy

No, XX 90 never sells your personal data to third parties. Only limited information is shared with specific partners strictly for payment processing and legal compliance.

Retention periods vary by data type. Transaction records are kept for 5 years after account closure, KYC documents for 7 years, and general log data for up to 12 months.

Yes, you can request deletion of your data at any time by emailing support@xx90.app. All data beyond legal obligations will be deleted within 30 days.

XX 90 collects only approximate country and city information derived from IP addresses. This is used to ensure legal compliance and prevent access from restricted regions. Precise GPS location is never collected.

Yes, if there are any significant changes to the Privacy Policy, registered users will be notified via email and through the platform at least 14 days in advance.

Yes. XX 90 never stores full card numbers or bank account details. Payments made via bKash, Nagad, and Rocket are processed directly through their secure gateways — we only retain the transaction ID.
🔒

Your Privacy Is Protected — Get Started Today

Your data is fully secure at XX 90. Join today with world-class encryption and a transparent privacy policy.

বাংলা