bd9bd Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by bd9bd ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at bd9bd.io ("the Platform"). This Policy sets out the basis on which we collect, process, store, share, and protect personal information relating to registered players and visitors to the Platform ("you", "your").

bd9bd is committed to safeguarding the privacy of every individual who interacts with our Platform. We recognise that players in Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility with the utmost seriousness. This Policy has been written in plain English so that it is accessible and understandable to all players, regardless of their background.

This Policy should be read in conjunction with our Terms & Conditions, which are available at bd9bd.io/terms-conditions, and our Responsible Gaming Policy at bd9bd.io/responsible-gaming. In the event of a conflict between this Policy and any other document, this Policy governs all matters relating to data privacy.

2. Data Controller

For the purposes of data protection law, bd9bd acts as the data controller in respect of the personal information collected from players and visitors to the Platform. As data controller, bd9bd determines the purposes for which personal data is processed and the manner in which such processing is carried out.

All data-related enquiries, access requests, and complaints should be directed to our designated data protection contact using the details provided in Section 15 of this Policy. We are committed to handling all such communications promptly and transparently.

3. Data We Collect

bd9bd collects several categories of personal information in the course of providing its services. The specific data we collect depends on how you interact with the Platform:

3.1 Identity and Contact Information

• Full legal name (first name and surname)
• Date of birth (required for age verification — players must be 21 or above)
• Residential address, including city, district, and postcode
• Mobile phone number
• Email address
• National ID card number or passport number (for KYC verification)

3.2 Financial Information

• Payment method details (bKash account number, Nagad account number, Rocket account, bank account details, Visa/Mastercard card details)
• Transaction history (deposits, withdrawals, wager amounts, bonus credits)
• Account balance information

3.3 Gaming Activity Data

• Game session logs (games played, wager amounts, outcomes, timestamps)
• Sports betting selections and results
• Bonus usage records and wagering progress
• Responsible gaming settings (deposit limits, session time-out preferences)

3.4 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Pages visited on the Platform and time spent per session
• Referring URL (the site or link that directed you to bd9bd)

3.5 Communications Data

• Support chat transcripts and email correspondence with our team
• Survey responses and feedback submissions
• Promotional communication preferences (opt-in or opt-out status)

4. How We Collect Your Data

bd9bd collects personal data through the following channels:

Collection Method	Data Categories Gathered
Account Registration Form	Identity, contact, date of birth
KYC Document Upload	National ID / passport, proof of address, payment method ownership
Deposit & Withdrawal Transactions	Payment method details, transaction amounts, timestamps
Platform Usage	Game logs, betting history, session data, responsible gaming settings
Cookies & Tracking Technologies	IP address, device data, browsing behaviour on Platform
Customer Support Interactions	Communication content, query details, resolution history
Third-Party Verification Services	Identity confirmation data returned from KYC/AML service providers

5. Legal Basis for Processing

bd9bd processes personal data under one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our obligations under the account agreement with you — for example, processing deposits, paying out winnings, and providing customer support.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, age verification obligations, and financial record-keeping duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights.
• Consent: Where you have given us specific consent to process your data for a particular purpose, such as receiving promotional emails or SMS notifications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

bd9bd uses the personal data we collect for the following purposes:

• Creating and managing your player account, including identity verification and age confirmation (21+ requirement)
• Processing financial transactions — deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — and processing withdrawal requests
• Delivering the gaming and sports betting services you access on the Platform, including game history and account balance management
• Applying responsible gaming tools you configure, such as deposit limits, session alerts, and self-exclusion requests
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct
• Providing customer support and resolving disputes or complaints raised by you
• Sending transactional notifications regarding your account (deposits confirmed, withdrawals processed, KYC status updates)
• Sending promotional communications, including offers tied to BPL season, Eid, Pohela Boishakh, and other seasonal events — only where you have opted in to receive them
• Conducting internal analytics to improve Platform performance, user experience, and game selection
• Complying with applicable legal and regulatory requirements

7. Data Sharing & Disclosure

bd9bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal information only in the limited circumstances described below:

7.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners for transaction processing
• KYC and identity verification providers: For document verification and age confirmation
• AML screening services: For sanctions list checks and fraud prevention
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data for technical support purposes
• IT infrastructure and cloud hosting providers: For secure data storage and platform operation

7.2 Legal and Regulatory Disclosure

bd9bd may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of bd9bd, our players, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd9bd's business assets, personal data held by us may be transferred to the acquiring entity. We will notify affected players of any such transfer and the privacy implications in advance.

7.4 No Sale of Data

Under no circumstances does bd9bd sell, licence, or otherwise transfer personal data to third parties for the purpose of targeted advertising or any other commercial purpose unrelated to the provision of our gaming services.

8. Cookies & Tracking Technologies

bd9bd uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your web browser when you visit the Platform. They serve a number of functional and analytical purposes:

• Essential Cookies: Required for the Platform to function correctly — for example, maintaining your login session, remembering your language preference, and securing your account.
• Functional Cookies: Allow the Platform to remember choices you have made — such as your responsible gaming settings or preferred game category — and provide a more personalised experience.
• Analytical Cookies: Help us understand how players interact with the Platform, which pages are most visited, and where navigation improvements can be made. Analytics data is aggregated and anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, multiple account registration attempts, and automated bot access.

You may configure your browser to refuse some or all cookies. Please note that disabling essential cookies may impair the functionality of the Platform, including your ability to log in and place bets. A detailed cookie notice is available within your account settings.

9. Data Retention

bd9bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal / AML obligation
KYC verification documents	Duration of account + 5 years after closure	Legal / regulatory requirement
Financial transaction records	7 years from transaction date	Financial record-keeping law
Game session and betting logs	3 years from session date	Legitimate interest / dispute resolution
Customer support communications	3 years from last interaction	Legitimate interest / quality assurance
Marketing preference records	Until withdrawal of consent + 1 year	Consent / legal compliance
Technical / device logs	13 months on a rolling basis	Security and fraud prevention

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Players may request early deletion of their data subject to our legal retention obligations — see Section 11 for details.

10. Data Security

bd9bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform
• Encrypted storage of sensitive data fields, including passwords (stored as salted hashes, never in plaintext) and payment method identifiers
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function
• Multi-factor authentication for internal system access by bd9bd staff
• Regular penetration testing and vulnerability assessments by qualified security professionals
• Incident response procedures to detect, contain, and report data breaches in a timely manner
• Staff training on data protection best practices and confidentiality obligations

While bd9bd takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact us immediately at [email protected].

11. Your Rights

As a player on the bd9bd Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this information within a reasonable timeframe, typically within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that certain data must be retained to comply with legal obligations, even after an account is closed.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for fraud prevention purposes.
• Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12. Children's Privacy

The bd9bd Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to any person under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If we become aware that personal data has been submitted by or in relation to a person below the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds in accordance with our legal obligations. If you have reason to believe that a minor has registered on bd9bd, please notify us immediately at [email protected].

13. Third-Party Links

The bd9bd Platform may contain references to game providers and payment partners. While our Platform is designed as a closed environment with no outbound links to external websites, certain technical integrations (such as live dealer game streams from Evolution Gaming or Ezugi) may involve data exchange with those providers under separate privacy frameworks.

bd9bd is not responsible for the privacy practices of any third-party service providers beyond the data processing agreements we hold with them. We encourage you to review the privacy policies of any third-party services you use independently of bd9bd.

14. Amendments to This Policy

bd9bd reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational processes. When material changes are made, we will notify registered players by email or via a prominent notice on the Platform, providing at least 7 days' notice before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version was published. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

Archived versions of previous Privacy Policies are available upon request by contacting our support team.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd9bd holds about you, please contact our data protection team using the following details:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the Platform for all registered players
• Response Time: We acknowledge all privacy-related communications within 5 business days (Bangladesh Standard Time, UTC+6)

bd9bd is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.