Privacy Policy
of 9kbd

Introduction

This Privacy Policy ("Policy") describes how 9kbd ("9kbd", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the 9kbd online betting and casino platform available at https://9kbd.io and all associated subdomains, mobile interfaces, and services (collectively, the "Platform").

9kbd is committed to protecting the privacy and personal data of all players using the Platform, including players located in Bangladesh. This Policy has been prepared in accordance with applicable data protection principles and reflects our obligations to maintain the confidentiality, integrity, and availability of your personal information.

By registering an account on 9kbd, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

9kbd reserves the right to update this Privacy Policy periodically. The most current version will always be available on this page with a revised effective date. Material changes to this Policy will be communicated to registered players via their registered email address in advance of the changes taking effect.

Personal Data We Collect

9kbd collects personal data from you in three primary ways: directly from you when you register and use the Platform, automatically through your device and browser as you interact with the Platform, and from third-party sources such as payment providers and identity verification services. The categories of personal data we collect include:

We do not knowingly collect sensitive personal data beyond what is strictly required for identity verification and responsible gaming monitoring purposes. We do not collect biometric data, health data, religious beliefs, political opinions, or racial or ethnic origin data.

How We Use Your Personal Data

9kbd uses the personal data we collect for clearly defined operational and compliance purposes. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected. The primary purposes for which 9kbd processes your personal data are as follows:

• Account management: Creating, maintaining, and securing your 9kbd player account, including processing your login credentials and managing your account settings and preferences.
• Identity verification (KYC): Verifying your identity and age in compliance with our obligations under applicable anti-money laundering and responsible gaming requirements. This is mandatory for all players and is a condition of account activation and withdrawal processing.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate financial records of all transactions on the Platform.
• Betting and gaming services: Facilitating the placement of bets, participation in casino games, and settlement of outcomes. Your betting and gaming activity data is used to calculate winnings, apply bonus wagering requirements, and generate account statements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming monitoring: Monitoring betting patterns and account activity to identify early indicators of problem gambling behaviour, and to enforce deposit limits, self-exclusion requests, and other responsible gaming measures requested by or applied to your account.
• Customer support: Providing assistance in response to your enquiries, complaints, and dispute notifications, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Legal compliance: Fulfilling our legal and regulatory obligations, responding to lawful requests from government or law enforcement authorities, and maintaining records as required by applicable financial recordkeeping laws.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the functionality, performance, and user experience of the 9kbd Platform.
• Marketing communications: Where you have provided explicit consent, sending you promotional offers, bonus notifications, and news about new features or events on 9kbd. You may withdraw this consent at any time — see Section 12 for details.

Lawful Basis for Processing

9kbd processes your personal data only where a valid lawful basis exists for doing so. The lawful bases on which we rely, and the processing activities they support, are as follows:

• Contractual necessity: Processing your registration data, payment data, and betting activity data is necessary for 9kbd to perform the contract we have entered into with you as a registered player. Without this processing, we cannot provide the services described in our Terms & Conditions.
• Legal obligation: Identity verification (KYC), anti-money laundering checks, transaction recordkeeping, and responsible gaming monitoring are carried out to comply with applicable legal and regulatory obligations.
• Legitimate interests: Fraud detection, security monitoring, Platform analytics, and improving our services are carried out on the basis of 9kbd's legitimate interests — and we have assessed that these interests are not overridden by your rights and freedoms as a data subject.
• Consent: Marketing communications and the placement of non-essential cookies are conducted only on the basis of your explicit, freely given, and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Cookies & Tracking Technologies

9kbd uses cookies and similar tracking technologies to operate the Platform effectively, to remember your session preferences, to detect fraud, and — where you have provided consent — to analyse your behaviour on the Platform and deliver relevant content.

The categories of cookies used on 9kbd are as follows:

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication cookies that keep you logged in during your betting session and security cookies that help us detect and prevent fraudulent activity. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and recently viewed games — to provide a more personalised experience on return visits.
• Analytics cookies: Where you have provided consent, these cookies collect aggregated, anonymised data about how users interact with the Platform — which pages are most visited, how long sessions last, and where users navigate from. This data is used solely for internal Platform improvement purposes.
• Marketing cookies: Where you have provided explicit consent, these cookies enable 9kbd to identify your interests and deliver relevant promotional content. We do not use third-party advertising networks or share cookie data with unaffiliated advertisers.

You can control the cookies placed on your device via your browser settings. Blocking all cookies may impair your ability to log in and use certain features of the 9kbd Platform. Non-essential cookies (analytics and marketing) are placed only with your prior consent.

Data Sharing & Third-Party Recipients

9kbd does not sell, rent, or trade your personal data to unaffiliated third parties. Your data is shared with third parties only where strictly necessary to deliver the services you have requested, to comply with legal obligations, or to protect the security and integrity of the Platform. The categories of third parties with whom 9kbd may share your data are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, and the card processing networks for Visa and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data processing terms.
• Identity verification (KYC) providers: Third-party KYC service providers may process your identity documents and selfie photographs to confirm your identity and age. All KYC providers engaged by 9kbd are bound by contractual data processing terms that prohibit them from using your data for any purpose beyond identity verification.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, JILI, Spribe, and Ezugi may receive technical session data (e.g., player session tokens) necessary to deliver their games within the 9kbd Platform environment. These providers do not receive your full registration profile.
• IT and infrastructure partners: Cloud hosting and platform infrastructure providers that store and process data on behalf of 9kbd under binding data processing agreements that meet industry security standards.
• Legal and regulatory authorities: 9kbd may be required by applicable law, court order, or regulatory directive to disclose your personal data to government bodies, law enforcement agencies, or financial intelligence units. We will disclose only what is strictly required and will notify you of such disclosures where legally permitted to do so.
• Fraud prevention and AML screening services: Third-party services that assist 9kbd in detecting and preventing money laundering, fraud, and other financial crime. These services process limited personal data under strict contractual terms.

All third-party service providers engaged by 9kbd who process personal data on our behalf are required to maintain appropriate technical and organisational security measures and are prohibited from processing your data for any purpose other than the specific purpose for which it was shared.

International Data Transfers

9kbd operates a platform that serves players primarily located in Bangladesh. Some of our third-party service providers — including cloud infrastructure partners, game content studios, and payment technology providers — may be located in jurisdictions outside Bangladesh. Where personal data is transferred to a service provider located in another country, 9kbd ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or greater than, the standards applied within Bangladesh.

The safeguards 9kbd relies upon for international data transfers include:

• Contractual data processing agreements with recipient organisations that impose equivalent data protection obligations on the recipient.
• Verification that the recipient jurisdiction maintains an adequate standard of data protection under applicable international frameworks.
• Technical security measures — including encryption in transit and at rest — that protect data throughout the transfer and in the destination environment.

If you require further information about the specific international transfers that affect your personal data, or the safeguards in place for those transfers, please contact us at support@9kbd.io.

Data Retention Periods

9kbd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or financial recordkeeping obligations. The following retention periods apply to the principal categories of personal data held by 9kbd:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and business intelligence purposes.

Your Rights Over Your Personal Data

As a data subject, you hold a number of rights in relation to the personal data that 9kbd holds about you. 9kbd is committed to honouring these rights promptly and without undue obstacles. Your rights include:

• Right of access: You have the right to request a copy of all personal data that 9kbd holds about you, along with information about how it is being processed. We will provide this within 30 days of receiving a valid request.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. Corrections to core account data (name, date of birth, contact details) must be supported by appropriate documentary evidence.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, where you have contested the accuracy of your data and verification is pending.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted directly to another controller where technically feasible.
• Right to object: You have the right to object to processing that is based on 9kbd's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team by email at support@9kbd.io with the subject line "Data Rights Request — [Right Name]". We will acknowledge your request within 24 hours and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, and you will be notified of any such extension.

Children & Minors

The 9kbd Platform is strictly intended for adults aged 21 years and above. 9kbd does not knowingly collect or process the personal data of any person under the age of 21. If you are under 21 years of age, you must not register an account, access the Platform, or provide any personal data to 9kbd.

Where 9kbd discovers or has reasonable grounds to believe that an account has been registered by, or is being used by, a person under the age of 21, we will immediately suspend that account, initiate an investigation, forfeit all balances held in that account, and permanently close it. Any personal data collected from an underage user will be deleted as promptly as practicable, subject only to any overriding legal obligation to retain records of the incident.

If you are a parent or guardian and believe that your child may have registered an account on 9kbd without your knowledge, please contact us immediately at support@9kbd.io. We treat all underage gambling reports as a matter of the highest priority.

Security Measures

9kbd implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 9kbd Platform is encrypted using industry-standard TLS protocols. Our SSL certificate is maintained and renewed continuously.
• AES-256 encryption at rest: Sensitive personal data stored in 9kbd databases — including identity document copies and payment method details — is encrypted at rest using AES-256 encryption.
• Secure password storage: Account passwords are never stored in plaintext. All passwords are hashed using a strong one-way cryptographic hashing algorithm with a unique per-account salt value before storage.
• Access controls: Access to systems containing personal data is restricted to authorised 9kbd personnel on a strict need-to-know basis. All access events are logged, monitored, and subject to regular review.
• Two-factor authentication (2FA): 9kbd supports two-factor authentication for player accounts. We strongly encourage all players to enable 2FA to add an additional layer of security to their account login process.
• Regular security audits: 9kbd conducts periodic security assessments of its Platform infrastructure, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident response procedures: 9kbd maintains documented data breach response procedures. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and will take all steps necessary to contain and remediate the breach.
• Employee training: All 9kbd personnel with access to personal data undergo mandatory data protection and security awareness training on a regular basis.

While 9kbd takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 9kbd immediately if you suspect any unauthorised access to your account.

Marketing Communications

9kbd may send you promotional communications — including bonus offers, new game announcements, tournament invitations, and seasonal promotions tied to events such as Eid, the Bangladesh Premier League (BPL), or the IPL — where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by 9kbd.
• Updating your communication preferences in your 9kbd account settings panel.
• Contacting our support team at support@9kbd.io and requesting removal from marketing communications.

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawing marketing consent does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests — which are sent on the basis of contractual necessity and cannot be disabled while your account is active.

Changes to This Privacy Policy

9kbd reserves the right to revise this Privacy Policy at any time. Changes may be made to reflect updates to the Platform's features, changes in applicable law or regulatory guidance, or improvements to our data handling practices. The effective date displayed at the top of this page will be updated whenever a new version of this Policy is published.

Where changes are material — meaning they significantly affect your rights, the categories of data we collect, or the purposes for which we process your data — 9kbd will provide advance notice to registered players via the email address associated with their account, with a minimum of 14 days' notice before the changes take effect.

Your continued use of the 9kbd Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically so that you remain informed about how 9kbd collects, uses, and protects your personal data. Archived versions of previous Privacy Policy iterations are available upon request by contacting support@9kbd.io.

Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 9kbd handles your personal data, please contact our Data Protection team using the details below:

• Email: support@9kbd.io
• Subject Line: "Privacy Policy Enquiry" or "Data Protection Request — [Subject]"
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Bengali
• Average Response Time: Under 3 minutes for live chat; under 1 hour for email
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

All data protection requests submitted to 9kbd are logged, tracked, and handled by our dedicated data protection team. We are committed to resolving all privacy-related enquiries thoroughly and within the timeframes outlined in Section 9 of this Policy.