bb9 Privacy Policy — How We Handle Your Personal Data

1. Introduction

bb9 ("we", "us", or "our") operates the online gaming platform accessible at bb9.lat. This Privacy Policy describes how bb9 collects, uses, stores, shares, and protects personal data relating to registered players and visitors to the bb9 platform ("you" or "your"). It also sets out the rights you have in relation to your personal data and how you may exercise those rights. By registering an account or using the bb9 platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all personal data processed in connection with the bb9 platform, whether collected directly from you during registration and gameplay, obtained through your use of the platform's technical systems, or provided to us by third-party payment processors and KYC verification partners. bb9 is the data controller for personal data processed under this policy.

2. What Personal Data We Collect

bb9 collects personal data in the following categories. We collect only what is necessary for the specific purposes described in Section 3 of this policy. The categories and typical examples of data collected within each are as follows.

3. How We Use Your Personal Data

bb9 uses the personal data it collects for the following specific purposes. We process your data only where we have a valid legal basis for doing so, as described in Section 4 of this policy.

• Account creation and management: to register your account, verify your identity, link your mobile wallet, and maintain your account settings and preferences throughout your time as a bb9 player.
• Payment processing: to process deposits via bKash, Nagad, or Rocket; to verify that the payment source belongs to the registered account holder; and to process withdrawal requests to the same mobile wallet.
• KYC and age verification: to confirm that you meet the 21+ age requirement before permitting your first withdrawal, and to comply with our obligations to verify player identity and prevent the use of the platform by ineligible persons.
• Platform security and fraud prevention: to monitor account activity for signs of unauthorised access, fraud, collusion, money laundering, or exploitation of platform systems; and to take protective action where suspicious activity is detected.
• Responsible gaming support: to monitor gameplay patterns for indicators of problem gambling behaviour; to present session time reminders, deposit limit notifications, and responsible gaming resources where appropriate; and to process self-exclusion requests promptly and effectively.
• Customer support and dispute resolution: to respond to your queries, complaints, and support requests; to keep records of support interactions for quality assurance; and to investigate and resolve disputes relating to bets, payments, bonuses, or account access.

bb9 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated systems flag an account for review (for example, for potential fraud or bonus abuse), a member of the bb9 operations team will conduct a human review before any material action is taken on the account.

4. Legal Basis for Processing

bb9 processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows.

• Contractual necessity: processing that is required to fulfil our contract with you as a registered player — including account management, payment processing, game provision, and customer support.
• Legal obligation: processing required to comply with applicable law, including KYC and age verification requirements, anti-money laundering obligations, and record-keeping requirements imposed by relevant regulatory frameworks.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and system analytics — where these interests are not overridden by your fundamental privacy rights. bb9 has conducted balancing assessments for each processing activity relying on this basis.
• Consent: where we send optional marketing communications about new games, promotions, or special offers. You may withdraw consent at any time by contacting bb9 support or using the unsubscribe option in any marketing email.

5. Sharing Your Personal Data

bb9 does not sell or rent personal data. We share personal data with third parties only where this is necessary and proportionate, and only with parties who are contractually obligated to protect it. The categories of recipients are as follows.

• Payment processors: bb9 shares the minimum necessary transaction data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers are governed by their own privacy policies and operate under the Bangladesh Bank's Mobile Financial Services regulations.
• KYC and identity verification partners: bb9 uses specialist identity verification services to confirm that submitted identity documents are genuine. These partners process identity data solely for verification purposes and are not permitted to use it for any other purpose.
• Game and platform technology providers: bb9's game library is powered by third-party providers including Evolution Gaming, Pragmatic Play, and Spribe. These providers may process session data within their own systems to operate the games. bb9 ensures that data sharing agreements with providers contain appropriate data protection obligations.
• Law enforcement and regulatory authorities: bb9 may be required by applicable law, court order, or regulatory direction to disclose certain personal data to law enforcement agencies, financial intelligence units, or other competent authorities. bb9 will only comply with such requests where legally compelled to do so, and will notify affected players where permitted by law.

bb9 does not transfer your personal data outside of the systems and partner networks described above. Where data is transferred internationally (for example, to a game provider's servers outside Bangladesh), bb9 ensures that appropriate data protection safeguards are in place, including contractual obligations equivalent to those required under applicable data protection standards.

6. Cookies and Tracking Technologies

bb9 uses cookies and similar tracking technologies to operate the platform, maintain session continuity, and analyse usage patterns. The following types of cookies are used.

• Strictly necessary cookies: these are essential for the platform to function. They maintain your login session, remember your language preference, and enable the game interface to load correctly. These cookies cannot be disabled without breaking platform functionality.
• Analytics cookies: bb9 uses anonymised analytics to understand how players navigate the platform, which game categories are most visited, and where technical errors occur. This data is aggregated and does not identify individual players.
• Security cookies: used to detect and prevent fraudulent activity, including bot traffic, session hijacking attempts, and unusual login patterns. These cookies are strictly necessary for platform security and cannot be disabled.

bb9 does not use third-party advertising cookies or cross-site tracking pixels. If you wish to manage non-essential cookies, you may adjust your browser settings. Note that disabling analytics cookies will not affect your ability to play games or process transactions on bb9.

7. Data Retention

bb9 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide, though specific retention periods may vary depending on the nature of the data and the circumstances in which it was collected.

Account data (identity, contact, and KYC documents) is retained for the duration of the active account relationship and for a minimum of 5 years following account closure, to satisfy our legal obligations under applicable anti-money laundering and record-keeping requirements. Transaction records are retained for a minimum of 5 years from the date of the transaction. Gaming activity logs are retained for 2 years. Support interaction records are retained for 3 years from the date of the last interaction.

8. Data Security

bb9 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the bb9 platform; encryption of sensitive data fields (including identity document images and payment reference numbers) at rest in our databases; access controls that restrict personal data access to authorised bb9 personnel on a need-to-know basis; regular security assessments and penetration testing of the bb9 platform infrastructure; and incident response procedures that ensure prompt action in the event of a suspected data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bb9 will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and prevent recurrence. bb9 cannot guarantee absolute security — no online platform can — but we are committed to maintaining robust protections and responding swiftly to any security incident that affects your data.

9. Your Data Protection Rights

As a bb9 player, you have the following rights in relation to your personal data. bb9 will respond to all rights requests within 30 days of receipt. Where a request is complex or bb9 receives a high volume of requests, this period may be extended by a further 30 days — in which case bb9 will notify you of the extension and the reasons for it.

• 👁️ Right of AccessRequest a copy of the personal data bb9 holds about you, including what categories of data are held and for what purposes.
• ✏️ Right to RectificationRequest correction of inaccurate or incomplete personal data. For account details, you may update some information directly through your account settings.
• 🗑️ Right to ErasureRequest deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bb9's legal retention obligations described in Section 7.
• ⏸️ Right to RestrictionRequest that bb9 restricts processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• 📦 Right to Data PortabilityRequest a structured, machine-readable copy of personal data you have provided to bb9, where processing is based on your consent or on a contract with you.
• 🚫 Right to ObjectObject to processing of your personal data where bb9 relies on legitimate interests as its legal basis, including profiling for responsible gaming purposes. bb9 will stop processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact bb9's support team via live chat or by emailing [email protected]. bb9 will verify your identity before actioning any rights request. bb9 will not charge a fee for handling rights requests unless a request is manifestly unfounded, repetitive, or excessive — in which case a reasonable administrative fee may apply.

10. Children's Privacy and the 21+ Rule

bb9 is strictly an adult platform for persons aged 21 and above. bb9 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process and is repeated before any withdrawal is processed. If bb9 determines that personal data has been collected from a person under 21, it will immediately suspend the relevant account, delete the data to the extent permitted by its legal retention obligations, and decline to process any associated withdrawal requests. If you believe that a person under 21 has registered an account on bb9, please contact our support team immediately so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

bb9 may update this Privacy Policy from time to time to reflect changes in the way we process personal data, changes in applicable law, or improvements to our platform and practices. Where a change is material — meaning it significantly affects your privacy rights or the way we process your data — bb9 will provide advance notice via the mobile number or email address registered to your account, or by a prominent notice on the bb9 platform, at least 7 days before the change takes effect.

Non-material changes (for example, clarifications of existing language or formatting improvements) will take effect upon publication. The date at the top of this page will always reflect the date of the most recent update. We encourage you to review this Privacy Policy periodically. Continued use of bb9 after a change has taken effect constitutes acceptance of the updated policy.

12. Contact Us About Your Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bb9 processes your personal data, please contact our support team. Our 24/7 Bangla and English-speaking support team is available via the live chat feature on any page of the bb9 platform. You may also write to us at [email protected]. bb9 aims to acknowledge all privacy-related enquiries within 24 hours (Bangladesh Standard Time) and to provide a substantive response within 14 days.

bb9 takes all privacy complaints seriously. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to escalate your complaint to a relevant data protection authority. bb9 will always cooperate fully with any regulatory investigation and will provide affected players with appropriate guidance on how to exercise their rights effectively.