bd9t Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how bd9t ("bd9t", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Member") who access or use the bd9t platform, website, and associated services available at bd9t.io. This Policy applies to all Members and visitors regardless of where they are located, and is specifically designed to address the privacy expectations of players based in Bangladesh. By registering an account or continuing to use the bd9t platform, you confirm that you have read, understood, and agreed to the practices described in this Policy.

1 About This Policy

This Policy sets out the data protection framework under which bd9t operates. It explains which categories of personal data we collect, the lawful basis on which we process that data, how long we keep it, who we share it with, and the rights you have in relation to your own information. This Policy should be read alongside the bd9t Terms & Conditions, which govern the overall contractual relationship between you and bd9t. Where a conflict arises between this Policy and the Terms & Conditions on a data-privacy matter, this Policy takes precedence.

bd9t may update this Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this document indicates when the current version came into force. We will notify existing Members of material changes via the email address associated with their registered account.

2 Who We Are

bd9t is an online betting and casino platform operating under the bd9t brand, offering sports betting, live dealer casino games, slots, and related entertainment services to eligible adult members in Bangladesh. bd9t is the data controller in respect of all personal data collected through the bd9t.io platform. As data controller, bd9t determines the purposes for which your personal data is processed and is responsible for ensuring that processing is carried out lawfully and transparently.

For all data-related enquiries, requests, and complaints, you may contact bd9t's data team directly at [email protected]. All written data requests will be acknowledged within five business days and resolved within thirty calendar days where reasonably practicable.

3 Data We Collect

bd9t collects personal data through several channels: directly from you when you register an account or interact with the platform; automatically when you browse or use the platform; and from third-party service providers where permitted by law. The categories of personal data we collect are described in the table below:

bd9t does not knowingly collect sensitive personal data (such as biometric data, health records, religious beliefs, or political opinions) unless it is directly and unavoidably required for a specific KYC or responsible gaming compliance purpose, in which case explicit consent will be sought at the point of collection.

4 How We Use Your Data

bd9t uses personal data collected from Members for the following defined purposes. We do not use your data for any purpose that is incompatible with the reasons set out here without first notifying you and, where required, obtaining fresh consent:

• Account Creation and Management: To register your account, verify your identity, maintain accurate account records, and facilitate secure login and account access across sessions.
• Transaction Processing: To process deposits received via bKash, Nagad, Rocket, Upay, and bank transfer; to process withdrawal requests to your registered payment method; and to maintain an accurate transaction history within your account wallet.
• KYC and Fraud Prevention: To verify your identity, confirm your eligibility to use the platform, detect and prevent fraudulent transactions, money laundering, multiple-account registration, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming Obligations: To monitor betting patterns that may indicate problem gambling behaviour; to apply deposit limits, cooling-off periods, or self-exclusion measures at your request or in accordance with our responsible gaming obligations; and to fulfil any duty-of-care obligations we hold toward our Members.
• Customer Support: To respond to your support requests, complaints, and enquiries in a timely and accurate manner; to maintain records of support interactions for quality assurance purposes; and to follow up on unresolved issues.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve platform features, game offerings, interface design, and the overall user experience for Members in Bangladesh.
• Marketing Communications (with consent): To send you promotional emails, SMS notifications, or in-platform messages about bonus offers, new games, and seasonal promotions — for example, BPL season offers or Eid bonuses — where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].
• Legal and Regulatory Compliance: To fulfil any legal obligation imposed on bd9t by applicable law, including record-keeping requirements, reporting obligations, and responses to lawful requests from competent authorities.

5 Legal Basis for Processing

Every data processing activity at bd9t is carried out on one or more recognised legal bases. The primary legal bases applicable to bd9t's processing activities are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bd9t — including account creation, transaction processing, and game participation — is carried out on this basis. Without this processing, bd9t cannot provide its services to you.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, anti-money-laundering record-keeping, and responses to lawful authority requests — are carried out because bd9t is legally required to do so.
• Legitimate Interests: bd9t processes certain categories of data (such as usage analytics and fraud detection signals) on the basis of its legitimate interests in operating a safe, fair, and commercially viable platform, provided those interests are not overridden by your privacy rights.
• Consent: Where bd9t processes your data for marketing communications or for optional platform features, we do so on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Cookies & Tracking Technologies

bd9t uses cookies and similar tracking technologies (including browser local storage and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and collect anonymised analytics data. The cookies bd9t uses fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account security token, and enable core platform features. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your language preference, display settings, and other personalisation options. Disabling them may affect your platform experience but will not prevent basic access.
• Analytics Cookies: bd9t uses first-party analytics to understand how Members navigate the platform, which pages are most visited, and where technical issues arise. Data collected via analytics cookies is aggregated and anonymised before being used for reporting purposes.
• Marketing Cookies: Where you have given consent, bd9t may use session identifiers to personalise the promotional offers and bonus notifications you see within the platform. bd9t does not place third-party advertising cookies or share cookie data with external advertising networks.

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bd9t account.

7 Data Sharing & Third Parties

bd9t does not sell or rent your personal data to any third party. However, in order to deliver the bd9t platform and comply with our legal obligations, we share certain categories of personal data with trusted third-party service providers operating strictly under our instruction. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners process payment data on our behalf to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are subject to financial industry data security standards.
• Game Content Providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to enable game functionality and RNG certification. No identifiable personal data is shared beyond what is technically required for game delivery.
• Identity Verification Services: Where required for KYC compliance, bd9t may use third-party identity verification platforms to cross-check the identity documents you submit. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification.
• Platform Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers may process certain technical data (such as IP addresses and server logs) as part of operating and securing the bd9t platform. All such providers are contractually bound to process data only under bd9t's instructions.
• Regulatory and Law Enforcement Authorities: bd9t may disclose personal data to competent authorities when required to do so by applicable law, valid legal process, or where disclosure is necessary to protect the rights, property, or safety of bd9t, its Members, or the public.

8 Data Retention

bd9t retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account membership plus a minimum post-closure period required for legal and compliance purposes.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, in accordance with standard anti-money-laundering record-keeping norms.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping requirements.
• Support Communication Records: Retained for a minimum of three years from the date of the relevant interaction.
• Marketing Consent Records: Retained for the duration of your marketing consent, and for a minimum of two years following withdrawal of consent, as evidence of the consent you gave.
• Analytics and Usage Data: Anonymised and aggregated after twelve months; anonymised data may be retained indefinitely for statistical analysis purposes.

Upon expiry of the applicable retention period, bd9t will securely delete or irreversibly anonymise the relevant personal data. If you request early deletion of your personal data before the standard retention period has expired, bd9t will evaluate the request against applicable legal obligations and inform you of the outcome in writing.

9 Data Security

bd9t takes the security of your personal data seriously and has implemented a multi-layered technical and organisational security framework to protect it against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the bd9t platform is encrypted using 256-bit SSL/TLS protocols, making it computationally infeasible for third parties to intercept or read your data during transmission.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong, industry-standard cryptographic hashing algorithm with unique salting, so that even in the unlikely event of a database breach, password values remain unreadable.
• Two-Factor Authentication: bd9t offers SMS-based two-factor authentication (2FA) as an additional layer of account security. Members are strongly encouraged to enable 2FA from their account security settings.
• Access Controls: Access to Member personal data within bd9t's internal systems is restricted on a strict need-to-know basis. Staff access is role-based and logged; access credentials are regularly reviewed and rotated.
• Security Monitoring: bd9t's platform infrastructure is subject to continuous security monitoring, intrusion detection, and regular independent security assessments to identify and remediate vulnerabilities proactively.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, bd9t will notify affected Members promptly and take immediate steps to contain the incident and prevent recurrence.

While bd9t takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying bd9t immediately if you suspect any unauthorised access to your account.

10 Your Privacy Rights

As a bd9t Member, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". bd9t will verify your identity before processing any such request and will respond within thirty calendar days:

• Right of Access: You have the right to obtain a copy of the personal data bd9t holds about you, together with information about how it is being processed and the purposes for which it is used.
• Right to Rectification: If any personal data bd9t holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and bd9t has no overriding legitimate grounds to continue. This right is subject to bd9t's legal retention obligations.
• Right to Restriction: You may request that bd9t restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of bd9t's legitimate interests, including profiling. bd9t will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bd9t processes your data on the basis of consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Children's Privacy

The bd9t platform is strictly intended for adults aged 21 and above. bd9t does not knowingly collect personal data from any individual under the age of 21. If bd9t becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be securely deleted, and any balance held in the account will be voided in accordance with the Terms & Conditions.

If you are a parent or guardian and you believe your child has registered an account on bd9t, please contact us immediately at [email protected] so we can take swift action to close the account and remove the data.

12 Third-Party Links

The bd9t platform does not contain links to external third-party websites as a general practice. However, where game provider interfaces (such as Evolution Gaming live tables or Pragmatic Play slots) are embedded within the bd9t platform, those game environments may be hosted on third-party infrastructure. bd9t is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policies of individual game providers if you have concerns about how your session data is handled within their game interfaces.

Payment provider interfaces — such as bKash and Nagad mobile wallet prompts — are operated by those providers under their own privacy frameworks. bd9t does not control, and is not responsible for, the data practices of these third-party payment services. Your use of a payment provider's interface during a bd9t deposit or withdrawal is governed by that provider's own terms and privacy policy.

13 Updates to This Policy

bd9t reserves the right to update or revise this Privacy Policy at any time. When we make material changes — that is, changes that meaningfully affect how we collect, use, share, or protect your personal data — we will notify you by email to the address associated with your registered account and display a prominent notice on the bd9t platform for a minimum of 14 days prior to the revised Policy taking effect.

For minor or administrative updates (such as corrections to typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details), bd9t will update the "Last updated" date at the top of this document without issuing a separate notification. We encourage you to review this Policy periodically to stay informed about how bd9t protects your data.

Your continued use of the bd9t platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated practices described therein. If you do not agree with any material change to this Policy, you may request closure of your account before the revised Policy takes effect.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bd9t handles your personal data, please contact our data team using the details below. We are committed to resolving all data-related enquiries promptly and transparently:

For responsible gaming concerns, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page, which contains dedicated guidance and tools for managing your gambling activity safely.