9bit Privacy Policy

1.1 This Policy applies to all personal data processed by 9bit in connection with the operation of the https://9bit.asia platform and any related services made available to players based in Bangladesh and other jurisdictions where the platform is accessible.

1.2 This Policy should be read alongside the 9bit Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Where this Policy and the Terms & Conditions address the same subject matter, the Terms & Conditions shall prevail with respect to the legal relationship between you and 9bit.

1.3 This Policy applies to data collected via the 9bit website, any associated mobile-optimised web interface, and any communications you have with the 9bit customer support team, including email correspondence sent to [email protected].

1.4 9bit may update this Policy from time to time. The current version is always available at https://9bit.asia/privacy-policy. Material changes will be notified to registered players through the platform or by email where reasonably practicable.

2.1 9bit collects the following categories of personal data from players. The specific data points collected in each category are outlined in the table below:

2.2 9bit does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a KYC document submitted by a player incidentally contains such information (for example, a national ID photograph). In such cases, the sensitive data is not extracted or stored separately and is processed only to the extent necessary for identity verification.

3.1 9bit collects personal data through the following means:

• Direct registration: When you create a 9bit account, you provide your name, contact details, date of birth, and preferred payment method directly through the registration form.
• KYC submission: When you submit identity documents to complete account verification, we receive and store those documents and the information they contain.
• Transaction processing: When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we receive transaction confirmation data from the relevant payment processor.
• Platform interaction: Our systems automatically log technical and usage data when you browse the 9bit platform, including pages visited, games launched, bets placed, and time spent on each section.
• Customer support contact: When you contact our support team at [email protected], we collect and retain the content of that communication along with your account details and any attachments you provide.
• Cookies and similar technologies: Our platform uses cookies and similar tracking technologies to maintain session state, remember preferences, and collect aggregated analytics data. See Section 7 for full details.

3.2 9bit does not purchase personal data from third-party data brokers. We do not collect personal data from social media platforms unless you have explicitly connected a social account to your 9bit profile (where this feature is available).

4.1 9bit uses your personal data for the following purposes:

• Account creation and management: To register your account, maintain your account profile, and provide you with access to the 9bit platform and its features.
• Identity and age verification: To verify that you are who you say you are and that you meet the 21+ age requirement. This is a mandatory step before any withdrawal is processed.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method in Bangladeshi Taka.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, identity theft, and other illegal activities on the platform.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour, and to enforce responsible gaming measures such as deposit limits and self-exclusion requests.
• Customer support: To respond to your support enquiries, resolve disputes, and manage formal complaints submitted to [email protected].
• Platform improvement: To analyse aggregated usage data and improve the performance, features, and user experience of the 9bit platform.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, record-keeping requirements, and any lawful requests from competent authorities.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may opt out at any time.

4.2 9bit does not use automated decision-making or profiling that produces significant legal effects on players, except where automated fraud detection systems flag an account for review. In such cases, a human review is conducted before any account restriction or closure action is taken.

5.1 9bit processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, KYC obligations, and any lawful order from a competent authority in Bangladesh or another applicable jurisdiction.
• Legitimate interests: Processing carried out in pursuit of 9bit's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your data for marketing communications, personalised offers, and non-essential cookies — conducted only where you have provided clear, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 9bit does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: When you make a deposit or withdrawal, we share the minimum necessary transaction data with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to execute the transaction. These providers operate under their own privacy policies and are independently responsible for data processed within their own systems.
• Game providers: When you play a casino game provided by a third-party studio (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, or others), your gameplay session data is processed by the game provider's platform. We share only the session token and staking data required to run the game; identifiable personal data beyond a session identifier is not shared with game providers.
• Identity verification services: We may use third-party KYC verification services to assist in confirming the authenticity of identity documents. These services are contractually bound to process data only for the purposes of verification and to apply appropriate security standards.
• Fraud prevention and security services: 9bit may share technical data (IP addresses, device fingerprints, transaction patterns) with third-party fraud detection services to assist in identifying and blocking fraudulent activity.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request.
• Business transfers: In the event of a merger, acquisition, or asset sale involving 9bit, personal data held by 9bit may be transferred to the acquiring entity. Players will be notified of any such transfer in advance where reasonably practicable.

6.2 All third-party service providers with whom 9bit shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific service they are contracted to provide.

7.1 The 9bit platform uses cookies and similar tracking technologies (collectively, "cookies") to provide a functional, secure, and personalised experience. A cookie is a small text file placed on your device when you visit a website.

7.2 9bit uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in while you navigate between pages, and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations. Disabling these cookies may affect the functionality of the platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify popular features, detect usability issues, and improve the overall user experience. These cookies do not identify you personally.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of marketing campaigns. These cookies are only activated with your consent.

7.3 You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the 9bit platform. For detailed guidance on managing cookies in your specific browser, please consult your browser's help documentation.

8.1 9bit retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including all legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active account and for a period of at least five years following account closure, to meet anti-money laundering and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC documents: Retained for five years following account closure or the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the most recent interaction in a support thread, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for as long as the consent is active plus three years following withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical / log data: Retained for 12 months on a rolling basis, after which it is aggregated and anonymised for analytics purposes or deleted.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised so that it can no longer be associated with any identifiable individual. 9bit does not retain personal data indefinitely.

9.1 9bit applies industry-standard technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Key security measures include:

• Encryption in transit: All data transmitted between your browser or device and the 9bit platform is encrypted using TLS 1.2 or higher. The padlock symbol displayed in your browser confirms this connection is active.
• Encryption at rest: Personal data and financial records stored on 9bit servers are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised 9bit personnel who require it to perform their role. All staff with access to personal data operate under confidentiality obligations.
• Two-factor authentication: 9bit offers two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an extra layer of security to your login credentials.
• Security monitoring: 9bit operates continuous security monitoring to detect and respond to suspicious access attempts, unusual transaction patterns, and potential data breaches.
• Incident response: In the event of a data breach affecting your personal data, 9bit will notify affected players and relevant authorities as required by applicable law without undue delay.

9.2 While 9bit takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. Players are strongly encouraged to use a unique, strong password for their 9bit account and to enable 2FA. Never share your login credentials with anyone, including individuals claiming to be 9bit staff. 9bit will never ask for your password by email, chat, or phone.

10.1 As a 9bit player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered account username, the right you wish to exercise, and a clear description of your request. 9bit will acknowledge your request within 72 hours and aim to fulfil it within 30 days.

10.2 Where a request cannot be fulfilled in full — for example, because fulfilling it would conflict with a mandatory legal retention obligation — 9bit will explain the reason in writing and fulfil the request to the maximum extent possible.

10.3 9bit does not charge a fee for processing data rights requests submitted in good faith. Where requests are manifestly unfounded or excessive, 9bit reserves the right to charge a reasonable administrative fee or refuse to act, and will inform you of this decision in writing.

11.1 The 9bit platform is strictly intended for adults aged 21 and above. 9bit does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Registration on the platform requires confirmation that the registering individual is at least 21 years of age.

11.2 As part of our KYC process, 9bit verifies the age of players prior to authorising withdrawals. Where 9bit has reasonable grounds to suspect that an account is held by an individual under 21, the account will be suspended pending age verification and any balance may be withheld pending the outcome of that review.

11.3 If you believe that a minor has registered on the 9bit platform or that personal data of a minor has been inadvertently collected, please contact [email protected] immediately. 9bit will investigate and take appropriate action, including erasure of any data confirmed to relate to a minor, as a matter of priority.

12.1 9bit reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy is always available at https://9bit.asia/privacy-policy. The "Effective" date at the top of this document reflects the date on which the current version came into force.

12.2 Where changes to this Policy are material — meaning they significantly affect the way 9bit collects or uses your personal data, or meaningfully reduce your rights — 9bit will provide advance notice to registered players via the platform notification system or by email to the address registered on your account, no fewer than 14 days before the updated Policy takes effect.

12.3 Your continued use of the 9bit platform following the effective date of any revised Policy constitutes your acceptance of that revised Policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting [email protected] prior to the effective date of the revised Policy.

12.4 Minor changes — such as corrections to typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without advance notice. The effective date will be updated to reflect the date of any such revision.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 9bit handles your personal data, please contact our Data Support team using the details below. All correspondence must be in English.

13.2 9bit takes all privacy-related complaints seriously. Upon receiving a complaint, we will acknowledge receipt within 72 hours, investigate the matter thoroughly, and provide a substantive response within 30 calendar days. Where the matter is complex and requires additional time, we will notify you of the expected resolution timeline.

13.3 If you are not satisfied with the outcome of your complaint after engaging with the 9bit Data Support team, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 9bit will cooperate fully with any such regulatory investigation.

13.4 For general platform support queries unrelated to data protection — including account access issues, deposit and withdrawal queries, and game-related questions — please contact the standard customer support team at [email protected] with a description of your issue.