pbd9 Privacy Policy
Your Data, Your Rights, Our Commitment
At pbd9, protecting the personal information of every player in Bangladesh is a fundamental responsibility — not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and protected, and what rights you hold as a pbd9 account holder.
Summary: pbd9 collects only the personal information necessary to operate a safe, compliant online gaming platform for players in Bangladesh. We do not sell your personal data to third parties. We use industry-standard encryption to protect your information at every stage. By creating a pbd9 account, you consent to the data practices described in this Privacy Policy.
pbd9 collects only the personal data that is strictly necessary to register your account, process payments, verify your identity, and deliver a secure gaming experience. We do not harvest data beyond what is required for platform operations.
Every data transmission between your device and pbd9 is protected by 256-bit SSL (Secure Socket Layer) encryption — the same standard used by international banks and financial institutions. Your personal details and payment information are never transmitted in plain text.
pbd9 players in Bangladesh hold full rights over their personal information. You may request access to the data we hold about you, request corrections, request deletion under certain circumstances, and object to specific processing activities — all free of charge.
pbd9 will never sell, rent, or trade your personal information to third-party marketers, data brokers, or advertising networks. The data you provide is used exclusively for the purposes described in this Privacy Policy and for no other commercial purpose.
pbd9 uses cookies and similar tracking technologies solely to improve platform functionality, maintain your session security, and analyse aggregate user behaviour. We do not use cross-site tracking cookies or third-party advertising trackers. You can manage cookie preferences at any time.
pbd9 retains personal data only for as long as is necessary for the purposes outlined in this Privacy Policy or as required by applicable regulatory obligations. Account data is retained for a minimum of five years following account closure for anti-money laundering compliance purposes.
Section 1
Information We Collect
pbd9 collects personal information from players in Bangladesh at various stages of the account lifecycle — from initial registration through to ongoing account management, payment processing, and responsible gaming compliance. The categories of personal information we collect are detailed below.
Registration Information
When you create a pbd9 account, we collect the following information to establish your player profile:
- Full legal name (as it appears on your government-issued identification document)
- Date of birth (to verify that you meet the 18+ age requirement)
- Residential address in Bangladesh (city, district, and postal code)
- Email address (used for account communications and security alerts)
- Mobile phone number registered in Bangladesh (for account verification and two-factor authentication)
- Chosen username and encrypted account password
Identity Verification (KYC) Documents
As part of our Know Your Customer (KYC) verification process — which is mandatory before your first withdrawal can be processed — pbd9 may collect and temporarily store copies of:
- Bangladesh National Identity Card (NID) or passport
- Proof of residential address (utility bill, bank statement, or government correspondence dated within three months)
- Proof that the payment method used (bKash, Nagad, Rocket, Upay, or bank account) is registered in your name
Payment and Transaction Data
pbd9 records all financial transactions associated with your account. This includes deposit amounts, withdrawal requests, payment method identifiers (such as the last four digits of a mobile wallet number or card number), transaction timestamps, and transaction status records. Full payment credentials such as full card numbers or mobile banking PINs are never stored by pbd9 — these are handled exclusively by our payment processing partners.
Gaming Activity Data
We maintain detailed records of your gaming activity on the pbd9 platform. This includes game sessions, bet amounts, game outcomes, win/loss records, bonus activity, wagering contribution data, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
Technical and Device Data
When you access pbd9, our servers automatically collect certain technical data about your connection and device. This includes:
- IP address and approximate geographic location (country and city level)
- Device type, operating system, and browser version
- Session timestamps (login time, last activity, logout time)
- Referring URL (the website or search result that directed you to pbd9, if applicable)
- Pages visited and features used within the pbd9 platform
Communication Records
If you contact pbd9's customer support team at [email protected] or through any on-platform messaging system, we retain records of those communications — including your messages, our responses, and any attachments — for quality assurance, dispute resolution, and training purposes.
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Registration Data | Name, DOB, email, phone, address | Account sign-up |
| KYC Documents | NID, passport, utility bill | First withdrawal request |
| Payment Data | bKash/Nagad identifiers, transaction records | Deposit or withdrawal |
| Gaming Activity | Bets, game sessions, win/loss history | Any gameplay or bet placement |
| Technical Data | IP address, device type, browser | Platform access (automatic) |
| Support Communications | Email exchanges, chat transcripts | Customer support contact |
Section 2
How We Use Your Data
pbd9 processes personal data only for legitimate, clearly defined purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which pbd9 processes personal data are as follows:
Account Management and Platform Operation
Your registration data is used to create and maintain your pbd9 account, authenticate your identity when you log in, communicate important account notices (such as security alerts, password resets, and verification requests), and provide access to pbd9's games and services. Without this data, we would be unable to deliver the pbd9 platform to you.
Payment Processing
Transaction data is processed to facilitate deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; to process withdrawal requests to your verified payment method; and to maintain an accurate and auditable record of all financial activity on your account. Payment data is shared with our payment processing partners only to the extent required to complete transactions.
Identity Verification and Fraud Prevention
KYC documentation and identity data are processed to verify that all pbd9 players are genuine adults aged 18 or above, to prevent fraudulent account activity (including multi-accounting, identity theft, and the use of stolen payment credentials), to detect and investigate money laundering or other financial crimes, and to comply with anti-fraud obligations.
Responsible Gaming Compliance
Gaming activity data — including session duration, bet frequency, loss rates, and deposit patterns — is analysed to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are identified, pbd9 may proactively reach out with responsible gaming information, apply cooling-off periods, or enforce account restrictions in accordance with our Responsible Gaming Policy.
Legal and Regulatory Compliance
pbd9 processes and retains personal data to the extent required to comply with applicable laws and regulatory obligations, to respond to lawful requests from law enforcement or regulatory authorities, and to establish, exercise, or defend legal claims arising in connection with the platform.
Platform Improvement and Analytics
Aggregated and anonymised technical data (device types, session durations, feature usage patterns) is used internally to identify platform performance issues, improve the user experience, and inform product development decisions. This analysis never involves individually identifiable personal data.
Marketing Communications
Where you have provided explicit consent at registration or thereafter, pbd9 may send you promotional emails or in-platform notifications about new games, bonus offers, seasonal promotions (such as Eid or BPL cricket season campaigns), and platform updates. You may withdraw consent to marketing communications at any time by contacting [email protected]. Withdrawal of consent will not affect the legality of communications sent prior to the withdrawal.
Section 3
Data Sharing & Disclosure
pbd9 does not sell, rent, or trade your personal data. We share personal information with third parties only in the limited circumstances described below, and always subject to appropriate data protection safeguards.
Payment Processing Partners
To process deposits and withdrawals, pbd9 shares the minimum necessary payment transaction data with our authorised payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and the card networks Visa and Mastercard. These partners operate their own privacy policies and are subject to their own regulatory obligations. pbd9 does not share your gaming history, account balance, or personal profile with payment partners beyond what is required to authenticate and settle a specific transaction.
Identity Verification Service Providers
pbd9 may use third-party KYC verification services to assist with the authentication of identity documents submitted by players. These service providers process identity data solely on pbd9's behalf and under strict contractual data processing agreements. They are not permitted to use your identity data for any purpose other than verifying your identity for pbd9.
Game Software Providers
Games on the pbd9 platform are powered by internationally certified studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, BGaming, and Hacksaw Gaming. These providers may receive session identifiers and anonymised player data necessary to operate game software and RNG systems. They do not receive your full personal profile, financial data, or KYC documents.
Legal and Regulatory Authorities
pbd9 will disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are required to do so by law, where we have a good-faith belief that disclosure is necessary to investigate fraud or criminal activity, or where disclosure is required to protect the safety of pbd9 players or staff.
No Cross-Border Data Sales
pbd9 does not transfer your personal data to overseas commercial entities for marketing, profiling, or data monetisation purposes. Any cross-border transfer of data that occurs as an incidental part of our payment or KYC processing infrastructure is conducted under standard contractual protections consistent with international best practice.
Our Commitment: Every third party that receives pbd9 player data is bound by contractual obligations requiring them to protect that data to at least the same standard as pbd9 itself. We conduct periodic reviews of our third-party data partners to ensure ongoing compliance with our data protection standards.
Section 5
Data Security & Storage
pbd9 takes the security of your personal data seriously and applies a layered approach to data protection that covers transmission security, storage security, access controls, and incident response procedures.
Transmission Security
All data exchanged between your device and pbd9 servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission. The pbd9.app domain is served exclusively over HTTPS — unencrypted HTTP connections are redirected automatically.
Storage Security
Personal data stored in pbd9 databases is protected by encryption at rest. KYC documents (identity cards, passport scans, and address verification documents) are stored in isolated, access-controlled document vaults with audit logging on every access event. Account passwords are stored using strong one-way cryptographic hashing — pbd9 staff cannot read your password, and it is never stored or transmitted in plain text.
Access Controls
Access to pbd9 player data is restricted on a strict need-to-know basis. Only authorised pbd9 staff whose roles require access to specific categories of personal data are granted access, and all such access is logged. Staff with access to sensitive player data are subject to confidentiality obligations and receive regular data protection training.
Incident Response
In the event of a personal data breach that poses a risk to the rights and freedoms of pbd9 players, we will take immediate containment action and notify affected players via their registered email address without undue delay. We will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken or propose to take to address it. Players are encouraged to contact [email protected] promptly if they believe their account has been accessed without authorisation.
No Absolute Security Guarantee
While pbd9 applies industry-standard security measures, no digital platform can guarantee absolute immunity from all possible security threats. Players are responsible for maintaining the security of their own devices and account credentials. We recommend using a strong, unique password for your pbd9 account, enabling any available two-factor authentication options, and logging out from shared devices after each session.
Section 6
Your Privacy Rights
As a pbd9 player, you hold meaningful rights over the personal data we hold about you. pbd9 respects these rights and is committed to responding to all valid data subject requests promptly and free of charge. The rights available to you are described below.
You may request a copy of all personal data that pbd9 holds about you. We will provide this within 30 days of a valid request, in a readable format.
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic account information directly within your account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected. Note: regulatory obligations (such as AML record-keeping) may require us to retain certain data for a minimum period regardless of an erasure request.
In certain circumstances — such as when you contest the accuracy of data we hold — you may request that we temporarily restrict how we process your personal data while the matter is resolved.
You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider of your choosing.
You may object at any time to processing of your personal data for direct marketing purposes. Once you object to marketing processing, we will stop sending promotional communications immediately.
How to Exercise Your Rights
To exercise any of the rights described above, send a written request to [email protected]. Please include your full name, the email address associated with your pbd9 account, and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing a data rights request, to ensure that we are releasing or modifying data only to the account holder. We will respond to all valid requests within 30 calendar days.
Section 7
Data Retention Policy
pbd9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Regulatory / AML compliance |
| KYC Documents | 5 years from date of submission or account closure (whichever is later) | Anti-money laundering obligations |
| Payment Transaction Records | 5 years from transaction date | Financial record-keeping requirements |
| Gaming Activity Logs | 3 years from account closure | Dispute resolution, responsible gaming audit |
| Support Communications | 3 years from the date of the communication | Quality assurance, legal claims |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent compliance |
| Technical / Device Logs | 13 months from collection date | Security monitoring, fraud detection |
Account Closure and Data Deletion
When you close your pbd9 account, we will cease active use of your personal data for marketing and platform operation purposes immediately. However, we are required by applicable anti-money laundering and financial regulations to retain core identity, KYC, and transaction records for a minimum of five years following account closure. After the applicable retention period expires, your personal data will be securely deleted or irreversibly anonymised.
Anonymised Data
Data that has been fully anonymised — meaning it can no longer be linked back to any individual player — may be retained indefinitely for aggregate statistical analysis, platform improvement, and research purposes. Anonymisation is a one-way, irreversible process; once data is anonymised it no longer constitutes personal data and is not subject to this Privacy Policy.
Deletion Requests: If you wish to request early deletion of data that is not subject to a mandatory retention period, you may do so by contacting [email protected] with the subject line "Data Deletion Request". We will acknowledge your request within 5 business days and process it within 30 calendar days, subject to any applicable legal obligations that may require us to retain certain records.
Section 8
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how pbd9 is handling your personal data, please contact our data protection team using the details below.
Primary Contact
All privacy-related enquiries should be directed to pbd9's support team via email. Please include "Privacy Enquiry" or the relevant subject (e.g., "Data Access Request", "Data Deletion Request", "Privacy Complaint") in the subject line of your message to ensure prompt routing.
Data Protection Contact
Email: [email protected]
Response time: Within 5 business days for general enquiries; within 30 calendar days for formal data subject rights requests.
Language: Requests may be submitted in English.
Complaints Procedure
If you believe that pbd9 has not handled your personal data in accordance with this Privacy Policy, we encourage you to raise the matter with us directly in the first instance so that we have the opportunity to investigate and resolve your concern. To submit a formal privacy complaint:
- Email [email protected] with the subject line "Formal Privacy Complaint".
- Describe the nature of your complaint clearly, including the specific data processing activity you believe was improper and the outcome you are seeking.
- Include your full name and the email address associated with your pbd9 account.
- pbd9 will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days.
- If you are not satisfied with our response, you retain the right to escalate the matter to an appropriate data protection supervisory authority or seek legal redress through the courts.
Updates to This Privacy Policy
pbd9 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, we will notify registered players via their registered email address prior to the changes taking effect. The "Effective Date" at the top of this policy indicates the date on which the current version came into force. We encourage players to review this Privacy Policy periodically. Continued use of the pbd9 platform after a Privacy Policy update constitutes acceptance of the revised terms.
The current version of this Privacy Policy was last updated in January 2026 and supersedes all previous versions. If you have any concerns about the changes made, please contact [email protected] before continuing to use the platform.