bbd9 Privacy
Policy

This Privacy Policy ("Policy") describes how bbd9 ("bbd9", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("User", "you", "your") who access or use the bbd9 platform available at bbd9.io and any associated mobile or web-based interfaces.

We are committed to handling your personal data with integrity and transparency. This Policy has been drafted in plain English to ensure that it is accessible and understandable to all users of the bbd9 platform across Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Policy should be read alongside the bbd9 Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By creating an account or otherwise using the bbd9 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

bbd9 collects different categories of personal data depending on how you interact with the platform. The table below sets out the categories of data we may collect and the context in which collection occurs.

We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless you voluntarily disclose such information in the course of a responsible gaming self-assessment or support interaction, in which case it is handled with heightened care and used solely for the purpose for which it was provided.

bbd9 collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion. This is the primary source of identity, contact, and financial data.

3.2 Automated Technical Collection

When you access the bbd9 platform, our servers automatically record technical data including your IP address, device identifiers, browser type and version, operating system, referring URL, and session timestamps. This data is collected using standard web server logging mechanisms and, where applicable, cookies and similar tracking technologies (see Section 7).

3.3 Third-Party Sources

We may receive personal data about you from the following third-party sources in limited circumstances:

• Payment Providers: bKash, Nagad, Rocket, and Upay may share transaction confirmation data with bbd9 to enable deposit crediting and withdrawal processing.
• Identity Verification Services: Third-party KYC and age-verification service providers may return data to us confirming the authenticity of documents you have submitted.
• Fraud Prevention Networks: We may receive alerts or flags from industry fraud prevention databases where your details match a known risk indicator.
• Game Providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other integrated studios may share aggregated or session-level game data with bbd9 for settlement and responsible gaming monitoring purposes.

bbd9 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to register your account, process deposits and withdrawals, settle bets and casino games, and provide customer support — all of which are required to perform our contract with you.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, fraud prevention duties, and record-keeping requirements under applicable law.
• Legitimate Interests: Processing for the purposes of platform security, fraud detection, service improvement, responsible gaming monitoring, and product analytics, where those interests are not overridden by your privacy rights.
• Consent: Where we send you marketing communications, we do so on the basis of your consent obtained at the time of registration or at a subsequent opt-in point. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bbd9 uses the personal data we collect for the following specific purposes:

• To create and manage your bbd9 account, including verifying your identity and age in compliance with our 21+ policy.
• To process deposits via bKash, Nagad, Rocket, and Upay and to process withdrawal requests to your nominated payment account.
• To settle sports bets, casino game rounds, and bonus calculations accurately and in accordance with the applicable rules.
• To carry out KYC and AML compliance checks as required by standard industry practice.
• To detect, investigate, and prevent fraud, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.
• To provide customer support via email and live chat, and to maintain records of support interactions for quality and compliance purposes.
• To send you transactional communications — such as deposit confirmations, withdrawal status updates, and account security alerts — that are necessary for the operation of your account.
• To send you marketing communications about bbd9 promotions, new games, and seasonal offers, subject to your marketing consent preferences.
• To monitor your gaming behaviour for responsible gaming purposes, including identifying patterns that may indicate problem gambling and triggering appropriate interventions.
• To analyse platform usage, improve the user experience, and develop new features and services.
• To enforce our Terms and Conditions and to defend or pursue legal claims where necessary.

bbd9 does not sell, rent, or trade your personal data to any third party. We may share your data with third parties only in the following limited and controlled circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf and under our instruction as data processors. These include: payment processing partners (bKash, Nagad, Rocket, Upay), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and analytics platforms. All service providers are required to process your data only as instructed by bbd9 and are bound by contractual confidentiality and security obligations.

6.2 Game Studios and Software Providers

Where you play games supplied by Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, or other integrated studios, limited technical session data (such as your session token, game outcome, and bet size) is shared with the relevant provider to enable game delivery and settlement. These providers operate under their own data protection commitments.

6.3 Legal and Regulatory Obligations

bbd9 may disclose your personal data to law enforcement authorities, regulatory bodies, or other third parties where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where we are legally permitted to do so.

6.4 Fraud Prevention and Industry Networks

Where we identify prohibited conduct on your account, we may share relevant data with industry fraud prevention networks and partner platforms to protect the integrity of the online gaming industry. This sharing is conducted on the basis of our legitimate interests in fraud prevention.

6.5 Business Transfers

In the event that bbd9 undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address, and the acquiring entity will be required to honour the terms of this Privacy Policy.

bbd9 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that allow the platform to remember information about your session, preferences, and behaviour across visits. The table below summarises the types of cookies bbd9 uses.

Strictly necessary cookies are deployed without requiring your consent, as they are essential for the platform to function. Functional and analytical cookies are deployed on the basis of your consent where required. You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the bbd9 platform.

bbd9 does not use third-party advertising cookies or cross-site tracking cookies for behavioural advertising purposes.

bbd9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and bbd9 servers.
• Encryption of sensitive data fields (including passwords and financial account identifiers) at rest using industry-standard algorithms.
• Access controls ensuring that only authorised bbd9 personnel with a legitimate need can access personal data, on a role-based, least-privilege basis.
• Regular security assessments and vulnerability scanning of our platform and infrastructure.
• Two-factor authentication options available to users to protect their individual accounts.
• Automated anomaly detection systems that flag unusual login patterns or access attempts for human review.
• Strict contractual data security requirements imposed on all third-party service providers with access to personal data.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a risk to your rights and freedoms, bbd9 will notify affected users without undue delay via their registered email address and will take all reasonable steps to contain and remediate the breach.

bbd9 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of your active bbd9 account.
• Account and Transaction Data (Post-Closure): Retained for a minimum of five (5) years following account closure to comply with standard anti-money-laundering record-keeping obligations.
• KYC and Verification Documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless the interaction relates to a dispute or legal claim, in which case it is retained until that matter is fully resolved.
• Marketing Consent Records: Retained for the duration of your account and for two (2) years following account closure as evidence of consent or withdrawal of consent.
• Technical and Log Data: Retained for up to twelve (12) months for security and platform analytics purposes, then deleted or anonymised.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual. Where full deletion is not technically feasible within a standard business process (for example, in relation to database backup tapes), the data is isolated and protected from further active processing until deletion can be completed.

As a user of the bbd9 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

• Right of Access: You have the right to request a copy of all personal data bbd9 holds about you, together with information about how and why it is processed. We will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date. You may also update basic account details directly from your account settings page.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation requiring us to retain it.
• Right to Restrict Processing: You have the right to request that bbd9 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being considered.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on bbd9's legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The bbd9 platform is strictly intended for adults aged 21 years and over. bbd9 does not knowingly collect personal data from any individual under the age of 21. The platform employs age verification procedures during the registration process, and any account found to belong to a person under 21 will be immediately suspended and all associated data will be deleted, with any balance forfeited in accordance with our Terms and Conditions.

If you believe that bbd9 has inadvertently collected personal data relating to a person under 21 years of age, please notify us immediately at [email protected]. We will investigate and, where confirmed, delete the relevant data without delay.

The bbd9 platform may contain references to third-party game providers, payment partners, and sports organisations. While bbd9 integrates services from providers such as Pragmatic Play, Evolution Gaming, bKash, and Nagad, these providers operate their own platforms and privacy policies that are independent of this document.

bbd9 is not responsible for the privacy practices of any third-party platform or service. We recommend that you review the privacy policy of any third-party service with which you interact in connection with your use of bbd9. This Privacy Policy applies solely to personal data processed by bbd9 in connection with your use of the bbd9 platform at bbd9.io.

bbd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to the bbd9 platform. When we make material changes to this Policy, we will notify registered users via the email address associated with their account and will display a prominent notice on the bbd9 platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this Policy and in the table of contents will always reflect when the most recent version took effect. We encourage you to review this Policy periodically to stay informed about how bbd9 protects your personal data. Your continued use of the bbd9 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bbd9 processes your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

When contacting us about a data rights request, please include your registered username, the nature of your request, and any relevant details that will help us locate and process your data efficiently. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.