Privacy Policy — How bda9 Collects, Uses, and Protects Your Personal Data

📋 1. Data We Collect

bda9 collects personal data in order to operate a safe, compliant, and enjoyable gaming platform for players in Bangladesh. The categories of personal data we collect are set out below, together with specific examples of the types of information within each category.

Identity and Contact Data

When you register an account on bda9, we collect your full legal name, date of birth, gender, residential address (including district, city, and division within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number.

KYC Verification Documents

As part of our mandatory Know Your Customer (KYC) process, we collect copies of identity documents submitted for age and identity verification. These may include your National Identity Card (NID) issued by the Bangladesh Election Commission, passport, driving licence, or other government-issued photo identification. We also collect proof-of-address documents such as utility bills or bank statements.

Financial and Payment Data

We collect transaction records for all deposits and withdrawals processed through your bda9 account. This includes the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, City Bank), the registered mobile number or account name associated with that payment method, transaction reference numbers, amounts in BDT, and timestamps. We do not store full mobile financial service PINs or online banking passwords.

Account Activity and Gaming Data

We record your gaming history on bda9, including games played, wagers placed (in BDT), outcomes, bonus claims, session durations, login times, and platform interactions. This data is used for account security, responsible gaming monitoring, bonus verification, and dispute resolution.

Technical and Device Data

When you access bda9.net, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and approximate geographic location derived from your IP address.

🔍 2. How We Collect Your Data

bda9 collects your personal data through several distinct channels, all of which are described transparently here. We do not collect data through covert or deceptive means.

• Directly from you: When you complete the registration form on bda9.net, submit KYC documents, contact our support team via live chat or email at [email protected], or update your account profile settings.
• Automatically during your use of the platform: When you access bda9.net, our web servers and analytics systems automatically log technical data including your IP address, session duration, pages visited, and device information. See Section 5 for full details on cookies and tracking technologies.
• From payment providers: When you initiate a deposit or withdrawal, our integrated payment partners — bKash, Nagad, Rocket, Upay, and supported banks — share transaction confirmation data with bda9 to facilitate payment processing and reconciliation. We receive only the data necessary to verify and record the transaction.
• From third-party game providers: Game studios such as Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe may share aggregated session data with bda9 for the purposes of game performance monitoring and responsible gaming analysis. This data does not include additional personal information beyond what bda9 has already collected directly.
• From identity verification services: bda9 may use third-party KYC verification providers to validate identity documents. These providers return a verification result (pass/fail) and matched data fields to bda9 and do not retain your documents independently beyond their own stated retention policies.

🎯 3. Purpose of Processing Your Data

bda9 processes your personal data only for lawful, specific, and clearly defined purposes. Every use of your data is tied to one of the following legitimate purposes:

Account Registration and Management

We process your identity and contact data to create and maintain your bda9 account, verify that you meet the 18+ age requirement, and ensure that you can securely access the platform via the bda9 Login page.

KYC and Anti-Money Laundering (AML) Compliance

bda9 is obligated to verify the identity of all players who deposit, wager, or withdraw funds on the platform. Your identity documents and payment data are processed as part of our KYC and AML compliance programme. This is a legal obligation and a condition of platform use.

Payment Processing

We use your payment data to process deposits from and withdrawals to your registered bKash, Nagad, Rocket, Upay, or bank account. All deposits are settled in BDT. Transaction records are retained for financial reconciliation and dispute resolution purposes.

Fraud Prevention and Platform Security

Technical and account activity data is analysed continuously to detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions. This processing is in bda9's legitimate interest and in the interest of the wider player community.

Responsible Gaming Monitoring

bda9 uses your gaming activity data — including session lengths, deposit frequency, wager amounts, and loss patterns — to identify players who may be exhibiting signs of problem gambling. Where such patterns are identified, our responsible gaming team may proactively reach out to offer support, suggest deposit limits, or activate cooling-off periods.

Customer Support

When you contact bda9's support team via live chat or email, we process the content of your communications and your account data to resolve your enquiry effectively. Support interaction records are retained to maintain consistency across follow-up communications and for quality assurance.

Marketing and Promotional Communications

With your explicit consent, bda9 may use your contact data to send you promotional communications about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh offers, or BPL season specials), and platform updates. You may withdraw consent to marketing communications at any time by contacting [email protected] (plain text — not a clickable link) or adjusting your account notification preferences.

🤝 4. Data Sharing and Third Parties

bda9 does not sell your personal data. We share your data with third parties only where it is strictly necessary for the purposes described in Section 3 above, and only with recipients who are bound by appropriate data protection obligations. The categories of third-party recipients are as follows:

Payment Service Providers

To process your financial transactions, bda9 shares the minimum necessary payment data with our integrated payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, and City Bank. Each of these providers operates under their own privacy policies and applicable Bangladesh financial regulations. bda9 does not control how these providers use data for their own compliance purposes.

KYC and Identity Verification Providers

Your identity documents and personal details may be shared with third-party KYC verification service providers engaged by bda9 to validate player identity and age. These providers process your data solely on bda9's instructions and are contractually prohibited from using it for their own purposes.

Game Technology Providers

Game studios including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe operate game engines that are integrated into the bda9 platform. These providers may receive a player session token and anonymised session data necessary to run their games. They do not receive your full identity or payment data via the game integration.

Technology Infrastructure Providers

bda9 uses third-party cloud hosting, content delivery, and cybersecurity service providers to operate bda9.net. These providers may have access to technical data and encrypted account data stored on their infrastructure but are contractually bound to process it only as directed by bda9 and to maintain appropriate security standards.

Law Enforcement and Regulatory Authorities

bda9 may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies in response to a lawful request, court order, or where disclosure is necessary to prevent serious harm, fraud, or criminal activity. In such cases, bda9 will disclose only the minimum data required to comply with the legal obligation.

🍪 5. Cookies and Tracking Technologies

bda9.net uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, analyse site performance, and detect fraudulent activity. A cookie is a small text file placed on your device when you visit a website. The cookies we use fall into the following categories:

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the secure operation of the bda9 platform. For all other cookie categories, you may adjust your preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, doing so may impair the functionality of bda9.net, particularly the ability to remain logged in during a gaming session.

bda9 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with external advertising networks.

🗓️ 6. Data Retention Periods

bda9 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

• Account registration data (name, contact details, date of birth): Retained for the duration of the active account, plus five years following account closure to comply with AML record-keeping obligations.
• KYC identity documents (NID, passport, utility bills): Retained for five years from the date of submission or account closure, whichever is later, in accordance with anti-money laundering requirements.
• Payment and transaction records: Retained for seven years from the date of each transaction to satisfy financial record-keeping obligations.
• Gaming activity logs (bet history, session data, wager records): Retained for five years from the date of activity, primarily for dispute resolution and responsible gaming analysis.
• Customer support communications (live chat transcripts, support emails): Retained for two years from the date of the interaction.
• Technical and device data (IP logs, access logs): Retained for 12 months from the date of collection for security and fraud detection purposes.
• Marketing consent records: Retained for the duration of your consent plus three years after withdrawal, as evidence of lawful marketing activity.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

⚖️ 7. Your Privacy Rights

As a bda9 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link) or via the 24/7 live chat facility inside your account dashboard.

Right of Access

You have the right to request a copy of all personal data that bda9 holds about you. We will provide a structured summary of your data within 30 days of receiving a valid request. Your first data access request in any 12-month period is provided free of charge.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For minor updates such as mobile number or email address changes, you may make changes directly via your account settings after completing the bda9 login process. For identity data corrections, a support request and supporting documentation may be required.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis for processing exists. Please note that bda9 may be legally required to retain certain categories of data — particularly KYC documents and financial transaction records — for the retention periods specified in Section 6, even following an erasure request.

Right to Restriction of Processing

In certain circumstances — for example, where you contest the accuracy of your data, or where processing is unlawful but you prefer restriction over erasure — you may request that bda9 restrict how we process your data while the matter is resolved.

Right to Data Portability

Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.

Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, bda9 will cease sending marketing communications to you within five business days.

🛡️ 8. Data Security Measures

bda9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following safeguards:

• SSL/TLS encryption: All data transmitted between your browser and bda9's servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser address bar when using bda9.net.
• Encrypted data storage: Sensitive personal data — including identity document images, KYC records, and payment data — is stored in encrypted form on our secure servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data held on bda9's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement are granted access, and all access events are logged and audited.
• Two-factor authentication: bda9 encourages all players to enable two-factor authentication (2FA) on their accounts. Our support team also uses 2FA for all administrative access to account management systems.
• Penetration testing: bda9's platform undergoes regular security testing by independent cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: In the event of a data breach that poses a risk to the rights and freedoms of affected players, bda9 will notify affected individuals promptly and take all necessary steps to contain and remediate the incident.

Despite our best efforts, no online platform can guarantee absolute security. You play an important role in protecting your own data by maintaining a strong, unique password for your bda9 account and never sharing your login credentials with any third party. bda9 will never ask for your password via email, live chat, or any other communication channel.

🧒 9. Minors and Privacy

The bda9 platform is strictly intended for adults aged 18 years and above. bda9 does not knowingly collect, process, or retain personal data from individuals under the age of 18. Our registration process includes mandatory age declaration and KYC age verification to prevent minors from accessing the platform.

If bda9 discovers or is notified that an account belongs to a person under the age of 18, we will:

• Immediately suspend the account and prevent further access
• Forfeit any wagering activity conducted through the account
• Return any deposited funds that can be verified as belonging to the minor or their parent/guardian via the original payment method
• Permanently delete all personal data associated with the account within 30 days, except where retention is required by applicable legal obligations

If you are a parent or guardian and believe that your child has registered an account on bda9.net without your knowledge or consent, please contact [email protected] (plain text — not a clickable link) immediately. We treat all reports of underage account use as the highest priority and will act within 24 hours of notification.

📝 10. Policy Updates and How to Contact Us

bda9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, registered players will be notified via a notice displayed prominently on bda9.net or by email to the address registered on their account.

The "Last Updated" date displayed at the top of this page and in the hero section above indicates when the most recent revision was published. Non-material changes — such as formatting corrections or clarifications that do not alter the substance of our data practices — may be made without individual notification.

Your continued use of the bda9 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated practices. If you do not agree with a material change to this policy, you may request account closure by contacting our support team.

How to Contact bda9 About Privacy

For any question, concern, or request related to this Privacy Policy or the personal data bda9 holds about you, please contact our support team using one of the following methods:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via your account dashboard after completing the bda9 login process. Our average first-response time during Bangladesh Standard Time (BST, UTC+6) peak hours is under two minutes.
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)

All privacy-related enquiries are handled by trained members of our compliance and customer experience team. We aim to acknowledge all enquiries within 72 hours and resolve them within 30 calendar days.