Privacy Policy — How 09bde Protects Your Personal Data

09bde collects personal data from players in several ways: directly when you register an account or contact our support team, automatically as you use the platform, and from third-party payment providers when you make a deposit or withdrawal. The categories of data we collect are described below.

Registration and Account Data

When you create a 09bde account, we collect the information you provide during the registration form, including your full legal name, date of birth, mobile phone number registered in Bangladesh, and your chosen payment method (such as bKash, Nagad, Rocket, or Upay). This data is required to open your account, verify your identity, and process financial transactions.

Identity Verification (KYC) Data

As part of our mandatory Know Your Customer (KYC) process, we may collect copies of government-issued identification documents, including but not limited to your National Identity Card (NID), passport, or birth certificate. This information is required to confirm your identity, verify your age as 18 or older, and comply with anti-money laundering obligations applicable to online gaming platforms operating in Bangladesh.

Financial Transaction Data

We collect records of all deposit and withdrawal transactions processed through your 09bde account, including transaction amounts in BDT, payment method details (e.g., bKash wallet number, Nagad account reference), transaction timestamps, and transaction status. This data is retained for financial record-keeping and fraud prevention purposes.

Platform Usage Data

We automatically collect certain technical data when you interact with the 09bde platform. This includes your IP address, device type and operating system, browser type and version, pages visited on the platform, session duration, game activity logs (games played, bets placed, outcomes), and clickstream data. This information is used to maintain platform security, detect suspicious activity, and improve the overall user experience.

Data Category	Examples	Collection Method
Identity Data	Full name, date of birth, NID number	Registration form, KYC submission
Contact Data	Mobile number, email address	Registration form
Financial Data	bKash/Nagad reference, transaction amounts in BDT	Deposit and withdrawal processing
Technical Data	IP address, device type, browser version	Automatic collection on platform access
Gaming Activity Data	Games played, bets placed, win/loss records	Automatic collection during gameplay
Communication Data	Support chat transcripts, email correspondence	Customer support interactions

09bde processes personal data only for lawful purposes directly related to the operation of the platform and the delivery of services to players. We do not use your data for purposes beyond those described in this Privacy Policy without first obtaining your explicit consent.

The primary purposes for which we use your personal data are as follows:

• Account management: To create, maintain, and administer your 09bde player account, including processing your login credentials, managing your real-money and bonus balances, and communicating account-related notifications.
• Identity and age verification: To confirm that you are who you say you are, that you are aged 18 or older, and that you are entitled to access the platform under these Terms & Conditions.
• Payment processing: To facilitate deposits to and withdrawals from your account via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported payment methods.
• Fraud prevention and security: To monitor transactions and platform activity for signs of fraud, money laundering, multi-accounting, bonus abuse, or other prohibited conduct, and to take appropriate action where a violation is detected.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support service available in Bangladesh Standard Time (BST, UTC+6).
• Platform improvement: To analyse anonymised usage patterns and game performance data in order to improve platform functionality, game selection, and overall player experience.
• Responsible gaming: To monitor player activity for indicators of problem gambling behaviour, apply self-exclusion or deposit limits when requested, and fulfil our responsible gaming obligations to players and their families.
• Legal compliance: To maintain records and fulfil our obligations under applicable law, including responding to lawful requests from relevant authorities.

09bde does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. However, in order to operate the platform and deliver services to you, we share certain data with carefully selected third-party service providers and, in limited circumstances, with legal or regulatory authorities.

The categories of third parties with whom 09bde may share your data, and the basis for such sharing, are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank receive transaction reference data strictly as required to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data they independently collect.
• Game technology providers: Our game platform partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive anonymised game session data necessary to deliver certified game outcomes and verify RNG compliance. No personally identifiable information is shared with game providers beyond what is technically required.
• Identity verification services: Third-party KYC and identity verification service providers may process your identity documents under strict data processing agreements that prohibit use of your data for any purpose other than verification.
• Legal and regulatory authorities: In circumstances where we are required by law, court order, or lawful authority to disclose player data — including in cases involving suspected money laundering, fraud, or other criminal activity — 09bde will comply with such requests. We will, where legally permitted, inform you of any such disclosure.
• Platform infrastructure providers: Cloud hosting and infrastructure service providers may have access to platform data as part of their hosting and maintenance services. All such providers are bound by confidentiality obligations consistent with this Privacy Policy.

09bde uses cookies and similar lightweight tracking technologies to operate the platform reliably, maintain the security of your login session, and understand how players interact with different areas of the site. A cookie is a small text file stored on your device when you visit the platform. It does not contain executable code and cannot be used to access data held elsewhere on your device.

The types of cookies used by 09bde are described below:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated login session, keep your game state during an active round, and protect against cross-site request forgery (CSRF). Without these cookies, core platform features cannot operate. These cookies cannot be disabled.
• Preference cookies: These cookies remember settings you have chosen on the platform, such as your preferred display language, notification preferences, and last-visited game category. Disabling these cookies will mean your preferences are not saved between sessions.
• Analytics cookies: We use anonymised first-party analytics to understand aggregate traffic patterns on the platform — pages visited, session duration, and feature usage. This data does not identify individual players and is used solely to improve platform design and performance.

09bde does not use third-party advertising cookies, behavioural tracking pixels, or retargeting technologies. Your browsing activity on the 09bde platform is not shared with any advertising network or social media platform.

You may adjust cookie settings within your browser at any time. Blocking strictly necessary cookies will prevent the platform from functioning correctly. All other cookie categories can be managed through your browser's privacy settings without affecting your core account access.

09bde retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, including the duration of your active account relationship with the platform, and for such additional periods as are required by applicable law or legitimate business interest.

Our standard retention periods by data category are as follows:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal compliance, fraud prevention
KYC / identity documents	Duration of account + 5 years post-closure	AML regulatory obligations
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Game activity logs	3 years from date of activity	Dispute resolution, fair play auditing
Customer support records	3 years from last interaction	Quality assurance, dispute resolution
Technical/log data	12 months from collection	Security monitoring, fraud detection

All player data is stored on secure servers protected by industry-standard access controls, encryption at rest, and regular security audits. Access to personal data is restricted to authorised 09bde personnel and contracted service providers who require it to perform their specific functions. All personnel with access to personal data are bound by confidentiality obligations.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data set. Anonymised data — from which individual players can no longer be identified — may be retained indefinitely for aggregate statistical and platform improvement purposes.

09bde respects your rights over your personal data. As a player registered on the 09bde platform, you are entitled to exercise the following rights with respect to your personal information:

• Right to access: You may request a copy of the personal data that 09bde holds about you at any time. We will provide this information in a clear and readable format within a reasonable timeframe.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain account details directly through your player account settings.
• Right to deletion: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal obligations that require us to retain it. Please note that deletion requests cannot be fulfilled for data we are legally required to retain, such as KYC documents and financial transaction records.
• Right to restrict processing: You may request that 09bde restricts its processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.

09bde takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include the following:

• 256-bit SSL/TLS encryption: All communications between your browser or mobile device and the 09bde platform are encrypted using Transport Layer Security (TLS) with a minimum key length of 256 bits. This prevents interception of data in transit.
• Encryption at rest: Sensitive data fields — including identity document references, payment method identifiers, and password hashes — are stored in encrypted form within our databases. Plaintext credentials are never stored.
• Access controls: Access to player personal data is restricted using role-based access controls (RBAC). Only employees and contractors with a verified business need are granted access to personal data, and all access events are logged for audit purposes.
• Two-factor authentication (2FA): We strongly recommend enabling 2FA on your 09bde account. Players may activate 2FA through their account security settings to add an additional layer of login protection beyond their password.
• Regular security audits: The 09bde platform and underlying infrastructure undergo periodic security reviews and vulnerability assessments conducted by qualified security professionals to identify and remediate potential weaknesses.
• Incident response: In the event of a data security incident that poses a risk to player data, 09bde has an established incident response procedure. Affected players will be notified promptly in accordance with applicable notification obligations.

While 09bde employs robust security measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their 09bde account, enable 2FA, and never share their login credentials with anyone. 09bde will never ask you for your password through any communication channel.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 09bde handles your personal data, please contact our support team using the details provided below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Support Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy enquiries within 3 business days and resolve them within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Subject Line for Data Requests: Please use "Data Privacy Request" in the subject line of your email to ensure your enquiry is directed to the correct team.

09bde may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. The effective date at the top of this page will be updated whenever material changes are made. We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of the 09bde platform following any update constitutes your acceptance of the revised Privacy Policy.