09bd Privacy Policy

09bd operates an online sports betting and casino platform accessible at https://09bd.io (the "Platform"). For the purposes of this Privacy Policy, 09bd acts as the data controller in respect of the personal data of registered players and site visitors collected through the Platform.

Our platform is designed for the Bangladesh market and serves an adult audience aged 21 and above. All data collection and processing activities described in this policy are conducted in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions about how 09bd handles your personal data, you may contact us at any time by emailing [email protected]. Contact details are also available in Section 15 of this policy.

09bd collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises what we collect:

09bd does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued identity document incidentally contains such information (e.g., a photograph on a National ID card, which is processed solely to verify identity).

3.1 Data You Provide Directly

The majority of personal data 09bd holds about you is information you provide voluntarily during the course of using the Platform. This includes information entered during account registration (name, phone number, date of birth, email address), information submitted during KYC verification (identity documents, payment method references), information provided when contacting our support team, and any feedback or survey responses you submit.

3.2 Data Collected Automatically

When you access the 09bd Platform, certain technical and usage data is collected automatically through standard web technologies. This includes your IP address, the type and version of browser you are using, your device type and operating system, the pages and sections of the Platform you visit, the games you open or play, the duration of your sessions, and error logs generated during your use of the Platform.

3.3 Data from Payment Providers

When you initiate a deposit or withdrawal using a payment method such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, the relevant payment provider may share transaction confirmation data with 09bd. This typically includes a transaction reference number, the amount, the timestamp, and a masked or partial account identifier. 09bd does not receive full mobile wallet PINs or full bank account numbers from these providers.

3.4 Data from Third-Party Game Providers

Where you play games hosted by third-party studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe), those providers may transmit session data back to 09bd for the purposes of game round reconciliation, balance adjustment, and fraud detection. This data relates to game outcomes and wagering activity rather than additional personal identifiers.

09bd processes your personal data only for specific, defined purposes. The table below sets out each purpose and the data categories used:

09bd does not use your personal data for automated decision-making that produces significant legal or similarly significant effects, except where such processing is necessary for fraud prevention or where you have provided explicit consent.

09bd processes personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the account agreement — including registration, deposits, withdrawals, game delivery, and support.
• Legal Obligation: Processing necessary to comply with anti-money-laundering requirements, age verification obligations, and other applicable legal duties, including cooperation with law enforcement where required by applicable law.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional promotional communications (e.g., bonus offers, tournament alerts sent via email or SMS). You may withdraw consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing message.

09bd does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Data may be shared only in the following limited circumstances:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.) receive transaction data necessary to process your deposits and withdrawals.
• Game Technology Providers: Third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and others) receive session data necessary for game delivery, round reconciliation, and jackpot processing.
• Identity Verification Services: Where 09bd uses a third-party KYC technology provider to assist with document verification, identity data is shared under a strict data processing agreement.
• Analytics and Security Providers: Technical and usage data may be shared with security monitoring or fraud detection services operating under data processor agreements with 09bd.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, 09bd may disclose personal data to law enforcement or other competent authorities. 09bd will, where legally permitted, notify affected players of such disclosures.

All third-party service providers who process personal data on behalf of 09bd are required to maintain appropriate technical and organisational security measures and to process data only in accordance with 09bd's written instructions.

The 09bd Platform uses cookies and similar tracking technologies to enable core functionality, improve performance, and understand how players use the Platform. The following cookie categories are in use:

• Essential Cookies: Required for the Platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. These cannot be disabled without breaking core platform features.
• Functional Cookies: Remember your preferences such as language settings, last-visited game category, and notification preferences.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — which pages are most visited, where players drop off, and which game categories are most popular. This data is used to improve the Platform experience.
• Security Cookies: Used to detect and prevent fraudulent login attempts, unusual account activity, and other security threats.

Most browsers allow you to control cookie settings through the browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of your 09bd account, including the ability to log in or complete transactions.

09bd retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with 09bd plus a minimum of five (5) years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the date of verification, or longer if required by applicable law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Technical and Usage Logs: Retained for twelve (12) months in rolling logs, after which they are either anonymised or deleted.
• Marketing Consent Records: Retained for as long as you remain a registered player, and for three (3) years following account closure.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

09bd implements a range of technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and 09bd servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when using the Platform.
• Password Hashing: Account passwords are stored in hashed form using a modern cryptographic hashing algorithm. 09bd staff cannot view your plain-text password.
• Payment Data Tokenisation: Payment method details are stored only in tokenised form. Full bKash, Nagad, or Rocket numbers are never stored in plain text on 09bd systems.
• Access Controls: Access to personal data within 09bd's internal systems is restricted on a need-to-know basis. Staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Intrusion Detection: 09bd employs active monitoring for suspicious activity patterns that may indicate unauthorised access attempts or data exfiltration.
• Regular Security Reviews: Security measures are reviewed and updated regularly to address emerging threats and changes in best practice.

While 09bd takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

As a player on the 09bd Platform, you hold the following rights in relation to the personal data we process about you:

• Right of Access: You may request a copy of the personal data 09bd holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support to update your account details.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data (e.g., transaction records and KYC documents) must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances — for example, while a dispute about accuracy is resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (such as JSON or CSV) where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. 09bd will assess the objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

The 09bd Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use any part of the Platform.

If 09bd becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated account, void any transactions, and securely delete all related personal data. If you are a parent or guardian and believe that a minor in your care has registered on the 09bd Platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

09bd employs age verification procedures during registration and as part of the KYC process to prevent underage access. These procedures include requesting date of birth at registration and requiring government-issued identity documents that confirm the player's age before withdrawals are processed.

In some cases, personal data processed by 09bd may be transferred to or accessed from countries outside Bangladesh. This may occur in the context of cloud hosting infrastructure, third-party game provider servers, or technical support services that operate internationally.

Where such transfers occur, 09bd takes appropriate steps to ensure that your personal data receives a level of protection consistent with this Privacy Policy. This includes implementing contractual safeguards with international service providers and selecting providers that maintain recognised security certifications.

If you have questions about the countries in which your personal data may be processed, you may contact us at [email protected] and we will provide available information within the constraints of confidentiality obligations to our service providers.

The 09bd Platform may contain references to third-party game providers, payment services, or sports data providers. Where links or integrations to third-party services are present, those services operate under their own privacy policies and terms of service, which are separate from this policy.

09bd is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policies of any third-party service you interact with in connection with your use of the 09bd Platform.

09bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the structure of our Platform. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the Platform prior to the change taking effect.

The effective date at the top of this document will be updated each time a revision is made. We encourage you to review this policy periodically to remain informed about how 09bd protects your personal data.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you object to any revision, you should cease using the Platform and contact support to request account closure and a final withdrawal of your real-money balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 09bd holds about you, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 24/7 Live Chat available on the Platform
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

All privacy correspondence must be submitted in English. Where a request requires identity verification, we will guide you through the verification steps before processing your request.