bd9a Privacy Policy
At bd9a, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains in plain, formal English exactly what personal data we collect, why we collect it, how we protect it, and what rights you hold as a registered player based in Bangladesh. We believe you deserve complete transparency about how your information is handled.
All bd9a player data is stored on encrypted servers with access controls restricted to authorised personnel only. We apply AES-256 encryption for data at rest and TLS 1.3 for data in transit.
bd9a does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely for the purposes described in this Privacy Policy.
Identity documents submitted for KYC verification are handled with the highest level of confidentiality, stored securely, and never shared with parties outside the bd9a compliance function.
bd9a uses cookies strictly for session management, security, and platform performance. We do not deploy advertising tracking cookies or share cookie data with social media platforms.
bd9a retains personal data only as long as necessary for the stated purpose or as required by law. Account data is deleted or anonymised within 5 years of permanent account closure.
Registered bd9a players have the right to access, correct, and request deletion of their personal data. All such requests are processed within 30 days of receipt by our support team.
Data Controller Information
For the purposes of this Privacy Policy, bd9a acts as the data controller in respect of all personal data collected from players who register and use the bd9a platform. As data controller, bd9a determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.
bd9a operates as an online sports betting and casino platform serving players in Bangladesh. All player-facing services, including account management, deposit and withdrawal processing, customer support, and game access, are delivered through the bd9a platform at bd9a.app.
For all privacy-related enquiries, requests, or complaints, players may contact the bd9a Data Protection team directly at . We aim to acknowledge all privacy-related communications within 3 business days and to resolve substantive requests within 30 calendar days of receipt.
Personal Data We Collect
bd9a collects personal data from players through several distinct channels: the account registration form, the KYC verification process, payment transactions, platform usage activity, and direct communications with our support team. The categories of personal data we collect are described below.
Registration and Identity Data
When you create a bd9a account, we collect your full legal name, date of birth, residential address (including city, district, and postal code within Bangladesh), email address, and mobile phone number. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 18 years.
KYC Verification Documents
As part of our Know Your Customer process, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents such as utility bills or bank statements. These documents are used solely for identity verification and fraud prevention purposes.
Financial and Transaction Data
bd9a records all deposit and withdrawal transactions associated with your account, including the payment method used (such as bKash, Nagad, Rocket, or Upay), transaction reference numbers, amounts in BDT, timestamps, and transaction status. We do not store full payment card numbers; card payments are processed through certified third-party payment gateways that handle card data under their own security standards.
Technical and Usage Data
When you access bd9a, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and in-game activity. This data is used for platform security, fraud detection, and service improvement purposes.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Registration form, KYC upload |
| Contact Data | Email address, mobile number, home address | Registration form, account settings |
| Financial Data | bKash/Nagad account reference, transaction amounts | Deposit and withdrawal requests |
| Technical Data | IP address, browser type, device ID | Automatic server logging |
| Behavioural Data | Games played, bet history, session length | Platform activity tracking |
| Communications Data | Support chat transcripts, email correspondence | Customer support interactions |
How We Use Your Personal Data
bd9a processes your personal data only for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. Each processing activity is supported by a lawful basis as set out in this section.
- Account Creation and Management: We use your registration data to create and maintain your bd9a account, verify your identity, and provide you with access to sports betting, casino games, and other platform features.
- Payment Processing: Transaction data is processed to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. All payment processing is conducted in BDT.
- Fraud Prevention and Security: Technical and behavioural data is analysed to detect and prevent unauthorised account access, money laundering, bonus abuse, and other fraudulent activity on the bd9a platform.
- Legal and Regulatory Compliance: bd9a processes identity and transaction data to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and other legal duties. We may be required to retain certain records for a specified period under applicable law.
- Customer Support: Communications data is used to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance. Support interactions may be recorded for quality assurance purposes.
- Responsible Gaming Monitoring: Behavioural and account data is used to monitor player activity for indicators of problem gambling and to enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion arrangements.
- Service Improvement: Aggregated and anonymised technical and usage data is used to improve the performance, reliability, and user experience of the bd9a platform.
- Marketing Communications: Where you have expressly opted in to receive promotional communications, we will use your contact data to send you information about bonuses, promotions, and new features. You may withdraw your marketing consent at any time by contacting .
bd9a will never use your personal data to make fully automated decisions that produce legal or similarly significant effects without providing you the opportunity to request human review of that decision.
Data Sharing and Third Parties
bd9a does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for each stated purpose.
Game Technology Providers
To deliver casino games on the bd9a platform, we share limited technical session data (such as player session tokens and game round identifiers) with certified game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers are contractually bound to process this data solely for the purpose of game delivery and fair-play certification. They do not receive your full name, payment details, or contact information.
Payment Service Providers
Processing deposits and withdrawals requires us to share relevant transaction details with payment service providers including bKash, Nagad, Rocket, and Upay, as well as card payment processors for Visa and Mastercard transactions. Each payment provider handles the data it receives in accordance with its own privacy policy and applicable financial regulations. bd9a shares only the minimum data required to complete each transaction.
Identity Verification Partners
bd9a may engage third-party KYC and identity verification services to assist with document verification and fraud screening. These partners process your identity documents under strict confidentiality agreements and are not permitted to use the data for any purpose beyond the verification task assigned by bd9a.
Legal and Regulatory Disclosure
bd9a may be required by law, court order, or lawful authority to disclose certain player data to government bodies, law enforcement agencies, or regulatory authorities. In such cases, bd9a will disclose the minimum data required to satisfy the legal obligation and will, where legally permitted to do so, notify the affected player of the disclosure.
Data Retention and Deletion
bd9a retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Once data is no longer required for its stated purpose and no legal retention obligation applies, it is securely deleted or irreversibly anonymised.
Active Accounts
For players with active bd9a accounts, personal data including identity information, contact details, and transaction history is retained for the duration of the account relationship. This data is necessary for the ongoing provision of services, regulatory compliance, and the resolution of any disputes that may arise during the account lifecycle.
Closed and Inactive Accounts
When a player requests permanent account closure, or when an account is closed by bd9a due to a breach of the Terms and Conditions, bd9a will retain the account data for a period of up to 5 years following the closure date. This retention period reflects anti-money laundering record-keeping obligations and the potential need to respond to legal proceedings or regulatory enquiries arising from activity during the account's active period.
After the applicable retention period has elapsed, all personal data associated with the closed account will be either permanently deleted from bd9a systems or rendered irreversibly anonymous such that it can no longer be linked to any identifiable individual.
Marketing Communications Data
If you have opted in to receive marketing communications from bd9a and subsequently withdraw your consent, your contact details will be removed from our active marketing lists within 14 days of receiving your opt-out request. A suppression record confirming your opt-out preference will be retained to ensure we do not inadvertently contact you again.
Support Communications
Records of customer support interactions, including live chat transcripts and email correspondence, are retained for a period of 3 years from the date of the interaction. This retention period supports quality assurance reviews and the resolution of any delayed complaints or disputes.
Your Privacy Rights
As a registered player on bd9a, you hold meaningful rights in relation to the personal data we hold about you. bd9a is committed to honouring these rights promptly and without undue obstacle. The rights available to you are described below.
- Right of Access: You have the right to request a copy of the personal data bd9a holds about you. We will provide this information in a clear, structured format within 30 days of receiving your request. Where the volume of data is significant, we may request that you specify the categories of data you wish to access.
- Right to Rectification: If any personal data bd9a holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly from your account settings; for changes to identity or KYC data, please contact our support team.
- Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other lawful basis for processing exists, or where the data has been processed unlawfully. Please note that this right is subject to bd9a's legal retention obligations — we may be required to retain certain data even after receiving a deletion request.
- Right to Restrict Processing: In certain circumstances, you may request that bd9a restrict the processing of your personal data, for example while the accuracy of the data is being contested or while a complaint is under review.
- Right to Data Portability: Where data is processed on the basis of your consent or for the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though bd9a may be able to demonstrate compelling grounds that override your objection in certain cases.
- Right to Withdraw Consent: Where bd9a processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
To exercise any of the rights listed above, please contact bd9a's data protection team at with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and aim to fulfil it within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.
Data Security Measures
bd9a implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security posture is reviewed regularly and updated to reflect evolving threats and industry best practices.
Technical Safeguards
All data transmitted between your browser or device and bd9a servers is encrypted using TLS 1.3, the current industry standard for transport layer security. Data stored on bd9a servers — including player account records, transaction histories, and KYC documents — is encrypted at rest using AES-256 encryption. Access to production databases is restricted to a small number of authorised engineers and is protected by multi-factor authentication and role-based access controls.
Organisational Measures
bd9a operates a strict internal data access policy under which employees and contractors are granted access only to the personal data necessary for their specific role. All staff with access to player data receive privacy and security training as part of their onboarding and on a periodic basis thereafter. Access to sensitive data categories such as KYC documents is logged and audited on a regular basis.
Incident Response
In the event of a confirmed personal data breach that is likely to pose a risk to the rights of affected players, bd9a will notify those players without undue delay and provide clear guidance on the steps they should take to protect themselves. We maintain a formal incident response plan that is tested and updated annually to ensure our team can respond swiftly and effectively to any security event.
Your Role in Security
While bd9a takes extensive measures to protect your data on our side, the security of your account also depends on your own practices. We strongly recommend using a unique, strong password for your bd9a account, enabling two-factor authentication where available, logging out of your account after each session especially on shared devices, and never sharing your login credentials with any other person. If you suspect your account has been compromised, contact bd9a support at immediately.
bd9a is committed to continual improvement of its data security practices. This Privacy Policy will be updated whenever significant changes are made to our security infrastructure or data handling procedures. Players are encouraged to review this page periodically to stay informed of how their data is being protected.
For questions about these Terms, data handling, your account rights, or responsible gaming tools, please visit our FAQ page or read the Terms & Conditions. Our support team is available 24 hours a day, 7 days a week, to assist registered bd9a players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond.
Questions About Your Privacy?
Our support team is available around the clock to address any privacy concerns, data access requests, or account security questions. You can also explore our FAQ for quick answers, or review the Terms & Conditions for the full platform agreement. 18+ only — please play responsibly.