09dat Privacy Policy
At 09dat, protecting the personal data of every player across Bangladesh is a core responsibility — not an afterthought. This Privacy Policy sets out exactly what information we collect, why we collect it, how we safeguard it, and what rights you hold over your own data.
Information We Collect
When you register for and use a 09dat account, we collect several categories of personal data. We only collect information that is genuinely necessary to operate the platform, verify your identity, process your financial transactions, and comply with our legal obligations. Below is a comprehensive description of every category of data we may collect.
1.1 Registration and Identity Data
When you create a 09dat account, you are required to provide your full legal name, date of birth, residential address
in Bangladesh, a valid email address, and a mobile phone number. This data is used to create and manage your account, verify your identity during KYC, and communicate with you about your account activity. Providing accurate registration data is a condition of using the 09dat platform — accounts found to contain false registration information may be suspended without notice.
1.2 Know Your Customer (KYC) Documentation
To comply with our identity verification and anti-money laundering obligations, we may request copies of government-issued identity documents (National ID Card, Passport, or Driving Licence), proof of residential address (utility bill or bank statement issued within 90 days), proof of payment method ownership, and in some cases a live selfie photograph. KYC documents are processed securely and retained only for as long as required by law.
1.3 Financial Transaction Data
We record details of every deposit and withdrawal processed through your 09dat account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in BDT, the date and time, and the transaction reference number. We do not store complete mobile banking PIN codes or internet banking passwords. Financial records are retained for a minimum of five (5) years in accordance with standard financial record-keeping requirements.
1.4 Gameplay and Betting Activity
09dat records all game sessions, bet placements, game outcomes, bonus activations, and wagering history associated with your account. This data is used for account management, dispute resolution, bonus fraud prevention, responsible gaming monitoring, and to improve the quality of our platform. Gameplay logs are treated as confidential account data and are not shared with third parties for marketing purposes.
1.5 Device and Technical Data
When you access 09dat via a web browser or mobile device, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session duration. This technical data helps us maintain platform security, detect fraudulent access attempts, and optimise the platform experience across different devices commonly used in Bangladesh.
1.6 Communications Data
If you contact 09dat support via email, we retain records of that correspondence including the content of messages, email headers, and any attachments you submit. This is necessary for quality assurance, dispute resolution, and to maintain an accurate record of your interactions with our team.
1.7 Voluntary Survey and Feedback Data
From time to time, 09dat may invite players to participate in optional satisfaction surveys or feedback forms. Any responses you provide voluntarily are stored separately from your core account data and used solely for platform improvement purposes. Participation in surveys is never a condition of continued account access.
We Do Not Buy Data: 09dat does not purchase personal data lists from third-party brokers or data marketplaces. Every piece of personal information we hold has been provided directly by you or generated by your activity on our platform. We do not enrich your profile using externally sourced personal data without your explicit consent.
| Data Category | Collected |
|---|---|
| Full legal name | ✅ Yes |
| Date of birth | ✅ Yes |
| Residential address | ✅ Yes |
| Email address | ✅ Yes |
| Mobile phone number | ✅ Yes |
| Government ID document | ✅ KYC only |
| bKash / Nagad / Rocket details | ✅ Yes |
| Gameplay & bet history | ✅ Yes |
| IP address & device data | ✅ Yes |
| Mobile banking PIN | ❌ Never |
| Account passwords (plain text) | ❌ Never |
Minimal Data Principle
09dat follows a data minimisation approach. We collect only what is genuinely necessary to deliver a safe, compliant, and high-quality betting experience to players in Bangladesh. We do not collect data speculatively or for resale.
How We Use Your Data
09dat processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with those purposes, and we do not sell your personal data to any third party for commercial gain. The following describes each purpose for which your data is processed and the legal basis that justifies that processing.
2.1 Account Creation and Management (Contractual Necessity)
We use your registration and identity data to create your account, authenticate your login sessions, manage your account settings, and communicate account-related information to you. This processing is necessary to fulfil our contractual obligations to you as a registered 09dat player.
2.2 Identity Verification and KYC Compliance (Legal Obligation)
We are required to verify the identity of players who reach withdrawal thresholds or who are flagged by our risk systems. KYC document processing is conducted to satisfy our legal obligations in respect of age verification, anti-money laundering (AML) compliance, and Know Your Customer regulations applicable to online gaming operators.
2.3 Payment Processing (Contractual Necessity)
Your financial transaction data is processed to execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. We retain transaction records to resolve disputes, investigate failed payments, and comply with financial record-keeping requirements.
2.4 Responsible Gaming Monitoring (Legitimate Interest)
09dat analyses gameplay activity, session lengths, deposit patterns, and self-reported data to identify players who may be experiencing gambling-related harm. Where our systems flag a concern, a member of our responsible gaming team may contact you proactively. This processing is in both your interest and ours, and may be overridden by your right to object — contact [email protected] if you wish to discuss this.
2.5 Fraud Prevention and Platform Security (Legitimate Interest)
We process device data, IP addresses, login patterns, and transaction histories to detect and prevent fraudulent account activity, bonus abuse, money laundering, and unauthorised access. This processing protects you, other players, and the integrity of the 09dat platform.
2.6 Platform Improvement and Analytics (Legitimate Interest)
Aggregated and anonymised gameplay data, technical performance data, and session behaviour data are used to understand how players use the platform, identify bugs and usability issues, and prioritise product improvements. Analytics data is not used to profile you individually for commercial targeting.
2.7 Marketing Communications (Consent)
With your consent (given at registration or subsequently), we may send you promotional emails about bonus offers, new games, seasonal promotions, and platform updates. You may withdraw this consent at any time via your account notification settings or by emailing [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
2.8 Legal Claims and Regulatory Compliance (Legal Obligation)
We may process and retain your personal data where necessary to establish, exercise, or defend legal claims, to respond to regulatory enquiries, or to comply with court orders or other binding legal obligations.
Legal Bases at a Glance
09dat relies on four legal bases for processing: Contractual Necessity (to deliver the platform services you've signed up for), Legal Obligation (KYC, AML, age verification), Legitimate Interest (fraud prevention, security, analytics), and Consent (marketing communications). You may object to legitimate-interest processing at any time.
Opt Out of Marketing Anytime
Promotional emails from 09dat always include an unsubscribe link. Alternatively, email [email protected] with the subject line "Unsubscribe" and we will remove you from all marketing lists within 5 business days. This does not affect service emails such as deposit confirmations and security alerts.
No Individual Profiling for Ads
09dat does not build individual advertising profiles for sale to third-party ad networks. Analytics data used for platform improvement is aggregated and anonymised before review by our product team.
Data Sharing & Third Parties
09dat does not sell, rent, or trade your personal data with third parties for their commercial purposes. We share personal data only where it is strictly necessary to operate the platform, satisfy legal obligations, or protect the safety of our players. The following describes every category of third party with whom your data may be shared.
3.1 Payment Service Providers
When you make a deposit or withdrawal, transaction details (including your name, mobile number, and transaction amount in BDT) are shared with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank — solely to process that transaction. These providers are independent data controllers in respect of their own payment processing activities and operate under their own privacy policies.
3.2 Identity Verification and KYC Partners
To facilitate the KYC process, 09dat may use third-party identity verification services. Where KYC documents are processed by a third-party provider, that provider is bound by a data processing agreement requiring them to handle your documents with at least the same level of security and confidentiality as 09dat itself. KYC documents are never shared with payment providers, game studios, or advertising partners.
3.3 Game Content Providers
09dat licenses casino games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by one of these studios, limited technical session data (such as a pseudonymous session token and bet amounts) is transmitted to the game server to enable gameplay. Full identity data (name, address, ID documents) is never passed to game studios.
3.4 Cloud Infrastructure and Hosting Providers
09dat's platform and databases are hosted on secure cloud infrastructure. Our hosting providers act as data processors on our behalf under data processing agreements. They do not access your personal data except for the technical purpose of maintaining server infrastructure and may not use your data for any independent purpose.
3.5 Legal and Regulatory Authorities
09dat may be required to disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required by a valid legal obligation, court order, or regulatory demand. Where permitted by law, we will notify the affected player before making such a disclosure.
3.6 Business Transfers
In the event of a merger, acquisition, or sale of all or a substantial part of 09dat's business assets, player account data may be transferred as part of that transaction. We will notify registered players by email at least 30 days before any such transfer takes effect and will ensure that the receiving entity is bound by privacy obligations at least equivalent to those in this Policy.
International Transfers: Some of 09dat's third-party service providers (including game studios and cloud infrastructure providers) may process data in jurisdictions outside Bangladesh. Where such transfers occur, 09dat ensures that appropriate safeguards are in place — including contractual data protection clauses — to protect your personal data to a standard equivalent to that described in this Privacy Policy.
We Never Sell Your Data
09dat does not sell, license, or trade your personal information to data brokers, advertising networks, or any commercial third party. Your data is yours — we are custodians, not owners.
Processor Agreements in Place
Every third-party service provider with whom data is shared is required to sign a data processing agreement setting out strict confidentiality, security, and usage restrictions before any data is transferred.
Game Studios Get Minimal Data
Casino game providers receive only the technical session data needed to run a game round. Your name, address, KYC documents, and payment details are never shared with Pragmatic Play, Evolution Gaming, or any other game studio.
Data Security & Retention
09dat takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data from unauthorised access, accidental loss, alteration, or disclosure. No online platform can guarantee absolute security, but 09dat takes commercially reasonable and industry-standard precautions to minimise risk.
5.1 Encryption in Transit
All data transmitted between your browser or mobile device and 09dat's servers is encrypted using TLS (Transport Layer Security) with a minimum of TLS 1.2. This means that your login credentials, personal data, and financial information travel over the internet in encrypted form and cannot be read by anyone intercepting the connection. Look for the padlock icon in your browser's address bar to confirm that your 09dat session is encrypted.
5.2 Encryption at Rest
Sensitive personal data stored in 09dat's databases — including KYC documents, identity information, and financial records — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, and access logs are maintained and reviewed regularly.
5.3 Access Controls and Authentication
Internal access to 09dat's systems and player data is granted on a strict need-to-know basis. All internal accounts require multi-factor authentication (MFA). Access privileges are reviewed regularly and revoked promptly when a team member changes role or leaves the organisation. Privileged access to production databases is logged and audited.
5.4 Incident Response
09dat maintains a documented data breach response procedure. In the event of a data security incident that poses a risk to the rights and freedoms of players, we will notify affected players by email within 72 hours of becoming aware of the breach, providing details of the nature of the incident, the categories of data affected, and the steps being taken to address it.
5.5 Data Retention Periods
09dat retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Account and registration data: Retained for the duration of your account plus 5 years after closure.
- KYC documentation: Retained for a minimum of 5 years after the date of verification, in accordance with standard financial compliance requirements.
- Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
- Gameplay and betting history: Retained for the duration of your account plus 3 years after closure.
- Support correspondence: Retained for 3 years from the date of the last communication.
- Marketing consent records: Retained until consent is withdrawn plus 1 year thereafter as proof of consent status.
At the end of each retention period, personal data is securely deleted or permanently anonymised. You may request early deletion of your data subject to the exceptions described in Section 6 below.
Your Account Security: You play an important role in keeping your 09dat account secure. Use a strong, unique password that you do not use for any other service. Never share your login credentials with anyone. If you suspect your account has been accessed without your authorisation, contact [email protected] immediately and change your password.
TLS Encryption
All data in transit is protected by TLS 1.2 or higher. Your personal details and payment information are never transmitted in plain text over any network connection to or from 09dat's servers.
AES-256 at Rest
Sensitive stored data — including KYC documents and financial records — is encrypted at rest using AES-256, the same standard used by major financial institutions worldwide. Database access is restricted, logged, and audited.
Defined Retention Periods
09dat does not retain data indefinitely. Each data category has a defined maximum retention window aligned to legal requirements. At the end of the retention period, data is securely deleted or irreversibly anonymised.
Breach Notification
In the event of a security incident affecting your personal data, 09dat will notify you by email within 72 hours of confirmed discovery, in line with responsible data handling practices.
Your Privacy Rights
09dat respects your rights over your own personal data. As a registered player, you are entitled to exercise the following rights at any time by contacting our support team at [email protected]. We will respond to all verified privacy rights requests within 30 days. Complex requests may require up to an additional 60 days, in which case we will notify you of the extension within the initial 30-day window.
To protect the security of your account, all privacy rights requests must be submitted from the email address registered to your 09dat account, or accompanied by sufficient identity verification. This prevents a bad actor from exercising your privacy rights on your behalf without your knowledge.
The following rights are available to all 09dat players:
Right of Access
Request a copy of all personal data 09dat holds about you, along with information about how it is being used.
Right to Rectification
Request correction of inaccurate or incomplete personal data in your account at any time.
Right to Erasure
Request deletion of your personal data where retention is no longer necessary, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit processing of your data while a dispute about accuracy or lawfulness is resolved.
Right to Portability
Receive a structured, machine-readable copy of data you have provided to 09dat for transfer to another service.
Right to Object
Object to processing carried out under our legitimate interests, including responsible gaming monitoring and analytics.
Limitations on the Right to Erasure: We may be unable to delete all data immediately if retention is required to comply with a legal obligation (for example, AML record-keeping requirements mandate that we retain KYC and transaction data for a minimum of 5 years). In such cases, we will delete all data that is not subject to a mandatory retention obligation and inform you of the specific reason that the remainder cannot yet be deleted.
How to Submit a Privacy Rights Request: Email [email protected] from your registered email address with the subject line "Privacy Rights Request — [Your Request Type]" (e.g., "Privacy Rights Request — Access"). Include your full name and account username. We will acknowledge receipt within 3 business days and complete the request within 30 days.
Data Subject Requests
All privacy rights requests are handled by our dedicated data protection team. We process every request individually and never use automated systems to make decisions about whether to grant or deny a data rights request.
30-Day Response Commitment
09dat commits to acknowledging all valid privacy rights requests within 3 business days and completing them within 30 calendar days. For complex requests, we will notify you if an extension of up to 60 additional days is required.
Identity Verification Required
To protect your account, all privacy rights requests must come from your registered email address or be accompanied by identity verification. This prevents unauthorised third parties from accessing or deleting your data without your knowledge.
Children's Privacy
09dat is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from any individual under the age of 18. All players must confirm at registration that they are aged 18 or above, and this declaration is subject to KYC verification for accounts that reach withdrawal thresholds or are flagged by our age verification systems.
7.1 Age Verification at Registration
Every person who creates a 09dat account is required to confirm that they are 18 years of age or older at the point of registration. Where our systems detect indicators that a registered account may belong to a person under 18 — including discrepancies in KYC documents, behavioural patterns inconsistent with adult users, or third-party reports — the account will be suspended immediately pending verification. Any deposits made to a suspended under-age account will be refunded in full, and no winnings generated during the account's active period will be paid out.
7.2 Parental and Guardian Controls
Parents and guardians who believe a minor may have created a 09dat account using false age information should contact [email protected] immediately. 09dat will investigate the report promptly, suspend the account during the investigation, and permanently close the account if the individual is confirmed to be under 18. We will work with the reporting parent or guardian to facilitate a refund of any deposited funds.
7.3 No Child-Directed Marketing
09dat does not direct any marketing communications, promotional content, or advertising toward individuals under the age of 18. Our promotional materials are designed for and distributed exclusively to verified adult audiences. We do not use platforms, channels, or targeting criteria that are primarily associated with audiences under the age of 18.
7.4 Inadvertent Collection
If 09dat becomes aware that personal data from a person under the age of 18 has been collected inadvertently, we will delete that data as promptly as possible and permanently close the associated account. If you are a minor and have created a 09dat account, please stop using the platform immediately and contact us so we can delete your account and data.
Strict 18+ Policy: 18+ 09dat operates an absolute minimum age requirement of 18 years. Gambling is not suitable for minors, and participation by persons under 18 is not permitted under any circumstances. If you are under 18, please do not attempt to register on this platform.
Under-18 Accounts Closed Immediately
Any account confirmed to belong to a person under 18 is permanently closed without appeal. Deposited funds are refunded; any winnings accrued are forfeited. This policy is non-negotiable and applied consistently across all regions including Bangladesh.
Report an Under-Age Account
If you suspect a minor is using the 09dat platform, contact [email protected] immediately. Reports are treated confidentially and investigated within 24 hours. Account suspension is applied as a precautionary measure during the investigation.
Responsible Gaming Link
For more detail on 09dat's age verification procedures, self-exclusion tools, and responsible gaming support resources available to Bangladesh players, please visit our Responsible Gaming page.
Policy Updates & Contact
09dat reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email at least 14 days before the updated policy takes effect.
8.1 How We Notify You of Changes
Material changes to this Privacy Policy will be communicated via email to the address registered to your 09dat account. The notification email will summarise the key changes in plain English and include a link to the full updated policy. For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), we will update the effective date at the top of this page without sending an individual notification email.
8.2 Reviewing the Current Policy
The most current version of this Privacy Policy is always available at https://09dat.app/privacy-policy. We recommend that registered players review this page periodically, particularly before making significant transactions. The effective date shown at the top of this page indicates when the current version entered into force.
8.3 Contacting 09dat About Privacy
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, want to report a data security concern, or need to report a suspected under-age account, please contact 09dat's support team using the details below. All privacy-related enquiries are handled by trained staff and treated as confidential.
Contact details:
- Email: [email protected] (plain text — not a clickable link)
- Subject line for privacy enquiries: "Privacy Policy Enquiry — [Your Topic]"
- Response time: Within 3 business days for general enquiries; within 30 days for formal privacy rights requests
- Support availability: 24/7, Bangladesh Standard Time (UTC+6)
- Language: English
8.4 Governing Language
This Privacy Policy is written in English. English is the sole authoritative language of this document. Any translation provided for convenience is non-binding, and in the event of any inconsistency between a translation and the English original, the English text shall prevail.
8.5 Relationship to Other Policies
This Privacy Policy should be read alongside the 09dat Terms & Conditions and Responsible Gaming Policy, all of which are available via the links in the footer of this page. Together, these three documents set out the full framework governing your use of the 09dat platform and the obligations of both parties.
Privacy Contact
For all privacy-related enquiries, email [email protected] with the subject line "Privacy Policy Enquiry". Our team responds within 3 business days and handles all privacy matters in strict confidence.
Policy Version Control
The effective date shown at the top of this page identifies the active version. Older versions of this Privacy Policy are available on request by emailing [email protected] — useful if you need to review the policy terms that applied during a specific account period.
Related Documents
This Privacy Policy is part of 09dat's wider legal framework. Also read our Terms & Conditions and Responsible Gaming policy for a complete picture of your rights and obligations as a 09dat player.
How 09dat Protects Your Privacy
Six core commitments that define how 09dat handles the personal data of every player across Bangladesh.
SSL Encrypted Sessions
Every connection between your device and 09dat is protected by TLS encryption. Your credentials, personal data, and transaction details are never visible to anyone who might intercept the connection between Dhaka, Chittagong, or anywhere else in Bangladesh.
Secure KYC Process
Identity documents submitted for KYC verification are encrypted, stored securely, and never shared with game providers or marketing partners. KYC is conducted solely to verify your identity and comply with legal obligations — not for profiling.
BDT Payment Privacy
09dat processes bKash, Nagad, and Rocket transactions with the minimum data necessary to complete each payment. We do not retain mobile banking PINs or full account credentials. Your payment data is used for transactions only — never for profiling.
Zero Data Sales
09dat has a strict no-sale policy for personal data. We do not sell, rent, or license any player information to third-party data brokers, advertising networks, or commercial partners. Your data is used only to operate the platform you registered for.
Defined Retention Limits
Every category of personal data 09dat holds has a clearly defined maximum retention period. We do not hold data indefinitely. At the end of each retention window, data is securely deleted or permanently anonymised — not simply archived.
Your Rights, Honoured
Access, rectification, erasure, portability, restriction, and objection rights are available to every 09dat player. Submit a request via email and our data protection team will respond within 3 business days and complete it within 30 days.
Play with Confidence on 09dat
Now that you've read our Privacy Policy, you know exactly how your data is protected. Explore the full 09dat platform — live cricket betting, Jackpot Bingo, slots, and live casino — all in BDT with full data privacy.
18+ For adults aged 18 and above only. Please gamble responsibly.