bdb9 Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how bdb9 ("bdb9", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the bdb9.io platform, including all associated services such as sports betting, live casino games, slots, crash games, and customer support channels.

bdb9 takes its data protection obligations seriously. We apply industry-standard technical and organisational safeguards to ensure that your personal data is handled responsibly and in accordance with applicable data protection principles. This Policy applies to all users of bdb9.io regardless of the device or method of access used.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and bdb9. Terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

Data We Collect

bdb9 collects only the personal data that is necessary for the operation of the platform, the fulfilment of legal obligations, and the delivery of a secure and personalised experience. The categories of personal data we may collect include:

Identity and Contact Data

• Full legal name as it appears on official identification documents.
• Date of birth (required for age verification — players must be 21 years of age or older).
• Residential address, including city, district, and postal code.
• Email address and mobile phone number.
• Username chosen during account registration.

Identity Verification (KYC) Data

• National ID card number or passport number.
• Copies of government-issued photo identification documents.
• Proof of address documents (e.g., utility bill, bank statement).
• Proof of payment method ownership where required.

Financial Data

• Payment method details including mobile financial service account identifiers (bKash, Nagad, Rocket, Upay) and bank account references.
• Transaction history including deposit amounts, withdrawal requests, and associated timestamps.
• Wallet balances and bonus credit records held within the bdb9 platform.

Technical and Usage Data

• IP address and device identifiers.
• Browser type, version, and operating system.
• Pages visited, session duration, clickstream data, and navigation patterns on bdb9.io.
• Game session logs including games played, wagers placed, and outcomes recorded.
• Login timestamps and account activity records.

Communication Data

• Records of correspondence between you and bdb9 customer support, including chat transcripts, email exchanges, and support ticket content.
• Responses to surveys or feedback forms where you voluntarily participate.

How We Collect Data

bdb9 collects personal data through the following channels:

Purposes of Processing

bdb9 processes your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain an accurate record of your account activity.
• Age and identity verification: To confirm that you are 21 years of age or older and to satisfy Know Your Customer (KYC) requirements.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method and to maintain accurate financial records.
• Service delivery: To provide access to sports betting, casino games, promotions, and all other platform features.
• Customer support: To respond to your enquiries, resolve complaints, and improve support quality.
• Responsible gaming: To monitor gambling behaviour for signs of problem gambling and to implement protective measures such as deposit limits and self-exclusion at your request.
• Security and fraud prevention: To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities on the platform.
• Legal compliance: To meet obligations under applicable anti-money-laundering, counter-terrorism financing, and data protection regulations.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the overall quality and reliability of bdb9.io.
• Marketing communications: To send you promotional offers, bonus notifications, and product updates — but only where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.

Legal Basis for Processing

bdb9 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and bdb9, including account registration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, transaction record-keeping, and fraud reporting obligations.
• Legitimate interests: Processing carried out for purposes such as platform security, fraud prevention, and service quality improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You retain the right to withdraw consent at any time by contacting [email protected].

Data Sharing

bdb9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

Service Providers

We engage trusted third-party service providers who process data on our behalf under written data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard), game studios, IT infrastructure providers, fraud detection services, and customer support platform operators. All such providers are contractually bound to handle your data only for the specific purpose for which it was shared and to maintain appropriate security standards.

Legal Authorities

bdb9 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, pursuant to a valid legal order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of bdb9's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via your registered contact details prior to your data being transferred and becoming subject to a different privacy policy.

Data Retention

bdb9 retains your personal data for as long as your account remains active and for such additional periods as are necessary to fulfil the purposes described in this Policy or to comply with applicable legal obligations. The general retention guidelines we apply are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Retained for the duration of your account and for a minimum of five (5) years after account closure or the completion of the relevant verification process.
• Customer support communications: Retained for up to three (3) years from the date of the last correspondence, unless a longer period is required in connection with an active dispute or legal proceeding.
• Technical and usage logs: Retained for up to twenty-four (24) months from the date of collection for security and platform improvement purposes.
• Marketing consent records: Retained for the duration of consent and for a reasonable period thereafter as evidence of consent.

When personal data is no longer required, bdb9 will securely delete or anonymise it in accordance with our internal data disposal procedures.

Data Security

bdb9 implements a layered security architecture designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• TLS/SSL encryption: All data transmitted between your device and bdb9.io is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive personal and financial data stored on bdb9 infrastructure is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access control policies and audit logging.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a cryptographically secure one-way hashing algorithm.
• Infrastructure monitoring: bdb9 employs continuous monitoring of its platform infrastructure for anomalous activity, intrusion attempts, and security incidents.
• Third-party audits: Our RNG systems and game integrity frameworks are subject to independent third-party certification. Security practices are reviewed on a periodic basis.

While bdb9 takes all reasonable precautions to protect your data, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdb9 will notify affected users without undue delay through your registered contact details.

Cookies & Tracking Technologies

bdb9 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit bdb9.io. We use the following categories of cookies:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional or analytics cookies will not affect your ability to use the core features of bdb9.io, but may limit personalisation options.

Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by bdb9:

• Right of access: You may request a copy of the personal data bdb9 holds about you, along with information on how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. You can update certain account details directly through your account settings panel.
• Right to erasure: You may request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that bdb9 limits the way in which it processes your data in specific circumstances, for example while a correction request is being verified.
• Right to data portability: You may request a machine-readable copy of personal data that you provided to bdb9 where the processing is based on consent or contractual necessity.
• Right to object: You may object to processing based on legitimate interests or to direct marketing at any time. Marketing opt-out requests will be actioned promptly upon receipt.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact bdb9 at [email protected]. We will respond to verified requests within a reasonable timeframe. We may ask you to confirm your identity before processing any data rights request.

Minors

bdb9 is strictly an adults-only platform. The minimum age requirement for registration and use of the bdb9 platform is 21 years. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data and close the associated account without delay.

If you are a parent or guardian and believe that a minor under your care has registered on bdb9 or provided personal data to us, please contact [email protected] immediately so that we can investigate and take appropriate action.

International Data Transfers

bdb9 primarily serves players based in Bangladesh. Some of our third-party service providers — including game studios, infrastructure providers, and fraud detection services — may be located in jurisdictions outside Bangladesh. Where personal data is transferred to such providers, bdb9 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements that impose data protection obligations consistent with applicable standards.

Policy Changes

bdb9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will update the effective date at the top of this document and, where practicable, notify registered users through their registered contact details prior to the change taking effect.

We encourage you to review this Privacy Policy periodically to remain informed about how bdb9 handles your personal data. Your continued use of the bdb9 platform following the posting of an updated Policy constitutes your acknowledgement of the changes.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which bdb9 processes your personal data, please contact our support team. We are available 24 hours a day, 7 days a week.

Email: [email protected]

For data rights requests specifically (access, rectification, erasure, portability, objection), please include "Data Rights Request" in your message subject line so that our team can handle your enquiry with the appropriate priority.

bdb9 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with the outcome of a complaint submitted to us directly, you retain the right to escalate the matter to the relevant data protection authority applicable in your jurisdiction.