bd9i Privacy Policy

bd9i ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers on or interacts with the bd9i platform, accessible at https://bd9i.io. This Privacy Policy ("Policy") sets out in clear, plain English the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the bd9i website, any mobile-optimised version of the platform, and all associated support and communication channels — including live chat, email correspondence, and promotional communications. By registering an account on bd9i, you acknowledge that you have read and understood this Policy and consent to the processing activities described herein.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are available on the bd9i platform. Where there is any conflict between this Policy and those documents, this Policy shall govern in respect of data privacy matters.

For the purposes of this Policy, bd9i is the data controller responsible for the personal data of registered players and website visitors. As data controller, bd9i determines the purposes and means by which personal data is processed in connection with the provision of its online casino and sports betting services.

All enquiries relating to the exercise of data subject rights, complaints regarding data handling practices, or requests for further information about this Policy should be directed to the bd9i Data Protection team via the contact details set out in Section 15 of this Policy.

bd9i collects personal data from players through several channels: directly from you when you register an account or contact support; automatically when you use the platform; and from third-party service providers involved in payment processing, identity verification, and fraud prevention. The categories of personal data we collect are detailed below.

3.1 Registration & Account Data

• Full legal name
• Date of birth (used to verify that you are aged 21 or above)
• Email address
• Mobile phone number (including bKash or Nagad registered number)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Username and encrypted password
• Preferred currency (BDT / USDT)

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (National ID card, passport, or driving licence — image copy)
• Proof of address (utility bill, bank statement, or equivalent — issued within 3 months)
• Selfie photograph or video, where requested for enhanced verification
• Payment method ownership proof (screenshot of registered bKash, Nagad, Rocket, or Upay account)

3.3 Financial Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Last four digits of linked bank account or mobile financial service number (where applicable)
• USDT wallet address (where cryptocurrency deposits are used)
• Account balance history

3.4 Gaming & Betting Activity Data

• Game session records (games played, bet amounts, outcomes, session duration)
• Sports betting records (events wagered on, bet types, odds, results)
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookies and similar tracking technologies (see Section 10)

3.6 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with bd9i
• Survey responses and feedback submissions

bd9i processes your personal data only for specific, clearly defined purposes. The table below summarises the primary processing purposes and the corresponding legal basis for each activity.

bd9i does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where profiling is used (for example, to identify problem gambling patterns or detect unusual betting activity), it is always subject to human oversight by the bd9i compliance team.

bd9i relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing is required to enter into and perform the player agreement — including account creation, payment processing, and game access.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) regulations, age verification obligations, and data retention requirements.
• Legitimate Interests: Processing is necessary for bd9i's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — including marketing communications and optional analytics cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where bd9i relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your right to privacy. The results of such assessments are available upon written request to the Data Protection team.

bd9i does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under enforceable data protection obligations:

6.1 Payment Service Providers

We share transaction-relevant data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and USDT gateway providers, solely to facilitate deposit and withdrawal processing.

6.2 Identity Verification Partners

KYC documentation is shared with our contracted identity verification service providers, who process this data on our behalf under strict data processing agreements. These providers are prohibited from using KYC data for any purpose other than verification on behalf of bd9i.

6.3 Game Software Providers

Certain session-level technical data (such as player session tokens and game round IDs) is shared with our game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of delivering game content and resolving game disputes. These providers do not receive your full personal profile.

6.4 Fraud Prevention & Security Services

We share device fingerprint data, IP addresses, and transaction metadata with fraud detection and cybersecurity service providers to protect the integrity of the platform and the security of player accounts.

6.5 Legal & Regulatory Disclosure

bd9i may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required by applicable law, or where disclosure is necessary to establish, exercise, or defend legal claims. bd9i will notify affected players of such disclosures where legally permitted to do so.

As an internationally operated platform serving players in Bangladesh and other jurisdictions, bd9i may transfer personal data to servers and service providers located outside of Bangladesh. Such transfers are carried out only where adequate safeguards are in place to ensure that your personal data is protected to a standard equivalent to that applied within Bangladesh.

Safeguards we apply to international data transfers include:

• Contractual clauses with service providers that require them to apply equivalent data protection standards
• Transfer only to service providers operating in jurisdictions recognised as providing adequate data protection
• End-to-end encryption for all data transferred across network boundaries

If you have questions about the specific countries to which your personal data may be transferred, please contact our Data Protection team at the address listed in Section 15.

bd9i retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

bd9i implements a layered approach to information security, applying technical, organisational, and physical safeguards designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL / TLS Encryption: All data transmitted between your device and the bd9i platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data stored in our databases — including passwords, payment identifiers, and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bd9i's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC).
• Two-Factor Authentication: Administrative access to systems that hold personal data requires two-factor authentication (2FA).
• Penetration Testing: bd9i engages third-party security specialists to conduct regular penetration testing and vulnerability assessments of its platform infrastructure.
• Incident Response: bd9i maintains a documented data breach response procedure. In the event of a confirmed breach that affects your personal data, we will notify you without undue delay in accordance with applicable legal requirements.

While bd9i takes all reasonable measures to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your account credentials and for notifying bd9i immediately if you suspect any unauthorised access to your account.

bd9i uses cookies and similar tracking technologies on its platform to provide essential functionality, improve user experience, and analyse platform usage. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary or functional cookies may impair the operation of the bd9i platform. Withdrawal of consent for analytics or marketing cookies will not affect your ability to access or use core platform features.

As a bd9i player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of Access: You may request a copy of all personal data bd9i holds about you. We will provide this information within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held on your account. Minor corrections (such as updating your phone number) can be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations that require us to retain certain data for a defined period.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format, or that we transfer it directly to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or consent at any time. This includes the right to opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

The bd9i platform is strictly intended for adults aged 21 years and above. bd9i does not knowingly collect or process personal data from individuals under the age of 21. Age verification is performed as part of the account registration and KYC process.

If bd9i becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be securely deleted, and any deposited funds will be returned to the originating payment method following verification. Parents or guardians who believe that a minor has registered on bd9i should contact [email protected] immediately.

The bd9i platform may contain references to game studio content or promotional material that originates from third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While bd9i takes care to partner only with reputable, established providers, we do not control the data practices of third-party game studios or payment processors beyond the contractual obligations described in this Policy.

bd9i is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any external services you interact with in the course of using the bd9i platform.

bd9i reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email and/or a prominent notice on the bd9i platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the bd9i platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting our support team.

We recommend that all players review this Policy periodically to stay informed about how bd9i protects their personal data. Archived versions of previous Privacy Policy editions are available upon written request to the Data Protection team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bd9i processes your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. bd9i takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.