Privacy Policy

This Privacy Policy ("Policy") describes how bda9 ("we", "us", "our") collects, uses, stores, and protects personal data provided by or collected from users ("you", "your") of the bda9 website and mobile platform (together, "the Platform"). By accessing or using the Platform you acknowledge that you have read and understood this Policy and consent to the practices described herein.

This Policy applies to all personal data processed in connection with your use of the Platform, regardless of the device or method by which you access it. This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between you and bda9.

When you register and use bda9, we collect personal data in the following categories. We collect only what is reasonably necessary for the purposes described in this Policy:

• Identity data: full name, date of birth, username, and copies of government-issued identification documents submitted during KYC verification.
• Contact data: email address, mobile phone number, and residential address.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. the bKash or Nagad account number used), and account balance history. Full payment credentials are never stored by bda9 — they are handled exclusively by the relevant payment provider.
• Technical data: IP address, browser type and version, operating system, device identifiers, time zone, and login timestamps.
• Usage data: game history, bet amounts and outcomes, session duration, pages visited within the Platform, and responsible gaming tool settings (e.g. deposit limits and self-exclusion status).

We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, biometric data, or health information) unless explicitly required by applicable regulations. Where such collection is required, we will notify you separately and obtain your explicit consent.

bda9 uses the personal data we collect for the following purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent:

• Account creation and management: to register your account, verify your identity, and maintain your player profile.
• Service delivery: to process deposits and withdrawals, credit bonuses, settle bets, and provide customer support.
• Compliance and fraud prevention: to meet our legal and regulatory obligations, perform KYC and anti-money laundering checks, and detect and prevent fraud, cheating, and other prohibited activities.
• Responsible gaming: to monitor gaming activity and enforce responsible gaming tools including deposit limits, session reminders, and self-exclusion where applicable.
• Platform improvement: to analyse usage patterns, diagnose technical issues, and develop and enhance Platform features.
• Marketing communications: to send you promotional offers, bonus notifications, and relevant updates by email or in-platform message, where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting our support team.

bda9 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity: processing is required to perform our contract with you (e.g. operating your account, processing transactions).
• Legal obligation: processing is required to comply with anti-money laundering laws, KYC regulations, and other applicable legal requirements.
• Legitimate interests: processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights.
• Consent: for optional purposes such as marketing communications, we process your data only with your explicit consent, which you may withdraw at any time.

bda9 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment service providers: we share transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment processors solely to complete deposit and withdrawal transactions. These providers are contractually bound to process your data only for payment purposes.
• Identity verification providers: we may share identity documents with third-party KYC verification services for the purpose of confirming your identity and age.
• Regulatory and law enforcement authorities: we may disclose personal data to relevant authorities where required by applicable law, court order, or regulatory investigation.
• Fraud prevention networks: where we have reasonable grounds to suspect fraudulent activity, we may share relevant data with industry fraud prevention services and other gaming operators, as permitted by law.

All third parties with whom we share personal data are required to handle it in compliance with applicable data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

bda9 does not store complete payment card numbers, mobile banking PINs, or account passwords for bKash, Nagad, Rocket, or any other payment service. When you make a deposit or request a withdrawal, the relevant transaction data is transmitted securely and directly to the payment provider using SSL encryption. bda9 retains only a transaction reference, the amount, the date, and the partially masked payment method identifier (e.g. the last four digits of a card or the first and last two digits of a mobile number) for record-keeping and dispute resolution.

Transaction records are retained for a minimum of five years from the date of the transaction to meet our regulatory and anti-money laundering obligations. After the mandatory retention period has elapsed, transaction records are securely deleted or anonymised.

bda9 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. We use only the following categories of cookies:

• Essential cookies: strictly necessary for the Platform to function, including session authentication cookies that keep you logged in during your visit.
• Analytics cookies: used to understand how players interact with the Platform (e.g. which pages are visited most frequently and how long sessions last). This data is aggregated and does not identify you personally.
• Preference cookies: used to remember your language and display settings between sessions so you do not need to reconfigure them each time you visit.

We do not use advertising or cross-site tracking cookies. Most browsers allow you to control cookies through their settings. Disabling essential cookies may prevent certain Platform features from working correctly. Changes to your cookie preferences can be made via your browser settings at any time.

bda9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are as follows: active account data is retained for the duration of the account relationship plus five years following account closure; KYC and identity verification documents are retained for at least five years from the date of submission; transaction records are retained for a minimum of five years; marketing preference data is retained until you withdraw consent or close your account.

When the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Where deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data and protect it from further processing until deletion is possible.

bda9 implements industry-standard technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, encryption at rest for sensitive stored data, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security audits and vulnerability assessments, and multi-factor authentication for internal administrative systems.

While we take every reasonable precaution to safeguard your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, bda9 will notify affected users and take all reasonable steps to mitigate the impact of the breach.

Subject to applicable law, you have the following rights in relation to your personal data held by bda9. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: you may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to rectification: you may request that inaccurate or incomplete personal data we hold about you be corrected or completed.
• Right to erasure: in certain circumstances you may request that we delete personal data we hold about you (subject to our legal retention obligations).
• Right to restrict processing: in certain circumstances you may request that we limit how we use your personal data while a dispute or rectification request is being resolved.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We will respond to all valid data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights; however, we may charge a reasonable fee for requests that are manifestly unfounded or excessive.

The Platform is strictly intended for adults aged 21 and above. bda9 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data from our systems. If you believe a minor has registered on the Platform, please contact us immediately at [email protected] so we can investigate and act promptly.

The Platform may occasionally contain references to third-party services, providers, or organisations (for example, payment providers or game studios). bda9 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party service you interact with through or in connection with the Platform. This Policy applies solely to personal data processed by bda9 in connection with your use of the bda9 Platform.

bda9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the way the Platform operates. When we make material changes to this Policy, we will notify registered users by email and will update the "Last updated" date at the top of this page. We recommend that you review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the Platform after a revised Policy has been published constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should discontinue using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bda9 handles your personal data, our support team is available 24 hours a day, 7 days a week.

Reach us by email at: [email protected]