Privacy Policy — 09bbt Data Protection Commitment

1. Introduction

09bbt is committed to protecting the privacy and personal data of every player who uses the Platform. We understand that you place trust in us when you share your information, and we take that responsibility seriously. This Policy has been written in clear, accessible English so that players across Bangladesh can understand exactly how their data is handled.

We collect personal data only where we have a clear, lawful reason to do so. We do not collect data speculatively or for purposes unrelated to the operation of the 09bbt platform. Where we rely on your consent as the legal basis for processing, you always have the right to withdraw that consent without it affecting your ability to continue using the Platform in other respects.

This Policy applies to all personal data collected through the 09bbt website at 09bbt.onl, including data collected during account registration, KYC verification, deposits and withdrawals via bKash, Nagad, Rocket, and Upay, gameplay activity, and all communications with our support team.

2. Personal Data We Collect

09bbt collects the following categories of personal data. We have grouped them by type so you can clearly understand what information is involved:

2.1 Identity Data

Identity data is collected exclusively for KYC age and identity verification purposes. Submission of a valid government-issued document is required before any withdrawal is processed. Accepted documents for Bangladeshi players include the National Identity Card (NID), a valid Bangladesh passport, and a valid driver's licence.

2.2 Contact Data

Contact data is used to communicate with you about your account, process two-factor authentication, send transaction confirmations, and respond to support requests. We do not send unsolicited marketing communications via SMS or email without your explicit opt-in consent.

2.3 Financial Data

Financial data is used to process deposits and withdrawals, match payment wallets to verified account holders, and detect and prevent fraud. 09bbt does not store full card numbers. Masked card details (showing only the last four digits) are retained for record-keeping and dispute resolution purposes.

2.4 Technical and Usage Data

Technical and usage data helps us secure accounts against unauthorised access, detect unusual login behaviour, improve platform performance, and ensure that our games load correctly across the wide variety of devices used by players in Bangladesh — including low-bandwidth mobile connections.

2.5 Communications Data

Communications data is retained to maintain an accurate record of support interactions, resolve disputes, monitor service quality, and train our support team. Chat transcripts are stored securely and are accessible only to authorised support personnel and management.

3. How We Collect Your Data

09bbt collects personal data through the following means:

• Direct submission by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or respond to a survey, you provide data to us directly.
• Automated collection during use: When you access the Platform, our servers automatically record technical data such as your IP address, device type, browser, and session activity. This collection is necessary for the Platform to function correctly and securely.
• Payment processing partners: When you transact via bKash, Nagad, Rocket, or Upay, the relevant mobile financial services provider confirms transaction status to 09bbt. We receive only the data necessary to confirm that a transaction was completed — we do not receive your full wallet PIN or authentication credentials.
• KYC verification providers: Where we use a third-party identity verification service to validate documents you submit, that provider returns a verification result to 09bbt. The raw document data is processed by the provider in accordance with their own data security standards, which 09bbt reviews as part of our supplier due-diligence process.
• Cookies and similar technologies: As described in Section 7 below, we use cookies and local storage to maintain session state, remember your preferences, and gather aggregated usage analytics.

4. Lawful Basis for Processing

09bbt processes personal data only where a lawful basis exists. The following table summarises the lawful bases we rely on for each major processing activity:

Where we rely on legitimate interest as our lawful basis, we have assessed that our interests do not override your fundamental privacy rights. You may object to processing based on legitimate interest by contacting our support team. Where we rely on consent, you may withdraw that consent at any time.

5. How We Use Your Personal Data

09bbt uses personal data for the following purposes, each of which is grounded in one of the lawful bases described in Section 4:

• Account operation: Creating and maintaining your player account, enabling login authentication, and providing access to all platform features.
• Age and identity verification: Confirming that every player is aged 21 or over before withdrawals are authorised, in line with our responsible gaming commitments and the 09bbt Terms & Conditions.
• Transaction processing: Executing deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard, and processing withdrawal requests to the verified wallet or account of record.
• Fraud prevention and security: Identifying suspicious login patterns, detecting duplicate accounts, monitoring for unusual transaction behaviour, and investigating potential breaches of the Terms & Conditions.
• Responsible gaming: Monitoring play patterns to identify possible problem gambling behaviour, administering self-exclusion and deposit limit requests, and supporting our responsible gaming obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to identify performance issues, improve page load times for Bangladeshi users, and enhance the overall player experience across mobile and desktop devices.
• Legal compliance: Maintaining records required under anti-money-laundering (AML) and counter-financing-of-terrorism (CFT) obligations, and responding to lawful requests from competent authorities.
• Communications: Sending you transaction confirmations, account security alerts, and — where you have opted in — information about promotions, bonus offers, and platform updates relevant to 09bbt.

6. Sharing Your Personal Data

09bbt does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers

We share personal data with third-party service providers who assist in the operation of the 09bbt platform. These include KYC verification technology providers, payment gateway processors for bKash, Nagad, Rocket, and Upay integrations, cloud hosting and infrastructure providers, and customer support platform operators. All such providers are contractually required to process personal data only for the purposes we specify, to implement appropriate security measures, and to delete or return data upon termination of the service relationship.

6.2 Game Studio Partners

Certain technical identifiers — such as a hashed player ID and session token — may be transmitted to licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely for the purpose of loading and running game sessions. These studios do not receive your full name, identity documents, mobile number, or financial account details.

6.3 Legal and Regulatory Disclosure

09bbt may disclose personal data to law enforcement agencies, financial intelligence authorities, or courts where we are legally required to do so, or where disclosure is necessary to prevent or detect a serious crime such as fraud or money laundering. We will notify you of such disclosure where permitted to do so by law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 09bbt's assets, personal data held by the Platform may be transferred to the successor entity. You will be notified by a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

7. Cookies and Tracking Technologies

09bbt uses cookies and similar browser-based technologies to support the operation and improvement of the Platform. Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

You can manage cookie preferences through your browser settings at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to your 09bbt account. We do not use cookies for cross-site behavioural advertising or share cookie data with advertising networks.

8. Data Security

09bbt implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in transit: All data exchanged between your browser or mobile device and our servers is encrypted using 256-bit SSL/TLS encryption. This applies to account sessions, deposits, withdrawals, KYC uploads, and support chats.
• Encryption at rest: Sensitive personal data — including identity document images and payment wallet identifiers — is encrypted at rest in our database infrastructure using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised 09bbt personnel who need it to perform their job functions. Access is controlled through role-based permissions and is logged and monitored.
• Intrusion detection: Our infrastructure employs automated monitoring systems to detect and alert on unusual access patterns, potential brute-force attempts, and other indicators of malicious activity.
• Secure development practices: 09bbt applies security-by-design principles during platform development, including regular security reviews of code changes and periodic penetration testing of the Platform infrastructure.

While we take every reasonable precaution, no internet-based platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 09bbt will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

9. Data Retention

09bbt retains personal data only for as long as is necessary for the purpose for which it was collected, or as required or permitted by applicable law. The following retention principles apply:

• Active account data: Personal data associated with an active 09bbt account is retained for the duration of the account's existence and remains accessible to the player through their account settings.
• Closed account data: Following account closure — whether initiated by the player or by 09bbt — personal data including identity documents, transaction records, and KYC outcomes is retained for a minimum of five years. This retention period is required to meet our obligations under anti-money-laundering (AML) and financial record-keeping regulations.
• Support communications: Live chat transcripts and email correspondence are retained for three years after the last interaction, to support dispute resolution and service quality monitoring.
• Analytics data: Aggregated and anonymised platform analytics data, from which individual players cannot be identified, may be retained indefinitely for platform improvement purposes.
• Marketing opt-in data: If you have opted in to receive promotional communications, your contact preference data is retained until you withdraw consent or request deletion.

When personal data is no longer required and the retention period has expired, 09bbt will securely delete or anonymise it in accordance with our internal data disposal procedures.

10. Your Privacy Rights

As a 09bbt player, you have the following rights over your personal data. These rights can be exercised by contacting our support team via live chat at any time:

• Right of access: You may request a copy of the personal data 09bbt holds about you. We will provide this within 30 days of a verified request, at no charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Some corrections — particularly to identity data — may require re-submission of KYC documents.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where you object to processing and no overriding legitimate interest exists. Note that certain data must be retained for the legally mandated minimum period described in Section 9, and deletion requests cannot override these obligations.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of the data we hold.
• Right to data portability: You may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interest, including processing for direct marketing purposes. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Children and Minors

The 09bbt Platform is strictly for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If an account is found to have been registered by a person under 21, it will be closed immediately, all gameplay data will be deleted, and the deposit balance will be returned to the original payment source.

If you believe that a minor has registered on the 09bbt Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay. We treat any report of underage access as a high-priority matter.

12. International Data Transfers

09bbt primarily serves players in Bangladesh and processes most personal data within infrastructure located in the Asia-Pacific region. In some cases — for example, where a KYC verification provider or game studio partner operates infrastructure in another region — personal data may be transferred to and processed in a country outside Bangladesh.

Where such transfers occur, 09bbt ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Policy. These safeguards typically take the form of contractual data processing agreements that impose binding data protection obligations on the recipient. 09bbt does not transfer personal data to third parties in jurisdictions that do not provide an adequate level of data protection without first establishing a valid legal mechanism for the transfer.

13. Updates to This Privacy Policy

09bbt reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify you by posting a prominent notice on the Platform. The effective date shown at the top of this page will be updated to reflect the date on which the revised Policy takes effect.

We encourage you to review this Policy periodically. Continued use of the 09bbt Platform after a revised Policy has been published constitutes your acknowledgement of the updated terms. If a change materially affects how we process data for which we rely on your consent, we will seek fresh consent before applying the change to your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 09bbt handles your personal data, please contact our support team through the live chat available on the Platform, 24 hours a day, every day of the year. You may also reach us by email at the address below — this is a plain-text reference only and is not a clickable link: