Xx90's Privacy Policy —
Your Data Is Safe With Us

Xx90 (referred to herein as "we", "the platform", or "xx90") takes the privacy of your personal information very seriously. This Privacy Policy applies to all users of the xx90 website and mobile application.

This policy clearly states what information is collected, how it is used, how long it is retained, and what rights you have over your data. Our goal is to earn your trust through complete transparency.

This Privacy Policy complements xx90's terms and conditions. Please read it carefully before using the platform.

We collect various types of information when you create an account and use our services. This data falls into two main categories — information you provide directly, and information collected automatically.

• Sensitive data such as passwords is never stored in plain text — it is always encrypted.
• Payment card numbers or full bank details are not stored on our servers.
• Voice or video recordings are never collected under any circumstances.

Xx90 collects your information in several ways. In addition to what you provide directly, some data is gathered automatically by our systems.

• Registration Form: When creating an account, you directly provide details such as your name, email, mobile number, and more.
• KYC Verification: A copy of your national ID or passport is collected to verify your identity.
• Payment Processing: Payment information is collected at the time of deposit and withdrawal.
• Cookies & Tracking: When you browse the website, information is automatically stored in cookies and log files.
• Customer Support Contact: When you reach out via live chat or email, the details of that conversation are stored.
• Third Parties: Limited information may also be received from payment gateways or identity verification services.

Xx90 uses collected data only for legitimate, specified purposes. No information is ever used beyond its intended scope.

• For account creation, management, and identity verification.
• To process deposits, withdrawals, and transactions.
• To send you information about gaming services, offers, and promotions.
• For fraud detection, prevention, and account security.
• To fulfil legal obligations and meet regulatory requirements.
• To improve platform performance and enhance the user experience.
• To monitor usage patterns and ensure responsible gaming.

Xx90 may share information with third parties in limited circumstances and for specific reasons. This is always done under strict confidentiality agreements.

• Payment Partner: Mobile Banking, Nagad, Rocket, or bank — necessary information is shared to complete your transaction.
• Identity Verification Agency: Required information is shared with an approved verification partner as part of the KYC process.
• Legal Authorities: Information may be disclosed under legal obligation in response to a court order or government investigation.
• Technology Service Provider: For hosting, cybersecurity, or analytics services — all parties are bound by NDA.

Xx90 uses cookies on its website to enhance your browsing experience and ensure the platform functions properly. Cookies are small text files stored on your device.

• Essential Cookies: Required to maintain login sessions and ensure security — these cannot be disabled.
• Functional Cookies: To remember your preferences and language settings.
• Analytics Cookies: For website traffic analysis and service improvement.

You can manage or delete cookies through your browser settings. However, disabling certain essential cookies may prevent the platform from functioning properly.

Xx90 uses internationally recognized security technology to protect your data. Our security systems are continuously updated to keep your information safe against emerging threats.

• SSL/TLS 256-bit encryption is applied to all data transmissions.
• Passwords are stored as bcrypt hashes — never in plain text.
• Server firewall and Intrusion Detection System (IDS) are active.
• Regular third-party security audits and penetration testing are conducted.
• Suspicious logins and unusual activity are automatically detected and blocked.
• Data backups are stored regularly on encrypted offsite servers.

Xx90 does not store any data indefinitely. A specific retention period is defined for each category of information.

• Account Information: For the duration your account is active, and for 5 years after closure (as required by law).
• Transaction Records: Minimum 5 years — in accordance with anti-money laundering regulations.
• KYC Documents: 5 years from the date of verification.
• Customer Support Contact: 2 years.
• Session & Log Files: 1 year.
• Marketing Consent: Until consent is withdrawn.

As an xx90 user, you have important rights over your own data. We respect these rights and are committed to fulfilling them as promptly as possible.