Privacy Policy
bd09 Data Commitment

1Introduction and Scope

This Privacy Policy ("Policy") describes how bd09 ("bd09", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "Player") who access or use the bd09 platform, including our website, mobile interface, sports betting service, live casino, slot games, and any associated promotional or support services.

This Policy applies to all personal data processed by bd09 in connection with the operation of our platform and our relationships with registered and prospective players based primarily in Bangladesh. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and bd09.

By accessing bd09 or registering an account, you confirm that you have read and understood this Policy. Where bd09 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting our support team, though withdrawal will not affect the lawfulness of any processing carried out prior to withdrawal.

2Data Controller Information

bd09 is the data controller responsible for your personal data collected through the bd09 platform. As data controller, bd09 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Policy or wish to exercise any of your privacy rights, you may contact our privacy team using the contact details provided in Section 13 of this Policy. bd09 is committed to responding to all data-related enquiries in a timely and professional manner.

3Personal Data We Collect

The categories of personal data that bd09 collects and processes include the following:

3.1 Identity and Registration Data

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (used to verify that you are 21 years of age or older)
• Gender (where provided during registration)
• Username and encrypted password
• Nationality and country of residence

3.2 Contact Data

• Email address
• Mobile telephone number (including WhatsApp-enabled numbers)
• Residential address (city, district, and postal code within Bangladesh — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)

3.3 Verification and KYC Data

• Copies of government-issued identity documents (NID, passport, driver's licence)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Selfie or live photo submitted for biometric verification purposes
• Source of funds declarations where required by our compliance procedures

3.4 Financial and Transaction Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay account numbers)
• Bank account details where bank transfer is the chosen payment method
• Deposit history, withdrawal history, and account balance records
• Transaction timestamps and reference numbers

3.5 Gameplay and Betting Data

• Sports betting history, including bet selections, stake amounts, odds accepted, and settlement outcomes
• Casino and slot game session data, including game titles, wager amounts, win/loss results, and session duration
• Bonus and promotion redemption records
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)

3.6 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session logs, login timestamps, and platform navigation data
• Cookie identifiers and similar tracking technology data (see Section 7)

3.7 Communications Data

• Records of correspondence with bd09's customer support team, including chat transcripts, email exchanges, and WhatsApp messages
• Survey responses and feedback submissions
• Complaint and dispute records

4How We Collect Your Data

bd09 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a promotion
• Automated collection: Data gathered automatically when you access the bd09 platform, including device data, session logs, IP addresses, and cookie data
• Third-party sources: Identity verification data received from KYC service providers; transaction confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, and banking partners); fraud screening data from specialist compliance partners
• Game providers: Session and outcome data relayed from certified game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Habanero

5Purposes and Legal Basis for Processing

The table below summarises the primary purposes for which bd09 processes your personal data and the corresponding legal basis for each activity:

6Data Sharing and Third Parties

bd09 does not sell, rent, or trade your personal data. We share data only where necessary and only with the following categories of recipient, each of which is bound by appropriate data processing agreements or confidentiality obligations:

6.1 Payment Processors

To process deposits and withdrawals, bd09 shares necessary transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each provider operates under its own privacy policy and applicable financial regulations.

6.2 Identity Verification and KYC Partners

To comply with age verification and anti-money laundering obligations, bd09 may share identity documents and related data with specialist KYC and compliance service providers. These partners process data solely on bd09's behalf and in accordance with our instructions.

6.3 Game Providers

Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Habanero receive session identifiers and wager data necessary to operate their games on the bd09 platform. These providers do not receive your full identity or contact data.

6.4 Technology and Infrastructure Partners

bd09 uses third-party cloud infrastructure, content delivery networks, and cybersecurity services to operate the platform reliably and securely. These partners act as data processors and handle personal data only as directed by bd09, under strict contractual terms.

6.5 Legal and Regulatory Disclosure

bd09 may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, court order, or where necessary to protect the legal rights of bd09 or third parties. bd09 will notify affected players of such disclosures where legally permissible.

7Cookies and Tracking Technologies

bd09 uses cookies and similar tracking technologies on our platform. Cookies are small text files placed on your device that help us recognise returning visitors, maintain session state, prevent fraud, and analyse platform usage. The categories of cookies used by bd09 are as follows:

• Essential cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This data helps bd09 improve page performance and user experience. bd09 uses privacy-respecting analytics tools that do not share data with advertising networks.
• Preference cookies: Store your platform preferences such as language selection, display settings, and responsible gaming tool configurations.
• Fraud prevention cookies: Support our security systems by identifying unusual device behaviour or suspicious login patterns.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the platform. bd09 does not use cookies to serve third-party advertising or to track your activity on websites outside our platform.

8Data Retention

bd09 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by applicable law and operational necessity. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in line with standard financial record-keeping obligations
• Transaction and financial data: Retained for a minimum of 7 years following each transaction, in accordance with anti-money laundering record-keeping requirements
• KYC documents: Retained for the duration of your account plus 5 years following account closure
• Gameplay and betting records: Retained for 3 years from the date of each session or wager, unless a longer period is required for dispute resolution
• Customer support communications: Retained for 2 years from the date of the last interaction, unless related to an ongoing dispute
• Technical and device logs: Retained for 12 months on a rolling basis

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that can no longer identify any individual may be retained indefinitely for statistical analysis and platform improvement purposes.

9Data Security

bd09 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• TLS/SSL encryption for all data transmitted between your device and bd09's servers
• AES-256 encryption for sensitive data stored at rest, including payment information and identity documents
• Bcrypt password hashing — your bd09 password is never stored in plain text
• Multi-factor authentication options for player accounts
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments of the bd09 platform and infrastructure
• 24/7 automated security monitoring and anomaly detection systems
• Staff data protection training and confidentiality obligations for all personnel with access to player data

In the event of a personal data breach that poses a risk to affected players, bd09 will notify impacted players without undue delay and take all reasonable steps to contain the breach, assess its scope, and prevent recurrence.

10Your Privacy Rights

As a player whose personal data is processed by bd09, you hold the following rights in relation to your data. To exercise any of these rights, please contact our privacy team using the details in Section 13:

• Right of Access: You may request a copy of the personal data bd09 holds about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Some corrections can be made directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bd09's legal retention obligations (see Section 8).
• Right to Restriction: You may request that bd09 restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request a copy of personal data you have provided to bd09 in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring or direct marketing communications.
• Right to Withdraw Consent: Where bd09 processes your data based on your consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bd09 will acknowledge all privacy rights requests within 5 business days and aim to respond fully within 30 calendar days. Where a request is complex or involves a large volume of data, bd09 may extend this period by a further 30 days and will notify you accordingly.

11Children and Minors

The bd09 platform is strictly for individuals who are 21 years of age or older. bd09 does not knowingly collect, process, or retain personal data relating to persons under the age of 21. If bd09 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without exception.

If you are a parent or guardian and believe that a minor in your care has registered on bd09, please contact our support team immediately at [email protected]. We will investigate and take prompt action to remove the account and any associated data.

12Changes to This Policy

bd09 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — that is, where they significantly affect how your personal data is processed or your rights in relation to it — bd09 will provide prior notice to registered players via the platform or by email to the address associated with your account. The updated Policy will take effect from the date stated in the notice.

We encourage you to review this Policy periodically to stay informed about how bd09 protects your personal data. The "Last Updated" date at the top of the legal document section reflects the date of the most recent revision. Your continued use of bd09 following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

13Contact and Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or to bd09's handling of your personal data, please contact our privacy and support team through the following channels:

• Email: [email protected]
• WhatsApp: +880 1700-000000
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

bd09 is committed to resolving all privacy-related concerns promptly and professionally. Our support team serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar around the clock. If you are not satisfied with bd09's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority or seek independent legal advice.