Privacy Policy for
90jelly
At 90jelly, your privacy is a core commitment, not an afterthought. This Privacy Policy explains exactly what personal data we collect, how we use it, who we share it with, and how you can exercise your rights as a player on Bangladesh's trusted online casino platform.
How 90jelly Protects Your Data
Before diving into the full legal text, here is a plain-English summary of our six core privacy commitments to every player on the 90jelly platform.
Every page, every login, and every financial transaction on 90jelly is protected by industry-standard TLS/SSL encryption. Your data travels over an encrypted channel from your device to our servers at all times.
Personal data collected by 90jelly is stored on secured servers with access controls, firewall protection, and regular security audits. Sensitive fields such as passwords are stored using one-way hashing and are never stored in plain text.
90jelly collects only the data necessary to operate your account, process transactions, comply with anti-money laundering obligations, and deliver a personalised gaming experience. We do not collect data beyond what is reasonably necessary for these purposes.
90jelly does not sell, rent, or trade your personal data to third-party marketers. Data shared with third parties is limited to operational partners (game providers, payment processors) and is governed by strict data processing agreements.
You have the right to access, correct, delete, or export the personal data 90jelly holds about you. You may also object to certain types of processing and withdraw marketing consent at any time via your account settings or by contacting support.
90jelly uses cookies strictly for session management, security, platform analytics, and optional personalisation. We provide clear information on what each cookie category does and how you can manage your preferences through your browser settings.
1. Data We Collect
90jelly collects personal data from players through several channels: directly via account registration and subsequent account activity, automatically via your use of the platform and its technical infrastructure, and from third parties such as payment processors and identity verification providers where applicable. The following categories of data may be collected:
1.1 Registration & Identity Data
When you create an account on 90jelly, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, mobile phone number, and any username or display name you choose. This data is necessary to establish your account identity, verify your eligibility to use the platform (including age verification to confirm you are 18 or older), and comply with Know Your Customer (KYC) obligations.
1.2 Identity Verification Documents
As part of our KYC and anti-money laundering compliance obligations, 90jelly may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also collect proof of address documents and, where required, documentation evidencing the source of funds deposited to your account. These documents are collected only when required by our compliance procedures and are handled with the highest standard of security.
1.3 Financial & Transaction Data
We collect data about your financial transactions on the platform, including deposit amounts, withdrawal requests, payment method identifiers (such as your bKash wallet number, Nagad account reference, or masked card number), transaction timestamps, and transaction reference numbers. We do not store complete card numbers, CVV codes, or full mobile banking PINs — these are handled directly by the respective payment service providers under their own security frameworks.
1.4 Gaming Activity Data
90jelly records data about your gaming activity on the platform, including games played, wager amounts, game outcomes, session durations, bonus usage, and responsible gaming tool activations (such as deposit limit settings and self-exclusion requests). This data is used to operate the platform, resolve disputes, and monitor for responsible gaming indicators.
1.5 Technical & Device Data
When you access 90jelly, our systems automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, platform optimisation, and aggregate analytics. It does not, in isolation, identify you personally, but may be combined with other data for fraud detection purposes.
1.6 Communications Data
If you contact the 90jelly support team via live chat, email, or any other channel, we retain a record of those communications, including the content of your messages, the date and time of contact, and the resolution outcome. This data is retained for quality assurance, dispute resolution, and staff training purposes.
Data Minimisation Principle: 90jelly is committed to collecting only the minimum personal data necessary for each specific purpose. We periodically review our data collection practices to ensure that no category of data is collected beyond what is strictly required for the purposes described in this Privacy Policy.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, date of birth, NID | Account creation, age verification, KYC |
| Contact Data | Email address, mobile number | Account communication, security alerts |
| Financial Data | bKash/Nagad reference, deposit amount | Transaction processing, AML compliance |
| Gaming Data | Wagers, game history, session length | Platform operation, responsible gaming |
| Technical Data | IP address, browser, device type | Security, fraud prevention, analytics |
| Communications Data | Support chat transcripts, emails | Dispute resolution, quality assurance |
2. How We Use Your Data
90jelly processes personal data for the following purposes, each of which is supported by a lawful basis for processing:
2.1 Account Management & Platform Operation
The primary purpose for which 90jelly processes your data is to operate and maintain your player account. This includes enabling you to log in, deposit and withdraw funds, access games, receive bonuses, and use all platform features. Without this processing, it would not be possible to provide the 90jelly service. The lawful basis for this processing is the performance of the contract between you and 90jelly.
2.2 Identity Verification & Age Confirmation
90jelly is required to verify that all players are aged 18 or above before they may deposit funds or participate in real-money gaming. We process identity and age-related data to fulfil this obligation. This processing is also necessary to comply with anti-money laundering (AML) and Know Your Customer (KYC) requirements. The lawful basis for this processing is legal obligation and the performance of contract.
2.3 Payment Processing
Financial transaction data is processed to facilitate deposits via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard, and to process withdrawal requests to your registered payment method. This processing is necessary for the performance of the contract and is carried out in cooperation with our authorised payment processing partners. 90jelly does not retain full payment credentials — tokenised references are used wherever possible.
2.4 Fraud Prevention & Security
90jelly processes technical data, gaming activity data, and identity data to detect and prevent fraud, money laundering, and other forms of financial crime. This includes the detection of duplicate accounts, chargebacks, bonus abuse, and suspicious betting patterns. The lawful basis for this processing is our legitimate interest in maintaining the integrity of the platform and protecting all players from harm.
2.5 Responsible Gaming Monitoring
We use gaming activity data to monitor player behaviour for indicators of problem gambling. Where our responsible gaming systems identify patterns of concern — such as rapid escalation of deposit amounts, extended uninterrupted sessions, or frequent attempts to reverse self-exclusions — the 90jelly responsible gaming team may proactively contact the player. This processing is carried out in the player's vital interests and in support of our responsible gaming commitments.
2.6 Customer Support
Communications data is processed to provide effective customer support, resolve disputes, and improve the quality of our support services. Support records are retained for a defined period to enable follow-up on unresolved queries and to defend against potential claims. The lawful basis for this processing is the performance of contract and our legitimate interests.
2.7 Marketing Communications
With your consent, 90jelly may send you promotional communications by email or SMS regarding bonuses, new games, seasonal promotions (including Eid, Pohela Boishakh, and other occasions relevant to Bangladeshi players), and other offers. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
No Automated Decision-Making: 90jelly does not make decisions with significant legal or comparable effects on players using purely automated means without human review. Where automated systems flag an account for investigation (e.g., fraud detection or responsible gaming monitoring), a member of the 90jelly compliance or support team will review the matter before any consequential action is taken.
3. Data Sharing & Disclosure
90jelly does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.
3.1 Payment Service Providers
To process deposits and withdrawals, 90jelly shares relevant transaction data with our authorised payment partners, including bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard. Each payment provider is an independent data controller in respect of data processed through their own platforms and is subject to their own privacy policies and applicable financial regulations.
3.2 Game Software Providers
Games on the 90jelly platform are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as player session tokens) to authenticate game sessions and ensure game integrity. Providers do not receive your full identity data unless specifically required for a regulated game feature. All third-party game providers are contractually required to process shared data in accordance with applicable data protection standards.
3.3 Identity Verification & KYC Providers
Where automated identity verification services are used to support KYC processes, 90jelly may share identity document data with authorised verification service providers. These providers act as data processors under contract with 90jelly and are not permitted to use the data for any purpose other than the verification service.
3.4 Legal & Regulatory Disclosures
90jelly may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law or where we have a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, or other serious criminal activity. We will notify affected players of such disclosures where legally permissible to do so.
3.5 Corporate Transactions
In the event of a merger, acquisition, business transfer, or sale of substantially all of our assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify players of any such transfer and of any material change to the privacy practices that may result from it.
International Transfers: Some of our third-party service providers (particularly game software providers) may be located outside Bangladesh. Where personal data is transferred internationally, 90jelly takes reasonable steps to ensure that adequate protections are in place, including contractual safeguards consistent with applicable data protection principles.
4. Cookies & Tracking Technologies
90jelly uses cookies and similar tracking technologies (such as local storage and session storage) to operate the platform effectively, maintain security, and improve the player experience. This section explains what types of cookies we use, what they do, and how you can manage your preferences.
4.1 Strictly Necessary Cookies
These cookies are essential to the operation of the 90jelly platform and cannot be disabled. They include session management cookies that keep you logged in during an active session, security tokens that protect against cross-site request forgery (CSRF), and cookies that store your basic platform preferences. Without these cookies, core platform functions such as account login, deposits, and game loading will not work correctly.
4.2 Analytics Cookies
With your consent, 90jelly uses analytics cookies to collect aggregated, anonymised data about how players navigate and interact with the platform. This data helps us understand which features are most used, where players encounter difficulties, and how we can optimise the platform experience. Analytics data is not linked to your individual identity and is processed at an aggregate level only.
4.3 Preference & Personalisation Cookies
These optional cookies store your platform preferences — such as your preferred language (English), game display settings, and notification preferences — so that you do not need to re-enter them on every visit. You may disable these cookies via your browser settings, though doing so may result in a less personalised experience.
4.4 Fraud Detection & Security Cookies
90jelly uses certain technical cookies and device fingerprinting mechanisms for the purpose of detecting fraudulent activity, identifying duplicate accounts, and monitoring for suspicious login patterns. These security-focused technologies are classified as strictly necessary and cannot be opted out of, as they are essential to the integrity and security of the platform.
4.5 Managing Cookies
You can manage or delete non-essential cookies at any time through your browser settings. Most modern browsers allow you to block or delete all cookies, or to block cookies from specific websites. Please note that disabling cookies may affect the functionality of the 90jelly platform. Instructions for managing cookies can be found in your browser's help documentation. Third-party browser extensions are also available to help manage cookie preferences across websites.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login, security | No — essential to platform function |
| Analytics | Aggregated platform usage insights | Yes — via browser settings |
| Personalisation | Language, display, and UX preferences | Yes — via browser settings |
| Security / Fraud Detection | Account integrity, duplicate detection | No — required for platform security |
5. Data Security
90jelly takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect against unauthorised access, accidental loss, destruction, or disclosure. While no platform can guarantee absolute security, our security programme is designed to reflect current industry best practices for online gaming environments.
5.1 Encryption
All data transmitted between your device and the 90jelly platform is encrypted using TLS (Transport Layer Security) protocol. Our SSL certificate is maintained and renewed to ensure that the encryption standard remains current. Sensitive data fields stored in our databases — including passwords and identity document references — are protected using industry-standard encryption and hashing mechanisms.
5.2 Access Controls
Access to systems and databases containing personal data is restricted to authorised 90jelly personnel on a need-to-know basis. Role-based access controls are enforced, and access to sensitive systems requires multi-factor authentication. All staff with access to personal data undergo background checks and receive training on data protection obligations and security best practices.
5.3 Security Monitoring
90jelly operates continuous security monitoring across its platform infrastructure. This includes intrusion detection systems, real-time log monitoring for anomalous access patterns, and regular penetration testing. Security incidents are responded to according to a defined incident response protocol that includes containment, assessment, and, where required, notification to affected players.
5.4 Data Breach Response
In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, 90jelly will take prompt action to contain the breach and notify affected players without undue delay. Notification will be provided via the email address registered to your account and will include a description of the nature of the breach, the data categories affected, and the steps 90jelly has taken in response.
Your Role in Security: While 90jelly maintains robust security controls at the platform level, you also play an important role in keeping your account secure. Use a strong, unique password for your 90jelly account. Do not share your login credentials with anyone. Log out of your account when using shared devices. Contact support immediately at support@90jelly if you suspect unauthorised access to your account.
6. Data Retention
90jelly retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following retention periods apply as general guidelines:
6.1 Active Account Data
Data associated with your active 90jelly account — including registration data, transaction records, and gaming history — is retained for the full duration of your account's active status. This data is necessary to operate your account and to comply with financial record-keeping obligations that may require retention of transaction data for several years following each transaction.
6.2 Data Following Account Closure
Following the closure of your 90jelly account — whether by voluntary request or by 90jelly action — certain categories of data are retained for a defined post-closure period. Financial transaction records and KYC documentation may be retained for up to five years following account closure to comply with anti-money laundering record-keeping requirements. Support communications may be retained for up to three years following closure for dispute resolution purposes.
6.3 Marketing Data
If you have consented to receive marketing communications from 90jelly, your contact data used for marketing purposes will be retained until you withdraw your consent or until your account is closed, whichever occurs first. Following consent withdrawal, your data will be removed from active marketing lists within a reasonable operational timeframe.
6.4 Technical & Log Data
Technical logs, IP address records, and security monitoring data are typically retained for a shorter period (generally between 90 days and 12 months) unless specific data within those logs is required in connection with an active security investigation, dispute, or legal proceeding, in which case the relevant data will be retained until the matter is resolved.
6.5 Data Deletion
When a retention period expires and there is no ongoing legal basis for continued storage, 90jelly securely deletes or anonymises the relevant personal data. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for aggregate statistical and platform improvement purposes, as it no longer constitutes personal data.
7. Your Rights
As a player on the 90jelly platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at support@90jelly. We will respond to all valid requests within a reasonable timeframe and will not charge a fee for standard requests.
7.1 Right of Access
You have the right to request a copy of the personal data that 90jelly holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon receiving a valid request, we will provide you with a summary of the personal data categories we hold, the purposes for which it is processed, and any third parties with whom it has been shared.
7.2 Right to Rectification
If any personal data held by 90jelly about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For basic account information such as your email address or phone number, you may update this directly in your account settings. For identity data such as your registered name or date of birth, please contact support with appropriate documentary evidence of the correct information.
7.3 Right to Erasure
You may request that 90jelly delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right is not absolute — where legal or regulatory obligations require us to retain certain data (such as AML record-keeping requirements), erasure of that data will not be possible during the mandatory retention period.
7.4 Right to Restrict Processing
You may request that 90jelly restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending a determination of whether our legitimate interests override your rights.
7.5 Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of the personal data you have provided to 90jelly in a structured, commonly used, machine-readable format. You may also request that this data be transmitted directly to another controller where technically feasible.
7.6 Right to Withdraw Marketing Consent
If you have given consent to receive marketing communications from 90jelly, you may withdraw that consent at any time by updating your communication preferences in your account profile or by contacting support. Withdrawal of marketing consent will not affect the lawfulness of any processing that took place based on your consent before withdrawal, and will not affect your ability to use the 90jelly platform.
Identity Verification for Rights Requests: To protect the privacy of all players, 90jelly may be required to verify your identity before processing a rights request. This ensures that personal data is not disclosed to, modified by, or deleted at the request of an unauthorised party. Verification will typically involve confirming your registered email address and may require additional information in certain circumstances.
8. Contact & Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 90jelly handles your personal data, you are encouraged to contact us in the first instance using the details below. We take all privacy-related enquiries seriously and will endeavour to provide a substantive response within a reasonable timeframe.
8.1 General Privacy Enquiries
For general questions about this Privacy Policy or to exercise any of your data rights described in Section 7, please contact the 90jelly privacy team by email at support@90jelly. Please include "Privacy Request" in the subject line of your email along with a brief description of your enquiry or request. This helps our team route your message to the appropriate person promptly.
8.2 Data Protection Officer
90jelly has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with applicable data protection principles and for handling escalated privacy matters. If you are not satisfied with the response you receive from our general support team, or if your matter involves a sensitive data protection issue, you may escalate directly to the DPO at the same contact address: support@90jelly, with the subject line "DPO Escalation".
8.3 Updates to This Privacy Policy
90jelly reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, we will notify registered players via the email address associated with their account and will update the effective date displayed at the top of this page. Continued use of the 90jelly platform following notification of a material change constitutes acceptance of the updated Privacy Policy.
8.4 Governing Language
This Privacy Policy is written in English. In the event of any inconsistency between an English-language version of this policy and any translated version, the English version shall prevail. This policy is intended for players accessing 90jelly from Bangladesh and is written with reference to the platform's operations as they apply to that market.
Last Reviewed: This Privacy Policy was last reviewed and updated in January 2026. 90jelly recommends that players review this policy periodically to remain informed of how their personal data is handled. The most current version of this policy is always available at /privacy-policy on the 90jelly platform.
Ready to Play at 90jelly?
Your privacy is protected every step of the way. Explore Bangladesh's most trusted online casino, enjoy 3,200+ games, live cricket odds, and instant bKash & Nagad transactions — all under the security framework described in this policy.