09bt Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 09bt ("09bt", "we", "us", "our"), the operator of the online betting and gaming platform at 09bt.io, collects, uses, stores, shares, and protects the personal information of users ("Player", "you", "your") who access or use the 09bt platform.

This Policy forms part of the overall 09bt user agreement and should be read alongside the Terms & Conditions and the Responsible Gaming policy. By registering an account or otherwise using the 09bt platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy is written in English. In the event of any inconsistency between this English version and any translated summary, the English version takes precedence. All references to data processing activities described in this Policy apply to data relating to players based in Bangladesh who use the 09bt platform.

Data We Collect

09bt collects two categories of personal data: information you provide directly to us, and information generated automatically as you use the platform.

2.1 Information You Provide Directly

• Registration data: full name, date of birth, email address, mobile number, and chosen username
• Identity verification (KYC) data: government-issued photo identification (National ID card, passport, or driving licence), proof of address, and selfie photograph for liveness verification
• Payment information: mobile banking account numbers (bKash, Nagad, Rocket), bank account details, and the last four digits of any debit or credit card used
• Communications data: the content of messages sent to the support team via email or live chat, including any attachments you provide
• Responsible gaming data: self-imposed deposit limits, cooling-off durations, and self-exclusion requests you submit through your account dashboard

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone setting
• Usage data: pages visited within the 09bt platform, game sessions initiated, bet amounts and outcomes, session start and end times, and features interacted with
• Transaction data: deposit amounts, withdrawal requests, bonus redemptions, and a full transaction history associated with your account
• Cookie and tracking data: session identifiers, authentication tokens, and platform preference settings stored via cookies (see Section 7)

How We Collect Your Data

09bt collects personal data through the following channels and mechanisms:

• Account registration form: when you create a new 09bt account, you submit core registration data directly through the sign-up interface
• KYC verification portal: when you complete identity verification, you upload documents and images through the secure verification module in your account dashboard
• Deposit and withdrawal forms: financial details are captured when you initiate transactions via the cashier section of the platform
• Support interactions: data is collected when you contact the support team by email at [email protected] or via the live chat system in your account dashboard
• Platform activity tracking: usage data is collected automatically as you navigate and interact with the 09bt platform via standard server logging and session management systems
• Cookies and similar technologies: first-party cookies set by 09bt collect session and preference data as described in Section 7

09bt does not purchase personal data from data brokers, does not scrape data from social media platforms, and does not receive personal data from third-party marketing partners for the purposes of prospecting or targeting.

How We Use Your Data

The personal data collected by 09bt is used for the following defined purposes:

09bt does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Fraud detection systems may flag an account for review, but any resulting action (such as account restriction) involves a human assessment before it is applied.

Legal Basis for Processing

09bt processes your personal data only where a valid legal basis exists. The primary legal bases relied upon are:

• Contract performance: processing is necessary to deliver the services you have contracted for — namely operating your account, accepting bets, and processing transactions
• Legal obligation: certain processing activities are required to comply with applicable laws, including age verification, anti-money-laundering checks, and record-keeping obligations
• Legitimate interests: 09bt processes certain data on the basis of legitimate interests, including platform security, fraud prevention, and improving the quality of services provided — in each case, these interests are balanced against your rights and do not override them
• Consent: where processing is not covered by the above (for example, sending you promotional emails about new games or bonus offers), 09bt will ask for your explicit consent and will only proceed where that consent is freely given

You may withdraw consent for consent-based processing at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

Data Sharing

6.1 Third Parties We Share Data With

09bt shares personal data with third parties only to the extent strictly necessary for the operation of the platform. The categories of third parties that may receive your data are:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other processing partners receive the minimum data necessary to execute your deposit or withdrawal transaction
• KYC and identity verification providers: third-party identity verification services may receive copies of your identification documents to perform automated and manual verification checks
• Game content providers: game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account session token and player identifier to load game content — they do not receive your full registration profile, payment details, or KYC documents
• IT infrastructure and hosting providers: server infrastructure partners may process data on 09bt's behalf under strict data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service
• Regulatory and law enforcement authorities: 09bt may disclose personal data to relevant authorities where required to do so by applicable law, court order, or in response to a valid law enforcement request

6.2 What We Never Do

• Sell your personal data to any third party for any commercial purpose
• Share your data with data brokers, advertising networks, or social media platforms for targeting purposes
• Transfer your data to affiliates or partners for their own independent marketing use without your explicit consent

Cookies & Tracking Technologies

7.1 What Cookies 09bt Uses

09bt uses first-party cookies — small text files stored on your device by your browser — to operate core platform functionality. The types of cookies deployed are:

• Strictly necessary cookies: session authentication tokens that keep you logged in while you navigate the platform; CSRF protection tokens that secure form submissions; load-balancing cookies that route your requests to the correct server
• Functional cookies: preference cookies that remember your language, display settings, and any responsible gaming tool configurations you have set
• Analytics cookies: anonymised usage data cookies that help 09bt understand which features are used most frequently and where technical errors occur — this data is aggregated and cannot be used to identify individual players

7.2 What 09bt Does Not Use

09bt does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology designed to track your activity outside the 09bt.io domain. No Facebook Pixel, Google Ads tags, or equivalent third-party tracking scripts are active on the 09bt platform.

7.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your account. Disabling functional cookies will cause your preferences to reset on each visit. Disabling analytics cookies has no impact on your ability to use the platform.

Data Retention

09bt retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations, whichever is longer.

• Active account data: retained for the lifetime of your account plus a minimum of 5 years following account closure, to satisfy financial record-keeping and anti-money-laundering obligations
• KYC verification documents: retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later
• Transaction records: retained for a minimum of 5 years following the date of each transaction
• Support communications: retained for 2 years from the date of the last message in each support thread, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved plus 1 additional year
• Anonymised analytics data: may be retained indefinitely as it cannot be used to identify any individual
• Marketing consent records: retained for 3 years from the date consent was last confirmed or withdrawn

When the retention period expires, personal data is securely deleted or irreversibly anonymised. 09bt conducts periodic data audits to ensure retention practices remain compliant with this Policy.

Data Security

09bt implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• TLS/SSL encryption: all data transmitted between your browser and the 09bt platform is encrypted using industry-standard TLS 1.2 or higher
• Password hashing: account passwords are stored as salted cryptographic hashes and are not accessible to any member of 09bt's staff in plain-text form
• Access controls: access to databases containing personal data is restricted on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for all administrative users
• Intrusion detection: the platform is monitored continuously for anomalous activity, and automated alerts are triggered when unusual access patterns are detected
• Payment data isolation: full card numbers and mobile banking PINs are never stored on 09bt's servers; payment processing is delegated entirely to certified payment partners who maintain their own PCI-DSS or equivalent compliance
• Penetration testing: 09bt conducts regular security reviews and penetration tests to identify and remediate vulnerabilities before they can be exploited

While 09bt employs robust security measures, no system connected to the internet can be guaranteed to be entirely invulnerable. In the event of a data breach that affects your rights or freedoms, 09bt will notify affected players as quickly as reasonably practicable and will take immediate steps to contain and remediate the breach.

Your Rights Over Your Personal Data

As a 09bt player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your registered account username. 09bt will respond within 30 days of receiving a valid request.

• Right of access: you may request a copy of all personal data that 09bt holds about you, along with an explanation of how it is used and with whom it is shared
• Right to rectification: if any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected — for most fields, you can update your details directly via your account dashboard
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has no valid legal basis — note that some data must be retained to comply with legal obligations even after an erasure request
• Right to restrict processing: in certain circumstances, you may request that 09bt pauses the processing of your data while a dispute or correction request is pending
• Right to data portability: where processing is based on your consent or on the performance of a contract, you may request a copy of your data in a structured, commonly used, machine-readable format
• Right to object: you may object to processing based on legitimate interests at any time; 09bt will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting any prior lawful processing

Children's Privacy

The 09bt platform is strictly restricted to individuals aged 21 years or older. 09bt does not knowingly collect or process personal data relating to persons under the age of 21. If 09bt discovers or has reason to believe that an account belongs to an individual under 21, the account will be immediately suspended, any funds returned to the source payment method (minus any bonus amounts claimed), and all associated data will be deleted in accordance with 09bt's data retention policies.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account on 09bt, please contact [email protected] immediately. 09bt will investigate and take appropriate action within 48 hours of receiving the notification.

Third-Party Links

The 09bt platform may contain references or links to third-party services, including payment processors and game providers. While 09bt takes care to work only with reputable partners, this Privacy Policy applies exclusively to the 09bt.io platform and does not extend to any third-party website, application, or service that you may access via the platform or through your payment provider's own interface.

09bt is not responsible for the privacy practices of third-party services. Before providing personal data to any third-party service, you should review that service's own privacy policy to understand how your information will be handled.

Changes to This Privacy Policy

09bt may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When a material change is made — meaning a change that meaningfully affects how your personal data is collected, used, or shared — 09bt will notify you by email to the address registered on your account at least 7 days before the change takes effect.

Non-material amendments (such as corrections to wording, additions of clarifying language, or structural reorganisation that does not change the substance of the Policy) may be made without advance notice. The effective date at the top of this page will always reflect the date of the most recent revision.

If you do not agree to a material change, you may request account closure before the new Policy takes effect by contacting [email protected]. Continued use of the 09bt platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 09bt handles your personal data, please contact the data support team through the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• Live Chat: available inside your account dashboard, 24 hours a day, 7 days a week in English

09bt aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days. Where a request is complex or requires retrieval of a large volume of data, 09bt will notify you of any extension to this timeline and provide a reason for the delay.