bdd9 Privacy Policy – How We Collect, Use and Protect Your Data

bdd9 ("we", "us", "our") operates the online casino and sports betting platform accessible at bdd9.pro. In providing this service to players across Bangladesh, we necessarily collect and process certain personal information. This Privacy Policy explains what information we collect, the purposes for which it is used, with whom it may be shared, and the security measures we employ to protect it. It also describes the rights you have in relation to your personal data and how to exercise them.

By registering an account on bdd9 or continuing to use the platform after this Policy has been updated, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the bdd9 platform. Questions about this Policy may be directed to our support team at [email protected].

Privacy at a Glance

1. Information We Collect

When you register and use bdd9, we collect personal information across several categories. We collect only what is necessary for the purposes described in this Policy and do not retain information beyond the periods specified in Section 7 (Data Retention). The categories of information we collect include:

• Registration and identity data: your full name, date of birth, mobile phone number, and email address as provided at sign-up. For KYC verification purposes, we may also collect a copy of a government-issued identification document (such as a National ID card or passport) and proof of address.
• Financial transaction data: records of deposits and withdrawals including the mobile financial service used (bKash, Nagad, Rocket, Upay), transaction amounts in BDT, transaction timestamps, and the transaction reference numbers generated by the payment provider. We do not store full mobile wallet PIN codes or account passwords.
• Technical and device data: IP address, device type (mobile, tablet), operating system version, browser type and version, session start and end times, pages visited, game titles played, and bet history. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
• Communications data: the content of messages you send to bdd9's customer support team via live chat or email, including support ticket text, attachments, and the date and time of each exchange. We retain these records to maintain a service history and to resolve any disputes that may arise.
• Voluntary preference data: information you voluntarily provide when updating your profile, setting responsible gaming limits, or opting in or out of promotional communications. This data is used solely to personalise your experience and to honour any self-imposed restrictions you have chosen to activate.

2. How We Use Your Information

bdd9 uses the personal information collected for the following specific purposes. We rely on a combination of contractual necessity, legal obligation, and legitimate interest as our legal basis for processing, depending on the category of data and the purpose involved:

• Account creation and management: to register your account, verify your identity, process KYC documentation, manage your account settings, and communicate with you about your account status — including password resets, account verification confirmations, and security alerts.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to maintain transaction records required by our payment partners' compliance frameworks; and to resolve payment disputes or errors in a timely manner.
• Platform security and fraud prevention: to monitor for suspicious activity, detect and investigate potential fraud or collusion, enforce the prohibitions in our Terms and Conditions, and protect the security and integrity of the bdd9 platform and its player community.
• Responsible gaming compliance: to apply the deposit limits, session reminders, cool-off periods, and self-exclusion options that you have activated on your account; to identify patterns of play that may indicate a player is experiencing difficulty; and to contact players who may benefit from responsible gaming support.
• Service improvement and analytics: to analyse aggregated, anonymised usage patterns across the platform for the purpose of improving game selection, page performance, payment flow, and the overall user experience. This analysis is conducted on anonymised data sets where individual users cannot be re-identified.

3. Sharing Your Information

bdd9 does not sell, rent, or otherwise trade your personal information to third parties for marketing or commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the specific purpose:

• Payment and technology service providers: we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, and our platform technology partners (such as game API aggregators and hosting providers) for the sole purpose of enabling the services you have requested. These providers are bound by confidentiality obligations and may not use your data for any other purpose.
• Game content providers: your account session token (but not your full personal profile) is shared with game providers such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Ezugi to enable authenticated game sessions. These providers operate under their own privacy frameworks, which are consistent with international data protection standards.
• Legal and regulatory authorities: where bdd9 is required by applicable law, court order, or the lawful request of a competent authority to disclose personal data, we will comply with that obligation. We will, where legally permissible, notify the affected player of such a request before disclosing their data.

4. Payment Data and Mobile Wallet Security

bdd9 processes payments exclusively through established Bangladeshi mobile financial service providers — bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, the financial transaction is processed directly through the relevant mobile wallet provider's own secure API. bdd9 does not at any point receive, store, or have access to your mobile wallet PIN, mobile banking password, or full account credentials. The only financial data bdd9 retains is the transaction reference number, the amount, the currency (BDT), and the timestamp — the minimum necessary to maintain accurate account records and support dispute resolution.

Players should be aware that bdd9 customer support staff will never ask for your mobile wallet PIN, your bdd9 account password, or your full National ID number during a support interaction. If you receive a message — purportedly from bdd9 — requesting any of these credentials, treat it as a phishing attempt and report it to [email protected] immediately.

5. Data Security

bdd9 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between the player's device and bdd9's servers; access controls that restrict internal access to personal data on a strict need-to-know basis; regular security reviews of platform infrastructure and third-party integrations; and secure storage of sensitive identity documents collected during the KYC process.

Despite these measures, no internet-based system can be guaranteed to be 100% secure. bdd9 will notify affected players without undue delay in the event of a data breach that is likely to result in a high risk to their rights and freedoms. Players are strongly encouraged to use a unique, strong password for their bdd9 account and to not reuse that password on any other platform or service.

6. Cookies and Tracking Technologies

bdd9 uses cookies and similar tracking technologies on the bdd9.pro website to ensure the platform functions correctly and to gather aggregate analytics data that helps us improve the service. We do not use third-party advertising cookies or cross-site tracking technologies. The types of cookies we use include:

• Essential session cookies: these are strictly necessary for the platform to operate. They maintain your authenticated login session, remember your language preference, and ensure that game data is correctly associated with your account. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytical cookies: these collect anonymised data about how players navigate the platform — which pages are visited most often, how long sessions typically last, and which features generate the most engagement. This data is aggregated and cannot be used to identify individual users. It is used solely to guide platform improvement decisions.
• Preference cookies: these remember optional settings you have configured on the platform, such as display preferences or notification settings. You can clear or block these cookies via your browser settings without affecting your ability to log in and play.

7. Data Retention

bdd9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. In practice, this means that account registration data and transaction records are retained for a minimum of five years following account closure, in order to comply with anti-money laundering record-keeping requirements. Support communications are retained for three years from the date of the last message in a support thread. Analytical and technical log data is retained for a maximum of 13 months on a rolling basis and is then permanently deleted.

When your account is closed — whether at your own request or by bdd9 — your active profile is deactivated immediately. However, the underlying data records associated with your account are retained for the minimum statutory period described above and are then securely and permanently deleted. You may request confirmation of your data deletion by contacting [email protected] after the applicable retention period has elapsed.

8. Your Privacy Rights

As a player on the bdd9 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond to all data-subject requests within 30 days of receipt:

• Right of access: you have the right to request a copy of the personal data that bdd9 holds about you, including a description of the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared. We will provide this information in a structured, readable format within 30 days of receiving a verified request.
• Right to rectification: if any personal data that bdd9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the data in question forms part of a verified KYC record, we may require supporting documentation before making any amendment.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the basis for processing), or where the data has been unlawfully processed. This right is subject to any overriding legal retention obligations, such as the five-year AML record-keeping requirement described in Section 7.
• Right to restrict processing: you may request that bdd9 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while a complaint about the lawfulness of processing is being investigated. During a processing restriction, bdd9 will store your data but will not actively process it beyond what is required by law.

9. Children and Minors

The bdd9 platform is strictly intended for adults aged 21 years and above. bdd9 does not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification having taken place, we will delete that data promptly and close the associated account. If you are a parent or guardian and believe that a minor under your care has registered an account on bdd9, please contact [email protected] immediately so that we can take appropriate action.

10. Updates to This Privacy Policy

bdd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where reasonably practicable, notify active account holders via email or an on-platform notification prior to the changes taking effect. We encourage you to review this Policy periodically. Your continued use of the bdd9 platform after an updated Policy has been published constitutes your acceptance of the revised terms.

11. Contact and Data Controller

bdd9 is the data controller for all personal data collected and processed through the bdd9.pro platform. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which your personal data is handled, please contact the bdd9 Data Privacy team. We will acknowledge your enquiry within 5 business days and provide a full response within 30 days.