Privacy Policy – 9ltd Online Casino Bangladesh

1. Introduction & Scope

9ltd ("the Platform", "we", "us", "our") is an online casino and sports betting service operating under the brand name 9ltd and accessible at https://9ltd.app. We provide cricket betting, live casino games, slot titles, and fishing games primarily to players based in Bangladesh, with transactions supported in Bangladeshi Taka (BDT) and Indian Rupees (INR).

This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, and transfer the personal data of users of the 9ltd platform ("you", "your", "the Player"). We are committed to handling all personal data with the highest degree of care, transparency, and security. The principles applied in this Policy are consistent with internationally recognised standards for data protection and privacy.

This Policy covers all data processing activities conducted by 9ltd in connection with:

The registration and maintenance of player accounts on the 9ltd platform.
The processing of financial transactions including deposits via bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and Dutch-Bangla Bank.
The delivery and improvement of casino games, sports betting products, and customer support services.
Compliance with anti-money laundering (AML) obligations and Know Your Customer (KYC) verification requirements.
Marketing communications, where you have provided explicit consent to receive them.
Analytics and platform performance monitoring used to improve the 9ltd service.

This Policy does not apply to third-party websites, game studios, or payment processors that may be accessible through or in connection with the 9ltd platform. We encourage you to review the privacy policies of those third-party services independently, as their data practices are governed by their own policies and not by this document.

2. Data We Collect

9ltd collects personal data through several channels, including data you provide directly during registration and account use, data collected automatically when you access our platform, and data received from third-party verification services. The categories of data we collect are described below.

Data Category	Specific Data Points	Collection Method
Registration Data	Full legal name, date of birth, email address, mobile number, residential address, preferred currency (BDT/INR), username	Provided by you at account registration
Identity Verification (KYC)	National Identity Card (NID) number and scan, passport number and scan, proof of address documents, selfie or photo for liveness check	Provided by you during the KYC verification process
Financial Data	Deposit and withdrawal transaction records, payment method identifiers (bKash/Nagad mobile numbers, bank account references), transaction amounts in BDT or INR, transaction timestamps	Collected automatically when you conduct transactions on the platform
Gameplay Data	Game sessions played, bet amounts, win/loss records, game titles accessed, session duration, wagering history	Collected automatically during platform use
Technical Data	IP address, browser type and version, device type and operating system, screen resolution, referring URL, session identifiers, cookie data	Collected automatically via server logs and cookies
Communications Data	Support ticket content, email correspondence with [email protected], chat transcripts, feedback submissions	Collected when you contact the 9ltd support team
Marketing Preferences	Consent status for promotional emails, preferred communication frequency, promotional offer interaction history	Recorded when you opt in or out of marketing communications

          Sensitive Data Notice: 9ltd does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information. KYC identity documents are collected solely for the purpose of age and identity verification as required for responsible gaming compliance. These documents are stored securely and are not used for any other purpose.
        

3. How We Use Your Data

9ltd processes personal data only for specific, legitimate purposes directly related to the operation of the platform and the delivery of services to our players. We do not process personal data in ways that are incompatible with the purposes listed below. The legal basis for each processing activity is identified alongside the purpose.

Account Management: To create, maintain, and administer your 9ltd player account, process your login sessions, and apply account-level settings such as deposit limits and self-exclusion preferences. Legal basis: performance of contract.
Identity Verification (KYC): To verify your age (18+), confirm your identity, and satisfy our Know Your Customer obligations. Underage gambling prevention is a core compliance requirement and data processed for this purpose is handled with the utmost care. Legal basis: legal obligation and legitimate interest.
Payment Processing: To process deposits and withdrawals in BDT and INR via bKash, Nagad, Rocket, Upay, and bank transfer partners. Transaction data is retained for financial record-keeping and dispute resolution purposes. Legal basis: performance of contract.
Fraud Prevention & AML Compliance: To detect and prevent fraudulent activity, money laundering, and other financial crimes. Transaction patterns, IP data, and account behaviour may be analysed for anomalies. Where legally required, suspicious activity may be reported to appropriate authorities. Legal basis: legal obligation and legitimate interest.
Customer Support: To respond to your support queries, process complaints, and provide account-related assistance through our support channels. Legal basis: performance of contract.
Platform Improvement: To analyse aggregated gameplay and usage data in order to improve the 9ltd platform, fix technical issues, optimise game performance, and enhance the overall player experience. Legal basis: legitimate interest.
Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, apply self-exclusion restrictions, enforce deposit limits, and proactively reach out to players displaying concerning patterns. Legal basis: legal obligation and legitimate interest.
Marketing Communications: To send promotional emails, bonus notifications, and platform updates to players who have explicitly opted in to receive such communications. You may withdraw your consent at any time by contacting [email protected]. Legal basis: consent.
Legal Compliance: To comply with applicable laws, respond to lawful requests from authorities, and maintain financial records for the required statutory retention periods. Legal basis: legal obligation.

No Automated Decision-Making: 9ltd does not make decisions that produce significant legal effects on individual players solely through automated processing without human review. Where automated tools are used to flag accounts for fraud or responsible gaming review, a member of the 9ltd compliance or support team reviews the flagged case before any material action is taken.

4. Data Sharing & Third Parties

9ltd does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We only share personal data with third parties in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment Processors: When you make a deposit or request a withdrawal, we share necessary transaction details with the relevant payment service provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, or Dutch-Bangla Bank — solely to complete the transaction. These providers operate under their own privacy policies and data security standards.
Identity Verification Providers: KYC document verification may be facilitated through third-party identity verification services. These providers process your identity documents solely for verification purposes under strict data processing agreements with 9ltd.
Game Studios & Content Providers: Casino game content on 9ltd is provided by licensed studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These studios may receive technical session data (such as player session tokens) to operate their game engines. They do not receive your full personal profile or payment data.
Technology & Infrastructure Providers: 9ltd uses cloud hosting, content delivery, and analytics service providers to operate the platform. These providers access data only in their capacity as data processors acting on 9ltd's instructions and under binding data processing agreements.
Legal & Regulatory Authorities: 9ltd may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or lawful regulatory request. We will notify affected players of such disclosures where legally permitted.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 9ltd business, personal data held by 9ltd may be transferred to the acquiring entity. Players will be notified of any such transfer and of any change to this Privacy Policy that results from it.

Data Processing Agreements: All third-party service providers who process personal data on behalf of 9ltd are required to enter into formal data processing agreements that obligate them to handle your data securely, use it only for the specified purpose, and comply with applicable data protection standards. 9ltd conducts due diligence on all third-party processors before engaging their services.

5. Cookies & Tracking Technologies

9ltd uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the platform. Cookies are small text files stored on your device by your browser when you visit the 9ltd website. Below is a plain-English explanation of the cookies we use and their purpose.

Cookie Type	Purpose	Retention
Essential / Session Cookies	Required for the platform to function. Maintain your login session, remember your currency preference (BDT/INR), and keep your account secure during an active session.	Session duration (deleted on browser close)
Functional Cookies	Remember your preferences such as language settings, game display options, and recently played titles so you don't have to reset them each visit.	Up to 12 months
Analytics Cookies	Collect aggregated, anonymised data about how players navigate the 9ltd platform — which pages are visited most, where users drop off, and how long sessions last. Used purely for platform improvement.	Up to 24 months
Security Cookies	Help detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts by fingerprinting unusual session behaviour patterns.	Up to 6 months

You can control cookie settings through your browser's privacy settings. Please note that disabling essential session cookies will prevent you from logging in to your 9ltd account and using the platform. Disabling functional cookies will mean that your preferences are not saved between sessions. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to identify and fix performance issues.

9ltd does not use cookies for cross-site advertising, affiliate tracking beyond platform attribution, or for building advertising profiles to be sold to third parties. Our use of tracking technologies is strictly limited to the purposes described in this section.

6. Data Retention Periods

9ltd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes and enforce agreements. The specific retention periods applied to each category of data are as follows:

Account and Registration Data: Retained for the lifetime of your active account. Following voluntary account closure, account data is retained for a further period of five years to meet anti-money laundering record-keeping requirements, after which it is securely deleted.
KYC Identity Documents: Retained for a minimum of five years from the date of verification, or longer where required by applicable law or ongoing investigation. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
Financial Transaction Records: Retained for a minimum of five years from the date of each transaction. This retention period applies to all deposit and withdrawal records regardless of the payment method used (bKash, Nagad, Rocket, bank transfer, etc.).
Gameplay and Betting History: Retained for a period of three years from the date of each session. Aggregated and anonymised gameplay statistics may be retained indefinitely for platform analytics purposes.
Customer Support Communications: Retained for a period of two years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is fully resolved.
Marketing Preference Data: Retained until you withdraw your consent for marketing communications. A record of consent and withdrawal is retained for an additional one year after withdrawal for compliance audit purposes.
Technical and Log Data: Server log data and IP address records are retained for a period of 12 months and then automatically purged from active systems.

            Dormant Account Data: If your 9ltd account has had no login activity for 12 consecutive months, it is classified as dormant. Dormant accounts are subject to a data minimisation review, after which non-essential preference and marketing data is deleted. Core account data, transaction records, and KYC documentation are retained for the statutory periods regardless of account activity status.
          

7. Data Security Measures

SSL Encryption

All data transmitted between your browser and the 9ltd platform is protected by TLS/SSL encryption. Data in transit is never accessible in plain text. The 9ltd website uses HTTPS throughout, including during account login and payment processing.

Secure Data Storage

Personal data and KYC documents are stored on encrypted servers with access controls that restrict viewing to authorised personnel only. Database encryption ensures that even in the event of a system breach, raw data remains unreadable without the appropriate decryption keys.

Access Controls

Access to personal data within the 9ltd organisation is restricted on a strict need-to-know basis. Staff who handle player data are trained in data protection practices. All internal access to sensitive data is logged and auditable.

Vulnerability Testing

9ltd conducts regular security assessments including vulnerability scanning and penetration testing of its platform infrastructure. Identified vulnerabilities are remediated on a priority basis with critical issues addressed within defined SLA timeframes.

Breach Notification

In the unlikely event of a personal data breach that poses a risk to affected players, 9ltd will notify impacted account holders without undue delay. Notifications will be sent to the email address registered on your account and will include details of the breach and the steps being taken to address it.

Password Security

9ltd stores player passwords using industry-standard one-way hashing algorithms. Plain-text passwords are never stored in the 9ltd database. You are responsible for maintaining the confidentiality of your account credentials. 9ltd support staff will never ask you to share your password.

While 9ltd takes all reasonable and practical measures to protect your personal data, no online system can guarantee absolute security. You acknowledge that the transmission of data over the internet involves inherent risks outside the control of any single platform operator. Should you suspect that your 9ltd account has been compromised, please contact [email protected] immediately.

8. Your Privacy Rights

As a player on the 9ltd platform, you hold a number of rights in relation to your personal data. 9ltd is committed to honouring these rights within a reasonable timeframe. To exercise any of the rights described below, please submit a written request in English to [email protected] from the email address registered on your 9ltd account.

Right to Access

You have the right to request a copy of the personal data 9ltd holds about you. We will provide this in a structured, readable format within 30 days of a verified request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders may update basic contact details directly from within their account settings.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data (e.g., KYC and transaction records) for statutory periods.

Right to Restrict Processing

You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified by our team.

Right to Data Portability

You have the right to receive the personal data you have provided to 9ltd in a commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider of your choosing.

Right to Object

You may object to 9ltd processing your personal data for marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interest where you believe your individual rights and freedoms override that interest.

Withdraw Marketing Consent

Where you have consented to receiving marketing communications from 9ltd, you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Account Closure & Self-Exclusion

You have the right to close your 9ltd account at any time. If closure is for responsible gaming reasons, self-exclusion safeguards can be applied. Visit our Responsible Gaming page for full details.

Response Timeframe: 9ltd will acknowledge all data rights requests within 5 business days (Bangladesh Standard Time) and aim to fulfil verified requests within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline. There is no charge for exercising your privacy rights in most circumstances. If a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, with written explanation provided.

9. Children & Minors

9ltd is strictly an adults-only platform. The 9ltd service is intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal data from any person under the age of 18. If we become aware that a minor has created an account or provided personal data on the 9ltd platform, we will immediately close the account, delete any associated personal data, and reverse any financial transactions to the extent possible.

As part of our KYC verification process, all players are required to submit proof of identity that confirms they are 18 or older before any withdrawal can be processed. This age verification step is a central component of our responsible gaming programme and our commitment to preventing underage gambling among players in Bangladesh and across South Asia.

Parents and guardians who believe that a minor has accessed the 9ltd platform using their details or independently created an account should contact [email protected] immediately. 9ltd will investigate and take appropriate action without undue delay. We also strongly encourage the use of parental control software on devices that may be accessible to minors in the household.

18+ Only — No Exceptions: Gambling is for adults aged 18 and above only. If you are under 18, you are not permitted to use the 9ltd platform. If you are 18 or older and are concerned that a minor in your household may be accessing gambling sites, please refer to the guidance on our Responsible Gaming page for recommended parental control resources.

10. Policy Updates & Contact

9ltd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this document. For significant changes that affect how we use your personal data in a materially different way, we will also notify active account holders by email at the address registered on their 9ltd account.

We encourage all 9ltd players to review this Privacy Policy periodically. The current and authoritative version of this Policy is always available at https://9ltd.app/privacy-policy. Your continued use of the 9ltd platform following publication of an updated Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 9ltd holds about you, please contact our support team in English:

Data Enquiries: For privacy-related requests including data access, rectification, erasure, or to withdraw marketing consent, write to with the subject line "Privacy Request — [Your Username]". Include your registered email address and a brief description of your request. Our support team operates 24 hours a day, 7 days a week, and responds in English. Please allow up to 5 business days for initial acknowledgement of data-related enquiries.

This Privacy Policy is published in English and the English version is the binding version. Translations, if any are provided, are for convenience only and the English text governs in all cases of interpretation or dispute.

9ltd Privacy Policy — Your Data, Your Rights