09bad Privacy Policy

Data We Collect

When you register for an account on the 09bad platform, interact with our games, make deposits or withdrawals, or contact our customer support team, we collect certain categories of personal data. This section describes what we collect, at which point in your interaction with 09bad the collection occurs, and the legal basis on which that collection rests.

Registration Data

When you create a 09bad account, we collect the following information:

• Full legal name
• Date of birth (for age verification purposes — 18+ requirement)
• Bangladesh mobile number (used as the primary account identifier and for OTP delivery)
• Preferred username and hashed password (passwords are never stored in plain text)
• Residential address (required for identity verification where requested)

Payment and Transaction Data

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, and other supported payment channels, 09bad collects and retains:

• Mobile wallet number or bank account reference associated with each transaction
• Transaction amount in Bangladeshi Taka (BDT)
• Transaction timestamp in Bangladesh Standard Time (BST, UTC+6)
• Payment method identifier and transaction reference number
• Deposit and withdrawal history for the lifetime of the account

09bad does not store full card numbers, CVV codes, or full bank account numbers. Card and bank data is tokenised and processed via our certified payment processing partners; 09bad retains only the tokenised reference, not the underlying financial credentials .

Identity Verification Data

Where 09bad is required to verify your identity — including prior to processing a withdrawal above a defined threshold, or where suspicious activity is detected on your account — we may collect:

• A copy of a government-issued National ID Card, passport, or birth certificate
• A selfie photograph or video confirmation for liveness verification
• Proof of payment method ownership (for example, a screenshot of a bKash or Nagad wallet showing your registered mobile number)

These documents are retained only for the period necessary to complete verification and to satisfy our anti-money laundering record-keeping obligations. They are stored in encrypted form and are accessible only to authorised compliance personnel within 09bad.

Device and Technical Data

When you access the 09bad platform — whether via a desktop browser on Windows or macOS, or via a mobile browser on an Android or iOS device — our servers automatically record certain technical information:

• IP address and approximate geographic region
• Browser type, version, and operating system
• Device type (desktop, smartphone, tablet) and screen resolution
• Pages visited, session duration, and in-platform navigation path
• Referring URL (the page or link that directed you to 09bad.vip)

This technical data is used for platform security monitoring, fraud detection, responsible gaming analysis, and improving the 09bad user experience. It is not used to build advertising profiles or sold to any third party.

Customer Support Data

When you contact the 09bad support team via live chat or email at [email protected], we retain a record of the communication, including your name, account ID, the content of the query or complaint, and the resolution provided. Support records are retained for a period of two years following account closure to allow for retrospective review of disputes.

How We Use Your Data

09bad processes personal data only for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The following table summarises the primary purposes for which your data is processed and the legal basis for each.

Marketing Communications

09bad will only send you promotional messages — including bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL cricket season, and Bangladesh Victory Day — where you have explicitly opted in to receive such communications at the time of registration or subsequently through your account settings. You may withdraw consent at any time by updating your notification preferences in the account dashboard or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the processing of data for other lawful purposes.

Cookies & Tracking

09bad uses cookies and similar tracking technologies on the 09bad.vip website to maintain session state, deliver a personalised experience, analyse platform usage, and support fraud prevention systems. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and enable secure payment flows. The platform cannot operate correctly without these cookies. They do not require your consent as they are essential to the service you have requested.
• Analytics Cookies: These cookies collect anonymised information about how visitors navigate the 09bad platform — which pages are visited most, how long sessions last, and where users exit. This data helps 09bad improve the platform experience for Bangladeshi players. Analytics data is aggregated and is not linked back to individual player accounts.
• Security and Fraud Detection Cookies: These cookies support 09bad's security infrastructure by helping to identify unusual login patterns, detect bot traffic, and flag suspicious session behaviour. They are essential for maintaining the integrity of the platform and protecting player accounts.
• Preference Cookies: These cookies remember your interface preferences — such as language settings or last-used payment method display — so you do not need to re-enter them on each visit.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. The method for doing this varies by browser; please refer to your browser's help documentation for instructions. Please note that disabling strictly necessary cookies will impair the functionality of the 09bad platform and may prevent you from logging in or completing financial transactions.

09bad does not use third-party advertising cookies or cookies placed by social media platforms. No cookie data is shared with advertisers or data brokers.

Data Sharing & Disclosure

09bad does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited and specific circumstances described below, and only with parties that maintain data protection standards consistent with those described in this Privacy Policy.

Payment Processing Partners

To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi bank channels, 09bad shares the minimum necessary transaction data with our certified payment processing partners. These partners receive only the data required to execute and verify the specific transaction — typically a tokenised payment reference, transaction amount in BDT, and a platform-generated transaction ID. They do not receive your full account history, wagering data, or any identity documents.

Game Software Providers

Some games available on the 09bad platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive a player session token and anonymised session data to render and operate the game. They do not receive your full name, mobile number, payment details, or financial transaction history. Game provider integrations are governed by data processing agreements that restrict the use of session data to game delivery and fair play auditing purposes only.

Legal and Regulatory Disclosure

09bad may disclose personal data where required to do so by applicable law, including in response to a lawful request from a competent authority in connection with anti-money laundering investigations, fraud prevention, or the investigation of a criminal offence. Any such disclosure will be limited strictly to the data required by the lawful request and will be documented in our internal compliance records.

Business Transfers

In the event of a merger, acquisition, or transfer of 09bad's business assets to a successor entity, player data may be transferred as part of that transaction. In such an event, 09bad will notify affected players via their registered contact details and will ensure that the successor entity is bound by data protection obligations equivalent to those in this Privacy Policy prior to any transfer of personal data.

Data Retention

09bad retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and anti-money laundering obligations. The following retention periods apply to the main categories of data we hold:

When a retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be linked to any individual. Where a legal hold is placed on data in connection with an ongoing investigation or dispute, standard retention periods are suspended until the legal hold is lifted.

Data Security

09bad takes the security of your personal data seriously and employs a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the 09bad platform is encrypted using industry-standard Transport Layer Security (TLS). This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encrypted Data Storage: Sensitive data fields — including passwords (stored as salted hashes), identity documents, and payment tokens — are encrypted at rest using AES-256 encryption within our secure server infrastructure.
• Access Controls: Access to player personal data within 09bad's internal systems is restricted on a strict need-to-know basis. Personnel are granted access only to the data categories necessary for their specific operational role. All internal data access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their 09bad accounts. Where enabled, a one-time password (OTP) is required in addition to your password at each login, providing an additional layer of protection against unauthorised access.
• Fraud and Intrusion Monitoring: 09bad employs automated monitoring systems that analyse login patterns, device fingerprints, and transaction behaviours in real time to detect and flag suspicious activity. Accounts flagged for potential compromise are suspended pending player verification.

While 09bad implements robust security measures, no platform that operates over the internet can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, enabling 2FA, and ensuring that your registered mobile device is protected with a screen lock. If you suspect your account has been compromised, contact support at [email protected] immediately.

Your Privacy Rights

As a 09bad player whose personal data is processed in connection with your account, you hold the following rights with respect to your personal information. These rights may be exercised by contacting 09bad at [email protected] from your registered email address or by writing to us with your account details.

Right of Access

You have the right to request a copy of the personal data that 09bad holds about you. On receipt of a valid access request, 09bad will provide a summary of your account data, transaction history, and any identity verification records held, within a reasonable timeframe. This right is subject to the exception that we may withhold information where disclosure would prejudice an ongoing fraud investigation or legal proceeding.

Right to Rectification

If any personal data held in your 09bad account is inaccurate or incomplete, you have the right to request correction. Where the correction relates to your registered name or date of birth, we may require supporting documentation to verify the requested amendment. Account details such as your mobile number or preferred contact preferences can typically be updated directly through the account settings panel following your 09bad login.

Right to Erasure

You may request that 09bad delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis for processing exists. Please be aware that this right is not absolute — 09bad is required to retain certain categories of data (including transaction records and identity verification documents) for defined periods under anti-money laundering and financial record-keeping obligations, as set out in the Data Retention section above. A request for erasure will therefore be fulfilled to the maximum extent possible, with legally required data categories retained only for their mandatory minimum retention period.

Right to Restrict Processing

Where you contest the accuracy of your data or object to processing on grounds of legitimate interest, you may request that 09bad restrict the processing of your personal data while the matter is being resolved. Restricted data will be stored but not actively used for operational purposes during the restriction period.

Right to Withdraw Consent

Where 09bad processes your data on the basis of your consent — specifically for marketing communications — you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal, and does not affect processing carried out on other legal bases such as performance of contract or legal obligation.

Exercising Your Rights

To exercise any of the rights described above, please contact the 09bad privacy team at [email protected]. Please include your registered mobile number, account username, and a clear description of the right you wish to exercise. 09bad will acknowledge your request within five business days and will aim to fulfil it within 30 calendar days. Where fulfilment requires additional verification to confirm your identity, the 30-day period is paused pending receipt of the verification information.

Policy Updates & Contact

09bad reviews this Privacy Policy periodically and may update it to reflect changes in platform features, applicable legal requirements, or our data processing practices. When material changes are made to this Privacy Policy, we will notify active account holders via their registered mobile number or email address at least seven days before the updated policy takes effect. The updated policy will also be published on this page with a revised "Last Updated" date.

Where you continue to use the 09bad platform following the effective date of an updated Privacy Policy, that continued use constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you may close your account by contacting support prior to the effective date of the update.

Minor changes that do not materially affect the way your data is collected or used — such as clarifications of existing language, corrections of typographical errors, or structural reorganisation that does not alter substance — may be made without prior notification, though the "Last Updated" date on this page will always reflect the most recent revision.

Contact the 09bad Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security concern, please contact us using the details below. All privacy-related queries are handled by 09bad's dedicated compliance and data protection personnel.