bd9a Privacy Policy

1Introduction and Scope

This Privacy Policy ("Policy") describes how bd9a ("bd9a", "we", "us", "our") collects, uses, stores, and shares personal data about individuals ("you", "Player", "User") who access or use the bd9a online betting and casino platform at bd9a.io ("Platform"). This Policy applies to all bd9a services, including cricket betting, live casino, slot games, and any other products made available through the Platform.

By registering an account on the Platform, making a deposit, or otherwise using any bd9a service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

2Data Controller Information

bd9a is the data controller responsible for personal data collected through the Platform. As data controller, bd9a determines the purposes and means by which your personal data is processed. All queries, requests, and complaints relating to your personal data should be directed to the bd9a data protection contact at [email protected].

bd9a operates the Platform for players located in Bangladesh and tailors its data practices to serve this market. All customer communications are conducted in English, and this Policy is written in English as the binding language for all data-related matters.

3Personal Data We Collect

bd9a collects personal data from you directly when you register, verify your account, make transactions, or contact support. We also collect certain data automatically when you use the Platform. The categories of personal data we collect are set out in the table below.

bd9a does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes beyond what is contained in government-issued identity documents submitted for age and identity verification.

4How We Use Your Data

bd9a processes personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which bd9a uses your personal data are:

• Account management: Creating, maintaining, and administering your bd9a player account, including processing login requests, updating account preferences, and managing account security.
• Identity and age verification: Confirming that you are aged 21 or above and that the identity and payment details you have provided are genuine, in compliance with our KYC obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and maintaining accurate financial records of all transactions.
• Service delivery: Providing access to cricket betting, live casino, slot games, and all other Platform features, and ensuring the correct settlement of bets and payouts.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multiple account creation, and any other prohibited conduct described in the bd9a Terms and Conditions.
• Responsible gaming compliance: Monitoring player activity to identify indicators of problem gambling and administering self-exclusion, deposit limits, and other responsible gaming tools where activated.
• Customer support: Responding to queries, complaints, and dispute submissions submitted via live chat or email at [email protected].
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform and to improve its performance, navigation, and game offering.
• Legal compliance: Meeting any obligations imposed by applicable law, including anti-money-laundering regulations, and responding to lawful requests from regulatory and law enforcement authorities.

5Legal Basis for Processing

bd9a processes your personal data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and bd9a — i.e., operating your account, processing bets, and facilitating payments.
• Legal obligation: Processing required to comply with applicable laws, including KYC verification requirements and anti-money-laundering obligations.
• Legitimate interests: Processing necessary for bd9a's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that such interests are not overridden by your privacy rights.
• Consent: Where bd9a seeks your explicit consent for a specific processing activity (for example, sending you promotional communications), we will ask for your consent separately and you may withdraw it at any time.

6Data Sharing and Third Parties

bd9a does not sell your personal data to any third party. We may share your personal data with the following categories of third parties only where strictly necessary and subject to appropriate data processing agreements:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment partners receive the minimum data required to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC and age verification services that assist bd9a in verifying the identity and age of newly registered players.
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate games hosted on the Platform and receive session-level technical data required to run game software.
• IT infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who store and process Platform data under strict contractual confidentiality obligations.
• Legal and regulatory authorities: Where required by applicable law or a lawful regulatory request, bd9a may disclose personal data to law enforcement agencies, financial regulators, or courts of competent jurisdiction.

All third-party service providers engaged by bd9a are contractually prohibited from using your personal data for any purpose beyond the specific service they are providing to bd9a. bd9a remains responsible for the data it shares with these providers.

7International Data Transfers

The bd9a Platform primarily serves players in Bangladesh, and player data is preferentially stored on servers located within or geographically proximate to the region. However, some of bd9a's technology and service providers operate internationally, which may involve the transfer of personal data to servers located in other countries.

Where personal data is transferred internationally, bd9a ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to protect your data to a standard equivalent to that applied by bd9a. bd9a will not transfer personal data to any country or organisation that does not offer an adequate level of data protection.

8Data Retention

bd9a retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by bd9a are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for up to three years from the date of the last interaction, unless longer retention is required by an ongoing dispute or legal proceeding.
• Technical and usage data (server logs): Retained for up to 12 months on a rolling basis, after which data is anonymised or deleted.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

9Cookies and Tracking Technologies

bd9a uses cookies and similar tracking technologies on the Platform for the following purposes:

• Session cookies: Essential cookies that maintain your logged-in session and preserve your preferences during a single browsing session. These cannot be disabled without breaking core Platform functionality.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These are strictly necessary and are not optional.
• Performance cookies: Anonymous analytics cookies that help bd9a understand how players navigate the Platform — for example, which pages are most visited and where technical errors occur — so that we can improve the user experience.
• Functional cookies: Cookies that remember your language preference, chosen game view settings, and other personalisation options to improve your experience on return visits.

bd9a does not deploy third-party advertising cookies, social media tracking pixels, or any cross-site tracking technology that monitors your browsing activity on other websites. You may configure your browser settings to block or delete cookies; however, disabling essential session or security cookies will impair or prevent your ability to use the Platform.

10Your Data Rights

As a bd9a player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. bd9a will respond to all valid requests within 30 calendar days.

• Right of access: You may request a copy of all personal data that bd9a holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You may request that bd9a correct any inaccurate or incomplete personal data held in your account records.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bd9a's legal retention obligations.
• Right to restriction of processing: You may request that bd9a restrict the processing of your personal data in certain circumstances, such as while a complaint is being investigated.
• Right to data portability: You may request that bd9a provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of bd9a's legitimate interests. bd9a will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

11Security Measures

bd9a implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bd9a's servers
• Cryptographic hashing (bcrypt) for all stored account passwords — plaintext passwords are never written to any database or log file
• Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of Platform infrastructure by qualified third-party security professionals
• Real-time fraud detection and anomaly monitoring systems that flag unusual login patterns or transaction behaviour
• Physical and logical isolation of production databases from public-facing Platform components

While bd9a takes all reasonable technical and organisational measures to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying bd9a immediately at [email protected] if you suspect unauthorised access to your account.

12Children and Minors

The bd9a Platform is strictly for adults aged 21 years and above. bd9a does not knowingly collect personal data from any person under the age of 21. If bd9a discovers or has reason to believe that personal data has been submitted by a person under 21 years of age, the associated account will be immediately suspended, all funds will be withheld pending investigation, and the personal data will be deleted from bd9a's systems as soon as legally permissible.

If you are a parent or guardian and believe that a minor in your care has registered an account with bd9a, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the relevant data.

13Changes to This Policy

bd9a reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where a new category of personal data is collected or a new purpose for processing is introduced — bd9a will notify registered players via the email address associated with their account at least seven days before the changes take effect.

Non-material amendments, such as typographical corrections or clarifications that do not alter the substance of data practices, may take effect immediately upon publication on the Platform. The "Effective Date" at the top of this Policy will be updated on each revision. We encourage you to review this Policy periodically to stay informed of how bd9a protects your data.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and contact bd9a to request account closure.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd9a processes your personal data, please contact us through the following channels:

• Email: [email protected] — dedicated data privacy queries are handled by our support team within 30 calendar days
• Live Chat: Available directly within the Platform after login, staffed 24 hours a day, seven days a week in English
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)