Your Privacy Matters at 0bd9

1Introduction and Scope

This Privacy Policy describes how 0bd9 ("the Company", "We", "Us", "Our") collects, uses, stores, shares, and protects the personal information of individuals ("Player", "User", "You") who access or use the 0bd9 website located at https://0bd9.io (the "Platform") and any related services, games, betting markets, or customer support channels made available through the Platform.

This Privacy Policy applies to all users of the Platform, including registered account holders, players who have initiated but not completed registration, and visitors who browse the Platform without registering. By accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy is incorporated into and must be read alongside our Terms and Conditions, which are available at https://0bd9.io/terms-conditions, and our Responsible Gaming Policy, which is available at https://0bd9.io/responsible-gaming. In the event of any conflict between this Privacy Policy and the Terms and Conditions on matters relating to data privacy, this Privacy Policy takes precedence.

2Data Controller Information

For the purposes of this Privacy Policy, 0bd9 acts as the data controller in respect of the personal data collected from users of the Platform. As data controller, 0bd9 determines the purposes and means of processing your personal data.

If you have any questions about how 0bd9 processes your personal data, wish to exercise any of your data rights, or need to submit a formal data protection request, you may contact the 0bd9 Data Privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Privacy Request — [Your Registered Username]"
• Response Time: Data-related requests are acknowledged within 2 business days and resolved within 30 calendar days.
• Operating Hours: Support is available 24/7. Data privacy responses are handled during Bangladesh Standard Time (BST, UTC+6) business hours.

3Information We Collect

0bd9 collects personal information through several channels — directly from you when you register or interact with the Platform, automatically when you browse or play, and from third-party service providers involved in operating the Platform. The categories of personal data we collect are described below.

3.1 Registration and Account Data

When you create an account on the 0bd9 Platform, we collect the following information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (used to verify that you meet the 21+ age requirement)
• Email address (used for account communications and verification)
• Mobile phone number (used for account verification and security alerts)
• Username and password (stored in hashed, encrypted form — never in plain text)
• Country and city of residence (used for market compliance and localisation)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and collect the following identity documents:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within three months)
• Proof of payment method ownership (screenshot or statement from bKash, Nagad, Rocket, Upay, or bank account)
• Selfie or live photo for biometric identity matching (where required by our KYC verification partner)

3.3 Financial Transaction Data

When you make deposits or withdrawals, we collect:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer)
• Transaction amounts in Bangladeshi Taka (৳ BDT)
• Transaction timestamps and reference numbers
• Partial payment account identifiers (e.g., last four digits of account number) — full payment credentials are handled by the payment processor, not stored by 0bd9

3.4 Gameplay and Betting Activity Data

• Games played, bets placed, bet amounts, outcomes, and winnings
• Session start and end times, session duration, and session frequency
• Bonus offers claimed and wagering requirement progress
• Responsible gaming settings configured on your account (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser type and version
• Referring URL (the web page you visited before arriving at 0bd9, if applicable)
• Pages visited on the Platform, time spent on each page, and click-path data
• Cookie identifiers and session tokens (see Section 9 for full cookie details)

3.6 Customer Support Communications

When you contact our support team via live chat or email, we collect and retain a record of those communications, including the content of messages, timestamps, and the nature of the query or complaint. These records are used to provide support, resolve disputes, and improve our service quality.

4How We Use Your Information

0bd9 uses the personal information we collect for the following purposes. Each purpose is tied to a specific legal basis for processing, which is described in Section 5.

5Legal Basis for Processing

0bd9 processes your personal data only where a valid legal basis exists for doing so. The four legal bases we rely on are described below:

Contract Performance: Much of the processing we carry out is necessary to perform the contract between you and 0bd9 — specifically, to create and manage your account, process financial transactions, and deliver the betting and gaming services you have signed up to use. Without this processing, we cannot provide the Platform's core services to you.

Legal Obligation: Certain processing activities are required by law, including age verification, anti-money laundering (AML) checks, KYC identity verification, and the maintenance of transaction records for the legally mandated retention period. We have no discretion to opt out of these processing activities.

Legitimate Interests: Some processing activities are carried out on the basis of 0bd9's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, responsible gaming analytics, and aggregate service improvement analytics. Where we rely on legitimate interests, we have carried out a balancing assessment to confirm that our interests do not outweigh your privacy rights.

Consent: Where we rely on your consent to process personal data — specifically for sending promotional and marketing communications — that consent is freely given, specific, and withdrawable at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

6How We Share Your Information

0bd9 does not sell your personal data. We share your information only with the categories of third parties listed below, and only to the extent necessary for the stated purpose. All third-party data processors engaged by 0bd9 are bound by contractual data processing agreements that require them to protect your data to the same standard as 0bd9.

Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, we share the minimum necessary transaction data with the relevant payment provider to process that transaction. Payment providers receive your payment account identifier and the transaction amount. They do not receive your full account profile, gameplay history, or other personal data.

KYC and Identity Verification Providers: To fulfil our age verification and anti-money laundering obligations, we work with specialist third-party KYC verification partners. These providers receive identity documents and registration data solely for the purpose of performing identity checks. KYC providers are required to delete submitted documents after the verification process is complete, subject to their own legal retention obligations.

Game Software Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player identifiers to deliver game content. These providers do not receive your full name, contact details, or financial information.

Fraud Prevention and Security Partners: We may share technical data (IP addresses, device fingerprints, session patterns) with fraud detection service providers to identify and prevent fraudulent activity on the Platform.

Legal and Regulatory Authorities: In the event that we receive a lawful instruction or court order from a relevant authority requiring disclosure of player data, we will comply with that instruction to the extent required by law. We will notify you of any such disclosure request unless prohibited by the applicable legal instrument.

7Data Retention

0bd9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods for the main categories of data we hold are set out below:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised or aggregated data derived from your account activity may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

8Data Security

0bd9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 0bd9 Platform is encrypted in transit using industry-standard TLS 1.2 or TLS 1.3 protocols.
• Password Hashing: Account passwords are never stored in plain text. We apply a strong cryptographic hashing algorithm with salt to all stored passwords, ensuring that even in the event of a data breach, raw passwords cannot be recovered.
• Access Controls: Access to personal data within 0bd9's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access events are logged and audited.
• Intrusion Detection: 0bd9 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular Security Assessments: Our platform infrastructure undergoes periodic security assessments and vulnerability scanning to identify and remediate potential weaknesses.
• Data Segmentation: Personal data, financial records, and gameplay logs are stored in segmented environments with distinct access controls, reducing the risk of broad exposure in a security incident.

While 0bd9 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact our support team immediately via live chat or at [email protected].

9Cookies and Tracking Technologies

0bd9 uses cookies and similar tracking technologies (collectively, "cookies") to operate the Platform, personalise your experience, maintain session security, and gather analytics data. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — for example, whether you are logged in, your language preference, or items in a shopping basket. Cookies themselves do not contain executable code and cannot access other files on your device.

Categories of Cookies We Use:

Managing Cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. Disabling strictly necessary or fraud prevention cookies may prevent you from logging in or using certain features.

Instructions for managing cookies in common browsers can be found in your browser's help documentation. Commonly used browsers include Google Chrome, Mozilla Firefox, Microsoft Edge, and Apple Safari.

10Your Data Rights

As a user of the 0bd9 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Registered Username]". We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data that 0bd9 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to legal retention obligations — we cannot delete data that we are required by law to retain (e.g., financial transaction records, KYC documents, self-exclusion records).
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your data while a correction request or objection is being assessed.
• Right to Data Portability: For data processed on the basis of contract or consent, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11Children and Minors

The 0bd9 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and accounts are suspended pending KYC verification if there is any reason to believe that the account holder may be under the minimum age.

If 0bd9 becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — that data will be deleted immediately, the account will be permanently closed, and any funds held in the account will be returned to the payment source after identity verification of the responsible adult.

12Third-Party Links and Services

The 0bd9 Platform may contain references to or integrations with third-party services, including game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment processors (such as bKash, Nagad, Rocket, and Upay). These third-party services operate under their own privacy policies and data handling practices, which are independent of 0bd9.

0bd9 is not responsible for the privacy practices or the content of any third-party services accessed through or in connection with the Platform. We encourage you to review the privacy policies of any third-party service providers with whom you interact in the course of using the Platform. The inclusion of a third-party service on the Platform does not constitute an endorsement of that party's privacy practices.

Where 0bd9 engages third-party data processors (as opposed to independent data controllers), we ensure that appropriate data processing agreements are in place requiring those processors to handle your data in accordance with this Privacy Policy and applicable data protection law.

13Changes to This Policy

0bd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our business. When we make material changes to this Privacy Policy, we will notify registered users by email to the address associated with their account and by displaying a prominent notice on the Platform for a period of not less than 14 days prior to the changes taking effect.

The "Effective Date" shown at the top of this Privacy Policy indicates the date on which the current version came into force. We recommend that you review this Privacy Policy periodically to stay informed of how we protect your personal data. Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you do not agree to the updated Privacy Policy, you must discontinue your use of the Platform and may request that your account be closed and your data deleted (subject to legal retention obligations) by contacting [email protected].

14Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to raise a privacy concern, please use the following contact details. All privacy-related correspondence is handled by the 0bd9 Data Privacy team.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line Format: "Data Privacy Request — [Your Registered Username]"
• Response Time: Acknowledgement within 2 business days; full resolution within 30 calendar days
• Live Chat: Available 24/7 via your account dashboard for general privacy queries
• Operating Timezone: Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise or the data you wish to access, correct, or delete. Providing complete information at the outset helps our team process your request as quickly as possible.