9ltd Privacy Policy — How We Handle Your Personal Data
At 9ltd, protecting the personal data of our players across Bangladesh is a responsibility we take seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and stored, who we share it with, and the rights you hold over your own data. Please read this document carefully before using the 9ltd platform.
Six Core Privacy Principles at 9ltd
Every decision 9ltd makes about personal data is guided by the following principles. These are not aspirational statements — they are operational commitments reflected in our systems and processes.
Data Minimisation
9ltd collects only the personal data that is strictly necessary for the purposes for which it is being processed. We do not collect data speculatively or for purposes that have not been clearly defined and communicated to you.
Security by Default
All personal data stored and transmitted on the 9ltd platform is protected using industry-standard SSL/TLS encryption. Access to player data within the 9ltd organisation is restricted on a strict need-to-know basis with role-based permissions.
Transparency
We tell you clearly what data we collect, why we collect it, and who we share it with — before we collect it. There are no hidden data practices at 9ltd. This Privacy Policy is written in plain English so every player in Bangladesh can understand it.
Your Control
You have the right to access, correct, export, and request deletion of your personal data at any time. 9ltd provides clear mechanisms to exercise these rights via your account settings or by contacting [email protected] directly.
Limited Retention
Personal data is kept only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Once the retention period expires, data is securely deleted or anonymised.
No Data Selling
9ltd does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing platforms under any circumstances. Your data is used solely to operate and improve the 9ltd platform and to fulfil our legal obligations.
Table of Contents
This Privacy Policy is issued by 9ltd, the operator of the online betting and casino platform accessible at 9ltd.io (the "Platform"). Throughout this document, "9ltd", "we", "us", and "our" refer to the Platform operator. "You" and "your" refer to any individual who accesses, registers on, or interacts with the Platform in any capacity.
9ltd operates primarily to serve players in Bangladesh, providing sports betting markets — including cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), American football, football, and kabaddi — alongside a full live casino powered by Evolution Gaming and Pragmatic Play, and a library of RNG slot titles.
For questions about this Privacy Policy or your personal data, you may contact our Data Support team at [email protected]. Our support team is available 24/7 in English (BST, UTC+6).
9ltd collects personal data in the following categories. We collect only what is necessary for the stated purposes:
Identity Data: Full legal name, date of birth, gender, and national identity information (National Identity Card number, passport number, or driving licence number) provided during registration or KYC verification.
Contact Data: Mobile phone number, email address, and residential address (including city, district, and postal code) in Bangladesh.
Financial Data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, and bank account details (account number, bank name, branch) for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other supported Bangladeshi banks. We do not store full card numbers where card payments are processed — these are handled by PCI-DSS-compliant payment processors.
Transaction Data: Records of all deposits made to your 9ltd account, all withdrawals requested and processed, all bets placed, all casino game rounds played, bonus credits received, and wagering activity — including amounts in BDT, timestamps (BST), and outcomes.
Technical Data: IP address, browser type and version, device type and operating system, screen resolution, session duration, pages visited, features accessed, and referring URL. This data is collected automatically when you access the Platform.
KYC Documentation: Copies of identity documents, proof of address documents, and proof of payment method documents submitted as part of the KYC verification process.
Communications Data: Records of all communications between you and 9ltd support — including live chat transcripts, email correspondence, and WhatsApp messages — for quality assurance and dispute resolution purposes.
Responsible Gaming Data: Records of any deposit limits, session time limits, cooling-off periods, or self-exclusion requests you have set, along with any responsible gaming assessments completed.
9ltd does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, unless you voluntarily disclose health-related information in the context of a responsible gaming assessment or support conversation.
9ltd collects personal data through the following means:
- Direct Provision: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal, placing a bet, contacting support, or completing any other form or interaction on the Platform.
- Automated Collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you visit or use the Platform. See Section 10 (Cookies & Tracking) for full details.
- Third-Party Sources: Identity verification data returned by our KYC service providers following document checks. Payment confirmation data returned by bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks following transaction processing. Fraud risk signals from fraud prevention partners.
- Publicly Available Sources: In limited circumstances, 9ltd may cross-reference information you have provided against publicly available records for fraud prevention or account security purposes.
9ltd processes your personal data for the following specific, documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account Registration & Management — creating and maintaining your 9ltd account, authenticating your login, and managing account settings. | Identity, Contact, Technical |
| KYC & Age Verification — verifying that you are 21 years of age or older and confirming your identity as required before processing withdrawals. | Identity, KYC Documentation |
| Payment Processing — processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank accounts. | Financial, Transaction |
| Platform Operation — enabling sports betting, live casino, and slot game functionality, settling bets, and managing bonus balances. | Identity, Transaction, Technical |
| Fraud & Security Prevention — detecting and preventing fraudulent activity, money laundering, multi-accounting, and unauthorised account access. | Identity, Financial, Transaction, Technical |
| Responsible Gaming Compliance — monitoring player activity for signs of problem gambling, enforcing deposit limits, session limits, and self-exclusions. | Transaction, Responsible Gaming |
| Customer Support — responding to your enquiries, resolving disputes, and providing account assistance. | Identity, Contact, Communications |
| Marketing Communications — sending you promotional offers, bonus notifications, and platform updates (only where you have opted in). | Identity, Contact, Transaction |
| Platform Improvement — analysing aggregated usage patterns to improve Platform performance, features, and user experience. | Technical (anonymised or aggregated) |
| Legal & Regulatory Compliance — meeting obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities. | All categories as required |
9ltd processes your personal data on the following legal bases:
- Contract Performance: Processing necessary to provide the services you have signed up for — including account registration, bet settlement, payment processing, and customer support. Without this data, 9ltd cannot deliver the services described in our Terms & Conditions.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements — including KYC/AML obligations, age verification, responsible gaming mandates, and responses to lawful authority requests.
- Legitimate Interests: Processing carried out for 9ltd's legitimate business interests, including fraud prevention, platform security, and aggregated analytics for service improvement — provided those interests are not overridden by your rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications (promotional emails, bonus offers). You may withdraw your consent at any time by contacting [email protected] or updating your account notification preferences.
9ltd does not sell your personal data. We share your data only with the following categories of trusted third parties, and only to the extent strictly necessary for the purposes described in this Policy:
- KYC & Identity Verification Providers: Specialist third-party services that verify your identity documents, confirm your date of birth, and screen against sanctions and politically exposed persons (PEP) lists.
- Payment Processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners process deposit and withdrawal transactions. These providers receive only the transaction data necessary to complete the payment.
- Game Providers: Evolution Gaming, Pragmatic Play, Pragmatic Play Live, Ezugi, NetEnt, Microgaming, and Spribe receive pseudonymised session identifiers to deliver game content. They do not receive your full identity or financial data.
- Fraud Prevention Services: Third-party fraud detection platforms that analyse transaction patterns and device signals to identify suspicious activity. Data shared is minimised and pseudonymised where possible.
- IT & Infrastructure Providers: Cloud hosting, content delivery, and platform security vendors who process data on 9ltd's behalf under binding data processing agreements with equivalent security standards.
- Legal & Regulatory Authorities: Where required by applicable law, court order, or lawful regulatory request, 9ltd may disclose personal data to government bodies, law enforcement agencies, or financial regulators. 9ltd will notify you of such disclosure where legally permitted to do so.
- Professional Advisers: Lawyers, auditors, and accountants acting as service providers to 9ltd, subject to professional confidentiality obligations.
Important: All third parties with whom 9ltd shares personal data are required to maintain the confidentiality and security of that data and to use it only for the specified purpose. 9ltd does not permit third-party partners to use your data for their own independent marketing or analytical purposes.
9ltd operates primarily to serve players in Bangladesh. However, some of our third-party service providers — including cloud infrastructure hosts, KYC verification platforms, and game engine providers — may process data in data centres located outside Bangladesh.
Where personal data is transferred outside Bangladesh, 9ltd takes reasonable steps to ensure that appropriate safeguards are in place. These safeguards may include contractual data protection clauses with the receiving party, use of providers operating in jurisdictions with adequate data protection frameworks, or technical and organisational measures that provide equivalent protections to those applied within Bangladesh.
By registering an account and using the 9ltd Platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh. If you have concerns about international data transfers, please contact us at [email protected].
9ltd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of active account + 5 years after account closure |
| KYC documentation | Duration of active account + 5 years after account closure |
| Financial and transaction records | 7 years from the date of the transaction (financial record-keeping obligations) |
| Responsible gaming records | Duration of active account + 5 years after account closure |
| Customer support communications | 3 years from the date of the interaction |
| Technical / server log data | 13 months from the date of collection |
| Marketing preference records | Until consent is withdrawn or account is closed |
| Self-exclusion records | Minimum 6 years from the date of the self-exclusion request |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained to comply with a specific legal obligation beyond the standard period, 9ltd will retain only the data elements required for that obligation.
As a player whose personal data is processed by 9ltd, you hold the following rights with respect to your data. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.
Right of Access
Request a copy of the personal data 9ltd holds about you, along with information about how it is being used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your 9ltd account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
Right to Restriction
Request that 9ltd restricts processing of your data in certain circumstances, such as while a rectification request is being resolved.
Right to Portability
Receive your personal data in a structured, machine-readable format, and transfer it to another service provider where technically feasible.
Right to Object
Object to processing of your personal data based on legitimate interests, including for direct marketing purposes. Marketing opt-out takes effect immediately.
Some rights are subject to limitations. For example, 9ltd cannot delete transaction records that must be retained for legal and financial compliance purposes, and cannot delete self-exclusion records during the mandatory minimum exclusion period. We will always explain the reason if we are unable to fulfil a data rights request in full.
9ltd uses cookies and similar tracking technologies on the Platform to deliver core functionality, analyse usage patterns, and support security monitoring. The following types of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing the Platform from working.
- Functional Cookies: Remember your preferences such as language settings, preferred sports markets, and notification settings to personalise your experience across sessions.
- Analytics Cookies: Collect anonymised or pseudonymised data about how you navigate the Platform — which pages you visit, how long you spend on each section, and which features you use — to help 9ltd improve the Platform. This data is not linked to your identity.
- Security Cookies: Used to detect and prevent fraudulent account activity, bot traffic, and suspicious login behaviour. These are part of 9ltd's platform security infrastructure.
9ltd does not use third-party advertising or retargeting cookies. We do not share cookie data with advertising networks or data brokers.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. For analytics and functional cookies, you may opt out without affecting your ability to use the Platform's core features.
The 9ltd Platform is strictly intended for individuals aged 21 years and above. 9ltd does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to belong to an individual under 21 will be immediately closed.
If you are a parent or guardian and you believe that your child has registered an account on the 9ltd Platform or has provided personal data to 9ltd, please contact us immediately at [email protected]. Upon verification of the report, 9ltd will promptly close the account and delete all associated personal data.
21+ Policy: If you are under 21 years of age, you must not access, register on, or use the 9ltd Platform under any circumstances. This is a firm requirement applied consistently across all player accounts in Bangladesh.
9ltd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
- SSL/TLS Encryption: All data transmitted between your device and the 9ltd Platform is encrypted using industry-standard TLS 1.2 or higher protocols. The Platform is accessible only via HTTPS.
- Data Encryption at Rest: Sensitive personal data — including identity documents and financial account details — is encrypted at rest in 9ltd's database infrastructure.
- Access Controls: Internal access to personal data is governed by role-based access controls. Only personnel with a documented operational need may access identifiable player data. All internal access is logged and regularly audited.
- Two-Factor Authentication: 9ltd recommends enabling two-factor authentication on your account. Internal 9ltd systems with access to player data require multi-factor authentication for all staff.
- Penetration Testing: 9ltd's Platform and infrastructure undergoes periodic security assessments and vulnerability testing by qualified security professionals.
- Incident Response: 9ltd maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, 9ltd will notify affected players promptly.
While 9ltd takes all reasonable steps to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for logging out of your account on shared devices. If you suspect that your account has been compromised, contact [email protected] immediately.
The 9ltd Platform may, on occasion, reference third-party resources such as problem gambling support organisations (for example, www.gamblingtherapy.org). These external resources are not operated by 9ltd and are not subject to this Privacy Policy. 9ltd has no control over, and accepts no responsibility for, the privacy practices or content of any third-party website.
If you choose to access any third-party resource referenced on the 9ltd Platform, you do so at your own risk and subject to that third party's own privacy policy and terms of use. 9ltd does not share your personal data with third-party websites whose links may appear on the Platform.
9ltd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made to this Policy, 9ltd will notify registered players by email to the address on file and/or by displaying a prominent notice on the Platform at the point of login.
The updated Privacy Policy will be published at 9ltd.io/privacy-policy with a revised effective date. The version currently in force is always the version displayed on this page. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.
If you do not agree with any changes to this Privacy Policy, you may close your account by contacting [email protected]. Your account closure request will be processed in accordance with our account closure procedure, and your data will be retained only for the periods described in Section 8 (Data Retention).
If you have any questions, concerns, or requests regarding this Privacy Policy or the way 9ltd processes your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, in English (BST, UTC+ 6):
- Email: [email protected] (plain text — not a clickable link)
- WhatsApp: +880 1700 000000
- Live Chat: Available directly on the Platform, 24/7 (BST, UTC+6)
We aim to acknowledge all data-related enquiries within 2 business days and to resolve them fully within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
If you are not satisfied with how 9ltd has handled your personal data or responded to a data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 9ltd takes all data complaints seriously and will cooperate fully with any regulatory investigation.
Please note: The email address [email protected] is displayed as plain text only and is not a clickable mailto link. To contact us, copy the address and paste it into your email client manually.
21+ Only. Gambling involves financial risk. Never bet more than you can afford to lose. If gambling is affecting your life, visit www.gamblingtherapy.org for confidential support.
Your Data Is Safe With 9ltd
Now that you have reviewed our Privacy Policy, you can play with confidence knowing your personal data is protected. Explore 9ltd's full range of cricket betting, live casino tables, and 500+ slot games — all with instant BDT payments via bKash and Nagad. 21+ only. Please gamble responsibly.