Privacy Policy — 09 beat

09 beat collects personal data from you through several channels: directly when you register an account or contact our support team, automatically when you use the platform, and from third-party service providers where necessary to verify your identity and process payments. The categories of personal data we collect are described in detail below.

Registration and Account Data

When you create a 09 beat account, we collect the following personal information:

• Your full legal name as it appears on your national identity document.
• Your mobile phone number registered with your preferred mobile financial service (bKash, Nagad, Rocket, or Upay).
• Your date of birth, collected for age verification purposes to confirm that you are 18 years of age or older.
• A username and hashed password that you create during registration.
• Your general location within Bangladesh (city or division), which may be provided voluntarily or inferred from your registration details.

Identity Verification (KYC) Data

As part of the Know Your Customer (KYC) process required prior to your first withdrawal, 09 beat may collect:

• A scan or photograph of your national identity card (NID), passport, or another government-issued photo ID.
• A selfie or photograph for liveness verification, used solely to confirm that the identity document submitted belongs to you.
• Proof of payment method ownership, such as a screenshot of your bKash or Nagad account displaying your registered name and mobile number.

KYC documents are processed using secure document verification procedures and are not retained beyond the legally required minimum retention period. They are never used for marketing or profiling purposes.

Transaction and Financial Data

For every deposit and withdrawal processed through your 09 beat account, we collect transaction metadata including:

• The payment method used (e.g., bKash, Nagad, Rocket).
• The mobile wallet number associated with the transaction (masked after processing).
• Transaction amounts in BDT, timestamps, and unique transaction reference numbers.
• Deposit and withdrawal request statuses and processing history.

09 beat does not store full payment credentials. All financial transactions are processed through the respective MFS provider's secure API. We retain only the metadata necessary to maintain your account history and satisfy anti-money laundering (AML) record-keeping obligations.

Usage and Gameplay Data

When you interact with the 09 beat platform, we automatically collect technical and behavioural data including:

• Your device type, operating system version, browser type and version.
• Your IP address at the time of each session, used for security and fraud detection purposes.
• Pages visited, session duration, game sessions initiated, bets placed, and game results — used to personalise your experience and detect unusual activity patterns consistent with fraud or problem gambling indicators.
• Error logs and crash reports generated during gameplay, used solely for platform maintenance and technical improvement.

09 beat processes your personal data only for the specific, legitimate purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal data are as follows:

Service Delivery and Account Management

The most fundamental use of your data is to provide you with the services you have signed up for. This includes creating and maintaining your 09 beat player account, processing your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, crediting your account balance following successful transactions, and enabling you to place bets on cricket markets, spin slot reels, and participate in live casino games. Without this processing, we cannot provide our core services.

Identity Verification and Fraud Prevention

We use your registration data, KYC documents, and device data to verify your identity, confirm that you meet the 18+ age requirement, and protect the platform from fraudulent accounts, payment fraud, money laundering activity, and bonus abuse. Our risk and compliance team uses automated and manual review processes to flag unusual account activity. Where fraud is detected or suspected, we may freeze the account and preserve data pending investigation.

Responsible Gaming Monitoring

09 beat takes its responsible gaming obligations seriously. We analyse gameplay patterns — including session length, betting frequency, deposit volume, and time-of-day activity — to identify potential indicators of problem gambling behaviour. Where such indicators are detected, our responsible gaming team may reach out to the player with information about self-exclusion tools and support resources. This processing is conducted in the interest of player welfare and is not used for commercial profiling.

Customer Support

When you contact 09 beat's support team at [email protected], we collect and retain the content of your communication along with your account details and any documentation you provide. This data is used solely to resolve your query and to maintain a record of support interactions for quality assurance purposes.

Platform Improvement and Analytics

Aggregated, anonymised usage data — including session metrics, feature engagement rates, and error frequencies — is analysed to improve the performance, stability, and usability of the 09 beat platform. This analytical processing does not involve identifying or profiling individual players; it operates at the aggregate dataset level only.

Legal Compliance and Regulatory Obligations

09 beat processes and retains certain categories of personal data — particularly transaction records and KYC documentation — because we are required to do so under applicable financial compliance, anti-money laundering, and consumer protection frameworks. This legal obligation overrides any deletion request where the retention period has not yet expired. We will always inform you of the applicable retention period when responding to a deletion request.

09 beat does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing occurs only in the limited, specific circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To facilitate your deposits and withdrawals, 09 beat must share certain transaction details with your chosen mobile financial service provider — bKash, Nagad, Rocket, or Upay. The data shared is limited to the transaction amount, your registered mobile number, and a unique transaction reference. Each MFS provider operates under its own privacy policy and data protection standards. 09 beat is not responsible for how MFS providers process data received in connection with payment instructions.

KYC and Identity Verification Providers

To meet age verification and identity confirmation requirements, 09 beat may use a third-party KYC verification service to process identity documents submitted by players. These providers operate under strict data processing agreements and are authorised to use your submitted documents solely for the purpose of identity verification on behalf of 09 beat. They are not permitted to retain, resell, or independently process your documents for any other purpose.

Technology and Platform Infrastructure Partners

The 09 beat platform is built on and hosted using third-party cloud infrastructure and software components. Certain technical data — including anonymised error logs and aggregated performance metrics — may be processed by these infrastructure providers. These providers act as data processors under our instruction and are contractually bound to process data only in accordance with our directives.

Game Content Providers

Games on the 09 beat platform are supplied by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Your in-game session data (game ID, bet amounts, outcomes) is processed by the relevant game provider's platform to generate game results and return to player (RTP) calculations. Game providers receive anonymised session tokens, not your personally identifiable registration data. Their processing of session data is governed by their own data processing terms.

Legal Authorities and Regulatory Bodies

09 beat will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or legal process. In such cases, 09 beat will disclose only the minimum data required by the applicable legal demand and will, where legally permitted, notify the affected account holder of the disclosure.

09 beat uses a limited and purposeful set of cookies and similar tracking technologies on the platform. This section describes what cookies we use, why we use them, and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred settings or session authentication token — across page loads and return visits. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (retained on your device for a set period).

Cookies Used by 09 beat

What We Do Not Use

09 beat does not deploy third-party advertising cookies, cross-site tracking pixels, social media tracking tags, or any cookie technology that shares your browsing behaviour with external advertising networks or data brokers. You will not receive targeted advertising from third-party platforms as a result of your 09 beat usage data.

Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please note that disabling session authentication cookies will prevent you from logging in to your 09 beat account. Disabling optional analytics or preference cookies will not affect your access to core platform features. Refer to your browser's help documentation for instructions on managing cookies specific to your browser and device.

09 beat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are legally required to retain it. The following retention periods apply to the main categories of data we hold:

• Active account data: Retained for the full duration of your active 09 beat account relationship.
• Transaction records: Retained for a minimum of 5 years following the date of each transaction, in compliance with financial record-keeping and AML obligations.
• KYC documentation: Retained for a minimum of 5 years following the closure of your account or the completion of the relevant verification event, whichever is later.
• Support communications: Retained for 24 months from the date of the most recent communication in each support thread.
• Gameplay logs: Retained for 24 months from the date of the session, after which they are anonymised and aggregated for statistical purposes only.
• Device and IP logs: Retained for 12 months from the date of the recorded session for security monitoring purposes.

Account Closure and Data Deletion

When you request closure of your 09 beat account, we will initiate a data review process. Personal data that is no longer required for legal, regulatory, or fraud prevention purposes will be deleted or anonymised within 60 days of account closure confirmation. Data subject to mandatory legal retention periods will be held for the applicable retention window and then securely deleted.

Where data is anonymised rather than deleted, it is transformed into a form that cannot be linked back to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes and is not subject to deletion requests.

09 beat employs a layered approach to data security, combining technical controls, organisational policies, and ongoing staff training to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following security measures are in place across the 09 beat platform:

Technical Security Controls

• SSL/TLS Encryption in Transit: All data transmitted between your device and the 09 beat platform is encrypted using industry-standard TLS protocols, preventing interception by third parties.
• Encryption at Rest: Sensitive personal data fields — including identity document hashes, date of birth, and payment method identifiers — are encrypted at rest in our database using AES-256 encryption.
• Password Security: Account passwords are never stored in plain text. They are processed using a strong one-way hashing algorithm with per-account salts, meaning that even in the event of a database breach, raw passwords cannot be recovered.
• OTP Authentication: Sensitive account actions — including login from a new device and withdrawal requests — trigger a one-time password (OTP) sent to your registered mobile number, providing a second layer of authentication beyond your password.
• Automated Intrusion Detection: Our platform infrastructure is monitored 24/7 by automated intrusion detection systems (IDS) that flag and respond to anomalous access patterns in real time.

Organisational Security Controls

• Access to player personal data is restricted to authorised 09 beat personnel on a strict need-to-know basis, enforced through role-based access controls (RBAC).
• All personnel with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Access logs for all administrative interactions with the player database are maintained and reviewed on a regular basis.
• Third-party service providers with access to any personal data are assessed for data security standards before onboarding and are bound by data processing agreements.

Incident Response

In the event of a data security incident that may affect player personal data, 09 beat has a documented incident response procedure. Affected players will be notified as soon as reasonably practicable following confirmation of a breach that poses a material risk to their rights or interests. Notification will be delivered to the player's registered mobile number and will describe the nature of the incident, the categories of data affected, and the steps being taken to contain and remediate the situation.

As a player on the 09 beat platform, you hold specific rights with respect to your personal data. 09 beat is committed to honouring these rights in a timely and transparent manner. All privacy rights requests should be submitted in writing to [email protected] from your registered contact details, clearly stating the nature of your request.

Right of Access

You have the right to request a copy of all personal data that 09 beat holds about you. Upon receipt of a valid access request, we will provide a structured summary of your data within 30 days. This summary will cover your registration data, KYC status, transaction history, gameplay summary, and any support communications associated with your account.

Right to Rectification

If any personal data held by 09 beat about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to core account data — such as your mobile number or registered name — may require re-verification of your identity to prevent fraudulent modification requests. Where a correction affects your KYC status, a new KYC submission may be required.

Right to Erasure

You may request deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw your consent where consent was the basis for processing; or (c) you object to the processing and there are no overriding legitimate grounds for continuation. Erasure requests cannot be fulfilled where the data is subject to a mandatory legal retention obligation — in those cases, we will explain the applicable retention period and delete the data as soon as that period expires.

Right to Restriction of Processing

You may request that 09 beat restricts processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and a determination of legitimate grounds is pending. During a restriction period, we will continue to store your data but will not actively process it beyond what is necessary to maintain the restriction itself.

Right to Object

You have the right to object to processing of your personal data for purposes other than those that are strictly necessary for service delivery or legal compliance. In practice, this primarily relates to any analytics or profiling activity. Where you lodge an objection, we will cease that category of processing unless we can demonstrate compelling legitimate grounds that override your interests.

How to Exercise Your Rights

To exercise any of the rights described above, contact our privacy team at [email protected]. Your request should include your full registered name, the mobile number associated with your account, a clear description of the right you are exercising, and any supporting information. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. If we require additional time to fulfil a complex request, we will notify you within the initial 30-day period and explain the reason for the extension.

This Privacy Policy was last reviewed and updated in January 2026. 09 beat reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, applicable legal requirements, or best practice guidance. When we make material changes to this Privacy Policy, we will notify registered players via their registered mobile number and will display a prominent notice on the 09 beat platform for a period of at least 14 days following the change.

The date of the most recent revision will always be displayed at the top of this page. We recommend that you review this Privacy Policy periodically — particularly before providing new categories of personal data to us, or if you have concerns about how your data is being used. Your continued use of the 09 beat platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes.

Children's Privacy

The 09 beat platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user under the age of 18 has registered an account and provided personal data, we will immediately suspend that account, delete the associated personal data to the extent legally permissible, and take steps to prevent further access. If you believe that a minor has submitted personal data to 09 beat, please contact [email protected] immediately.

Links to Third-Party Services

The 09 beat platform may reference third-party payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi). These parties operate their own privacy policies independently of 09 beat. We are not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the 09 beat platform.

Contact for Privacy Enquiries

For all privacy-related queries, data rights requests, concerns about how your personal data is being processed, or to report a suspected data security incident, please contact the 09 beat privacy team. All privacy correspondence should be directed to [email protected]. Our support team operates on Bangladesh Standard Time (BST, UTC+6) and is available 24 hours a day, 7 days a week. We aim to acknowledge all privacy enquiries within 5 business days and to resolve them within 30 days.