Your Privacy Matters at bd09
This Privacy Policy explains how bd09 collects, processes, stores, and protects your personal information when you use our platform. We are committed to handling your data with transparency, integrity, and care — because trust is the foundation of everything we do.
Identity Data
We collect your name, date of birth, and national ID details strictly for account verification and KYC compliance. This information is stored securely and never sold to third parties.
Financial Data
Payment transaction records — including bKash, Nagad, Rocket, Upay, and card transactions — are retained for financial compliance and fraud prevention purposes only.
No Data Selling
bd09 does not sell, rent, or trade your personal data to any external marketing company, data broker, or third-party advertiser. Your data is used solely for the purposes described in this Policy.
Encryption Standard
All data transmitted between your device and bd09's servers is protected by industry-standard TLS/SSL encryption. Sensitive stored data, including payment details and identity documents, is encrypted at rest using AES-256.
Your Controls
You have the right to access, correct, or request deletion of your personal data at any time by contacting our support team. Certain data must be retained for legal compliance even after account closure.
Marketing Opt-Out
Promotional communications from bd09 are optional. You may withdraw consent for marketing messages at any time through your account settings or by contacting support, without affecting your ability to use the platform.
Data We Collect
When you interact with the bd09 platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing — bd09 collects certain categories of personal and technical data. The data we collect depends on how you use the platform and the permissions you grant. We collect only the data that is necessary for the purposes described in this Policy, consistent with the principle of data minimisation.
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number | Registration, OTP delivery, support |
| Financial Data | bKash/Nagad/Rocket wallet numbers, bank account details, transaction history, deposit and withdrawal amounts in BDT | Deposit, withdrawal, KYC |
| Gaming Activity Data | Bets placed, game sessions, wager amounts, win/loss records, bonus usage | Platform activity |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automatic — platform access |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support interactions |
| Preference Data | Preferred language, game history, self-exclusion settings, marketing consent status | Account settings & platform use |
bd09 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data to the platform, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor has registered on bd09 should contact us immediately at [email protected].
How We Use Your Data
bd09 uses the personal data it collects for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are set out below, together with the legal basis for each processing activity.
- Account Management: We use your identity and contact data to create and maintain your bd09 account, authenticate your identity at login, deliver OTP verification codes, and manage account settings. This processing is necessary for the performance of our contract with you.
- Payment Processing: Financial data is processed to execute deposits, withdrawals, and refunds in BDT through supported payment channels including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This processing is contractually necessary and required for financial compliance.
- KYC and Compliance: Identity and financial data is used to fulfil our know-your-customer (KYC), anti-money laundering (AML), and responsible gaming obligations. This processing is required by our legal and regulatory obligations.
- Platform Personalisation: Gaming activity and preference data is used to personalise your bd09 experience, including displaying relevant game recommendations and tailoring promotional offers where you have consented to receive them.
- Fraud Prevention and Security: Technical data, including IP addresses and device identifiers, is used to detect suspicious activity, prevent fraud, identify multi-accounting, and protect the integrity of the bd09 platform. This processing serves our legitimate interests in maintaining a safe and fair gaming environment.
- Responsible Gaming: Gaming activity data is monitored to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, bd09 may contact you with information about responsible gaming tools and resources. This processing serves both our legal obligations and your vital interests.
- Customer Support: Communications data is used to handle support queries, complaints, and dispute resolution. Records of support interactions may be retained for quality assurance and training purposes.
- Marketing Communications: Where you have provided explicit consent, we may send you promotional emails or SMS messages about bd09 offers, bonuses, and seasonal campaigns. You may withdraw this consent at any time without affecting your ability to use the platform.
bd09 does not use automated decision-making or profiling that produces legal or similarly significant effects on players, except where such processing is necessary to detect fraud or fulfil a legal obligation, in which case you have the right to request human review of the decision.
Data Sharing & Disclosure
bd09 does not sell, rent, or trade your personal data. We share your data only where it is necessary to deliver our services, comply with legal obligations, or protect the safety and integrity of the platform. All third parties with whom we share data are required to process it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond what bd09 has authorised.
The categories of third parties to whom we may disclose personal data, and the basis for doing so, are as follows:
- Payment Service Providers: We share financial data with payment processors — including mobile financial service operators such as bKash, Nagad, and Rocket, and card networks including Visa and Mastercard — for the sole purpose of processing your transactions. These providers are bound by their own data protection and financial regulatory obligations.
- Identity Verification Services: We may share identity documents with specialist KYC verification providers to authenticate player identity and age. These providers act as data processors under bd09's instructions and are contractually prohibited from retaining or using your data for any independent purpose.
- Game Content Providers: Game studios and software providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data necessary for game delivery and fairness auditing. These providers do not receive personally identifiable information.
- Legal and Regulatory Authorities: bd09 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, a valid legal order, or to protect the rights and safety of the platform and its users.
- Fraud Prevention Networks: We may share data with industry fraud prevention services and shared databases for the purpose of identifying and preventing fraudulent activity. This is a legitimate interest processing activity.
- Professional Advisers: In connection with legal proceedings, audits, or corporate transactions, we may disclose data to lawyers, auditors, or advisers who are bound by confidentiality obligations.
Cookies & Tracking
bd09 uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage objects — to operate the platform effectively, remember your preferences, maintain your session, and analyse platform usage patterns. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, CSRF protection | Session / 24 hours |
| Functional | Language preferences, game settings, last-visited sections | 30 days |
| Analytical | Anonymised page view tracking, platform performance monitoring, error logging | Up to 12 months |
| Marketing | Tracking promotional campaign effectiveness (only with your consent) | Up to 90 days |
Strictly necessary cookies are essential for the bd09 platform to function and cannot be disabled. Functional, analytical, and marketing cookies are non-essential and will only be set with your consent where required by applicable law. You can withdraw or adjust your cookie consent at any time through your browser settings or by contacting bd09 support.
Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse new cookies, accept only certain types, or delete existing cookies. Please note that disabling functional or strictly necessary cookies may impair your ability to use certain features of the bd09 platform, including staying logged in between sessions.
Data Security
bd09 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated regularly in line with evolving security best practices.
Our key security measures include:
- TLS/SSL Encryption in Transit: All data transmitted between your browser or device and bd09's servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. The padlock icon in your browser's address bar confirms that your connection to bd09.club is encrypted.
- AES-256 Encryption at Rest: Sensitive stored data — including identity documents, payment details, and account credentials — is encrypted at rest using AES-256, widely regarded as one of the strongest symmetric encryption standards available.
- Access Controls: Access to personal data within bd09's systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and undergo data protection training. Access logs are maintained and reviewed regularly.
- Two-Factor Authentication (2FA): bd09 supports two-factor authentication for player accounts. We strongly recommend enabling 2FA on your bd09 account as an additional layer of protection against unauthorised access.
- Penetration Testing and Vulnerability Management: bd09's platform undergoes periodic security assessments, including penetration testing and vulnerability scanning, conducted by qualified security professionals. Identified vulnerabilities are remediated according to their risk severity.
- Incident Response: In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, bd09 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.
While bd09 takes all reasonable precautions to safeguard your data, no system is entirely immune to security risks. You also play an important role in keeping your account secure. Use a strong, unique password for your bd09 account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.
Your Rights
As a bd09 player, you have a number of rights in relation to your personal data. bd09 is committed to respecting and facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Rights Request", including your registered name and email address for verification purposes.
- Right of Access: You have the right to request a copy of the personal data that bd09 holds about you, along with information about how and why it is being processed. We will respond to access requests within 30 days of receipt.
- Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Some corrections can be made directly through your account settings.
- Right to Erasure: In certain circumstances, you have the right to request that bd09 delete your personal data. This right is subject to limitations — for example, we may be required to retain certain data for legal, regulatory, or fraud prevention purposes even after your account is closed.
- Right to Restriction: You have the right to request that bd09 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
- Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another service provider where technically feasible.
- Right to Object: You have the right to object to processing of your personal data where bd09 relies on legitimate interests as the legal basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Data Retention
bd09 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The retention periods applied to each category of data are summarised below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance, dispute resolution, legal obligations |
| Financial Transaction Records | 7 years from transaction date | Financial regulatory compliance, tax and audit requirements |
| Gaming Activity Logs | Duration of account + 3 years after closure | Responsible gaming monitoring, dispute resolution |
| KYC Documents | Duration of account + 5 years after closure | Identity verification compliance, AML obligations |
| Support Communications | 3 years from last interaction | Quality assurance, dispute evidence |
| Technical / Log Data | Up to 12 months | Security monitoring, fraud detection |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Evidence of consent for compliance purposes |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised data may be retained and used for statistical or analytical purposes indefinitely, as it no longer constitutes personal data.
If you close your bd09 account voluntarily, your personal data will be retained for the periods set out above in accordance with our legal and compliance obligations. You will not be able to reactivate a closed account after the relevant retention period has passed. If you wish to return to bd09 after account closure, you will need to register a new account, subject to the eligibility criteria in our Terms & Conditions.
Contact & Policy Updates
If you have any questions, concerns, or complaints about this Privacy Policy or about the way bd09 handles your personal data, please contact us using the details below. We take all privacy-related inquiries seriously and will respond promptly and constructively.
If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through available legal channels in your jurisdiction. bd09 is committed to working cooperatively to resolve all privacy-related disputes.
Policy Updates: bd09 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to the address on file at least 14 days before the changes take effect. The effective date at the top of this Policy will always reflect the date of the most recent revision.
We encourage you to review this Privacy Policy periodically to stay informed about how bd09 is protecting your personal data. Your continued use of the platform following any update to this Policy constitutes your acknowledgment of the revised terms. If you do not agree with any material change, you should contact us or close your account before the change takes effect.
This Privacy Policy was last reviewed and updated on 1 January 2026. All natural-language content on this page is written in English in accordance with the bd09 platform language standard for the Bangladesh market.
Ready to Play on bd09?
Now that you know how we protect your data, explore our casino, sports betting, and slot games — all secured with SSL encryption. 18+ only. Please gamble responsibly.