babu9 Privacy Policy — How We Handle Your Personal Data

babu9 collects personal information through several channels: directly from you when you register an account, when you make deposits or withdrawals, when you contact customer support, and automatically through your use of the platform. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a babu9 account, we collect: your full legal name, date of birth, residential address, email address, mobile phone number, and a username and password of your choice. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations, babu9 may request copies of the following documents before processing withdrawals or increasing account limits:

• National Identity Card (NID) or valid passport — for proof of identity and age.
• Proof of residential address — such as a utility bill, bank statement, or official government letter dated within the last three months.
• Proof of payment method — such as a screenshot of the mobile wallet (bKash, Nagad, Rocket, Upay) or bank account used for deposits.

KYC documents are stored securely and used only for verification purposes. They are not shared with third parties except where required by applicable law or fraud prevention obligations.

1.3 Financial Transaction Data

babu9 records details of all deposit and withdrawal transactions associated with your account, including: transaction amounts (in BDT / ৳), transaction timestamps (Bangladesh Standard Time, UTC+6), payment method identifiers, and transaction reference numbers. Full payment card numbers or mobile wallet PINs are never stored by babu9 — payment processing is handled via secure third-party payment gateways.

1.4 Betting and Gaming Activity Data

We maintain records of your betting and gaming activity on the babu9 platform, including: markets and games accessed, bets placed and their outcomes, wager amounts, session durations, and bonus claims and usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical and Device Data

When you access the babu9 platform, our servers automatically collect certain technical data, including: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, pages viewed, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

1.6 Communication Data

If you contact babu9 customer support via live chat or email, we retain records of those communications, including the content of messages and any attachments, for quality assurance, training, and dispute resolution purposes.

babu9 uses the personal data collected from players for the following purposes:

babu9 processes personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing is necessary to perform the contract between babu9 and the account holder — specifically, to create and maintain your account, process transactions, and deliver betting and gaming services.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC/AML (anti-money laundering) requirements, fraud prevention duties, and data retention obligations imposed by applicable law.
• Legitimate interests: Processing is carried out in pursuit of babu9's legitimate business interests, including security monitoring, fraud detection, platform improvement, and responsible gaming oversight, provided those interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — for example, sending marketing communications or depositing cookies beyond strictly necessary categories — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

babu9 uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to improve user experience, and to analyse platform performance. A cookie is a small text file placed on your device when you visit a website.

4.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to operate. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously visited sections of the platform to provide a personalised experience.
• Analytics Cookies: Collect aggregate, anonymised data about how players navigate the platform — such as pages most frequently visited, average session duration, and error occurrences — to help babu9 improve the platform over time.
• Security Cookies: Help babu9 detect and prevent fraudulent activity, suspicious login attempts, and unauthorised account access.

4.2 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the babu9 platform, including your ability to remain logged in or access personalised features. Strictly necessary cookies cannot be disabled through browser settings without impacting core platform operation.

babu9 does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data may be disclosed to third parties only in the limited circumstances described below:

5.1 Payment Service Providers

To process deposits and withdrawals, babu9 shares necessary transaction data with payment service providers including mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment processors (Visa, Mastercard). These providers receive only the minimum data required to complete the transaction and are bound by their own data protection obligations.

5.2 Game Software Providers

Third-party game studios and software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive technical session data necessary for game delivery, such as a session token and account identifier. They do not receive your full personal profile, financial details, or KYC documents.

5.3 KYC and Fraud Prevention Services

babu9 may use third-party identity verification and fraud prevention services to assist with KYC compliance. These providers process identity documents and associated data on behalf of babu9 under strict data processing agreements. All such providers are required to maintain confidentiality and apply appropriate security measures.

5.4 Legal and Regulatory Disclosure

babu9 may disclose personal data to law enforcement agencies, courts, or regulatory authorities in Bangladesh or other relevant jurisdictions where required to do so by law, court order, or in connection with the prevention, investigation, or prosecution of fraud, money laundering, or other illegal activity.

5.5 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of babu9 or its parent entity, personal data held by babu9 may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

babu9 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including meeting any applicable legal, regulatory, tax, or audit retention obligations. The general retention periods applied by babu9 are as follows:

Where babu9 is required by law to retain data for longer than the periods stated above, the legally mandated retention period will take precedence. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so it can no longer be associated with an identifiable individual.

babu9 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• SSL/TLS Encryption: All data in transit between your browser or app and babu9 servers is encrypted using SSL/TLS protocols. The babu9 platform operates exclusively over HTTPS.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and payment identifiers, is stored in encrypted form on babu9's servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within babu9's internal systems is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): babu9 recommends and supports two-factor authentication for all player accounts. Internal administrative access to systems containing personal data requires multi-factor authentication.
• Intrusion Detection: babu9 deploys automated security monitoring tools to detect and respond to suspicious access patterns, brute-force login attempts, and other potential security threats in real time.
• Regular Security Reviews: babu9 conducts periodic internal reviews of its data security practices and infrastructure to identify and remediate vulnerabilities.

While babu9 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying babu9 immediately if you suspect any unauthorised access to your account.

As a babu9 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the babu9 support team via live chat or at [email protected]. babu9 will respond to data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data babu9 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data babu9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that babu9 may be legally required to retain certain data and cannot fulfil erasure requests that conflict with those obligations.
• Right to Restrict Processing: In certain circumstances, you may request that babu9 restrict the processing of your personal data — for example, while the accuracy of data is contested or while a processing objection is evaluated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that babu9 provide your personal data in a structured, commonly used, machine-readable format so it can be transferred to another provider.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on babu9's legitimate interests. babu9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The babu9 platform is strictly intended for adults aged 21 years and above. babu9 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account, use the platform, or submit any personal data to babu9.

If babu9 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, that data will be deleted without delay and the associated account will be suspended. Parents or guardians who believe that a minor under their care has registered a babu9 account are encouraged to contact the support team immediately at [email protected] so the account can be reviewed and closed.

The babu9 platform integrates with a number of third-party services to deliver its full range of features, including game content, payment processing, and customer support tools. These third-party services may process certain personal or technical data as part of their function.

babu9 carefully selects third-party service providers and requires them to maintain data security standards consistent with those applied by babu9 itself. All third-party data processors engaged by babu9 are required to enter into data processing agreements that govern the scope, purpose, and security requirements of any personal data processing they carry out on babu9's behalf.

The babu9 platform does not contain links to external third-party websites outside the babu9 ecosystem. babu9 is not responsible for the privacy practices of any third-party website that a user may independently navigate to outside of babu9.io.

babu9 primarily serves players based in Bangladesh and processes personal data in connection with the provision of services to Bangladeshi players. In the course of operating the platform and engaging third-party service providers (including game studios and payment processors based in other countries), personal data may be transferred to and processed in countries outside Bangladesh.

Where personal data is transferred internationally, babu9 takes appropriate measures to ensure that such transfers are carried out in accordance with applicable data protection principles, including ensuring that recipient parties maintain equivalent data security standards. Transfers to third-party game studios and payment processors are governed by data processing agreements that include appropriate safeguards.

If you have questions about the international transfer of your personal data, or wish to obtain information about the safeguards in place, please contact the babu9 support team at [email protected].

babu9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. When material changes are made to this Policy, the updated version will be published on this page with a revised effective date.

Where changes are material and affect the way babu9 processes your personal data, we will endeavour to notify registered account holders via email or via an in-platform notification prior to the changes taking effect. Your continued use of the babu9 platform after the revised Privacy Policy has been published constitutes your acceptance of those changes.

We recommend that you review this Privacy Policy periodically to stay informed about how babu9 protects your personal data. The effective date displayed at the top of this page indicates when the current version was last updated.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data babu9 holds about you, please contact the babu9 data support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the babu9 platform. Live chat is the fastest way to reach our support team for data-related queries.
• Email: [email protected] — please allow up to one hour for an initial response during standard operating hours (Bangladesh Standard Time, UTC+6). For formal data rights requests, please include your registered username and a brief description of your request.

babu9 is committed to resolving all privacy-related queries and data rights requests in a timely, transparent, and respectful manner. If you submit a formal data rights request, babu9 will acknowledge receipt within 24 hours and provide a full response within 30 calendar days.