9bdt Privacy Policy

1 Information We Collect

9bdt collects personal data from users in Bangladesh through several channels: directly from you when you register an account or interact with our platform, automatically through your use of the site and its services, and occasionally from third-party partners where permitted by law. We collect only the data that is necessary for the purposes described in this Policy.

Information You Provide Directly

When you register, verify your identity, make a deposit, request a withdrawal, or contact our support team, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, National ID (NID) number or passport number.
• Contact Data: Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and mobile phone number.
• Financial Data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction history in Bangladeshi Taka (BDT).
• Account Credentials: Username and encrypted password. We never store passwords in plain text.
• Verification Documents: Copies of NID, passport, or utility bills submitted as part of the KYC (Know Your Customer) verification process.
• Communications: Records of messages sent to our support team via email ([email protected]) or live chat.
• Preferences: Responsible gaming tool settings such as deposit limits, session time reminders, and self-exclusion elections.

Information Collected Automatically

When you browse or use 9bdt, certain technical data is collected automatically by our systems and third-party analytics providers:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on each page, games played, bet amounts, click-stream data, session start and end times, and error logs.
• Location Data: General geographic location derived from your IP address (country and city level only — not GPS-precise location).
• Cookie Data: Information stored in browser cookies and similar tracking technologies. See Section 4 (Cookies & Tracking) for full details.

Information from Third Parties

In limited circumstances, 9bdt may receive personal data about you from trusted third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, and banking partners) confirming transaction status and payment method ownership.
• Identity verification service providers who assist with NID and document validation.
• Fraud prevention and anti-money laundering (AML) screening services.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who may share session-level data required for game integrity and dispute resolution.

2 How We Use Your Data

9bdt uses the personal data we collect for the following purposes. We do not use your data for any purpose incompatible with those described below without first obtaining your explicit consent.

9bdt does not sell, rent, or trade your personal data to third-party marketers. We do not use your data to build advertising profiles for use by external advertising networks. Any marketing communications sent by 9bdt relate exclusively to 9bdt's own products and promotions, and you may withdraw marketing consent at any time by contacting [email protected].

3 Legal Basis for Processing

9bdt processes your personal data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 9bdt — including account registration, game delivery, and payment processing — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Certain processing activities — including identity verification, AML screening, and record-keeping — are required by applicable law and regulatory requirements. 9bdt processes data for these purposes regardless of user consent.
• Legitimate Interests: Where 9bdt has a legitimate interest in processing data that is not overridden by your privacy rights — for example, fraud detection, platform security, and analytics to improve service quality — we rely on legitimate interests as our legal basis. We carry out a balancing test to confirm that our interests do not outweigh your fundamental rights.
• Consent: For optional activities such as sending you marketing emails, newsletters, or promotional SMS messages about seasonal offers (e.g., Eid, BPL season, Pohela Boishakh promotions), we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

4 Cookies & Tracking

9bdt uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform, remember your preferences, and understand how users interact with our services. When you first visit 9bdt.ws, your continued use of the site constitutes acknowledgment of this cookie usage.

Types of Cookies We Use

9bdt does not use third-party advertising cookies or cross-site behavioural tracking cookies. You can manage or delete cookies via your browser settings at any time. Please note that disabling essential cookies may result in reduced functionality or inability to log into your 9bdt account.

5 Data Sharing & Third Parties

9bdt shares your personal data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data in accordance with applicable data protection principles. We do not sell your data.

Categories of Third-Party Recipients

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. We share your payment details and identity information strictly to the extent required to process deposits and withdrawals in BDT and to comply with payment network rules.
• Identity Verification Providers: Third-party KYC service providers who assist with NID and passport validation for age verification and AML compliance. These providers are bound by strict data processing agreements.
• Game Technology Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO. Session-level data (bet amounts, game rounds, outcomes) is exchanged to deliver game services, resolve disputes, and meet RNG certification requirements. No more data is shared than is technically necessary.
• Cloud Hosting & Infrastructure: 9bdt uses reputable cloud hosting partners to store and process platform data. These providers operate under data processing agreements that prohibit independent use of 9bdt user data.
• Fraud & AML Screening Services: Specialist compliance tools may receive pseudonymised financial and identity data to screen transactions against watchlists and detect suspicious activity patterns.
• Legal & Regulatory Authorities: In response to a valid legal request, court order, or regulatory inquiry, 9bdt may disclose personal data to law enforcement or regulatory bodies. We will inform you of such disclosures where legally permitted to do so.

6 Data Retention

9bdt retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or regulatory obligations. When your data is no longer required, it is securely deleted or anonymised. The following general retention periods apply:

Where your account is closed following a breach of our Terms & Conditions, we may retain relevant data for longer than the standard periods specified above where required for the purposes of ongoing legal proceedings, fraud investigations, or regulatory compliance obligations.

7 Your Rights

As a user of 9bdt, you have the following rights in relation to your personal data. To exercise any of these rights, contact our data team at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe consistent with applicable law.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being used and on what legal basis.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders may update basic profile details directly from their account settings dashboard.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to limitations where we are required by law to retain certain data (e.g., financial transaction records held for AML purposes).
• Right to Restriction of Processing: You may request that we restrict the processing of your data in specific circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests. Where we cannot demonstrate compelling legitimate grounds that override your rights, we will cease the processing in question.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

8 Data Security

9bdt takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and 9bdt servers is encrypted using industry-standard 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when visiting 9bdt.ws.
• Password Hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms with salting to store password credentials securely.
• Access Controls: Access to personal data within 9bdt's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to user data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): 9bdt supports OTP-based two-factor authentication via your registered Bangladesh mobile number to add an additional layer of account security.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity, unusual login patterns, and potential breach attempts.
• Regular Security Audits: 9bdt's platform undergoes periodic security reviews to identify and remediate vulnerabilities.
• Data Minimisation: We collect only the personal data that is necessary for the purposes described in this Policy. We do not retain data beyond the retention periods set out in Section 6.

While 9bdt employs robust security measures, no internet-based platform can guarantee absolute security. You play an important role in protecting your own data by keeping your login credentials confidential, using a strong unique password, enabling 2FA on your account, and logging out from shared devices. If you suspect your account has been compromised, contact [email protected] immediately.

9 Children & Minors

9bdt does not knowingly collect personal data from anyone under the age of 18. Our registration and verification process requires users to confirm their date of birth and submit government-issued identity documents (NID or passport) to verify that they meet the minimum age requirement before their first withdrawal is processed.

If we become aware — through any means, including a report from a parent or guardian, an internal audit, or a verification process — that a person under the age of 18 has registered an account on 9bdt, we will:

• Immediately suspend the account and block all further access.
• Permanently delete all personal data associated with the underage account from our active systems, subject to any legal retention obligations.
• Refund any deposits made, after deducting any winnings derived during the underage period (which will be forfeited).
• Notify our compliance team for further review.

If you are a parent or guardian and believe that your child may have created an account on 9bdt, please contact us immediately at [email protected]. We will investigate and take the appropriate action without delay. For guidance on parental control tools and responsible gaming resources, please visit our Responsible Gaming page.

10 Policy Amendments

9bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made, we will notify registered users by email at the address held on their account at least 7 days before the changes take effect (except where immediate amendment is required for urgent legal or security reasons).

The "Effective" date at the top of this Policy will be updated to reflect the date of the most recent revision. We encourage all 9bdt users to review this page periodically so that they remain informed about how their data is handled. Archived versions of previous Privacy Policies are available on request by emailing [email protected].

Your continued use of 9bdt following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you should cease using the platform and contact [email protected] to arrange account closure and withdrawal of any remaining verified balance.