bk9 Privacy Policy

1. Introduction

bk9 (referred to as "bk9", "we", "us" or "our" in this document) is committed to protecting the privacy of all individuals who use the bk9 Platform. This Privacy Policy describes how bk9 collects, uses, stores, shares and protects personal data in connection with the operation of the Platform and the provision of gaming services to players in Bangladesh and elsewhere.

By registering an account on the bk9 Platform, accessing the site, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the Platform.

This Privacy Policy should be read alongside the bk9 Terms and Conditions. We may update this policy from time to time. The most recent version will always be available on this page, identified by the "Last Updated" date at the top.

2. Personal Data We Collect

bk9 collects personal data in two primary ways: information you provide to us directly, and information collected automatically through your use of the Platform.

Information You Provide Directly

When you register for a bk9 account or use our services, you may be asked to provide the following categories of personal data:

• Identity information: full name, date of birth, nationality, and a copy of a government-issued identification document.
• Contact information: email address, phone number, and residential address (including city, district, and postal code).
• Account credentials: username and a hashed representation of your password (we never store passwords in plain text).
• Payment information: your preferred payment method identifiers (e.g. bKash mobile wallet number, Nagad account reference). We do not store full card numbers or payment PINs.
• Responsible gaming information: deposit limit preferences, self-exclusion requests, and any information you share with our support team in connection with responsible gaming.

Information Collected Automatically

When you use the bk9 Platform, certain technical and behavioural data is collected automatically. This includes:

• Device and browser information: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: pages visited, time spent on each page, navigation paths, games played, wagers placed, and session duration.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 7 of this policy.

3. How We Use Your Personal Data

bk9 uses personal data only for the following legitimate purposes:

• Account management: to create and maintain your bk9 account, verify your identity, and provide you with access to the Platform.
• Service delivery: to process deposits and withdrawals, settle wagers, award bonuses, and provide customer support.
• Legal and regulatory compliance: to meet KYC (Know Your Customer) requirements, anti-money laundering obligations, and any other applicable legal or regulatory requirements.
• Security and fraud prevention: to detect, investigate and prevent fraudulent transactions, account takeovers, and other illegal activities on the Platform.
• Platform improvement: to analyse aggregate usage patterns and improve the performance, design, and content of the bk9 Platform.

bk9 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review, nor for the targeting of gambling advertising to individuals who have self-excluded or who are under 21.

4. Sharing Your Personal Data

bk9 does not sell or rent personal data to third parties. We may share personal data with the following categories of recipients only where strictly necessary:

Payment Service Providers

To process deposits and withdrawals, bk9 shares necessary transaction data with your chosen payment service provider (e.g. bKash, Nagad, Rocket, Upay, Visa, Mastercard). Each provider operates under its own privacy policy. bk9 does not transmit more data to payment providers than is strictly required to complete the transaction.

Technology and Service Providers

bk9 works with trusted third-party technology providers to operate the Platform. These include game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and others) that supply the games available on the Platform, as well as hosting providers and analytics services. These providers are bound by data processing agreements that restrict the use of your data to the services they supply to bk9.

5. Data Retention

bk9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation.

Active Account Data

While your bk9 account is active, we retain all personal data associated with your account. This includes your registration details, transaction history, gameplay records, and correspondence with our support team.

• Transaction records are retained for a minimum of 5 years from the date of the transaction in order to comply with financial record-keeping regulations.
• Identity verification documents are retained for as long as required by applicable KYC and anti-money laundering regulations.
• After account closure, anonymised statistical data may be retained indefinitely, but personal identifiers are removed within 90 days of the account closure request, subject to legal retention obligations.

Closed Account Data

When an account is closed — whether at the player's request, due to a breach of Terms, or for any other reason — bk9 will retain the minimum personal data required by applicable law. Data no longer required for legal or regulatory purposes will be securely deleted or anonymised.

6. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data bk9 holds about you:

• Right of access: you may request a copy of the personal data bk9 holds about you at any time, free of charge.
• Right to rectification: if any data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: you may object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications, contact our support team or use the unsubscribe link in any marketing email.

To exercise any of these rights, please contact bk9 support. We will respond to all valid data subject requests within 30 days. We may need to verify your identity before processing a request to ensure the security of your data.

7. Cookies and Tracking Technologies

bk9 uses cookies and similar tracking technologies to provide, personalise, and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow us to recognise your device on subsequent visits and to remember your preferences.

Types of Cookies We Use

bk9 uses the following categories of cookies: (a) Strictly necessary cookies — these are essential for the Platform to function and cannot be disabled. They include session authentication tokens and security cookies. (b) Functional cookies — these remember your preferences such as language settings and preferred game categories, improving your experience on return visits. (c) Analytics cookies — these collect aggregated, anonymised data about how users interact with the Platform. This data helps us understand usage patterns and improve content. bk9 does not use third-party advertising cookies to serve gambling advertisements on external websites.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored on your device and delete them individually or in bulk.
• Block third-party cookies from being stored on your device.
• Block all cookies from being stored on your device (note that disabling strictly necessary cookies may prevent you from logging in to the Platform).
• Set your browser to notify you each time a cookie is placed on your device.

8. Data Security

bk9 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL (Secure Socket Layer) encryption on all data transmissions between your browser and the bk9 Platform.
• Passwords stored using one-way cryptographic hashing — plain-text passwords are never stored.
• Role-based access controls ensuring that only authorised bk9 personnel can access personal data, and only to the extent required by their role.
• Regular security assessments and penetration testing to identify and address potential vulnerabilities.
• Secure data centre facilities with physical access controls, fire suppression systems, and continuous monitoring.

While bk9 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bk9 will notify affected users in accordance with applicable law.

9. Children and Minors

The bk9 Platform is strictly intended for individuals aged 21 and above. bk9 does not knowingly collect personal data from any person under the age of 21. Registration is not permitted for players under 21, and bk9 employs age verification procedures to enforce this restriction.

If bk9 becomes aware that it has inadvertently collected personal data from a person under 21, that data will be deleted as promptly as possible and the associated account will be closed. If you are a parent or guardian and believe your child has registered on the bk9 Platform, please contact our support team immediately.

10. International Data Transfers

bk9 operates primarily to serve players in Bangladesh. Some of our service providers and technology partners may be located outside Bangladesh and may process your data in other jurisdictions. Where data is transferred internationally, bk9 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy.

Safeguards for Transferred Data

bk9 uses contractual safeguards — including data processing agreements that require overseas recipients to handle your data in a manner consistent with this Privacy Policy — when transferring personal data internationally. We do not transfer personal data to countries that do not provide an adequate level of data protection without implementing additional protective measures.

Your Consent to Transfer

By using the bk9 Platform, you consent to the transfer of your personal data to countries outside Bangladesh where necessary for the purposes described in this policy. If you do not consent to such transfers, please do not use the Platform.

11. Changes to This Privacy Policy

bk9 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make a material change to this policy, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your data.

Your continued use of the bk9 Platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with a revised Privacy Policy, you must stop using the Platform and may request deletion of your account and personal data by contacting support.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bk9 handles your personal data, please contact the bk9 support team. Our support team is available 24/7 to assist with all privacy-related queries. Contact email: [email protected] (plain text — not a clickable link).

We aim to acknowledge all privacy enquiries within 2 business days and to resolve data subject requests within 30 days. Where a request is particularly complex, we will notify you of any extension to this timeline in writing.