dk9 Privacy Policy

1 Data We Collect

dk9 collects personal data through several channels, including account registration forms, payment processing flows, identity verification submissions, customer support interactions, and automated technical logging. The categories of personal data we collect are set out below.

1.1 Identity and Contact Data

When you register an account on dk9, we collect the following information:

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used to verify that you meet the 18+ age requirement);
• Email address (used for account communications and verification);
• Mobile phone number registered in Bangladesh;
• Residential address (collected during KYC verification).

1.2 Identity Verification (KYC) Documents

To comply with our anti-money laundering obligations and to verify your identity before processing withdrawals, dk9 may collect copies of the following documents:

• National Identity Card (NID), passport, or driving licence;
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days);
• Proof of ownership of the payment method used to deposit (e.g., a screenshot of your bKash or Nagad account showing your registered name and number).

KYC documents are stored in encrypted form and accessed only by authorised compliance personnel. They are not shared with third parties except as required by law or as outlined in Section 3 of this policy.

1.3 Financial Transaction Data

dk9 records details of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (partial mobile numbers for bKash, Nagad, Rocket, and Upay accounts), transaction timestamps, and the currency amounts in Bangladeshi Taka (BDT, ৳). Full payment credentials are never stored on dk9 servers; they are processed by the respective payment providers.

1.4 Gaming Activity Data

We collect records of your gaming activity on the platform, including games played, wagers placed, outcomes, session durations, and bonus usage. This data is used to calculate account balances accurately, resolve disputes, detect patterns of potential problem gambling, and generate anonymised aggregate statistics used in platform improvement.

1.5 Technical and Device Data

When you access the dk9 platform, our servers automatically log certain technical information, including:

• IP address and approximate geolocation (country and city level);
• Browser type and version;
• Operating system and device type;
• Referring URL and pages visited within the platform;
• Session start and end timestamps;
• Error logs and performance diagnostics.

This technical data is used for security monitoring, fraud detection, and platform performance optimisation. It is not used to build individual behavioural profiles for marketing purposes.

1.6 Communications Data

If you contact dk9 through live chat, email, or any other support channel, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. This data is used to provide consistent customer support and to train our support team.

2 How We Use Your Data

dk9 processes your personal data only for defined, legitimate purposes. The table below summarises the primary purposes for which we use each category of data and the legal basis for that processing.

dk9 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated fraud-detection systems flag an account for review, a qualified compliance officer examines the case before any account action is taken.

3 Data Sharing and Disclosure

dk9 does not sell, rent, or trade your personal data to third parties. We may, however, share your data with the following categories of recipients in the circumstances described below.

3.1 Payment Service Providers

To process deposits and withdrawals, dk9 shares the minimum necessary transaction data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and partnered banks such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each provider is required by their own regulatory frameworks to maintain appropriate data protection standards.

3.2 Technology and Infrastructure Providers

dk9 uses third-party technology partners to operate the platform, including cloud hosting providers, game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and security monitoring services. These providers act as data processors on dk9's behalf under contractual data processing agreements that restrict them from using player data for any purpose other than providing their contracted services to dk9.

3.3 Legal and Regulatory Disclosure

dk9 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we receive a lawful instruction or order to do so. In such cases, dk9 will disclose only the minimum amount of data necessary to comply with the legal obligation and will, where legally permissible, notify the affected player of such a disclosure.

3.4 Business Transfers

In the event that dk9 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by dk9 may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer via the email address associated with their account at least 30 days before it takes effect, and will be given the opportunity to request deletion of their data prior to transfer.

4 Cookies and Tracking Technologies

dk9 uses cookies and similar technologies, including local storage and session tokens, to operate the platform effectively. Cookies are small text files placed on your device when you visit the dk9 website. They serve the following purposes:

4.1 Essential Cookies

These cookies are strictly necessary to enable core platform functionality, including maintaining your logged-in session, remembering language preferences, and ensuring secure navigation between pages. The platform cannot function correctly without these cookies. They do not collect personal data beyond what is needed to maintain your session and cannot be disabled without breaking platform functionality.

4.2 Performance and Analytics Cookies

dk9 uses first-party analytics to understand how players interact with the platform — for example, which pages are most visited, where errors occur, and how long sessions last on average. This data is aggregated and anonymised before analysis. It is used solely to improve platform performance and user experience and is not linked to individual player identities.

4.3 Security Cookies

Certain cookies are deployed specifically to support fraud detection and account security, including session integrity tokens and device fingerprinting identifiers. These cookies help dk9 identify unusual login patterns or suspicious transactions that may indicate unauthorised access to your account.

4.4 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling essential cookies will impair your ability to use the dk9 platform, as session management depends on them. dk9 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking tags on any page of the platform.

5 Data Retention

dk9 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account registration data: Retained for the lifetime of the active account and for a period of 90 days following confirmed account closure, after which it is deleted or irreversibly anonymised, unless a legal hold applies;
• KYC documents: Retained for a minimum of five years from the date of submission, in accordance with anti-money laundering record-keeping requirements;
• Financial transaction records: Retained for a minimum of five years from the date of each transaction;
• Gaming activity records: Retained for a minimum of two years for dispute resolution purposes, and in anonymised aggregate form indefinitely for statistical analysis;
• Customer support communications: Retained for a period of two years from the date of the last interaction;
• Technical and device logs: Retained for a period of 12 months for security monitoring purposes, after which they are automatically purged.

Where dk9 is required by a court order, regulatory instruction, or ongoing investigation to retain specific data beyond the periods above, that data will be placed under a legal hold and retained until the hold is lifted.

6 Data Security

dk9 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

6.1 Technical Measures

• SSL/TLS encryption: All data transmitted between your device and dk9 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher);
• Encryption at rest: Sensitive data fields, including KYC documents, identity data, and financial records, are encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data is restricted on a strict need-to-know basis using role-based access controls. Administrative access requires multi-factor authentication;
• Intrusion detection: dk9 operates continuous server monitoring and intrusion detection systems that alert the security team to anomalous activity in real time;
• Regular security assessments: The platform undergoes periodic security reviews to identify and address vulnerabilities before they can be exploited.

6.2 Organisational Measures

All dk9 personnel who handle personal data are required to complete data protection training as part of their onboarding and on an annual basis thereafter. Access to player data is logged and audited. Any suspected or confirmed data breach is handled in accordance with dk9's incident response procedure, and affected players are notified without undue delay where the breach is likely to result in a high risk to their rights and interests.

6.3 Your Responsibility

While dk9 maintains strong security controls on its end, the security of your account also depends on you. You are responsible for keeping your login credentials confidential, using a strong and unique password for your dk9 account, logging out of the platform when using shared devices, and notifying dk9 support immediately if you suspect that your account has been accessed without your authorisation.

7 Your Privacy Rights

As a player registered on the dk9 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact the dk9 support team via live chat. dk9 will respond to all verified requests within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of the personal data that dk9 holds about you. Upon receiving a verified access request, dk9 will provide a structured summary of your data, the purposes for which it is processed, and the categories of recipients with whom it has been shared.

7.2 Right to Rectification

If any of the personal data dk9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as date of birth), rectification requests will require supporting documentary evidence before the change is applied.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where the data has been unlawfully processed. Please note that dk9 is legally obligated to retain certain categories of data (KYC documents and financial transaction records) for minimum statutory periods regardless of an erasure request. In such cases, dk9 will inform you of the specific data that cannot be deleted and the applicable retention period.

7.4 Right to Restriction

You have the right to request that dk9 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and a determination is pending.

7.5 Right to Object

Where dk9 processes your data on the basis of legitimate interest, you have the right to object to that processing. dk9 will cease the processing in question unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.

8 Policy Updates and Contact

dk9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. Where changes are material, registered players will be notified via the email address associated with their account at least 14 days before the revised policy takes effect. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Continued use of the dk9 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you may request account closure before the effective date of the changes.

8.1 Contact for Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact the dk9 support team through the live chat feature available on the platform. You may also reach the team at the following address:

Contact email: [email protected]
Support hours: 24 hours a day, 7 days a week
Response time for data requests: within 30 calendar days of receipt of a verified request