bdk9 Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how bdk9 ("bdk9", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player") who access or use the bdk9 platform at https://bdk9.io, including all associated sub-pages, games, betting markets, account services, and customer support channels.

bdk9 is committed to handling your personal data with transparency, integrity, and respect. This Policy is written in plain English and is intended to be read and understood by all players, including those accessing bdk9 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By registering an account, depositing funds, placing a bet, or otherwise using the bdk9 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bdk9 platform.

For the purposes of this Privacy Policy, bdk9 acts as the data controller in respect of all personal data collected from players using the platform. As data controller, bdk9 determines the purposes and means by which your personal data is processed. Where bdk9 engages third-party service providers (such as payment processors or KYC verification services) who process data on our behalf, those providers act as data processors under contractual obligations consistent with this Policy.

All queries, requests, or complaints relating to your personal data should be addressed to the bdk9 Data Privacy contact using the details provided in Section 14 of this Policy.

bdk9 collects personal data in the categories set out below. The specific data collected depends on how you interact with the platform and the stage of your account lifecycle.

bdk9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the liveness photograph required for identity verification purposes.

bdk9 collects personal data through the following channels:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to promotional communications.
• Automatically through technology: When you browse the bdk9 platform, our servers and analytics systems automatically log technical and behavioural data including your IP address, device identifiers, and session activity. See Section 7 for details on cookies and tracking technologies.
• From third-party payment providers: When you transact via bKash, Nagad, Rocket, or Upay, those providers share transaction confirmation data with bdk9 to reconcile your account balance. bdk9 does not receive your full payment wallet credentials from these providers.
• From KYC and identity verification services: bdk9 works with third-party verification partners to confirm the authenticity of identity documents submitted by players during the KYC process. These partners confirm verification outcomes to bdk9 but retain data subject to their own privacy policies.
• From fraud prevention and anti-money-laundering (AML) screening tools: bdk9 uses automated screening tools that cross-reference account activity against risk databases to detect unusual patterns. These tools may process your identity data and transaction data as part of the screening process.

bdk9 processes your personal data only for the purposes identified below, each of which is supported by a legitimate basis for processing:

bdk9 does not process your personal data for purposes beyond those listed above without first notifying you and, where required, obtaining your explicit consent.

bdk9 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to execute deposit and withdrawal instructions. These providers operate under their own privacy policies and applicable payment industry standards.
• KYC and identity verification providers: Third-party identity verification partners receive identity documents and photographs for the sole purpose of confirming player identity and age. They are contractually prohibited from using this data for any other purpose.
• Game content providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive technical session data (such as anonymised player identifiers and game outcomes) to facilitate game delivery and resolve technical disputes. These providers do not receive your identity or financial data.
• Fraud and AML screening services: Automated screening platforms receive identity and transaction data to generate risk assessments. Access is governed by strict contractual data-handling obligations.
• Legal and regulatory disclosure: bdk9 may disclose personal data to competent authorities where required by applicable law, court order, or legitimate regulatory request. We will notify affected players of such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of bdk9's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected players will be notified in advance.

The bdk9 platform uses cookies and similar tracking technologies to deliver and improve the service. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, store your language preference, and ensure secure navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: These cookies collect anonymised information about how players use the platform — which pages are visited most frequently, error messages encountered, and load times — to help bdk9 identify and fix performance issues. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies remember your preferences, such as your preferred payment method and responsible gaming settings, so you do not have to re-enter them on each visit.
• Security cookies: These cookies help bdk9 detect and prevent fraudulent login attempts, bot activity, and cross-site request forgery. They are active for the duration of your session and are cleared on logout.

bdk9 does not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality.

bdk9 implements a multi-layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bdk9 servers, covering login, registration, deposits, withdrawals, and game sessions.
• Bcrypt password hashing with per-user salts — passwords are never stored in retrievable form.
• Two-factor authentication (2FA) via SMS OTP, available to all players and strongly recommended for account security.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Automated intrusion detection systems that monitor for unusual access patterns and alert the bdk9 security team in real time.
• Regular third-party security audits and vulnerability assessments of the bdk9 platform infrastructure.
• Encrypted at-rest storage for all databases containing personal and financial data.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data security breach that poses a material risk to players, bdk9 will notify affected individuals promptly and take immediate remediation steps. You should also play your part by using a strong, unique password and never sharing your account credentials with anyone.

bdk9 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable financial record-keeping and anti-money-laundering obligations. The following retention periods apply as a general guideline:

• Active account data: Retained for the duration of the account and updated continuously as your account activity evolves.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction to satisfy financial record-keeping obligations. This applies to deposit history, withdrawal records, and bet settlement data.
• Identity and KYC documents: Retained for a minimum of 5 years from account closure. Copies of NID, passport scans, and liveness photographs are securely stored for this period and then securely deleted.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the conversation to support dispute resolution and quality assurance.
• Technical and log data: Server logs, IP address records, and session logs are retained for 12 months and then automatically purged.
• Closed or terminated accounts: Following account closure, personal data is reviewed and non-legally-required data is scheduled for deletion. Data subject to legal retention periods remains stored in a restricted access archive until those periods expire.

As a bdk9 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us using the details in Section 14:

• Right of Access: You may request a copy of the personal data bdk9 holds about you. We will provide this within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data bdk9 holds about you is inaccurate or incomplete, you have the right to request correction. You may update basic contact information directly within your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that data subject to legal retention requirements (see Section 9) cannot be deleted before the prescribed retention period expires.
• Right to Restrict Processing: In certain circumstances, you may request that bdk9 restricts processing of your data — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request that bdk9 provides your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing of your personal data where bdk9 relies on legitimate interest as the basis for processing, and where your interests override bdk9's legitimate interests.
• Right to Withdraw Consent: Where bdk9 processes your data on the basis of your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

bdk9 will respond to all data rights requests within 30 calendar days. If a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The bdk9 platform is strictly intended for adults aged 21 years and above. bdk9 does not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is a mandatory step during the KYC process, and registration is automatically declined for users who indicate a date of birth below the 21-year threshold.

If bdk9 becomes aware that personal data has been collected from a minor — whether through a misrepresentation of age at registration or any other means — we will immediately suspend the associated account, delete all collected personal data, and void any bet history or account balance. Parents and guardians who have reason to believe a minor has registered on the bdk9 platform should contact [email protected] immediately so that appropriate action can be taken without delay.

The bdk9 platform may contain references to game providers and payment services whose own platforms and privacy practices are independent of bdk9. When you interact with a Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe game directly via their embedded game interface, or when you complete a payment via bKash, Nagad, Rocket, or Upay, those interactions may be subject to the privacy policies of the respective provider.

bdk9 is not responsible for the privacy practices of third-party providers and does not control how those providers collect, use, or protect data you submit directly to their interfaces. We encourage you to review the privacy policies of any third-party services you use in connection with your bdk9 account.

bdk9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, bdk9 will notify registered players by sending a notification to the mobile number or email address on file, and by posting a prominent notice on the platform for a minimum of 14 days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the bdk9 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using the platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bdk9 holds about you, please contact our Data Privacy team using the details below. All data privacy communications are handled in English.

• Data Privacy Email: [email protected] — please include "Privacy Request" in your subject line
• General Support Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: All data rights requests acknowledged within 48 hours; resolved within 30 calendar days
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions of the bdk9 Privacy Policy in their entirety.