ba9 Privacy Policy

Section 1

Data We Collect

ba9 collects personal data from players through several channels: the account registration process, ongoing account usage, financial transactions, customer support interactions, and automated technical data generated by your device and browser when you access ba9.club. The categories of data ba9 collects are set out in the table below.

ba9 does not knowingly collect personal data from persons under 18 years of age. If ba9 becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account closed. Age verification at the point of registration is ba9's primary mechanism for preventing collection of data from underage individuals. 18+ only.

ba9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or data concerning health beyond what is strictly necessary for responsible gaming compliance purposes (for example, recording a player's self-exclusion request or deposit limit election).

Section 2

How We Use Your Data

ba9 uses the personal data it collects only for legitimate operational, legal, and safety purposes directly connected to the provision of a safe and enjoyable online gaming experience for players in Bangladesh. The primary purposes for which ba9 processes your data are as follows:

• Account management: Creating, maintaining, and securing your ba9 account; verifying your identity and age at registration and during KYC checks; enabling you to log in and access your account history.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment channels; maintaining accurate transaction records in Bangladeshi Taka (BDT); detecting and preventing payment fraud.
• Platform delivery: Delivering the ba9 casino games, live dealer tables, slots, and sports betting markets to you; maintaining game session continuity; storing your account balance and bet history accurately.
• Responsible gaming compliance: Monitoring gaming behaviour to identify potential signs of problem gambling; enforcing self-exclusion, deposit limits, session timers, and cooling-off periods that you or ba9 have applied to your account.
• Anti-fraud and security: Detecting and preventing fraudulent account activity, bonus abuse, money laundering, and use of the platform by prohibited persons; identifying and blocking access from multiple accounts registered to the same individual.
• Customer support: Responding to your queries, complaints, and disputes submitted via live chat or email; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Legal compliance: Fulfilling ba9's obligations under applicable laws and regulations, including anti-money laundering (AML) obligations, record-keeping requirements, and responding to lawful requests from competent authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and event-based communications (such as BPL cricket season promotions or Eid offers) to players who have opted in to receive marketing from ba9. Marketing communications can be turned off at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with ba9.club, identify technical issues, and improve the quality of the platform experience.

Section 3

Data Sharing & Third Parties

ba9 does not sell, rent, or trade your personal data to any third party for commercial purposes. ba9 shares player data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: ba9 shares the minimum transaction data required with mobile financial service providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) and associated Bangladeshi banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) to process your deposits and withdrawals. These providers process your financial data under their own privacy policies and are contractually bound to use it only for payment processing purposes.
• Game content providers: ba9 sources its casino games from international game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a session token or anonymised player identifier) necessary to deliver game content. They do not receive your full identity or financial data.
• Identity verification partners: ba9 uses trusted KYC and identity verification service providers to assist with age verification and document validation. These partners process your identity documents under strict confidentiality obligations and are not permitted to use your data for any purpose beyond the verification task.
• Fraud prevention and AML tools: ba9 may use third-party software tools to assist with automated fraud detection and anti-money laundering screening. Data shared with such tools is processed under data processing agreements that restrict use to the fraud/AML screening purpose only.
• Legal and regulatory authorities: ba9 will disclose player data to law enforcement agencies, regulatory bodies, or courts where ba9 is required to do so by applicable law, lawful court order, or other binding legal process. ba9 will notify you of such a disclosure where it is legally permitted to do so.
• Business transfers: In the event that ba9 undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to the privacy practices that would apply to their data following the transfer.

ba9 does not share your personal data with advertisers, data brokers, social media platforms, or any other third party for advertising targeting purposes. ba9's own promotional communications are sent directly by ba9 to players who have opted in — no third-party marketing platform receives your full identity data for this purpose.

Section 4

Cookies & Tracking Technologies

ba9.club uses cookies and similar tracking technologies to operate the platform reliably, keep you logged in during a session, remember your preferences, and understand how players navigate the site so that ba9 can continuously improve the experience. The categories of cookies used on ba9.club are described below.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that blocking strictly necessary or security cookies will impair your ability to use the ba9 platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

Section 5

Data Security & Storage

ba9 implements a layered security architecture to protect the personal data it holds about registered players. The measures ba9 has in place include, but are not limited to, the following:

• Transport encryption: All data transmitted between your browser or app and ba9.club is encrypted using TLS (Transport Layer Security) to prevent interception in transit.
• At-rest encryption: Sensitive data fields — including identity documents, payment details, and account credentials — are encrypted at rest in ba9's database infrastructure using strong encryption standards.
• Access controls: Access to player data within ba9's internal systems is restricted to staff members who require it for their specific job function. Access permissions are reviewed regularly and revoked promptly upon a staff member leaving ba9 or changing roles.
• Password hashing: Account passwords are never stored in plain text. ba9 uses industry-standard one-way hashing algorithms so that even ba9's own staff cannot read your password.
• Fraud monitoring: ba9 operates automated systems that monitor account activity in real time for signs of unauthorised access, unusual login locations, or suspicious transaction patterns. Alerts trigger immediate security review.
• Security reviews: ba9 conducts periodic internal security reviews of its data processing systems and infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event that ba9 becomes aware of a data security breach that is likely to result in a risk to your rights and freedoms, ba9 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. Notifications will be sent to the email address registered on your ba9 account.

ba9's servers are located in data centres that maintain physical security controls including restricted access, surveillance, and environmental protections. ba9 only uses server infrastructure providers that meet recognised security standards.

Section 6

Your Privacy Rights

As a registered ba9 player, you hold the following rights with respect to the personal data that ba9 holds about you. ba9 is committed to honouring these rights promptly and without requiring you to pay any fee for exercising them.

• Right of access: You have the right to request a copy of all personal data that ba9 holds about you. ba9 will provide this within 30 days of receiving your request in a clear, readable format.
• Right to rectification: If you believe that any personal data ba9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain data directly in your account profile settings.
• Right to erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected — you may request that ba9 delete your personal data. Note that ba9 may be required to retain certain data for legal compliance purposes (such as AML record-keeping) even after an erasure request is received.
• Right to restrict processing: You may request that ba9 temporarily restrict the processing of your personal data while a dispute about its accuracy or the legal basis for processing is being resolved.
• Right to object to marketing: You have the right to object at any time to ba9 using your personal data for direct marketing purposes. Upon receiving your objection, ba9 will stop sending marketing communications immediately.
• Right to data portability: Where ba9 processes your personal data on the basis of your consent or for performance of your account contract, and where processing is carried out by automated means, you may request that ba9 provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where ba9 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, contact ba9's support team via live chat on ba9.club or by emailing [email protected] (plain text — not a link). Please include your registered account username and a clear description of the right you wish to exercise. ba9 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

Section 7

Data Retention

ba9 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The general retention periods ba9 applies to the main categories of player data are set out below.

• Account and identity data: Retained for the duration of your active ba9 account and for a minimum of five years following account closure. This retention period reflects ba9's AML record-keeping obligations and the need to maintain records for potential dispute resolution.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction. Financial records may be retained for longer periods where required by applicable law or where a transaction is subject to an ongoing investigation.
• Gaming activity logs: Retained for the duration of your active account and for two years following account closure, unless a longer period is required in connection with a dispute or investigation.
• KYC and verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in accordance with anti-money laundering record-keeping requirements.
• Customer support records: Retained for two years from the date of the last interaction, or for the duration of any open dispute or complaint, whichever is longer.
• Marketing preference records: Retained for as long as your account is active, or until you opt out of marketing communications, at which point the opt-out record itself is retained indefinitely to ensure ba9 does not inadvertently contact you again in the future.
• Technical and analytical data (anonymised): Anonymised aggregated analytics data does not contain personal identifiers and is retained indefinitely for platform improvement purposes. Personal IP addresses and device identifiers used for security monitoring are deleted or anonymised after 12 months.

Upon expiry of the applicable retention period, ba9 will securely delete or anonymise the relevant personal data so that it can no longer be associated with you as an individual. Data held in backup systems will be overwritten in the normal course of ba9's backup rotation schedule.

Section 8

Policy Updates & Contact

ba9 reviews this Privacy Policy periodically and will update it when necessary to reflect changes in the platform's data processing practices, changes in applicable law, or to provide greater clarity to players about their data rights. When ba9 makes a material change to this Privacy Policy, it will notify registered players via email to their registered address and via a prominent notice on ba9.club at least seven days before the updated Policy takes effect.

The version date shown at the top of this Policy is the date on which the current version took effect. Players who continue to use the ba9 platform after the effective date of a revised Privacy Policy are deemed to have accepted the revised terms. If you do not agree with a material change to this Policy, you should contact ba9 support to discuss your options, which may include closing your account and requesting deletion of your data subject to the retention obligations described in Section 7.

For all privacy-related queries, data subject rights requests, or concerns about how ba9 handles your personal information, please contact ba9's support team through the following channels:

• Live chat: Available 24 hours a day, 7 days a week directly on ba9.club. Our support team typically responds within two hours.
• Email: [email protected] (plain text — not a link). Please include "Privacy Request" in your subject line and your registered username in the message body so that ba9 can locate your account promptly.

ba9 is committed to resolving privacy queries and data subject rights requests fairly and transparently. If you submit a privacy request and ba9 fails to respond within 30 days, or if you are not satisfied with ba9's response, you may seek further recourse through applicable consumer protection mechanisms available to you under the laws of Bangladesh.