900bet Privacy Policy — How Your Information Is Kept Safe

When you register and use 900bet's services, certain information is collected. This data falls into three categories — information you provide directly, data collected automatically, and information received from third parties.

Directly collected information includes: name, date of birth, email address, mobile number, physical address, and a copy of your ID (for KYC verification). For payments, mobile banking numbers or bank account details are also required.

Automatically collected data includes: IP address, browser type, device information, time spent on the site, pages visited, and more. This information is used to improve site performance.

• Full credit/debit card numbers are never collected or stored
• Identity document information is stored in encrypted format only after KYC verification
• No personal data from minors (under 18) is knowingly collected
• Routine data deletion takes place after a set period following account closure

900bet uses your information only for specific, defined purposes. Each purpose is clearly outlined below — no ambiguity, no guesswork.

Account Management: Your personal information is used to create your account, verify logins, reset passwords, and keep your account secure. This is the most essential use of your data.

Payment Processing: Payment-related information is required to process deposits and withdrawals securely. This data is used for transaction verification and anti-fraud measures.

Legal Obligation: 900bet operates under an international licence. Retaining certain data is a legal requirement to comply with anti-money laundering regulations and KYC obligations.

• Your information is used to support customer service and resolve complaints
• May be used to personalize your site experience
• Promotional communications are only sent with your consent
• Log data is analyzed to identify potential security threats

900bet does not sell your data. However, to deliver our services, limited information may be shared with a select group of trusted partners. Who they are, what data is shared, and why — it is all set out clearly below.

Your data is not shared with any parties outside the list above. It is never disclosed to advertisers, data brokers, or marketing agencies.

• All partner organisations are required to uphold 900bet's privacy standards
• You will be informed in advance, as far as possible, before any data is disclosed for legal reasons
• Data protection standards remain in place in the event of a company merger or acquisition

900bet follows the highest industry standards to protect your data. Strict administrative controls are enforced alongside technical safeguards.

All data transfers occur over HTTPS and are secured with 256-bit AES encryption. Passwords are never stored in plain text — bcrypt hashing is used instead. Payment information is handled in accordance with PCI-DSS standards.

Our servers are protected by firewalls, intrusion detection systems, and regular security audits. Staff access to data is role-based — meaning each team can only view the information relevant to their function.

• Accounts are automatically locked upon detection of suspicious login attempts
• In the event of a data breach, affected users will be notified within 72 hours
• Enabling two-factor authentication (2FA) is strongly recommended
• Email alerts are sent for login attempts from unrecognized devices

The 900bet website uses cookies. Cookies are small files stored in your browser that help keep the site running properly and improve your experience.

Cookies can be managed through your browser settings. However, disabling essential cookies may affect the functionality of certain features on the site.

Every registered user at 900bet has rights over their own personal data. Contact our support team to exercise any of these rights.

900bet does not retain data beyond what is necessary. Each category of data has a defined retention period.

• Data is securely deleted upon expiry
• Analytics data is anonymized with all personal identifiers removed
• The deletion process is audited on a regular basis

For any privacy-related questions, requests, or complaints, reach out to the 900bet support team. You're welcome to write in Bengali and will receive a response in kind.

Requests to access, correct, or delete your data will be responded to within 30 days. In complex cases this may extend to 60 days — you will be notified in advance if that is the case.

When this Privacy Policy is updated, the date at the top of the page will be revised. You will be informed of significant changes via email or in-app notification beforehand.