bgd9 Privacy Policy
At bgd9, protecting the personal data of every player across Bangladesh is a core responsibility. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and what rights you hold over your own data.
1 Introduction
bgd9 ("bgd9", "we", "us" or "our") operates the online casino and sports betting platform accessible at bgd9.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses or uses the Platform, including registered players, visitors and prospective users located in Bangladesh and elsewhere.
This Privacy Policy sets out, in clear and plain English, what personal data bgd9 collects from you, the purposes for which that data is processed, the legal basis on which we rely, how long we retain your data, and the rights you have in relation to your personal information. This Policy should be read alongside the bgd9 Terms & Conditions and the bgd9 Responsible Gaming page, both of which form part of your agreement with us.
By registering an account on the bgd9 Platform, accessing the Platform as a visitor, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.
This Privacy Policy applies solely to data collected and processed by bgd9 in connection with the bgd9 Platform. It does not govern the data practices of third-party game providers, payment processors or other external parties whose services you may access through or in connection with the Platform.
2 Data Controller
For the purposes of applicable data protection law, bgd9 is the data controller in respect of personal data collected and processed through the Platform. As data controller, bgd9 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly and transparently.
If you have any questions or concerns about how bgd9 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 9 of this Policy, you may contact us using the details set out in Section 14 below. bgd9 will acknowledge all privacy-related enquiries within five business days and will endeavour to resolve them within 30 calendar days.
bgd9's designated privacy contact can be reached at support [at] bgd9.io (plain text — not a clickable link). Please include "Privacy Enquiry" in the subject line of your message to ensure prompt routing to the correct team.
3 Data We Collect
bgd9 collects personal data from you in a number of ways — directly when you interact with the Platform, automatically through technical systems as you navigate the Platform, and occasionally from third-party sources such as payment providers and identity verification services. The categories of personal data we collect are detailed in the table below.
| Category | Examples of Data Collected | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, NID / passport number, photograph | Provided directly by you during registration or KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including division, district and upazila) | Provided directly by you during registration or account updates |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal records | Provided by you when making deposits or withdrawals; also received from payment processors |
| Account & Activity Data | Username, password (hashed), account balance, betting and gaming history, bonus usage, session logs, login timestamps | Generated automatically through your use of the Platform |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone, referral URL | Collected automatically via cookies and server logs |
| Usage Data | Pages visited, links clicked, games played, time spent on each section, search queries within the Platform | Collected automatically via analytics tools |
| Communications Data | Content of live chat messages, email correspondence, support tickets, feedback submissions | Provided directly by you when contacting our support team |
| Verification Data | KYC document images, selfie photographs submitted for liveness checks, identity verification outcomes | Provided by you during the KYC process; outcomes received from verification service providers |
bgd9 does not collect or store sensitive personal data such as religious beliefs, political opinions, biometric data (other than liveness check photographs used solely for KYC), or health data, except where strictly required by law or where you have provided explicit consent.
4 How We Use Your Data
bgd9 processes your personal data only for specific, legitimate and clearly defined purposes. We do not use your personal data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which bgd9 processes your personal data are as follows:
- Account Registration and Management: To create and maintain your bgd9 account, verify your identity and age, manage your account settings and preferences, and communicate essential account-related information to you.
- Identity Verification (KYC): To comply with our obligations to verify player identity and age before permitting real-money deposits, withdrawals or gameplay. This processing is mandatory and cannot be opted out of by players wishing to use the Platform's real-money features.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay and connected Bangladeshi banking partners. Financial data is processed strictly for the purpose of completing the requested transaction and maintaining accurate financial records.
- Game Delivery and Sports Betting: To deliver casino games, live dealer experiences, and sports betting markets to your device, to process bets and settle winnings, and to maintain accurate records of all gaming and betting activity on your account.
- Responsible Gaming: To monitor player activity for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to provide appropriate interventions and support to players who may be at risk.
- Fraud Prevention and Platform Security: To detect, investigate and prevent fraudulent activity, money laundering, account takeovers, multi-accounting, and other abuses of the Platform. This includes automated analysis of transaction patterns and login behaviour.
- Legal and Regulatory Compliance: To fulfil bgd9's obligations under applicable law, including record-keeping requirements, anti-money laundering (AML) obligations, and responses to lawful requests from competent authorities.
- Customer Support: To respond to your enquiries, process complaints, and deliver effective support through live chat and email channels.
- Marketing and Promotions: To send you information about bgd9 promotions, seasonal offers (including Eid specials, BPL season promotions and Victory Day events) and platform updates, where you have given consent or where bgd9 has a legitimate interest in doing so. You may opt out of marketing communications at any time.
- Platform Improvement and Analytics: To analyse usage patterns, monitor Platform performance, conduct A/B testing and make data-driven improvements to the bgd9 user experience.
5 Legal Basis for Processing
bgd9 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
- Contractual Necessity: Processing is necessary to perform the contract between you and bgd9 — specifically, to operate your account, deliver gaming and betting services, and process payments. Without this processing, bgd9 cannot provide the Platform's services to you.
- Legal Obligation: Processing is necessary to comply with bgd9's obligations under applicable law, including KYC verification requirements, AML obligations, and mandatory record-keeping duties.
- Legitimate Interests: Processing is necessary for the purposes of bgd9's legitimate interests, including fraud prevention, platform security, improving services, and direct marketing to existing players, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where bgd9 relies on your consent as the legal basis for processing (for example, for certain marketing communications or the use of non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Where bgd9 relies on legitimate interests as its legal basis for processing, we have conducted a balancing assessment to ensure that our interests do not override your fundamental rights. Details of any specific legitimate interests assessment are available on request from our privacy team.
6 Cookies & Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences and settings, and gather analytical information about how you use the site. bgd9 uses cookies and similar tracking technologies (including web beacons, pixel tags and local storage objects) on the Platform.
6.2 Types of Cookies Used by bgd9
- Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They are used to maintain your login session, remember your account preferences, and ensure secure transmission of data. No personal data is collected via strictly necessary cookies for marketing purposes.
- Performance and Analytics Cookies: These cookies collect anonymised or pseudonymised information about how visitors use the Platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This data helps bgd9 improve Platform performance and user experience.
- Functional Cookies: These cookies enable enhanced functionality such as remembering your preferred language, your recently played games, and your notification preferences. Disabling these cookies may affect the quality of your experience on the Platform.
- Marketing and Targeting Cookies: Where you have given consent, bgd9 may use cookies to deliver personalised promotional content based on your gaming interests and Platform activity. You may withdraw consent for marketing cookies at any time through your account preferences.
6.3 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies and set preferences for specific websites. Please note that disabling cookies may impair the functionality of the bgd9 Platform and may prevent you from accessing certain features. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
7 Sharing Your Data
bgd9 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. bgd9 shares your personal data only in the circumstances described below, and only to the extent strictly necessary for the relevant purpose:
- Payment Service Providers: bgd9 shares financial data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa and Mastercard for the sole purpose of processing your deposits and withdrawals. Each payment partner operates under its own privacy policy and data security standards.
- Identity Verification Providers: bgd9 shares identity documents and related personal data with third-party KYC and AML verification service providers for the purpose of verifying your identity and age and completing required compliance checks.
- Game Technology Providers: bgd9 shares technical account identifiers and game session data with game studio partners including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming and Spribe for the purpose of delivering the games you play. These studios operate under their own data processing agreements with bgd9.
- Analytics and Performance Providers: bgd9 uses third-party analytics services to collect and analyse aggregated, anonymised usage data. These providers do not have access to personally identifiable information beyond IP addresses and device identifiers, which are processed under strict data processing agreements.
- Legal and Regulatory Authorities: bgd9 will disclose personal data to competent authorities, courts, regulators or law enforcement bodies where required by applicable law, court order, or to protect the legal rights, property or safety of bgd9, its players or the general public.
- Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or a substantial part of bgd9's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. bgd9 will notify affected players of any such transfer and of any material changes to this Privacy Policy that result from it.
bgd9 requires all third-party data processors to implement appropriate technical and organisational security measures, to process personal data only on bgd9's documented instructions, and to comply with applicable data protection law. Data processing agreements are in place with all relevant third parties.
8 Data Retention
bgd9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The specific retention periods applied by bgd9 are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account plus 5 years after account closure | Legal obligation (AML and KYC record-keeping requirements) |
| Financial transaction records | 7 years from the date of the transaction | Legal obligation (financial record-keeping requirements) |
| Gaming and betting activity logs | Duration of account plus 3 years after account closure | Legitimate interest (dispute resolution, fraud investigation) |
| Customer support communications | 3 years from the date of the communication | Legitimate interest (dispute resolution, service improvement) |
| Marketing preferences and consent records | Until consent is withdrawn, plus 1 year thereafter | Legal obligation (consent record-keeping) |
| Technical and usage logs | 13 months from the date of collection | Legitimate interest (security monitoring, analytics) |
| Self-exclusion and responsible gaming records | Minimum 5 years from the date the measure was applied | Legal obligation and player protection |
At the expiry of the applicable retention period, bgd9 will securely delete or anonymise your personal data in accordance with its internal data disposal procedures. Where data has been anonymised, it may be retained and used indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
9 Your Rights
As a data subject, you hold a number of rights in relation to your personal data. bgd9 is committed to honouring these rights promptly and transparently. Your rights under applicable data protection law include the following:
Right of Access
You have the right to request a copy of the personal data bgd9 holds about you, together with information about how it is processed.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data that bgd9 holds about you.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal obligations.
Right to Restriction
You have the right to request that bgd9 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
Right to Portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that it be transferred to another controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where bgd9 relies on legitimate interests as its legal basis, including profiling for direct marketing purposes.
Rights re: Automated Decisions
You have the right not to be subject to a decision based solely on automated processing that produces a significant legal or similarly significant effect on you, without human review.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the rights listed above, please contact bgd9 using the details in Section 14. bgd9 will verify your identity before processing any rights request and will respond within 30 calendar days. Some rights are subject to exceptions and may not apply in all circumstances — bgd9 will explain any applicable exception at the time of responding to your request.
bgd9 will not charge a fee for processing rights requests in ordinary circumstances. However, where a request is manifestly unfounded, excessive, or repetitive, bgd9 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.
10 Data Security
bgd9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure and destruction. These measures include but are not limited to:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the bgd9 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. This applies to all login sessions, game sessions, payment transactions and support communications.
- Encryption at Rest: Sensitive personal data stored on bgd9's servers, including financial data and KYC documents, is encrypted at rest using AES-256 or equivalent encryption standards.
- Access Controls: Access to personal data within bgd9's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
- Two-Factor Authentication: bgd9 supports and encourages the use of two-factor authentication (2FA) on all player accounts to reduce the risk of unauthorised access.
- Penetration Testing and Security Audits: bgd9's platform infrastructure is subject to regular penetration testing and security audits conducted by independent third-party security specialists.
- Incident Response: bgd9 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bgd9 will notify affected players without undue delay.
While bgd9 takes all reasonable steps to protect your personal data, no internet-based system is entirely immune to security risks. You are responsible for maintaining the security of your own account credentials. Please review Section 4 of the bgd9 Terms & Conditions for guidance on account security best practices.
11 Third-Party Links
The bgd9 Platform may contain references to third-party game providers and payment partners. While bgd9 takes care to partner only with reputable organisations, bgd9 does not control the privacy practices of third-party organisations and is not responsible for the content or privacy policies of any third-party platform or service. We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the bgd9 Platform.
This Privacy Policy applies exclusively to personal data collected and processed by bgd9 through the bgd9 Platform. bgd9 assumes no responsibility or liability for the data practices of game studios, payment processors, or any other third-party service providers beyond the scope of bgd9's own data processing arrangements.
12 Children and Minors
The bgd9 Platform is strictly intended for adults aged 21 years and above. bgd9 does not knowingly collect personal data from individuals under the age of 21 and does not permit minors to register, access or use the Platform in any capacity. If bgd9 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.
bgd9 employs mandatory age verification through its KYC process to enforce this requirement. If you believe that a minor has registered on the bgd9 Platform or that bgd9 may hold personal data relating to a minor, please contact our support team immediately using the contact details in Section 14. We take our child protection obligations extremely seriously.
21+ Age Restriction: bgd9 enforces a strict minimum age requirement of 21 years for all players. This restriction is non-negotiable and is applied uniformly across all features and services of the Platform, regardless of the player's location within Bangladesh.
13 Changes to This Policy
bgd9 reserves the right to update, amend or replace this Privacy Policy at any time. Where bgd9 makes a material change to this Policy — for example, a change that significantly affects how your personal data is processed, who it is shared with, or your rights in relation to it — bgd9 will provide advance notice to registered players via email or via an in-Platform notification prior to the change taking effect.
Minor updates, such as clarifications of existing language, corrections of typographical errors, or updates to contact information, may be made without advance notice. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. We recommend that you review this Privacy Policy periodically to remain informed of how bgd9 processes your personal data.
Your continued use of the bgd9 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept any material change to this Policy, you should cease using the Platform and may request closure of your account in accordance with the bgd9 Terms & Conditions.
14 Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact bgd9 using the following details:
- Email: support [at] bgd9.io (plain text — not a clickable link) — please include "Privacy Request" in the subject line
- Live Chat: Available 24 hours a day, 7 days a week directly on the bgd9 Platform
- Response Time: Privacy enquiries will be acknowledged within 5 business days and resolved within 30 calendar days
- Support Hours: Bangladesh Standard Time (BST, UTC+6), around the clock
When submitting a privacy-related request, please provide your registered username and a clear description of your request or concern. For rights requests, bgd9 will verify your identity before processing the request to ensure the security of your personal data.
bgd9 is committed to handling all privacy enquiries with the utmost care and professionalism. Our support team covers players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and all other areas of Bangladesh, and we aim to resolve every concern as quickly as possible.
How bgd9 Protects Your Privacy
Six core pillars that underpin bgd9's commitment to keeping your personal data safe, secure and under your control at all times.
256-Bit SSL Encryption
Every connection between your device and the bgd9 Platform is secured with industry-leading 256-bit SSL/TLS encryption. Your login credentials, payment data and personal information travel safely across the network at all times.
Strict KYC Verification
bgd9 applies mandatory Know Your Customer checks to all real-money accounts. Identity and age verification are completed before any deposit or withdrawal is processed, protecting both players and the integrity of the Platform.
Access Controls & 2FA
Internal access to personal data is restricted on a strict need-to-know basis. Player accounts are further protected by two-factor authentication (2FA), significantly reducing the risk of unauthorised access or account takeover.
Transparent Data Retention
bgd9 retains personal data only for as long as legally required or operationally necessary. Clear retention schedules are published in this Policy and strictly followed. Data is securely deleted or anonymised once the retention period expires.
Full Control Over Your Data
bgd9 fully respects your data subject rights. You can request access to, correction of, or deletion of your personal data at any time. Marketing preferences can be updated instantly, and consent for non-essential processing can be withdrawn without penalty.
Regular Security Audits
The bgd9 Platform undergoes regular independent penetration testing and security audits. Our dedicated security team monitors for threats around the clock and maintains a documented breach response procedure to act swiftly if an incident occurs.
Ready to Play at bgd9?
Your privacy is fully protected at bgd9. Explore our cricket betting markets, slots, and live casino games with complete confidence that your data is handled with the highest standards of care.