X89 Privacy Policy

Privacy Policy introduction and commitment

Welcome to x89. We take your privacy and personal information security very seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the x89.pro website and our services.

X89 is an international gaming platform serving players in Bangladesh and around the world. We comply with GDPR (General Data Protection Regulation), PCI DSS, and other international data protection standards. Our privacy policy is transparent, easy to understand, and provides complete information about your rights.

Who this policy applies to

This privacy policy applies to all users of x89 who use our website, mobile application, or any platform. It applies to both registered members and visitors. By using our services, you agree to this privacy policy.

Policy updates and changes

We may update this privacy policy from time to time to align with new laws, technology, or business practices. If there are any significant changes, we will notify you via email or site notification. The latest update date is always noted at the top of this page.

What information we collect and why

To provide safe and personalized services at x89, we collect various types of information. We only collect information necessary to serve you, protect your account, and fulfill legal obligations.

Information You Provide

Registration information

• Full name, date of birth and nationality
• Email address and mobile number
• Address and postal code
• Username and password (encrypted)
• Preferred language and currency

Verification documents (KYC)

• National ID card, passport or driving licence
• Proof of address (utility bill, bank statement)
• Proof of payment method (card photo, bank documents)
• Selfie or Biometric Verification

Financial transaction information

• Deposit and withdrawal payment methods
• Transaction history and amounts
• Bank account or mobile banking number
• Credit/debit card information (in PCI DSS secure storage)

Automatically Collected Information

Device and browser information

• IP Address and Geolocation
• Device type, operating system and browser
• Screen Resolution and Language Settings
• Cookies and tracking identifiers

Usage and activity data

• Login and logout times
• Gaming history and betting patterns
• Pages and features clicked
• Session Duration and Frequency

Communication records

• Customer support chat and email
• Phone call recordings (with consent)
• Feedback and survey responses
• Complaint and dispute resolution history

How we use your information

X89 uses the information collected for various legitimate purposes that help us provide and improve our services. We always respect your privacy and only use necessary information.

Account management and service delivery

• Creating and managing your account
• Verifying your identity and confirming age (KYC/AML)
• Processing deposit and withdrawal transactions
• Providing bonuses, rewards, and winnings
• Recording your game history and statistics

Security and fraud prevention

• Detecting and preventing suspicious activity
• Complying with Anti-Money Laundering (AML) regulations
• Detecting multiple accounts and bonus abuse
• Protecting your account from unauthorized access
• Ensuring game integrity by analyzing betting patterns

Communication and customer support

• Responding to your questions and complaints
• Sending important account updates and notifications
• Informing you about promotions, bonuses, and special offers (with your consent)
• Sending responsible gaming reminders and alerts
• Providing information about new features and games

Platform improvement and personalization

• Suggesting games and content based on your preferences
• Improving website performance and user experience
• Testing new features and collecting feedback
• Identifying and resolving technical issues
• Performing data analysis and creating trend reports

Legal and regulatory obligations

• Meeting licensing authority requirements
• Cooperating with lawful requests from law enforcement agencies
• Supporting tax reporting and financial audits
• Providing evidence for dispute resolution and legal proceedings
• Preparing regulatory reports and compliance documentation

When and with whom we share information

X89 is committed to protecting your privacy. We never sell your personal information. However, to provide services and fulfill legal obligations, we may share your information with trusted third parties in specific circumstances.

Service Providers and Partners

Type of Service Provider	Purpose	Information shared
Payment processor	Deposit and withdrawal transactions	Name, payment details, transaction amounts
KYC Verification Service	Identity verification and age confirmation	ID documents, proof of address, biometric data
Game software provider	Operating live casino and slots games	User ID, bet history, game sessions
Cloud storage providers	Data backup and storage	Encrypted databases and files
Analytics tools	Analyzing website performance	Anonymized usage data, device information
Customer support tools	Support Ticket Management	Name, email, contact history

Legal and Regulatory Sharing

We are required by law to share your information in the following circumstances:

• For audits and compliance reports upon request from licensing and regulatory authorities
• In accordance with lawful court orders or subpoenas from law enforcement
• For reporting suspected money laundering or terrorist financing
• With government agencies to protect national security or public interest
• For industry collaboration in fraud investigation and prevention

Business transfers

If x89 undergoes a merger, acquisition, or asset sale, your personal information may be transferred to the new owner. In such cases, we will notify you in advance and the new entity will maintain the same privacy standards.

With your consent

We will always obtain your explicit consent before sharing your information for any purpose other than those mentioned above. You can withdraw your consent at any time.

How Your Information Is Kept Secure

X89 follows the highest standards to protect your personal and financial information. We use industry-leading technology and practices to safeguard your data from unauthorized access, loss, or theft.

Technical security measures

• SSL/TLS Encryption: All data transmission protected with 256-bit SSL encryption
• Data encryption: Sensitive information encrypted both at rest and in transit
• Firewall and IDS: Multi-layer firewalls and intrusion detection systems
• DDoS Protection: Advanced anti-DDoS technology protects against server attacks
• Regular security audits: Penetration testing by third-party specialists

Organizational security measures

• Access Control: Only authorized employees access required data
• Two-factor authentication: 2FA for both employees and users
• Employee training: Regular data security and privacy training
• Access Logging: All data access is logged and monitored
• NDA Agreements: All employees sign strict confidentiality agreements

Payment security

• PCI DSS Certification: Payment Card Industry Data Security Standard compliance
• Tokenisation: Using secure tokens instead of storing card numbers directly
• 3D Secure: Additional verification layer for online payments
• Fraud Detection: Real-time fraud detection algorithms

Data backup and disaster recovery

We back up data regularly and store it in multiple geographic locations. We have a robust disaster recovery plan to quickly restore data in the event of any disaster or system failure.

Your Privacy Rights and Preferences

X89 believes you have complete control over your personal information. Under GDPR and other data protection laws, you have the following rights.

Your Data Rights

1. Right of Access

You can request at any time what information we hold about you. We will provide you with a copy of your data within 15 business days.

2. Right to Rectification

If your information is incorrect or incomplete, you can update or correct it. Most information can be changed directly from your account settings.

3. Right to Erasure (Right to be Forgotten)

You can request deletion of your personal information. However, some information may need to be retained for legal obligations or legitimate business purposes.

4. Right to Restriction of Processing

In certain circumstances you may request that we restrict or suspend processing of your information, such as during a dispute over the accuracy of your information.

5. Right to Data Portability

You can receive your data in a structured, machine-readable format and transfer it to another service provider.

6. Right to Object

You can object to the processing of your information, particularly for direct marketing or profiling purposes.

7. Right Not to be Subject to Automated Decision-Making

Where decisions are based entirely on automated processing and have a significant effect on you, you may request human intervention.

How to Exercise Your Rights

To exercise any of the above rights, you can contact us through any of the following methods:

• From the "Privacy Rights" section in your account settings
• By emailing our customer support team
• By contacting our Data Protection Officer
• By submitting a request through live chat

We will verify your request and process it within 30 days. For complex requests, we may take an additional 60-day extension and will notify you.

Marketing preference control

You can opt out of marketing communications at any time:

• By clicking the unsubscribe link at the bottom of each promotional email
• By changing communication preferences in your account settings
• Opt out of mobile marketing by replying SMS STOP
• By requesting directly from customer support

Please note that opting out of marketing communications will not stop us sending important transactional emails (such as withdrawal confirmations, security alerts).

Cookies and tracking technology

X89 uses cookies and similar technologies to enhance your browsing experience and personalize our services. We use various types of cookies, and you can control them according to your preferences.

Types of cookies we use

Strictly Necessary Cookies

These cookies are essential for the website to function. Without them, you cannot log in, navigate pages, or access secure areas. These cookies do not store personal information and cannot be disabled.

Functionality Cookies

These cookies remember your preferences such as language, currency, and display settings. They make your experience more personalized but are not essential for the website to function.

Performance cookies (Analytics Cookies)

These cookies help us understand how visitors use our site. They track page views, clicks, and session duration. All data is anonymized and aggregated.

Targeting/advertising cookies (Marketing Cookies)

These cookies are used to show you relevant advertisements and promotions based on your interests. They track your site visits and measure advertising effectiveness.

How to manage cookies

You can control and delete cookies through your browser settings. On your first visit to our website, you can set your preferences in the cookie banner. However, please note that blocking all cookies may prevent some site features from working.

Other Tracking Technologies

• Pixel tags/web beacons: Used to track email opens and page views
• Local Storage: For faster loading by storing data in the browser
• Fingerprinting: For device identification to prevent fraud
• Session Replay: To improve user experience (with consent only)

International Data Transfers

X89 is a global platform with servers and operations in multiple countries. This means your personal information may be processed and stored outside Bangladesh. We ensure that wherever your data resides, it follows the same high security standards.

Data transfer security measures

• Standard Contractual Clauses: EU Commission-approved agreements with our partners
• GDPR-Compliant Countries: Data transfer only to countries with adequate data protection laws
• Data processing agreement: All third parties comply with the same privacy standards
• Encrypted transfer: All international data transfers encrypted
• Limited Access: Only necessary personnel access transferred data

Maintaining Your Rights

Wherever your data is processed, all your privacy rights (access, correction, deletion) remain unchanged. You can exercise these rights at any time, and we will fully cooperate.

Children's privacy and age verification

X89 is a gaming platform for adults. We do not knowingly collect personal information from anyone under 18 years of age. We enforce strict age verification procedures to prevent minors from accessing our services.

Age verification process

• Providing date of birth during registration is mandatory
• KYC verification with government-issued ID
• Additional documents and biometric verification in suspicious cases
• Automated systems block registration of minors
• Using third-party age verification services

If a minor is identified

If we discover that a person under 18 years of age has registered on our site, we will immediately:

• Permanently close their account
• Delete all their personal information
• Will refund any deposits
• Will prevent future registration

If you believe a minor is using our site, please notify our support team immediately so we can investigate and take appropriate action.

Data retention and deletion policy

X89 retains your personal information only for as long as necessary or as required by legal obligations. We follow data minimization principles and regularly delete unnecessary information.

Retention timeframe

Data category	Retention period	Reason
Account Information (Active)	While account remains active	Service Provision and Account Management
Account Information (Closed)	7 years	Legal obligations and dispute resolution
Transaction records	7 years	Tax, audit and AML regulations
KYC Documents	5 years after account closure	Regulatory requirements
Game history	5 years	Dispute resolution and audits
Marketing consent	After 2 years of inactivity	GDPR Requirements
Cookies and logs	13 months	Technical maintenance
Support Ticket	3 years	Customer service improvement

Data deletion process

When the retention period ends or you request deletion, we take the following steps:

• Permanently deleting data from all live databases and systems
• Data from backups is automatically deleted in subsequent cycles
• Instructing third-party service providers to delete data
• Destroying encryption keys so encrypted data cannot be recovered
• Using industry-standard data wiping methods

Legal Holds and Exceptions

In some cases, we may be required to retain your information for an extended period:

• In case of ongoing legal proceedings or investigations
• During regulatory audits or investigations
• For unresolved disputes or complaints
• For fraud investigation and prevention

Privacy-related contact and complaints

If you have any questions, concerns, or complaints about your privacy or data protection, we're here to help. We take all communications seriously and strive to respond promptly.

Contact methods

Complaint Process

If you believe we have violated your data protection rights, you can take the following steps:

1. Contact us: First, contact our support team. We can resolve most issues internally.
2. Submit a formal complaint: If you are not satisfied, submit a written complaint to our Data Protection Officer.
3. Investigation and response: We will investigate your complaint and provide a detailed response within 30 days.
4. Escalation: If you are not satisfied with our response, we will inform you how to escalate further.

Complaints to regulatory authorities

You have the right to lodge a complaint directly with the data protection authority in your country. For EU residents, this is your local Data Protection Authority (DPA). We cooperate fully with regulators and participate in any investigations.

Response timeframe

• General inquiries: 24-48 hours
• Privacy rights requests: 15 working days
• Formal complaints: 30 days
• Urgent security matters: immediate

Policy updates and notifications

We may update this privacy policy from time to time to reflect changes in laws, technology, or our business practices. We ensure you are always informed of any changes.

How we will notify you

• Minor changes: The "Last Updated" date at the top of this page will be changed
• Significant changes: We will notify you via email or site banner
• Major changes: We may seek your renewed consent before the new policy takes effect

Review of changes

We encourage you to review this privacy policy regularly so you know how we are protecting your information. In the event of significant changes, we will give you 30 days' notice.

Your Preferences

If you do not agree with the updated privacy policy, you have the right to:

• Close your account before the new policy takes effect
• To request deletion of your data
• Object to specific data processing activities
• To withdraw your consent (where applicable)

Continuing to use our services after the new policy takes effect will be taken as your acceptance of the updated Privacy Policy.

Final statement

X89 places your privacy and data security at the highest priority. We are committed to handling your personal information transparently, responsibly, and in compliance with all applicable laws. We continuously improve our data protection practices to ensure you have a safe and enjoyable gaming experience.

If you have any questions about this privacy policy or wish to exercise your privacy rights, please do not hesitate to contact us. Our Data Protection Team is always ready to assist you.