bd9i Privacy
Policy
Your privacy matters at bd9i. This Privacy Policy explains what personal data we collect from players in Bangladesh, why we collect it, how we use and protect it, and the rights you hold over your information. We are committed to handling your data with transparency and care.
Our Commitment to Your Privacy
bd9i operates as Bangladesh's trusted online casino and sports betting platform. We are committed to protecting the personal information of every player who registers, deposits, and plays on our platform. This Privacy Policy is written in plain English and is designed to be clearly understood by players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and every other part of Bangladesh. We do not sell, rent, or trade your personal data to any third party for commercial marketing purposes — ever.
End-to-End Encryption
All data transmitted between your device and bd9i's servers is protected by 256-bit SSL/TLS encryption. Whether you are logging in from Dhaka or placing a cricket bet from Chittagong, your session data is always secured in transit.
No Data Selling
bd9i does not sell, rent, or license your personal data to advertisers, data brokers, or any third party for their own commercial use. Your information is used solely to operate your account, process BDT payments, and improve your experience on bd9i.
Full Data Access Rights
As a registered bd9i player, you have the right to access, correct, export, or request deletion of the personal data we hold about you. Submit any data rights request to [email protected] and we will respond within 14 calendar days.
Local Payment Privacy
Your bKash, Nagad, Rocket, and Upay transaction data is processed only to the extent necessary to complete deposits and withdrawals. bd9i does not store your full mobile financial service credentials — only the mobile number and transaction reference required for reconciliation.
Transparent Cookie Use
bd9i uses a minimal set of strictly necessary and performance cookies. We do not use invasive cross-site advertising trackers. Our cookie practices are described in full in Section 5 of this policy, giving you a clear picture of what is stored on your device and why.
Responsible Data Retention
bd9i retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable anti-money laundering (AML) and financial record-keeping obligations. Account data is deleted within 90 days of confirmed account closure.
Information We Collect
bd9i collects personal information from players at various stages of the account lifecycle — during registration, identity verification, gameplay, financial transactions, and customer support interactions. The categories of information we collect, and the context in which we collect them, are described below.
1.1 Registration Data
When you create a bd9i account, we collect the following information that you provide directly:
- Full legal name (as it appears on your National Identity Card or passport)
- Date of birth (to verify that you are 18 years of age or older)
- Mobile phone number registered in Bangladesh (used as your primary account identifier and linked to your bKash, Nagad, or Rocket wallet)
- Email address (used for account communications and promotional notifications, where opted in)
- Preferred username and account password (stored as a one-way hashed value — never in plain text)
- City or district of residence (optional at registration; used for localised promotional communications)
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) process — required prior to processing withdrawals above ৳5,000 and for all accounts selected for compliance review — we may collect:
- A scanned copy or photograph of your National Identity Card (NID) or valid Bangladeshi passport
- A selfie photograph in which you are holding the above identity document
- A screenshot or record confirming the mobile number associated with your bKash or Nagad account matches your registered bd9i account
- For withdrawals exceeding ৳50,000: additional source-of-funds documentation at bd9i's compliance team's discretion
KYC documents are processed by bd9i's internal compliance team and, where third-party identity verification services are engaged, by those services acting as data processors under contractual data processing agreements with bd9i. KYC documents are not used for any purpose other than verifying your identity and age.
1.3 Financial Transaction Data
Each time you make a deposit or request a withdrawal on bd9i, we record:
- Transaction amount in BDT (৳)
- Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer)
- The mobile number or bank account number associated with the sending or receiving payment account
- Transaction reference number issued by the relevant payment provider
- Date and time of the transaction in Bangladesh Standard Time (BST, UTC+6)
- Transaction status (pending, completed, failed, reversed)
bd9i does not store full payment card numbers or mobile banking PINs. Financial transaction records are retained for a minimum of 5 years in compliance with applicable AML record-keeping requirements.
1.4 Gameplay & Betting Activity Data
bd9i automatically logs game session data and sports betting activity associated with your account, including:
- Games played, bets placed, wager amounts, and settlement outcomes
- Session start and end times in BST
- RNG game round identifiers (used for dispute resolution with Game Providers)
- Bonus credits used, wagering requirement progress, and promotional offer participation
This data is used for account management, responsible gaming monitoring, bonus compliance, and dispute resolution. It is not shared with Game Providers beyond what is strictly necessary for game round settlement and technical support.
1.5 Device & Technical Data
When you access bd9i via a web browser or mobile device, our servers automatically receive:
- IP address (used for geographic access control, fraud detection, and session security)
- Browser type and version, operating system, and device type
- Pages visited on bd9i.app, time spent on each page, and referral source
- Session identifiers (stored in cookies — see Section 5)
1.6 Customer Support Communications
When you contact bd9i's support team at [email protected], we retain a record of the communication, including your message content and any attachments you send. These records are used to resolve your query, improve service quality, and as evidence in the event of a formal dispute. Support communications are retained for 24 months following resolution of the relevant query.
Minimum Necessary Data Collection
bd9i applies a minimum necessary data principle: we collect only the personal information that is genuinely required to operate your account, process BDT payments, verify your identity, and comply with applicable financial regulations. We do not collect sensitive personal data such as religious beliefs, political opinions, health information, or biometric data beyond the photograph included in your KYC identity document submission.
How We Use Your Data
bd9i uses the personal data we collect for clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which bd9i processes personal data are:
| Purpose | Data Used | Details |
|---|---|---|
| Account Creation & Management | Registration data, login credentials | Setting up and maintaining your bd9i player account, authentication, and account settings management. |
| Identity & Age Verification | KYC documents, date of birth, NID/passport data | Confirming you are 18 years or older and that your identity matches your account registration. Mandatory before withdrawal processing. |
| Payment Processing | Financial transaction data, mobile number | Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. Reconciling transaction records. |
| Fraud & AML Compliance | Transaction data, IP address, device data, KYC data | Detecting and preventing fraudulent transactions, money laundering, multi-account abuse, and bonus fraud. Regulatory reporting obligations. |
| Responsible Gaming Monitoring | Gameplay data, session times, deposit history | Monitoring for patterns consistent with problem gambling and enforcing voluntary deposit limits, session limits, and self-exclusion requests. |
| Customer Support | Support communications, account data | Resolving queries, complaints, and disputes submitted to [email protected]. |
| Promotional Communications | Email address, mobile number, gameplay preferences | Sending opt-in promotional emails and SMS about bonuses, BPL/IPL offers, Eid promotions, and platform updates. Opt-out available at any time. |
| Platform Improvement | Technical data, gameplay data, session analytics | Analysing aggregated, anonymised usage patterns to improve platform performance, game selection, and user experience. |
2.1 Automated Decision-Making
bd9i's fraud detection and responsible gaming monitoring systems use automated analysis of transaction patterns and gameplay behaviour to flag accounts for manual compliance review. These automated systems do not make final decisions — all flagged accounts are reviewed by a human member of bd9i's compliance team before any action is taken. If your account has been flagged or restricted as a result of automated monitoring, you may contact [email protected] to request a manual review of the decision.
2.2 Profiling for Responsible Gaming
bd9i uses gameplay and deposit data to build individual player risk profiles for responsible gaming purposes. This profiling is used solely to identify players who may be exhibiting signs of problem gambling and to proactively offer responsible gaming tools such as deposit limits and cooling-off periods. This is not commercial profiling — it is a player protection measure and forms part of bd9i's duty of care obligations toward players.
Legal Basis for Processing
bd9i processes your personal data on the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is necessary to perform the contract between bd9i and you as a registered player — including account creation, payment processing, and game access — is carried out on the basis of contractual necessity. Without this processing, bd9i cannot provide you with its services.
- Legal obligation: Processing that is required for bd9i to comply with applicable financial, anti-money laundering, and age verification regulations — including KYC verification, transaction record-keeping, and AML reporting — is carried out on the basis of legal obligation.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement analytics is based on bd9i's legitimate interest in operating a safe, fair, and well-functioning platform for all players. Where we rely on legitimate interests, we have assessed that those interests do not override the fundamental rights and freedoms of individual players.
- Consent: Processing related to promotional communications (email and SMS marketing) is carried out on the basis of your explicit opt-in consent, provided at registration or through account settings. You may withdraw consent for promotional communications at any time without affecting your ability to use the bd9i platform.
Data Sharing & Third Parties
bd9i does not sell your personal data. We share your information with third parties only in the specific, limited circumstances described below. In every case where a third party processes your data on bd9i's behalf, they do so as a data processor under a contractual agreement that requires them to handle your data in accordance with the same standard of care as bd9i.
4.1 Payment Service Providers
To process your BDT deposits and withdrawals, bd9i shares the minimum necessary transaction data with the relevant payment service provider — bKash, Nagad, Rocket, Upay, or your nominated bank. This data is limited to the transaction amount, your registered mobile number or bank account number, and the transaction reference. Payment providers process this data under their own regulatory obligations and privacy policies as independently regulated financial institutions in Bangladesh.
4.2 Game Providers
When you play a game supplied by a third-party Game Provider — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — your account identifier and game session data are transmitted to that provider's servers to generate game outcomes and settle results. Game Providers do not receive your full name, NID information, mobile number, or financial transaction details. Game session data is shared only to the extent technically necessary to run the game and resolve any disputes relating to game outcomes.
4.3 Identity Verification Services
bd9i may engage a third-party KYC/identity verification service provider to assist with automated document verification as part of the onboarding or compliance review process. Where such a provider is used, your KYC documents are processed by them acting as a data processor under a formal data processing agreement with bd9i. KYC data is not retained by third-party verification providers beyond the period required to complete the verification check.
4.4 Legal & Regulatory Disclosure
bd9i may be required to disclose personal data — including account information and financial transaction records — to regulatory or law enforcement authorities where required by applicable law. This includes disclosures to the Bangladesh Financial Intelligence Unit (BFIU) in connection with AML reporting obligations, and responses to valid legal process such as court orders. bd9i will notify affected players of such disclosures where legally permitted to do so.
4.5 Business Transfers
In the event of a merger, acquisition, or transfer of all or substantially all of bd9i's business assets to a third party, player account data may be transferred to the acquiring entity as part of the transaction. In such circumstances, bd9i will provide affected players with advance notice of the transfer and the identity of the receiving entity, and will ensure that the acquiring entity is bound by privacy obligations at least equivalent to those in this policy.
What We Never Do With Your Data
bd9i never sells your personal data to data brokers or marketing companies. We never share your data with advertisers for behavioural targeting purposes. We never transfer your data to entities outside the scope of bd9i's operational requirements without your explicit consent. Your data stays within the bd9i ecosystem and with the regulated service providers required to operate it.
Data Retention
bd9i retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the legal retention obligations described below. The following retention schedule applies to the main categories of player data held by bd9i:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 90 days post-closure | Account management; deletion within 90 days of confirmed closure |
| KYC identity documents | 5 years from account closure | AML regulatory record-keeping requirement |
| Financial transaction records | 5 years from transaction date | Financial regulation and AML compliance |
| Gameplay & betting logs | 3 years from session date | Dispute resolution; responsible gaming review |
| Customer support records | 24 months from resolution date | Service quality review; formal dispute evidence |
| Promotional communication logs | 12 months from last communication | Consent record-keeping; opt-out compliance |
| Device & technical log data | 6 months from collection | Security monitoring; fraud detection |
| Self-exclusion records | Duration of exclusion + 5 years | Re-registration prevention; responsible gaming compliance |
Once the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.
Your Privacy Rights
As a bd9i player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact our support team at [email protected] from the email address or mobile number registered to your account. bd9i will acknowledge all data rights requests within 5 business days and will fulfil them within 14 calendar days of verifying your identity.
Right of Access
Request a copy of all personal data bd9i holds about you, including your account data, transaction history, and any KYC documents on file.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your bd9i account, including your registered name, mobile number, or city of residence.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies. Note: AML-required transaction records cannot be deleted before the mandatory 5-year period.
Right to Restrict Processing
Request that bd9i temporarily restrict the use of your personal data while a dispute about its accuracy or the lawfulness of its processing is being investigated.
Right to Data Portability
Request an export of your personal data in a structured, commonly used, machine-readable format (JSON or CSV) for personal records or transfer to another service.
Right to Object
Object to processing carried out on the basis of bd9i's legitimate interests, including responsible gaming profiling and platform analytics. You may also object to receiving promotional communications at any time via account settings.
Right Against Automated Decisions
Request human review of any account decision that was made solely by bd9i's automated fraud detection or responsible gaming monitoring systems, without human oversight.
Right to Withdraw Consent
Withdraw your consent to promotional email and SMS communications at any time via account settings or by contacting [email protected] — without affecting your ability to use the bd9i platform.
Identity Verification for Data Rights Requests
To protect your privacy, bd9i will verify your identity before fulfilling any data rights request. You will be asked to confirm the mobile number and email address registered to your account. For requests relating to KYC documents or full account data exports, additional identity confirmation may be required. This step protects you against unauthorised third parties attempting to access your personal data.
Data Security
bd9i implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to the following:
8.1 Encryption
All data transmitted between your browser or mobile device and bd9i's servers is encrypted using 256-bit TLS (Transport Layer Security). This applies to all pages of bd9i.app — not only login and payment pages. Data stored in bd9i's databases — including account credentials, KYC documents, and transaction records — is encrypted at rest using AES-256 encryption. Account passwords are never stored in plain text; they are stored as one-way salted hashes using a cryptographically secure hashing algorithm.
8.2 Access Controls
Access to personal data within bd9i's internal systems is restricted to staff members who have a genuine operational need to access that data. Access is controlled on a role-based basis and is subject to individual authentication. All internal data access is logged for audit purposes. bd9i's support staff access only the account data necessary to resolve a specific player query — they do not have unrestricted access to all player data at all times.
8.3 Fraud Detection Systems
bd9i operates automated fraud detection systems that analyse login attempts, transaction patterns, and device fingerprints in real time to identify potential account takeover attempts, unauthorised access, and fraudulent activity. Accounts flagged by these systems are automatically suspended pending manual review by bd9i's security team. If your account is suspended in error, contact [email protected] immediately for expedited review.
8.4 Third-Party Security Standards
All third-party service providers engaged by bd9i — including Game Providers, payment processors, and KYC verification services — are required by contract to maintain security standards at least equivalent to those applied by bd9i itself. bd9i conducts periodic reviews of third-party security practices as part of its vendor management programme.
8.5 Data Breach Response
In the event of a personal data breach affecting player accounts, bd9i will assess the severity and scope of the breach within 24 hours of discovery. Where the breach poses a high risk to the rights of affected players, bd9i will notify affected players directly — via their registered email address or mobile number — within 72 hours of confirming the scope of the incident. The notification will include a description of the data affected, the likely consequences, and the steps bd9i has taken or proposes to take to address the breach. Players are advised to enable two-factor authentication (2FA) on their bd9i account to significantly reduce the risk of unauthorised access even in the event of a credential breach.
Protect Your Own Account
bd9i's technical security measures protect your data at the server level, but you also play an important role in keeping your account secure. Never share your bd9i username or password with anyone. Use a unique password not used on any other platform. Do not access your bd9i account over public Wi-Fi networks without a VPN. If you suspect unauthorised access to your account, contact [email protected] immediately and change your password without delay.
Policy Updates & Contact
9.1 Updates to This Privacy Policy
bd9i may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the introduction of new features on the platform. The "Last updated" date displayed at the top of this document reflects the effective date of the most recent version. Where a material change is made — defined as a change that meaningfully affects how we handle your personal data or alters the rights available to you — bd9i will notify you via the email address or mobile number registered to your account at least 14 days before the change takes effect. Continued use of the bd9i platform following the effective date of a material change constitutes acceptance of the updated Privacy Policy.
9.2 Minor Updates
Non-material updates — such as corrections to typographical errors, clarifications that do not change the substance of the policy, or changes that expand rather than restrict your data rights — will take effect immediately upon publication of the updated policy at bd9i.app/privacy-policy. We recommend that you review this policy periodically, particularly before making significant changes to your account activity such as completing KYC verification or enabling promotional communications.
9.3 Children and Minors
bd9i's platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a person under 18 has registered an account with bd9i, please contact [email protected] immediately. Upon confirmation, we will close the account and delete all associated personal data without delay. Players who are found to have provided false date-of-birth information at registration will have their accounts permanently closed and any pending withdrawal balance may be withheld pending compliance review.
9.4 Contact Our Privacy Team
For all privacy-related queries, data rights requests, or concerns about how bd9i handles your personal data, please contact us using the details below. bd9i's privacy team will respond to all privacy-related enquiries within 5 business days.
- Privacy enquiries: [email protected] (subject line: "Privacy Enquiry")
- Data rights requests: [email protected] (subject line: "Data Rights Request – [Your Username]")
- Data breach reports: [email protected] (subject line: "Security Concern – Urgent")
- Response time: Within 5 business days for standard enquiries; within 24 hours for urgent security reports
- Operating hours: 24/7, including Bangladesh public holidays (Eid, Pohela Boishakh, Victory Day, Independence Day)
We're Here to Help
Privacy regulations and data rights can feel complex. If any part of this Privacy Policy is unclear, or if you have a specific question about how bd9i handles a particular type of data — such as your bKash transaction records, your KYC identity documents, or your gameplay history — please reach out to our support team at [email protected]. We are committed to answering your questions in plain English and resolving any data-related concern promptly and transparently.
Explore bd9i With Confidence
Now that you understand how bd9i handles your personal data, you can enjoy cricket betting, live casino tables, slots, and crash games — all in BDT with instant bKash and Nagad payments — knowing your information is safe.
bd9i Login Explore bd9i Casino Cricket Betting