9oxo Privacy Policy — How We Protect Your Personal Data

9oxo is the data controller responsible for the personal data collected through the 9oxo platform. For all data protection enquiries, players may contact us at [email protected]. We will acknowledge all written enquiries within 48 hours and aim to provide a substantive response within 30 calendar days.

When you register and use 9oxo, we collect the following categories of personal data:

• Identity data: full name, date of birth, gender (where provided)
• Contact data: registered mobile number and email address
• Financial data: bKash, Nagad, Rocket or Upay account identifiers used for deposits and withdrawals (we do not store full mobile banking credentials or PINs)
• Technical data: IP address, device type, operating system, browser type, session timestamps and platform activity logs
• Usage data: game history, betting records, deposit and withdrawal history, bonus activity, and customer support correspondence

9oxo uses personal data solely for the following purposes:

• Account creation and management — to register, verify and maintain your 9oxo account in accordance with our Terms & Conditions
• Payment processing — to facilitate deposits and withdrawals via bKash, Nagad, Rocket and Upay, and to detect and prevent fraudulent transactions
• Legal compliance — to meet our obligations under applicable laws including identity verification (KYC), anti-money-laundering (AML) requirements and responsible gaming regulations
• Platform improvement and fraud prevention — to analyse aggregated, anonymised usage patterns to improve performance, detect abuse and maintain platform integrity

All personal data collected by 9oxo is stored on secure servers protected by industry-standard security measures including 256-bit SSL/TLS encryption for data in transit, cryptographic hashing for stored credentials, access controls limiting data access to authorised personnel only, and regular security audits. 9oxo retains personal data for as long as your account remains active and for such additional period as required by applicable law (typically five to seven years for financial transaction records). Upon account closure and expiry of the legally mandated retention period, personal data is securely deleted or anonymised.

9oxo does not sell or rent personal data. We may share data only in the following strictly limited circumstances:

• Payment processing partners — bKash, Nagad, Rocket and Upay receive only the transaction reference data required to process your deposit or withdrawal; they do not receive your full profile or gaming history
• Legal and regulatory authorities — where 9oxo is required by applicable law, court order, or regulatory direction to disclose personal data, we will comply with such obligations and, where legally permitted, will notify you of the disclosure
• Game providers — aggregated, anonymised performance and usage data (never individual player identities) may be shared with game providers such as Pragmatic Play and Evolution Gaming for technical integration purposes only

9oxo uses a limited set of cookies and similar technologies to operate the platform. Essential session cookies are required for login state, security tokens and basic platform functionality — these cannot be disabled without impairing your ability to use 9oxo. Analytical cookies may be used in aggregate, anonymised form to understand platform performance; these do not identify individual players. 9oxo does not use advertising cookies, retargeting pixels, or social media tracking scripts. You may review and manage your cookie settings via your browser. Please note that blocking all cookies may prevent certain platform features from functioning correctly.

Subject to applicable law, you have the following rights regarding the personal data 9oxo holds about you: the right to access a copy of your data; the right to correct inaccurate or incomplete data; the right to request erasure of your data (subject to legal retention obligations); the right to restrict or object to certain forms of processing; and the right to withdraw consent where processing is based on consent. To exercise any of these rights, please send a written request to [email protected]. We will verify your identity before processing any such request and will respond within 30 calendar days. 9oxo does not charge a fee for reasonable data access or correction requests.

9oxo is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21. Age verification is carried out as part of the account registration process. If 9oxo discovers that a player is under the age of 21, or that personal data has been collected from a person under 21 without appropriate consent, we will immediately suspend the account, void any related activity and securely delete the associated personal data. If you believe a minor has registered an account on 9oxo, please notify us immediately at [email protected].

The 9oxo platform may reference third-party services in informational contexts. 9oxo is not responsible for the privacy practices of any third-party service. This Policy applies only to data collected directly by 9oxo. When you make a payment via bKash, Nagad, Rocket or Upay, those transactions are also subject to the respective provider's own privacy policy. We encourage you to review third-party privacy policies where relevant. The following third-party services may process limited data in connection with your use of 9oxo:

• Mobile payment providers (bKash, Nagad, Rocket, Upay) — transaction reference data only
• Game studios (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, Spribe) — anonymised game session data for RNG certification and technical auditing purposes
• Content delivery network (CDN) providers — for platform performance optimisation; no personal player data is transmitted to CDN nodes beyond standard server access logs
• Fraud prevention and KYC verification services — where required to fulfil our legal obligations; only the minimum necessary data is shared

9oxo reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will endeavour to provide reasonable advance notice via a prominent notice on the platform or via your registered contact details. The revised Policy will be published on this page with an updated effective date. Your continued use of 9oxo following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

As part of our responsible gaming commitment, 9oxo retains certain account activity data — including deposit history, session durations and betting patterns — for the purpose of identifying players who may be at risk of problem gambling. This data is used internally by our responsible gaming team and is never shared with third parties for commercial purposes. Players who request self-exclusion or account closure under our Responsible Gaming policy will have their data handled in accordance with both this Privacy Policy and the applicable legal retention requirements. For further details, please visit our Responsible Gaming page at /responsible-gaming.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way 9oxo handles your personal data, please contact us in writing at [email protected]. We will acknowledge your message within 48 hours and aim to provide a full response within 30 calendar days. All privacy complaints are handled confidentially. 9oxo does not operate a telephone support line; all data protection correspondence must be submitted in writing via the registered support email address.