09bdt Privacy Policy — Your Data, Fully Protected

1 Introduction

09bdt is committed to protecting the privacy and personal data of every player who interacts with our platform. We operate in accordance with internationally recognised data protection principles, and we apply those principles to every stage of how your information is handled — from the moment you register an account through to the point at which your data is securely deleted in line with our retention schedule.

This Policy applies to all personal data collected through the 09bdt website, mobile-optimised interface, live chat support system, email correspondence, and any other channel through which you communicate or interact with 09bdt. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

Players based in Bangladesh are our primary audience. All data processing activities described in this Policy are carried out in respect of users accessing 09bdt from Bangladesh, with specific attention to the payment methods, local banking institutions, and digital wallet providers commonly used in Bangladesh, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank.

2 Data We Collect

09bdt collects several categories of personal data in order to operate a safe, compliant, and enjoyable platform for our players. The categories of data we collect are as follows:

3 How We Collect Your Data

09bdt collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Collection: Technical and behavioural data collected automatically when you access the 09bdt platform, including IP address, device fingerprint, browser type, session timestamps, pages visited, and betting/gaming activity logs. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners when you initiate a deposit or withdrawal. This includes transaction reference numbers and amounts but does not include your full payment account credentials.
• Identity Verification Partners: Where 09bdt uses a third-party identity verification service to confirm your age and identity, we may receive a verification result, document type confirmation, and a risk score. Full document images are processed and retained by the verification provider in accordance with their own privacy policy.
• Fraud Prevention Services: Risk and fraud signals from specialist third-party services used to detect multi-accounting, bonus abuse, and suspicious wagering patterns.
• Publicly Available Sources: In limited cases, 09bdt may cross-reference information against publicly available sources (such as sanctions lists) to meet legal compliance requirements.

4 How We Use Your Data

09bdt uses your personal data only for purposes that are necessary, proportionate, and directly related to the operation of the platform and the protection of our players and business. The specific purposes for which your data is used are as follows:

• Account Registration and Management: To create and maintain your 09bdt account, verify your identity and age (21+ requirement), and provide you with access to the platform and its features.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and partner banks. To maintain accurate transaction records for your account history.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, unauthorised account access, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to administer responsible gaming tools including deposit limits, session timers, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of our 24/7 English-language support service.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and the overall 09bdt user experience.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and seasonal promotions (such as BPL cricket betting offers, Eid promotions, or Pohela Boishakh specials) where you have given your explicit consent. You may withdraw consent at any time by contacting 09bdt support.

5 Legal Basis for Processing

09bdt processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and 09bdt — including account creation, transaction processing, and service delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out to pursue the legitimate interests of 09bdt in operating a safe and commercially viable platform, including fraud prevention, platform security, service improvement, and responsible gaming monitoring. We balance these interests against your rights and will not process your data on this basis where your interests override ours.
• Consent: Processing of your data for marketing communications is carried out only where you have given your explicit, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

09bdt does not sell or rent your personal data to any third party. We share your data only in the following limited and clearly defined circumstances:

• Payment Processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, and partner banks solely to process your deposit and withdrawal transactions. These providers process your data under their own privacy policies and are contractually bound to use it only for the stated payment purpose.
• Identity Verification Providers: We share your identity documents and personal details with third-party KYC providers to verify your age and identity in compliance with our obligations. These providers are contractually prohibited from using your data for any other purpose.
• Fraud Prevention Services: We share technical and behavioural data with specialist fraud prevention providers to protect against financial crime, bonus abuse, and platform security threats.
• Game Providers: When you play games powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or other certified providers, limited technical data (such as session tokens) is shared with those providers to deliver the game. Game providers do not receive your full personal profile.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory instruction. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 09bdt business, your personal data may be transferred to the acquiring entity as part of the business assets. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

7 Cookies & Tracking Technologies

09bdt uses cookies and similar tracking technologies (including local storage, session storage, and device fingerprinting) to operate the platform, maintain your session, and improve the quality of your experience. The categories of cookies used on 09bdt are as follows:

• Strictly Necessary Cookies: Essential cookies required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Cookies that remember your preferences, such as your chosen language (English), your responsible gaming settings, and your last-visited game category. These improve your experience but are not strictly necessary.
• Analytics Cookies: Anonymised or pseudonymised cookies that help us understand how players use the 09bdt platform — including which pages are most visited, how long sessions last, and where navigation difficulties occur. This data is used in aggregate to improve the platform and is not linked to your individual identity.
• Security & Fraud Detection Cookies: Technical identifiers used by our fraud prevention systems to detect suspicious behaviour, multi-accounting attempts, and bot activity. These are necessary for platform security.

You can control cookie settings through your browser's privacy settings. Blocking certain categories of cookies may affect your ability to use some features of the 09bdt platform. Strictly necessary and security cookies cannot be disabled without impairing platform functionality and security.

8 Data Retention

09bdt retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting obligations. The following retention periods apply:

After the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, it may be retained indefinitely as part of aggregated platform analytics.

9 Your Privacy Rights

As a 09bdt player, you hold a number of rights with respect to the personal data we hold about you. 09bdt is committed to facilitating the exercise of these rights in a timely and transparent manner. The rights available to you are as follows:

• Right of Access: You have the right to request a copy of the personal data 09bdt holds about you. We will provide this in a clear, structured format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Account details such as email address and phone number can be updated by contacting 09bdt support directly.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to our legal obligations to retain certain data (see Section 8).
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for fraud detection purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time by contacting 09bdt support via live chat or email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact our support team at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all privacy rights requests within 30 calendar days. Complex or high-volume requests may take up to 60 days; we will notify you if an extension is required.

10 Data Security

09bdt employs a comprehensive and layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational security measures we apply include the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 09bdt servers is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon and "https://" in your browser's address bar when using 09bdt.
• Encrypted Data Storage: All sensitive data at rest — including identity documents, financial records, and account credentials — is stored in encrypted form using AES-256 encryption on secured, access-controlled servers.
• Password Security: Passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm with per-user salting, meaning that even in the unlikely event of a data breach, your actual password cannot be recovered from our systems.
• Access Controls: Access to personal data within 09bdt's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: 09bdt's infrastructure is monitored 24/7 by automated intrusion detection and anomaly alerting systems. Suspicious activity triggers immediate investigation by our security team.
• Regular Security Audits: Our platform and data handling practices undergo regular independent security reviews and penetration testing to identify and address potential vulnerabilities before they can be exploited.

While 09bdt maintains robust security measures, no system is entirely immune to risk. In the event of a personal data breach that poses a risk to your rights and freedoms, 09bdt will notify you without undue delay, providing details of the nature of the breach and the steps we are taking in response.

11 Third-Party Services

The 09bdt platform integrates with a number of carefully selected third-party service providers to deliver a complete, secure, and high-quality betting and casino experience. When you interact with features powered by these providers, limited data is shared with them as described in Section 6 of this Policy. The principal categories of third-party providers used by 09bdt are as follows:

• Game Studios and Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios provide the casino games and live dealer experiences available on 09bdt. These providers operate their game software under independent regulatory certification and their own data protection standards.
• Payment Gateway Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard facilitate payment processing for deposits and withdrawals. Transactions are processed securely via their own encrypted payment infrastructure.
• Identity Verification Providers: Third-party KYC providers used to verify your identity and age. These providers are contractually bound to process your data exclusively for verification purposes and to comply with applicable data protection standards.
• Fraud Prevention and Risk Management: Specialist services that analyse technical and behavioural signals to detect fraudulent activity. Data shared with these providers is pseudonymised wherever possible.
• Customer Support Infrastructure: The live chat platform used to deliver our 24/7 English-language support service. Chat transcripts are retained in accordance with the retention schedule in Section 8.

09bdt does not control the privacy practices of these third-party providers. We encourage you to review the privacy policies of the payment providers and game studios you interact with. However, 09bdt selects all third-party providers with care, requires them to enter into data processing agreements, and monitors their compliance with the data handling obligations we impose on them.

12 Children & Minors

The 09bdt platform is strictly for adults aged 21 years and older. We do not knowingly collect, process, or store personal data relating to any person under the age of 21. Registration by individuals under 21 is prohibited, and any account found to belong to a minor will be immediately suspended and all associated data will be securely deleted following the resolution of any pending financial matters.

If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has registered an account with 09bdt or provided us with their personal data, please contact us immediately at [email protected]. We will investigate and take swift action to remove the account and delete the associated data.

13 International Data Transfers

09bdt operates as an internationally licensed platform. In the course of delivering our services, your personal data may be transferred to and processed in countries outside of Bangladesh. This includes transfers to the servers and infrastructure of the third-party service providers listed in Section 11, which may be located in various jurisdictions worldwide.

Whenever we transfer your personal data outside of Bangladesh, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections described in this Policy. These safeguards include:

• Contractual Protections: Data processing agreements with all international recipients that impose binding data protection obligations, including requirements for security, confidentiality, and purpose limitation.
• Encryption in Transit: All data transferred internationally is encrypted using 256-bit SSL/TLS protocols, ensuring that it cannot be intercepted or read by unauthorised parties during transmission.
• Provider Due Diligence: 09bdt selects international service providers that maintain recognised security certifications and operate under established data protection frameworks, giving you the same level of protection regardless of where processing takes place.

By using the 09bdt platform and agreeing to this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section, subject at all times to the safeguards and contractual protections we maintain.

14 Policy Amendments

09bdt reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect developments in our services, changes in applicable law or regulatory guidance, or improvements to our data handling practices. The "Last Updated" date at the top of this Policy will always indicate when the most recent revision was made.

Where a proposed change to this Policy is material — meaning it significantly affects the way we collect, use, or share your personal data — we will notify you in advance of the change taking effect. Notification will be delivered via the email address registered to your 09bdt account and/or via a prominent notice on the 09bdt platform.

Your continued use of the 09bdt platform after a revised Privacy Policy has been published and you have been notified of a material change constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you must cease using the 09bdt platform and may request account closure by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 09bdt handles your personal data, please do not hesitate to contact our dedicated privacy and support team. All privacy-related enquiries are handled in English by trained staff who understand both the technical and legal aspects of data protection as it applies to the 09bdt platform.

• Email: [email protected] — please mark the subject line as "Privacy Enquiry" for prioritised handling. We aim to respond to all privacy-related emails within 5 business days.
• Live Chat: Available 24 hours a day, 7 days a week directly on the 09bdt platform. Average response time is under 2 minutes. Identify your query as a privacy or data protection matter so it can be routed to the appropriate team member.
• Support Hours: 24/7, including all Bangladesh public holidays (Eid, Victory Day on December 16, Independence Day on March 26, Pohela Boishakh, Durga Puja, and Ramadan).
• Time Zone: All support is delivered in Bangladesh Standard Time (BST, UTC+6).

For responsible gaming concerns — including requests for self-exclusion, deposit limit reductions, or account cooling-off periods — please identify your request as a responsible gaming matter. These requests are escalated to our dedicated responsible gaming team and processed with priority. You can also visit our Responsible Gaming page for full details of the tools available to you.