bdb9 Privacy
Policy

1. Information We Collect

When you register for and use a bdb9 account, we collect personal data in several ways. The categories of data we collect depend on the nature of your interaction with the platform and are described in detail below.

1.1 Registration Data

When you create a bdb9 account, we collect the following information that you voluntarily provide:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify you are aged 18 or above)
• Mobile phone number registered in Bangladesh
• Preferred payment method and associated mobile wallet number (bKash, Nagad, Rocket, or Upay account number)
• Username and password (password is stored in hashed form — we never store plain-text passwords)
• City of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect the following documents during the verification process:

• Copy of your National Identity Card (NID) or passport
• A recent mobile wallet statement showing your account number and name
• A selfie photograph taken alongside your identity document

KYC documents are retained for the period required by applicable anti-money laundering (AML) regulations and are never used for any purpose other than identity verification and fraud prevention.

1.3 Transaction Data

We record all financial transactions associated with your account, including deposit amounts, withdrawal requests, bonus credits, bet history, game session records, and win/loss outcomes. This data is used for account management, fraud detection, dispute resolution, and regulatory compliance.

1.4 Technical & Device Data

When you access bdb9, our systems automatically record certain technical information about your device and session, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps (login time, logout time, session duration)
• Pages visited, features used, and in-app navigation path
• Referring URL (the page you visited before arriving at bdb9)

1.5 Communications Data

If you contact bdb9's support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. This data is used to improve our support quality and to resolve any future disputes relating to the same matter.

2. How We Use Your Data

bdb9 processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises the key purposes for which we process data and the legal basis for doing so.

Purpose	Data Used	Legal Basis
Account creation & management	Registration data, device data	Contractual necessity
Age & identity verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits & withdrawals	Transaction data, payment method details	Contractual necessity
Fraud prevention & AML monitoring	Transaction data, device data, IP address	Legal obligation / legitimate interest
Customer support & dispute resolution	Communications data, transaction data	Contractual necessity / legitimate interest
Platform performance & security	Device data, session data	Legitimate interest
Responsible gaming monitoring	Betting history, session data	Legal obligation / legitimate interest
Promotional communications (opted-in only)	Mobile number, betting preferences	Consent

2.1 Marketing Communications

bdb9 may send you promotional messages about bonus offers, seasonal tournaments (such as BPL or T20 World Cup promotions), or new features by SMS or in-app notification — but only if you have explicitly opted in to receive such communications during the registration process or via your account settings. You may withdraw your consent at any time by contacting our support team or updating your notification preferences in your account settings panel.

3. Data Sharing & Third Parties

bdb9 does not sell your personal data to any third party. We share data only with the categories of partners listed below, and only to the extent necessary to fulfil the specific purpose described.

3.1 Payment Processing Partners

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer, we must share your mobile wallet number or bank account details with the relevant payment service provider. These partners are bound by their own privacy obligations under Bangladesh Bank regulations and are prohibited from using your data for any purpose other than transaction processing.

3.2 Identity Verification Services

bdb9 may use third-party KYC verification technology to cross-reference identity documents against authoritative databases. These service providers process identity data solely on our behalf under strict data processing agreements and do not retain your documents after verification is complete.

3.3 Game Technology Providers

bdb9 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, certain session data (such as player ID, bet amount, and game outcome) is transmitted to the game server operated by that provider. This data is used solely for game operation, RTP certification, and fair-play auditing. No personal contact information is shared with game providers.

3.4 Legal & Regulatory Disclosure

bdb9 may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction in response to a lawful request, court order, or legal obligation. We will notify you of any such request to the extent permitted by law.

4. Cookies & Tracking Technologies

bdb9 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and monitor security. The following table describes the categories of cookies we use.

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, CSRF protection	Session / 24 hours
Functional	Remembering language preference and display settings	30 days
Analytics	Understanding how pages are used, identifying performance issues	90 days
Security	Fraud detection, device fingerprinting, unusual activity flags	Session / 7 days

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage functional and analytics cookies via your browser settings. Note that disabling certain cookies may affect the performance or availability of some features on the bdb9 platform.

4.1 No Third-Party Advertising Cookies

bdb9 does not use third-party advertising cookies, retargeting pixels, or any tracking technology designed to build cross-site behavioural profiles for advertising purposes. The analytics data we collect is used solely for internal platform improvement and is not shared with advertising networks.

5. Data Retention & Storage

bdb9 retains your personal data for as long as your account remains active and for the period required by applicable law after account closure. The specific retention periods for each data category are outlined below:

• Registration and KYC data: Retained for a minimum of 5 years from account closure, in compliance with anti-money laundering obligations applicable under Bangladesh Financial Intelligence Unit (BFIU) guidelines.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last interaction in the relevant support thread.
• Technical and device data: Retained for 12 months from the date of collection, after which it is anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account.

All personal data held by bdb9 is stored on servers located in secure data centres. Where data is transferred or processed outside Bangladesh, we ensure that appropriate contractual safeguards are in place to maintain the same standard of protection that applies under this Privacy Policy.

6. Your Rights Over Your Data

As a bdb9 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email us at [email protected] (plain text — not a clickable link). We will respond to all valid requests within 30 days of receipt.

6.1 Right of Access

You may request a copy of the personal data we hold about you at any time. We will provide a structured summary of your data in a commonly used electronic format, free of charge, within 30 days of receiving your request.

6.2 Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as your city of residence) directly from your account settings. For changes to name or date of birth, identity document verification will be required before the update is processed.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where you believe the data has been processed unlawfully. Please note that bdb9 is required by law to retain certain categories of data (particularly KYC and transaction records) for a minimum period regardless of any erasure request, and such data cannot be deleted until the legally required retention period has elapsed.

6.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data or where you have objected to processing and a determination is pending — you may request that bdb9 restrict the active processing of your personal data while the matter is resolved.

6.5 Right to Data Portability

Where processing is based on your consent or is necessary for a contract, you may request that bdb9 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider. This right applies to data you have actively provided to bdb9 (such as registration information and transaction history).

6.6 Right to Object

You have the right to object to the processing of your personal data where bdb9 relies on legitimate interest as the legal basis. If you object, bdb9 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or that the processing is necessary for the establishment, exercise, or defence of legal claims.

7. Security Measures We Take

bdb9 implements a layered security framework to protect your personal data from unauthorised access, loss, misuse, alteration, or destruction. Our security measures include, but are not limited to, the following:

• TLS/SSL Encryption: All data in transit between your device and bdb9 infrastructure is encrypted using Transport Layer Security (TLS 1.2 or higher). Sensitive fields such as passwords are further protected using one-way cryptographic hashing.
• Two-Factor Authentication (2FA): Registered players may enable 2FA on their account, adding a second verification step via OTP sent to their registered mobile number.
• Intrusion Detection Systems (IDS): Our infrastructure is monitored continuously by automated systems that detect and flag unusual access patterns, brute-force attempts, and suspicious login activity.
• Access Control: Internal access to personal data is governed by role-based access controls (RBAC). Staff members access only the data necessary for their specific job function.
• Regular Security Reviews: bdb9 conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in our systems and processes.
• Incident Response: In the event of a data security incident that may affect your personal data, bdb9 will notify affected players within 72 hours of becoming aware of the breach and will communicate the nature of the incident, the data potentially affected, and the remedial steps taken.

8. Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdb9 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week. Our team targets an initial response time of under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). We aim to respond to all written privacy enquiries within 5 business days of receipt.

When submitting a data rights request, please include your registered mobile number and a brief description of your request so we can locate your account and respond efficiently. We may need to verify your identity before processing certain requests (such as data access or erasure) to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party.

8.1 Policy Updates

bdb9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The effective date at the top of this document will be updated whenever a material change is made. Where a change is significant, we will notify registered players via in-app notification or SMS to their registered mobile number. Your continued use of bdb9 following such notification constitutes your acceptance of the revised Privacy Policy.