bk9909 Privacy Policy

1.1 Registration and Account Data

When you create a bk9909 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for mandatory age verification — bk9909 is an 18+ platform)
• Residential address, including city and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Email address and/or mobile phone number (used for account access and communications)
• Username and encrypted password credentials
• Preferred currency (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

In compliance with Know Your Customer (KYC) requirements, bk9909 may request:

• A copy of a government-issued photo ID (National Identity Card, passport, or birth certificate)
• Proof of current residential address (utility bill, bank statement, or equivalent document dated within the past three months)
• Source of funds documentation where transaction volumes warrant additional checks
• A selfie photograph for facial match verification in high-value account scenarios

1.3 Financial and Transaction Data

To process deposits and withdrawals, bk9909 collects:

• Payment method identifiers (mobile banking account numbers for bKash, Nagad, Rocket, and Upay; bank account references for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank)
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history maintained for audit and anti-money laundering (AML) purposes

1.4 Usage and Behavioural Data

When you use the bk9909 platform, we automatically collect:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and click-path data
• Betting and gaming activity (markets accessed, wagers placed, game sessions initiated)
• Session timestamps in Bangladesh Standard Time (BST, UTC+6)

bk9909 uses the personal data it collects for the following specific purposes:

Marketing Communications: bk9909 will only send you promotional emails, SMS notifications, or push notifications regarding bonuses, seasonal offers (such as BPL season promotions, Eid specials, or Pohela Boishakh offers), and new game launches if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw marketing consent at any time by contacting [email protected] or updating your notification preferences in your account dashboard. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

Automated Decision-Making: bk9909 uses automated systems for fraud screening, responsible gaming monitoring, and bonus eligibility checks. Where an automated decision has a significant effect on your account (such as a temporary suspension pending investigation), you have the right to request a manual review by a member of the bk9909 compliance team.

bk9909 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding contractual data protection terms:

3.1 Payment Processing Partners

To process your deposits and withdrawals, bk9909 shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank). These providers process payment data under their own privacy policies and applicable financial regulations. bk9909 does not share your full identity documents with payment providers beyond what is operationally required.

3.2 Identity Verification Providers

KYC document verification is conducted with the assistance of accredited identity verification service providers. These providers are contractually bound to process your identity documents solely for the purpose of verification and may not use them for any other purpose.

3.3 Game Software Providers

Casino games on the bk9909 platform are supplied by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers to enable game functionality and dispute resolution. They do not receive your full name, address, or financial data unless required for a specific verified dispute.

3.4 Legal and Regulatory Authorities

bk9909 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required to do so, including in response to a valid legal order, court subpoena, or statutory reporting obligation. bk9909 will notify affected players of such disclosures where legally permitted to do so.

3.5 Business Continuity

In the event of a merger, acquisition, or sale of all or substantially all of the assets of bk9909, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.

A cookie is a small text file placed on your device by a website you visit. bk9909 uses the following categories of cookies:

What bk9909 Does Not Use: We do not deploy advertising cookies, retargeting pixels, social media tracking scripts, or any third-party cookie that tracks your activity across websites other than bk9909. Our analytics cookies collect data in anonymised, aggregated form only and cannot be used to identify individual players.

Managing Cookies: You may configure your browser to refuse or delete cookies at any time. Please be aware that disabling essential session cookies will prevent you from logging in to your bk9909 account and using core platform features. Instructions for managing cookies are available in the help documentation of all major browsers including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari.

The following security measures are in place across the bk9909 platform:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and bk9909 servers is encrypted using TLS 1.2 or higher with 256-bit encryption. The bk9909 platform enforces HTTPS on all pages and HTTP Strict Transport Security (HSTS) headers are active.
• Password Hashing: Account passwords are never stored in plain text. bk9909 uses industry-standard cryptographic hashing algorithms (bcrypt with a high work factor) to store password data. Even in the unlikely event of a data breach, stored password hashes cannot feasibly be reversed.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff members who access player data are subject to contractual confidentiality obligations and receive data protection training.
• Database Encryption: Sensitive data fields within bk9909 databases, including identity document copies and financial reference numbers, are stored in encrypted form with access key management procedures in place.
• Intrusion Detection: bk9909 operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous access patterns in real time.
• Penetration Testing: The bk9909 platform undergoes periodic security assessments including vulnerability scanning and penetration testing conducted by independent security specialists.
• Incident Response: bk9909 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, bk9909 will notify affected individuals as soon as reasonably practicable.

The following retention periods apply to the main categories of personal data held by bk9909:

When a retention period expires, bk9909 will securely delete or anonymise the relevant personal data so that it can no longer be associated with an identifiable individual. Where deletion is not immediately possible due to technical constraints (for example, data stored in backup archives), the data will be isolated from active processing until deletion can be completed.

If you request account closure, bk9909 will cease active use of your personal data for marketing and personalisation purposes immediately upon closure. The retention periods described above will continue to apply to data categories that are subject to legal retention obligations.

As a bk9909 player, you hold the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of all personal data bk9909 holds about you, together with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). bk9909 will provide this information free of charge within 30 days of receiving a valid request.
• Right to Rectification: If any personal data bk9909 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your address or contact information, you may update these directly through your account settings. For identity document data, contact the support team.
• Right to Erasure: You may request that bk9909 delete your personal data. This right is not absolute — bk9909 may retain certain categories of data for as long as required by law (see Section 6). Where erasure is possible, bk9909 will confirm deletion within 30 days.
• Right to Restriction: You may request that bk9909 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being investigated.
• Right to Data Portability: You have the right to receive a machine-readable copy of personal data you have provided to bk9909, and to transfer that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing carried out on the basis of legitimate interest, although bk9909 may override this objection where compelling legitimate grounds exist.
• Rights Related to Automated Decision-Making: Where a significant decision is made about your account through automated means (such as a fraud-triggered suspension), you have the right to request human review of that decision.

To exercise any of the above rights, please contact the bk9909 privacy team at support@bk 9909.app. Please include your registered username and a clear description of your request. bk9909 may need to verify your identity before processing a privacy rights request to ensure we do not disclose or delete data in response to an unauthorised request.

What to Include in Your Request

To help us handle your request efficiently, please provide the following in your email:

• Your bk9909 registered username
• The email address associated with your bk9909 account
• A clear description of your request or concern (e.g., "I would like a copy of all personal data you hold about me" or "I would like my account and associated data deleted")
• If submitting a Subject Access Request, please state the specific categories of data you are requesting, if known

Response Times

bk9909 will acknowledge receipt of your privacy request within 2 business days. A full substantive response will be provided within 30 calendar days. In cases of particular complexity, this period may be extended by a further 30 days, in which case bk9909 will notify you of the extension and the reasons for it before the initial 30-day period expires.

Policy Updates

bk9909 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material, bk9909 will notify registered players by email or via an in-platform notification at least 14 days before the updated policy takes effect. The "Effective" date at the top of this page will be updated to reflect the date of the latest revision. Continued use of the bk9909 platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with a material change, you may close your account before the effective date by contacting [email protected].

Children and Minors

bk9909 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If bk9909 becomes aware that a registered account belongs to a person under the age of 18, that account will be suspended immediately, all funds will be returned to the source payment method, and all personal data associated with the account will be deleted in accordance with our legal obligations. If you believe a minor has registered on the bk9909 platform, please notify us immediately at [email protected].