Privacy Policy — 00bd9

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the 00bd9 Platform is 00bd9, the operator of the online casino and sports betting platform accessible at https://00bd9.app and all associated subdomains and services (collectively, "the Platform").

As the data controller, 00bd9 determines the purposes and means by which your personal data is processed. If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact us using the following details:

• Platform: 00bd9 — https://00bd9.app
• Email: [email protected]
• Language of communication: English
• Response time: Within 5 business days for general queries; within 30 days for formal data subject requests

This Privacy Policy applies to all players, visitors, and users of the 00bd9 Platform regardless of the device or method used to access it, including desktop browsers, mobile browsers, and any native application associated with 00bd9. It covers personal data collected online through the Platform and through any communications you send to 00bd9 directly.

00bd9 collects personal data from you in three primary ways: information you provide directly during registration and account use, information generated automatically as you interact with the Platform, and information received from third parties such as payment processors and identity verification providers.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), email address, and mobile phone number.
• Identity verification (KYC) documents: Copies of your National Identity Card (NID), passport, or other government-issued identification required to verify your age and identity before withdrawal processing.
• Payment information: Mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account references (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) as required to process deposits and withdrawals. Full card numbers are never stored directly by 00bd9 — they are handled by our PCI-DSS compliant payment partners.
• Communications: Any messages, emails, or support tickets you send to 00bd9, including correspondence about disputes, bonus queries, or technical issues.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, session time limits, and cool-off periods you set through the Platform's responsible gaming tools.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network provider.
• Usage data: Pages visited on the Platform, games played, wagers placed, session duration, click patterns, and navigation paths.
• Transaction data: A record of all deposits, withdrawals, bonuses claimed, bets placed, and game outcomes associated with your account.
• Cookies and tracking data: Information collected via cookies, pixels, and similar technologies as described in Section 5 of this policy.

2.3 Information from Third Parties

• Payment processors: Transaction status confirmations and fraud risk signals from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners.
• Identity verification providers: Age and identity confirmation results from KYC verification services used to validate your NID or passport.
• Fraud and security services: Risk scores and fraud indicators from third-party security partners used to protect the Platform and its players.

00bd9 uses the personal data we collect for the following specific purposes. We process your data only where we have a lawful basis for doing so, which in most cases is either the performance of our contract with you (providing the 00bd9 Platform and its services), compliance with legal obligations, or our legitimate interests in operating a safe, fair, and commercially viable platform.

00bd9 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated tools are used to flag accounts for review (for example, fraud or responsible gaming alerts), a member of the 00bd9 compliance or support team reviews the flag before any account action is taken.

00bd9 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Processors

To process your deposits and withdrawals, 00bd9 shares relevant payment details with our payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks such as Dutch-Bangla Bank. These processors receive only the data they need to complete your transaction and are bound by their own data protection obligations.

4.2 Identity Verification Providers

To fulfil our Know Your Customer (KYC) obligations, 00bd9 shares identity document data with third-party verification services. These providers process your NID or passport solely for the purpose of confirming your age and identity and are contractually prohibited from using your data for any other purpose.

4.3 Game Software Providers

Games on 00bd9 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay and record game outcomes accurately, certain technical and session data (such as a player session token and game result data) is exchanged with these providers. These providers do not receive your full personal profile and are bound by data processing agreements.

4.4 Legal and Regulatory Disclosure

00bd9 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of 00bd9, its players, or the public; or (c) investigate, detect, or prevent fraud, money laundering, or other illegal activity.

4.5 Business Transfers

In the event that 00bd9 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email in the event that such a transfer materially affects the handling of your personal data.

00bd9 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device, maintain your session, remember your preferences, and collect analytical data about how the Platform is used.

5.1 Types of Cookies We Use

5.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, to alert you when a cookie is being set, or to delete cookies after each session. Note that blocking essential cookies may prevent you from logging into your 00bd9 account or using core Platform features. Analytical and functional cookies can be blocked without affecting your ability to play, though some personalisation features may not work as expected.

For guidance on managing cookies in your specific browser or mobile device (including common Bangladesh-market devices and browsers), please refer to your browser's help documentation.

00bd9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data (registration details, KYC documents, transaction history): Retained for the duration of your active account relationship with 00bd9, and for a minimum of 5 years following account closure, to comply with anti-money laundering (AML) record-keeping requirements.
• Support communications (emails, chat logs, dispute records): Retained for 3 years from the date of the last communication, or longer if the matter is subject to ongoing legal proceedings.
• Responsible gaming records (self-exclusion history, deposit limit logs): Retained for 5 years following account closure to ensure that self-exclusion and cooling-off periods can be enforced if a previously excluded player attempts to re-register.
• Analytical and usage data: Aggregated and anonymised after 24 months; individual-level usage data is not retained beyond this period unless linked to an ongoing compliance matter.
• Cookie and tracking data: Retained in line with the cookie duration periods set out in Section 5 above.

When your personal data is no longer required for any of the above purposes, 00bd9 will securely delete or anonymise it in accordance with our internal data disposal procedures.

00bd9 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information from unauthorised access, accidental loss, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and 00bd9's servers is encrypted using SSL/TLS protocols, ensuring that data in transit cannot be intercepted.
• Secure data storage: Personal data is stored on servers protected by access controls, firewalls, and intrusion detection systems. Access is restricted to authorised 00bd9 personnel on a need-to-know basis.
• Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. 00bd9 staff cannot view your password in plain text.
• Two-factor authentication (2FA): 00bd9 supports optional 2FA for player accounts to add an additional layer of protection against unauthorised login.
• Regular security reviews: 00bd9's technical infrastructure is subject to periodic internal security reviews to identify and address potential vulnerabilities.

Despite these measures, no system of data security is completely infallible. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 00bd9 will notify affected players by email as promptly as circumstances allow and will take immediate steps to contain and investigate the breach.

You also play an important role in securing your own data. We strongly recommend that you use a unique, strong password for your 00bd9 account, enable 2FA where available, and never share your login credentials with any other person.

As a player on the 00bd9 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 days.

Right of Access

You have the right to request a copy of the personal data that 00bd9 holds about you. We will provide this in a clear, readable format. Note that we may need to verify your identity before fulfilling an access request to protect against unauthorised disclosure.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Many details such as your contact email and phone number can be updated directly from within your 00bd9 account settings. For changes to identity-verified information (such as your legal name or date of birth), additional documentation may be required.

Right to Erasure

You may request that 00bd9 deletes your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based. Please note that this right is subject to overriding legal obligations: 00bd9 is required to retain certain records (particularly KYC and transaction data) for a minimum of 5 years following account closure under AML regulations. Erasure requests for data covered by these obligations cannot be fulfilled until the relevant retention period has elapsed.

Right to Restrict Processing

You have the right to request that 00bd9 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or while an objection to processing is being considered.

Right to Object

Where 00bd9 processes your data on the basis of legitimate interests (such as platform analytics or marketing profiling), you have the right to object to that processing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing of your data is based on your consent (for example, receiving promotional email communications from 00bd9), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

The 00bd9 Platform integrates with several categories of third-party service provider in order to deliver its full functionality. While 00bd9 takes reasonable steps to ensure that these providers meet appropriate data protection standards, we are not responsible for the privacy practices of third-party services and cannot guarantee their compliance.

Third-party providers whose services are integrated into the 00bd9 Platform include:

• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers operate their own servers and may process certain session data to deliver the game experience.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other partner banks. Payment transactions are processed on the infrastructure of these providers, who have their own privacy and security policies.
• Analytics providers: 00bd9 may use analytics tools to measure Platform performance. Where such tools are used, data is aggregated and anonymised before analysis, and no individually identifiable player data is shared with analytics vendors.

The 00bd9 Platform does not contain hyperlinks to external third-party websites. If you navigate away from 00bd9 to any third-party website independently (for example, to your bKash app or your bank's website to complete a payment), the privacy practices of that third party are governed entirely by their own privacy policy, not by this one.

00bd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify registered players by email to the address associated with their account and update the effective date shown at the top of this document.

Your continued use of the 00bd9 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Privacy Policy at least once every three months to remain informed of how your data is handled.

If any proposed change to this Privacy Policy would require us to process your data in a materially different way that requires your fresh consent, we will seek that consent before the change takes effect.