bda9 Privacy Policy
bda9 is committed to protecting the privacy and personal data of every player on the platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your own data as a registered bda9 player in Bangladesh.
How bda9 Protects Your Privacy
These six commitments define how bda9 approaches the handling of personal data. The full legal detail for each commitment is set out in the policy document below.
Every piece of data transmitted between your device and the bda9 platform — including login credentials, personal details, and financial information — is protected by 256-bit SSL encryption. No personal data is ever transmitted in plain text at any point in the bda9 system.
bda9 does not sell, rent, or trade your personal data to any third-party organisation for marketing, advertising, or commercial purposes. Your information is used solely to operate your bda9 account, verify your identity, process transactions, and improve the quality of the bda9 platform.
bda9 collects only the personal data that is strictly necessary to provide a safe, verified, and compliant gaming service. We do not collect information about your browsing activity on other websites, your social media profiles, or any data that is not directly relevant to the operation of your bda9 account.
Every bda9 player has the right to access, correct, and request deletion of their personal data. You may submit a data access or deletion request by contacting bda9 support at any time. Requests are processed within 30 calendar days. Data necessary to comply with legal obligations may be retained even after account closure.
Access to player personal data within bda9 is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific categories of data — such as the KYC team or the payments team — are granted access. All internal data access is logged and subject to periodic audit.
bda9 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and seasonal offers. You may opt out of all marketing communications at any time by updating your notification preferences in the account dashboard or by contacting support. Transactional messages such as deposit confirmations and withdrawal updates cannot be disabled.
1 Introduction
bda9 ("we", "us", "the Company") operates the online casino and sports betting platform accessible at bda9.io. This Privacy Policy describes how bda9 collects, processes, stores, and protects personal data relating to individuals ("players", "users", "you") who register for or use the bda9 platform, whether accessed via web browser, mobile browser, or any application made available by bda9.
Privacy and data protection are integral to the trust relationship between bda9 and every player on the platform. We are committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. This policy applies to all data collected through the bda9 website, registration forms, KYC verification processes, payment transactions, customer support interactions, and marketing communications.
Related documents: This Privacy Policy should be read alongside the bda9 Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of the bda9 platform. By registering on bda9, you confirm that you have read and understood this Privacy Policy in full.
2 Personal Data We Collect
bda9 collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of data we collect and the context in which each category is collected.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, National ID number, passport number | Registration and KYC verification |
| Contact Data | Mobile number, email address, residential address | Registration and account updates |
| Financial Data | bKash/Nagad/Rocket wallet number, bank account details, transaction history | Deposits, withdrawals, and KYC |
| Verification Documents | Copies of government-issued ID, utility bills, bank statements | KYC verification process |
| Technical Data | IP address, device type, browser type, operating system, device fingerprint | Each platform session |
| Usage Data | Games played, bet amounts, session duration, login timestamps | Ongoing platform usage |
| Communication Data | Live chat transcripts, support email content, complaint records | Customer support interactions |
| Marketing Preferences | Notification opt-in/opt-out status, preferred communication channel | Account settings and opt-in actions |
bda9 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If you voluntarily provide any such information in a support interaction, it will be handled with appropriate additional safeguards and will not be used for any purpose other than resolving the specific matter you raised.
3 How We Collect Your Data
bda9 collects personal data through the following channels and mechanisms:
3.1 Direct Collection
You provide data directly to bda9 when you complete the registration form, submit identity documents for KYC verification, make a deposit or withdrawal request, contact customer support via live chat or email, respond to a promotional offer, or update your account settings. All information you voluntarily submit through these touchpoints is collected and stored by bda9.
3.2 Automated Technical Collection
Each time you access the bda9 platform, our systems automatically record technical data including your IP address, the type and version of your browser, your device operating system, the pages you visit within the bda9 platform, and the timestamps of each action. This data is collected using server logs, session tokens, and first-party cookies placed on your device.
3.3 Third-Party Sources
bda9 may receive data about you from trusted third-party sources, including identity verification service providers used during KYC checks, payment processing partners such as bKash, Nagad, Rocket, and Upay when processing your transactions, and fraud detection services that provide risk signals associated with IP addresses or device identifiers. Data received from third-party sources is handled in accordance with this Privacy Policy and is used only for the purposes described in Section 5.
4 Legal Basis for Processing Your Data
bda9 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:
- Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and bda9 — specifically, to operate your account, verify your identity, process deposits and withdrawals, and provide the gaming services you have requested.
- Legal obligation: bda9 is required to collect and retain certain data to comply with applicable anti-money laundering requirements, financial crime prevention obligations, and Know Your Customer regulatory standards. This processing cannot be declined or opted out of.
- Legitimate interests: bda9 processes technical data and usage data on the basis of its legitimate business interests in detecting and preventing fraud, maintaining platform security, improving service quality, and ensuring the integrity of games and betting markets.
- Consent: Where you have expressly opted in to receive marketing communications from bda9, we process your contact data and marketing preference data on the basis of your consent. You may withdraw this consent at any time by contacting support or updating your notification preferences.
5 How We Use Your Personal Data
bda9 uses the personal data it collects for the following specific purposes:
- Registering and managing your bda9 player account, including verifying your identity, age, and eligibility to use the platform
- Processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels
- Conducting KYC and anti-money laundering checks as required by applicable regulations
- Detecting, investigating, and preventing fraudulent activity, bonus abuse, and prohibited conduct as defined in the bda9 Terms & Conditions
- Providing customer support and resolving complaints, disputes, or account queries
- Sending you transactional messages including deposit confirmations, withdrawal status updates, and security alerts
- Sending you marketing communications about bonuses, promotions, new games, and seasonal offers — where you have consented to receive such messages
- Analysing platform usage patterns to improve the user experience, fix technical issues, and develop new features
- Enforcing the bda9 Terms & Conditions, including investigating suspected breaches and taking appropriate account action
- Complying with applicable legal, regulatory, and law enforcement obligations
Responsible Gaming use: bda9 also uses usage data — including session duration, bet frequency, and deposit patterns — to monitor for signs of problem gambling and to trigger responsible gaming interventions such as reality check prompts. This processing is in your best interest and cannot be disabled. See the bda9 Responsible Gaming page for full details.
6 Data Sharing and Disclosure
bda9 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:
6.1 Service Providers and Data Processors
bda9 engages third-party service providers who process personal data on our behalf and under our instruction. These include identity verification providers, payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported banks), fraud detection services, IT infrastructure and cloud hosting providers, and customer support platform operators. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to bda9.
6.2 Game Providers
When you play games on the bda9 platform, limited technical and gameplay data — such as your player ID, session token, bet history, and game outcomes — is shared with the relevant game provider (for example, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) for the purpose of delivering the game, resolving disputes, and ensuring fair play. Game providers do not receive your full name, contact details, or financial data.
6.3 Legal and Regulatory Disclosure
bda9 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, or where bda9 has a good-faith belief that such disclosure is necessary to prevent crime, comply with a legal process, or protect the rights and safety of bda9, its players, or the public. Such disclosures are made without prior notice to the affected player where legally required.
6.4 Business Transfers
In the event that bda9 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy protections applicable to your data in the successor entity's hands prior to the transfer taking effect.
7 Cookies and Tracking Technologies
bda9 uses first-party cookies and similar tracking technologies (including session tokens and local storage) on the bda9 platform. We do not use third-party advertising cookies or behavioural tracking technologies that monitor your activity across other websites.
7.1 Types of Cookies Used
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without preventing you from using the platform.
- Functional cookies: Remember your preferences such as language settings, notification preferences, and your last visited game category. These improve your experience but do not track behaviour across sessions for marketing purposes.
- Analytics cookies: Used by bda9 to understand how players navigate the platform, which games are most popular, and where technical errors occur. This data is aggregated and anonymised where possible.
7.2 Managing Cookies
You may configure your browser to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging into the bda9 platform and may cause features to stop working correctly. Instructions for managing cookies in common browsers are available from the respective browser's help documentation.
8 Data Retention
bda9 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | 5 years after account closure | Anti-money laundering compliance |
| Financial transaction records | 7 years after the transaction date | Financial record-keeping obligations |
| KYC verification documents | 5 years after account closure | Regulatory compliance |
| Customer support communications | 3 years after the interaction | Dispute resolution and quality assurance |
| Technical and usage data | 13 months from collection | Fraud detection and platform analytics |
| Marketing preference records | 3 years after last opt-in action | Evidence of consent for marketing |
At the end of each retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.
9 Data Security
bda9 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and the bda9 platform
- Encryption of sensitive data fields (including identity document details and financial account numbers) stored in the bda9 database
- Role-based access controls that restrict internal staff access to personal data on a strict need-to-know basis
- Comprehensive audit logging of all internal access to player personal data
- Regular security assessments and penetration testing of the bda9 platform infrastructure
- Secure, access-controlled data storage with redundant backups
- Employee data protection training and confidentiality obligations for all staff with access to player data
Security incident response: In the event of a data breach that poses a risk to the rights and freedoms of players, bda9 will notify affected players as quickly as practicable, describing the nature of the breach, the data involved, and the steps bda9 has taken and recommends you take in response. Players should ensure their contact details on the bda9 account are always up to date to receive such notifications.
10 Your Data Rights
As a bda9 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bda9 support at [email protected] with the subject line "Data Rights Request" and your registered account username:
- Right of Access: You may request a copy of the personal data bda9 holds about you. bda9 will provide this within 30 calendar days of a valid request.
- Right to Rectification: You may request that inaccurate or incomplete personal data held by bda9 be corrected. Minor corrections (such as updating your contact number) can be made directly in the account settings dashboard.
- Right to Erasure: You may request that bda9 delete your personal data. bda9 will fulfil erasure requests to the extent permitted by law. Data that must be retained for anti-money laundering compliance or to defend a legal claim will be retained for the minimum period required and then deleted.
- Right to Restrict Processing: You may request that bda9 temporarily restrict the processing of your data — for example, while an accuracy dispute is being resolved.
- Right to Data Portability: You may request that bda9 provide you with a copy of the data you have provided to us in a structured, machine-readable format.
- Right to Object: You may object to processing based on bda9's legitimate interests at any time. You may also withdraw consent for marketing communications at any time without affecting your right to use the bda9 platform.
bda9 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be notified of any such extension.
11 Children's Privacy and Age Restrictions
The bda9 platform is strictly intended for adults aged 21 years and over. bda9 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted at the point of registration and at first withdrawal to enforce this requirement. If bda9 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and any balance in the account will be handled in accordance with the bda9 Terms & Conditions.
If you are a parent or guardian and believe that a person under 21 in your care has registered on bda9, please contact support immediately at [email protected]. bda9 will investigate and take appropriate action as a priority.
12 Third-Party Services and External Links
The bda9 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game provided by one of these studios, you are interacting with software operated by that third party, and your gameplay data is processed by both bda9 and the relevant game provider as described in Section 6.2 of this policy. Each game provider operates under their own privacy practices, which are separate from this policy.
bda9 payment processing involves services provided by bKash, Nagad, Rocket, Upay, and supported banking partners. Transactions processed through these services are subject to those providers' own privacy policies and terms, which govern how they handle the financial data necessary to execute your payment instructions.
bda9 does not control the privacy practices of third-party game providers or payment processors. We recommend reviewing the privacy documentation of any third-party service you interact with through the bda9 platform if you have specific concerns about how those parties handle your data.
13 Changes to This Privacy Policy
bda9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the bda9 platform. Material changes to this policy will be communicated to registered players via email notification or a prominent in-platform notice at least seven (7) days before the changes take effect. The updated policy will always be available on this page, with the effective date clearly indicated at the top of the document.
Your continued use of the bda9 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you should cease using the platform and request account closure before the effective date of the changes.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bda9 handles your personal data, please contact the bda9 Data Protection team using the following channels:
- Email (general support): [email protected]
- Email (data rights requests): [email protected] — subject line: "Data Rights Request"
- Email (payments & financial data queries): [email protected]
- Live Chat: Available 24/7 via the bda9 platform after login
- Response Time: Email responses within 4 hours; data rights request responses within 30 calendar days
- Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
When submitting a data rights request, please include your registered account username, the specific right you wish to exercise, and a brief description of the data or processing activity your request relates to. This will help bda9 process your request as efficiently as possible.
Your Data Is Safe — Now Enjoy the Game
With your privacy fully protected under the bda9 Privacy Policy, you can focus on what matters — world-class casino games, live cricket betting, and instant withdrawals to your bKash or Nagad wallet.
21+ only. Gambling involves financial risk. Please play responsibly.