9bd1 Privacy Policy

9bd1 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who register, access, or interact with the 9bd1 website at https://9bd1.org. This Privacy Policy ("Policy") sets out in clear terms what personal information we collect from you, the lawful bases on which we process that information, how we use and safeguard it, the circumstances in which it may be shared with third parties, and the rights available to you as a data subject.

This Policy applies to all data subjects who use the 9bd1 platform, including registered players, visitors who browse the site without registering, and individuals who contact our support team. By using the 9bd1 platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein.

9bd1 collects personal information in three primary ways: information you provide to us directly, information collected automatically through your use of the platform, and information received from trusted third-party partners. The categories of information we collect are as follows:

Information You Provide Directly:

• Full name, date of birth, and gender (provided at registration and used for identity verification and age confirmation).
• Email address and phone number (used for account communications, support correspondence, and security notifications).
• Residential address (required for KYC verification and fraud prevention purposes).
• Government-issued identification document details (National ID card, passport, or driving licence — required as part of the KYC verification process before withdrawals are permitted).
• Payment method information, including your bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account details for players using Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank.

Information Collected Automatically:

• IP address, device type, browser type and version, operating system, and approximate geographic location (derived from IP, not GPS).
• Session data, including login timestamps, pages visited, duration of visits, game sessions played, bet amounts, and game outcomes (used for platform analytics, responsible gaming monitoring, and fraud detection).
• Cookie and tracking data (see the Cookies section below for full details).
• Communication records, including all support chat transcripts and emails sent to or received from our customer support team.

Information from Third Parties:

• Identity and age verification data received from KYC verification service providers engaged by 9bd1 to assist with compliance obligations.
• Transaction confirmation data received from our payment processing partners (bKash, Nagad, Rocket, Upay, and partner banks) to verify the status and authenticity of deposits and withdrawals.
• Fraud screening and anti-money laundering signals received from compliance technology partners, used to protect the integrity of the platform and its players.

9bd1 uses the personal information we collect for the following specific purposes. We do not use your data for any purpose beyond what is listed here without first obtaining your explicit consent or unless required to do so by applicable law:

• Account creation and management: to register your account, verify your identity and age, manage your account settings, and process your deposits and withdrawals.
• Platform operation and service delivery: to provide you with access to the games and services available on the 9bd1 platform, process your bets, calculate and credit your winnings, and manage your bonus entitlements.
• Customer support: to respond to your enquiries, resolve disputes, process complaints, and provide assistance with account or payment issues.
• Responsible gaming compliance: to monitor your gambling patterns, identify signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our responsible gaming obligations under applicable standards.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, identity theft, money laundering, collusion, and other forms of dishonest conduct on the platform.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money laundering regulations, respond to lawful requests from competent authorities, and maintain records as required by law.
• Platform improvement and analytics: to analyse aggregate usage patterns (not individual profiling), identify technical issues, improve the user experience, and develop new features and games.

9bd1 processes your personal data only where there is a recognised legal basis for doing so. The legal bases we rely on are as follows:

• Contractual necessity: the processing is necessary to fulfil our contractual obligations to you under the Terms & Conditions of the 9bd1 platform (e.g., processing your deposits, crediting your winnings, managing your account).
• Legal obligation: the processing is required in order to comply with applicable legal and regulatory obligations, including anti-money laundering laws, age verification requirements, and lawful orders from competent authorities.
• Legitimate interests: the processing is necessary for the legitimate interests of 9bd1 in operating a safe, secure, and fair platform, including fraud detection, security monitoring, responsible gaming oversight, and platform analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: where required by applicable law or where no other legal basis applies, we will ask for your explicit consent before processing your personal data for a specific purpose (e.g., sending marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

9bd1 does not share your personal data with third parties except in the following specific circumstances, each of which is governed by appropriate data protection agreements and safeguards:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and partner banking institutions) — solely to process your deposit and withdrawal transactions. These partners receive only the minimum data necessary to complete your requested transaction and are contractually prohibited from using your data for any other purpose.
• KYC and identity verification service providers — engaged to perform document verification and age confirmation checks as required by our compliance obligations. These providers process your identification data strictly for verification purposes only.
• Law enforcement and regulatory authorities — where 9bd1 is required or permitted by applicable law to disclose personal data in response to a court order, subpoena, regulatory investigation, or other lawful demand. 9bd1 will notify affected players of such disclosures where legally permitted to do so.
• Business successors — in the event that 9bd1 undergoes a merger, acquisition, or transfer of its business assets, your personal data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations. You will be notified of any such transfer in advance.

9bd1 does not transfer your personal data to countries outside Bangladesh except where necessary to engage the service providers described above, and in all such cases appropriate contractual safeguards are in place to ensure your data remains protected to an equivalent standard.

9bd1 treats all financial and payment-related data with the highest level of care. We do not store complete payment instrument credentials (such as full mobile wallet PINs, full bank account numbers, or complete card numbers) on our own servers. Instead, payment processing is handled directly through our certified payment partners — bKash, Nagad, Rocket, Upay, and our partner banks — using their own secure, encrypted infrastructure.

9bd1 retains transaction records (including deposit amounts, withdrawal amounts, transaction timestamps, and payment method references) as part of your account history. This data is retained for as long as your account remains active and for a further period as required by our legal retention obligations. Transaction records are used for account management, dispute resolution, and compliance purposes only.

9bd1 uses cookies and similar tracking technologies on the platform for the following purposes. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain viruses or malware and cannot access other files on your device.

• Essential cookies: strictly necessary for the operation of the platform, including maintaining your login session, remembering your language preference, and ensuring security features function correctly. These cookies cannot be disabled without impairing the functioning of the platform.
• Analytics cookies: used to collect anonymised, aggregated information about how visitors use the platform — such as which pages are visited most frequently and how long visitors spend on each page. This data helps us understand how to improve the user experience. No individual player is identifiable from analytics cookie data.
• Functionality cookies: used to remember your personal preferences and settings, such as your chosen language version of the site, so that these do not need to be re-entered on each visit.
• Security and fraud prevention cookies: used to identify suspicious behaviour patterns, detect automated bot activity, and protect players from account takeover attempts and other security threats.

You may manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your ability to access or use the platform, but some functionality features (such as saved language preferences) may not work as expected if functionality cookies are disabled.

9bd1 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the duration of your account's active status plus a minimum period of five years after account closure, in order to meet our anti-money laundering and compliance obligations; transaction records are retained for a minimum of five years from the date of each transaction; support communications are retained for a minimum of three years from the date of the communication; and anonymised analytics data may be retained indefinitely as it contains no personally identifiable information.

Upon expiry of the applicable retention period, 9bd1 will securely delete or anonymise your personal data. If you request erasure of your data before the end of the applicable retention period, 9bd1 will delete all data that is not subject to a legal retention obligation and will explain clearly which categories of data must be retained and for how long.

9bd1 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the 9bd1 platform, ensuring that your personal and financial information cannot be intercepted during transmission.
• Encryption of sensitive data at rest, including identification document data, payment method references, and account credentials stored in our secure database infrastructure.
• Role-based access controls that restrict access to personal data to only those employees and contractors of 9bd1 who have a legitimate need to access that data in the course of performing their job functions.
• Regular security audits, penetration testing, and vulnerability assessments conducted on our platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.

While 9bd1 takes all reasonable and proportionate steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 9bd1 will notify affected players without undue delay in accordance with applicable notification obligations.

As a data subject whose personal information is processed by 9bd1, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered account email address and a clear description of your request:

• Right of access: you have the right to request a copy of the personal data that 9bd1 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to rectification: you have the right to request that any inaccurate or incomplete personal data we hold about you be corrected or completed without undue delay.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where it has been unlawfully processed — subject to our legal retention obligations.
• Right to restriction of processing: in certain circumstances (e.g., where you contest the accuracy of data, or where processing is unlawful but you oppose erasure), you may request that we restrict the processing of your personal data while your request is being considered.
• Right to data portability: where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you have the right to object to processing of your personal data that is based on our legitimate interests, including profiling. You also have the absolute right to object to the use of your personal data for direct marketing purposes at any time.

9bd1 will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or there are a large number of requests, this period may be extended by a further two months, in which case you will be notified of the extension and the reasons for it within the initial 30-day period.

The 9bd1 platform is strictly intended for use by adults aged 21 years and above. 9bd1 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If 9bd1 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, that data will be immediately and securely deleted, the associated account will be closed, and all funds held in that account will be forfeited in accordance with our Terms & Conditions.

9bd1 reserves the right to update, amend, or replace this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by email to the address on file, or through a prominent notice displayed on the platform. The updated Policy will take effect from the date of publication unless a later effective date is specified in the update notice.

Your continued use of the 9bd1 platform following notification of any changes to this Privacy Policy constitutes your acceptance of those changes. We recommend that you review this Policy periodically to stay informed of any updates. The date shown in the 'Last Updated' notice at the top of this page reflects when the Policy was most recently reviewed.

If you have any questions, concerns, or complaints about this Privacy Policy, about how 9bd1 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our support team. All privacy-related queries are handled confidentially and responded to within 30 days.

Email: [email protected]

Please include your registered account email address in all privacy-related correspondence to help our team locate your account records and process your request efficiently.