9wiket Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 9wiket ("we", "us", "our"), operating the platform at 9wiket.bio, collects, processes, stores, and protects personal data belonging to registered players and site visitors ("you", "your") located in Bangladesh and other supported regions. This Policy forms an integral part of the 9wiket Terms & Conditions.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We will never process your data in a manner inconsistent with the purposes described in this Policy without first obtaining your explicit consent.

2. Data We Collect

2.1 Registration Data

When you create a 9wiket account, we collect the personal information you voluntarily submit during the registration process. This includes:

• Full legal name as it appears on your national ID or passport.
• Date of birth — used to verify you meet the 21+ age requirement.
• Mobile number — used for account verification, transaction alerts, and support contact.
• Email address — used for account communications, bonus notifications, and policy updates.
• Residential address — collected for identity verification purposes, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Username and password — your login credentials. Passwords are stored in hashed, non-reversible form. We never store plaintext passwords.

2.2 Identity Verification Documents

As part of our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, we may request copies of identity documents including your National Identity Card (NID), passport, or driving licence, as well as proof of address documents such as a recent utility bill or bank statement. These documents are stored securely and are used solely for verification purposes.

2.3 Financial and Transaction Data

When you make a deposit or request a withdrawal, we collect transaction details including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amount in Bangladeshi Taka (৳), transaction timestamp, and a transaction reference number. We do not store full card numbers or mobile banking PINs — these are handled directly by the respective payment processors under their own data security frameworks.

2.4 Usage and Technical Data

We automatically collect certain technical information when you access the 9wiket platform. This includes:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and in-app navigation paths.
• Game session data including bets placed, games played, and session duration.
• Cookie and local storage identifiers (see Section 8 on Cookies).

This data is collected automatically and is used to ensure platform stability, detect suspicious activity, enforce responsible gaming limits, and improve the overall player experience.

2.5 Communications Data

When you contact our support team via email at [email protected], or through any in-platform messaging feature, we retain a record of that correspondence. This includes the content of your messages and our responses. These records are used for quality assurance, dispute resolution, and compliance documentation.

3. How We Use Your Data

We process your personal data for the following specific, legitimate purposes:

4. Legal Basis for Processing

We process your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual necessity: Processing required to provide you with our services under the Terms & Conditions you accepted at registration, including account management, bet settlement, and payment processing.
• Legitimate interests: Processing necessary to prevent fraud, maintain platform security, and improve our services, where those interests are not overridden by your rights and interests.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and age verification obligations.
• Consent: For optional processing such as marketing communications, we rely on your freely given consent. You may withdraw consent at any time by contacting [email protected].

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

To deliver our services, we share limited personal data with carefully selected third-party service providers who act under our instructions and are bound by data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive only the data necessary to process your specific transaction.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data required to operate their games within our platform.
• Identity verification partners: KYC and document verification services receive your identity documents solely to complete the verification process.
• Platform hosting and infrastructure: Secure cloud hosting providers receive technical access to operate the platform under strict confidentiality obligations.

5.2 We Do Not Sell Your Data

9wiket does not sell, rent, lease, or trade your personal data to any third-party marketers, data brokers, or advertising networks under any circumstances. Your data exists solely to support the services described in this Policy.

5.3 Legal Disclosure

We may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a lawful court order, a formal government request, or as part of an anti-money laundering investigation. In such cases, we will disclose only the minimum data required and, where legally permissible, will notify you of such a disclosure.

6. Data Retention

We retain your personal data for as long as your account remains active and for a reasonable period after account closure to meet our legal and compliance obligations. Specific retention periods apply as follows:

• Account registration data: Retained for the duration of the account and for a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC documents: Retained for the same period as account registration data. Copies are securely deleted once the retention period expires.
• Support correspondence: Retained for three years following the resolution of each query or dispute.
• Technical and usage data: Typically retained in identifiable form for up to twelve months, then anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus one year thereafter for audit purposes.

After applicable retention periods expire, data is securely deleted or anonymised in a manner that prevents re-identification.

7. Data Security

9wiket implements a multi-layered approach to data security to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Bcrypt password hashing — your login password is never stored in a readable format.
• Role-based access controls ensuring that only authorised personnel with a documented operational need can access specific categories of personal data.
• Regular internal security audits and vulnerability assessments.
• Automatic session timeouts and two-factor authentication options for player accounts.

While we take every reasonable precaution, no system connected to the internet can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, we will notify affected players promptly and take immediate remediation steps.

8. Cookies and Tracking Technologies

The 9wiket platform uses cookies and similar technologies (local storage, session storage) to deliver a functional and personalised experience. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function — for example, maintaining your logged-in session and remembering your responsible gaming settings. These cannot be disabled.
• Performance cookies: Used to collect anonymised data about how players navigate the site, helping us identify and fix usability issues. No personally identifiable information is collected through these cookies.
• Functional cookies: Used to remember your preferences such as language settings and last-visited game category.
• Marketing cookies: Only placed where you have given explicit consent. Used to deliver relevant promotions and track the effectiveness of our campaigns. You may withdraw consent at any time.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair core platform functionality such as your ability to log in or maintain a game session.

9. Your Rights as a Data Subject

As a player on 9wiket, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of all personal data we hold about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: You may request deletion of your personal data where we no longer have a lawful basis to retain it. Note that this right is subject to our legal retention obligations — certain transaction records must be retained regardless of erasure requests.
• Right to restriction of processing: You may ask us to pause processing of your data in specific circumstances, such as while a dispute is being resolved.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format to transfer to another service.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time with immediate effect.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within a reasonable period, typically within 30 days. We may ask you to verify your identity before processing a data subject request.

10. Children's Privacy

The 9wiket platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend that account, delete the associated personal data to the extent permitted by our legal obligations, and refund any remaining real-money balance after completing the necessary verification steps.

If you believe a minor has registered an account on 9wiket, please contact us immediately at [email protected] so that we can investigate and act promptly.

11. International Data Transfers

The 9wiket platform primarily serves players based in Bangladesh and stores data on servers located in secure data centres. Where data is transferred to or processed by service providers outside Bangladesh — for example, game software providers or hosting infrastructure partners — we ensure that appropriate safeguards are in place, including contractual data processing agreements that impose equivalent data protection standards to those described in this Policy.

12. Changes to This Privacy Policy

9wiket reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players via email or a prominent in-platform notice at least 7 days before the changes take effect. The updated Policy will always be published at 9wiket.bio/privacy-policy with a revised effective date at the top of this page.

Continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must close your account before the changes take effect.

13. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 9wiket handles your personal data, please contact our support team. We take all privacy-related concerns seriously and will investigate and respond to your query promptly.

Contact email: [email protected] (plain text — not a clickable link). Our support team operates 24 hours a day, 7 days a week, and all privacy-related correspondence should be submitted in English.