Your Privacy at ke9

ke9 collects personal data from you in three principal ways: information you provide directly when registering or using the platform, information generated automatically as you interact with our services, and information received from trusted third-party partners. The categories below describe the specific data points involved in each stream.

1.1 Information You Provide Directly

When you register for a ke9 account, place a bet, make a deposit or withdrawal, contact customer support, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity data: full legal name, date of birth, national identity card (NID) number, passport number, or other government-issued identifier submitted during KYC verification.
• Contact data: email address, mobile phone number registered in Bangladesh, and residential address including division, district, and postal code.
• Financial data: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank), and Visa or Mastercard details (card type, last four digits, expiry date — ke9 does not store full card numbers).
• Account credentials: username and hashed password. ke9 never stores passwords in plain text.
• Communications data: content of messages, emails, or live chat transcripts submitted to ke9 support.
• Verification documents: scanned copies or photographs of identity documents submitted for KYC purposes.

1.2 Information Collected Automatically

When you access ke9.today, our systems automatically collect certain technical and behavioural data. This data helps us maintain platform security, improve user experience, detect fraud, and comply with legal obligations:

• Device and technical data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and time zone setting.
• Usage and behavioural data: pages visited, session duration, game rounds played, bet amounts, market selections, win/loss records, bonus uptake patterns, and navigation paths within the platform.
• Log data: server-side logs recording login timestamps, session IDs, transaction IDs, and error events. These logs are retained for security auditing purposes.
• Cookie and tracking data: please see Section 4 of this policy for a full description of cookies used by ke9 and how to manage them.

1.3 Information from Third Parties

ke9 may receive personal data about you from the following third-party sources:

• Payment processors: transaction confirmation data, payment method verification results, and fraud screening outputs from bKash, Nagad, Rocket, Upay, and card payment processors.
• Identity verification providers: results of automated KYC checks performed by our third-party identity verification partner, including document authenticity scores and liveness check results.
• Responsible gaming databases: if you have previously registered with a self-exclusion scheme and requested that ke9 be notified, we may receive a notification to that effect so that we can honour your exclusion request promptly.
• Fraud prevention services: risk scores and device fingerprint data provided by fraud detection partners to protect the integrity of the ke9 platform.

ke9 uses the personal data we collect for the specific, lawful purposes described below. We do not use your data for any purpose incompatible with those listed here without first obtaining your explicit consent.

2.1 Marketing Communications

If you have opted in to receive promotional communications from ke9, we may send you emails or SMS messages about new games, VIP loyalty offers, seasonal promotions (such as Eid specials, Pohela Boishakh bonuses, and BPL cricket promotions), and personalised reload offers. You can opt out of marketing communications at any time by contacting our support team at [email protected] or by following the unsubscribe link included in every marketing email. Opting out of marketing does not affect service communications related to your account, transactions, or security.

2.2 Automated Decision-Making

ke9 may use automated systems to make certain decisions that affect your account, including fraud risk scoring, bonus eligibility checks, and responsible gaming intervention triggers. Where an automated decision has a significant effect on you — such as an account restriction or bonus disqualification — you have the right to request a manual review by a member of the ke9 compliance team. Contact [email protected] to exercise this right.

ke9 does not sell, rent, or trade your personal data. We share data only with trusted parties where it is necessary to deliver our services, comply with legal obligations, or protect the safety and integrity of the platform. The categories of recipient are set out below.

3.1 Service Providers and Data Processors

ke9 engages carefully selected third-party service providers who process data on our behalf and under our instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme processors (Visa, Mastercard) for the sole purpose of executing your deposit and withdrawal transactions.
• Identity verification providers: KYC and AML screening platforms used to verify your identity and meet compliance obligations.
• Game content providers: studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Hacksaw Gaming. These providers receive anonymised session tokens and game round data necessary to operate their games within the ke9 platform. They do not receive your full identity or financial data.
• Cloud infrastructure and hosting providers: secure cloud infrastructure partners who provide the servers and storage systems on which ke9 operates. All data is stored with encryption at rest.
• Customer support platforms: live chat and ticketing system providers used to manage support interactions.
• Fraud prevention and cybersecurity services: third-party tools used to detect and prevent unauthorised access, account takeover, and fraudulent transactions.

All ke9 data processors are contractually required to handle your data in accordance with this Privacy Policy and applicable data protection standards. They may not use your data for their own independent purposes.

3.2 Legal and Regulatory Disclosure

ke9 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities if required to do so by applicable law, or if we reasonably believe that disclosure is necessary to:

• Comply with a legal obligation or lawful government request.
• Report suspected money laundering, terrorist financing, or other financial crime to competent authorities.
• Protect the rights, property, or safety of ke9, its members, or the general public.
• Enforce ke9's Terms & Conditions or pursue or defend legal claims.

ke9 will, where legally permissible, attempt to notify affected members of any such disclosure before it is made.

3.3 Business Transfers

In the event that ke9 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, ke9 will take reasonable steps to ensure that your data continues to be treated in accordance with this Privacy Policy. You will be notified of any such transfer via your registered email address.

ke9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and understand how members interact with our services. This section explains the types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred settings and whether you are logged in. Cookies cannot execute programmes or install malware; they are passive data stores that function only within the browser that set them.

4.2 Types of Cookies Used by ke9

4.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Most modern browsers allow you to refuse all or certain categories of cookie, delete existing cookies, and receive a notification when a new cookie is set. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your ke9 account and using the platform's core features. Instructions for managing cookies in common browsers are available in each browser's help documentation.

ke9 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.

5.1 Technical Safeguards

• TLS/SSL encryption: all data transmitted between your device and ke9's servers is encrypted in transit using TLS 1.2 or higher. This protects your login credentials, financial data, and personal information from interception.
• AES-256 encryption at rest: sensitive stored data — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256, a military-grade encryption standard.
• Secure password hashing: ke9 never stores passwords in plain text. Passwords are hashed using a strong cryptographic algorithm with per-user salting, making them unreadable even in the event of a database breach.
• Firewalls and intrusion detection: ke9's infrastructure is protected by enterprise-grade firewalls, web application firewalls (WAF), and automated intrusion detection and prevention systems (IDS/IPS).
• Two-factor authentication: ke9 offers optional two-factor authentication (2FA) for member accounts. We strongly recommend that all members enable 2FA to add an additional layer of protection against unauthorised access.

5.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only authorised ke9 personnel whose roles require access to specific data categories are permitted to view or process that data.
• All ke9 staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
• ke9 conducts regular internal security reviews and engages independent security professionals to perform penetration testing and vulnerability assessments.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, ke9 will take immediate steps to contain the breach, assess its scope, and notify affected members without undue delay. Notification will be sent to your registered email address and will include a description of the nature of the breach, the categories of data affected, and the steps we have taken and recommend you take in response.

ke9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of data held by ke9:

Upon expiry of the applicable retention period, ke9 will securely delete or irreversibly anonymise the relevant data. Where deletion is not immediately technically feasible (for example, within encrypted backup systems), ke9 will isolate and protect the data from further processing until deletion can be completed at the next scheduled backup cycle.

As a ke9 member, you have meaningful rights over your personal data. ke9 is committed to honouring these rights promptly and without imposing unnecessary barriers. The rights available to you are described below.

7.1 Right of Access

You have the right to request a copy of the personal data ke9 holds about you. Upon receipt of a valid access request, ke9 will provide you with a summary of your data within 30 calendar days, free of charge. For requests that are manifestly unfounded or excessive, ke9 reserves the right to charge a reasonable administrative fee or decline to respond, with a written explanation.

7.2 Right to Rectification

If any personal data ke9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update certain account details (such as your email address and contact number) directly through the ke9 account settings panel. For updates to identity data (such as your legal name or date of birth), please contact [email protected] and provide supporting documentation.

7.3 Right to Erasure

You may request that ke9 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Please note that ke9 may be required to retain certain data categories (such as transaction records and KYC documents) for the retention periods described in Section 6 above, even after account closure, in order to comply with legal obligations. In these cases, ke9 will inform you of the data categories that cannot be immediately deleted and the reason for continued retention.

7.4 Right to Restrict Processing

You have the right to request that ke9 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or while an objection to processing is under review. During a restriction period, ke9 will store the relevant data but will not actively process it except for storage purposes.

7.5 Right to Data Portability

Where ke9 processes your personal data on the basis of your consent or contract performance, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format. ke9 will provide this in CSV or JSON format upon request.

7.6 Right to Object to Marketing

You have the right to object to receiving marketing communications from ke9 at any time. To exercise this right, contact [email protected] or use the unsubscribe mechanism in any marketing email. Your objection will be acted upon within five business days.

7.7 How to Submit a Privacy Request

To exercise any of the rights described above, please contact ke9's privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your registered username and a brief description of your request. To protect your privacy, ke9 may ask you to verify your identity before processing the request. ke9 will acknowledge all privacy requests within five business days and complete them within 30 calendar days.

If you have any questions, concerns, or complaints about this Privacy Policy or ke9's data practices, please do not hesitate to get in touch. ke9 takes all privacy enquiries seriously and will respond in a timely and constructive manner.

8.1 Privacy Contact Details

8.2 Updates to This Privacy Policy

ke9 reviews and updates this Privacy Policy periodically to reflect changes in our services, data practices, or applicable legal requirements. When material changes are made, we will notify registered members by email to the address associated with their ke9 account and will update the "Last Updated" date at the top of this page. The current version of the Privacy Policy is always available at ke9.today/privacy-policy. We encourage you to review this policy periodically. Your continued use of the ke9 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

8.3 Children and Minors

ke9 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If ke9 discovers or is informed that a registered account belongs to a person under 18, the account will be immediately suspended, all associated data will be reviewed, and any balances will be returned to the payment method used for deposits after age verification failure confirmation. If you believe a minor has registered on ke9, please contact us immediately at [email protected].

8.4 Third-Party Websites

ke9.today may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios. This Privacy Policy applies solely to data collected and processed by ke9. ke9 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any external service you choose to use in connection with your ke9 account.