fkd9 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by fkd9 in connection with the operation of its online casino and sports betting platform at fkd9.io, including all mobile-optimised versions of the site and any related support communications. It covers data collected from registered account holders, prospective players who browse the site without registering, and individuals who contact fkd9's support team.

This Policy should be read in conjunction with the fkd9 Terms & Conditions, which govern the overall contractual relationship between you and fkd9. The Terms & Conditions are available in full at fkd9.io/terms-conditions.

This Policy is written in English and the English-language version is the definitive governing version. Any translated summary is provided for convenience only and carries no legal weight. The Policy was last updated and became effective on 1 January 2026.

fkd9 collects the following categories of personal data from players and platform users:

fkd9 collects personal data through the following channels:

• Direct Provision: Data you provide when registering an account, completing the KYC verification process, contacting our support team, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically when you access the fkd9 website, including via server logs, browser APIs, and first-party cookies (see Section 7).
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you make a deposit or withdrawal.
• Identity Verification Partners: Confirmation data received from third-party KYC verification service providers used to authenticate documents submitted during the account verification process.
• Fraud Prevention Services: Risk signals and device fingerprint data received from anti-fraud service providers used to protect the fkd9 platform from account fraud and money laundering.
• Support Communications: Any personal data you include in emails, support tickets, or live chat messages sent to fkd9's support team.

fkd9 uses your personal data for the following specific purposes:

• Account Creation and Management: To register your fkd9 account, maintain account security, process account changes, and manage your player profile.
• Identity Verification (KYC): To verify your age (21+), identity, and residential address in Bangladesh before approving withdrawal requests, as required by our anti-fraud and responsible gaming obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard and to maintain accurate financial records of all transactions in BDT.
• Game and Betting Operations: To operate casino games and sports betting markets, record gameplay and bet outcomes, resolve disputes, and calculate winnings accurately.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our duty of care to players across Bangladesh.
• Fraud Prevention and Security: To detect, prevent, and investigate suspected fraud, money laundering, collusion, bonus abuse, and other prohibited conduct on the fkd9 platform.
• Customer Support: To respond to your support enquiries, resolve account issues, process complaints, and communicate account-related notifications.
• Legal and Regulatory Compliance: To fulfil any applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required under applicable financial crime prevention standards.
• Platform Improvement: To analyse aggregate usage patterns, improve platform performance, optimise the user experience for players in Bangladesh, and develop new features.
• Marketing Communications (with consent): To send you promotional emails and SMS notifications about fkd9 bonuses, new games, cricket betting offers, and platform news — only where you have given explicit consent and have not subsequently withdrawn it.

fkd9 processes your personal data under one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the contract between you and fkd9 — including account operation, payment processing, game and bet management, and customer support — is carried out on the basis that it is necessary to perform the services you have requested.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC identity verification, anti-money laundering record-keeping, and responses to lawful regulatory or law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of fkd9's legitimate interests in operating a safe, secure, and fair online gaming platform, where those interests are not overridden by your data rights.
• Consent: Processing for marketing communications (promotional emails, SMS offers) is carried out solely on the basis of your explicit, freely given, and revocable consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

fkd9 does not sell, rent, or commercially share your personal data with any third party. Personal data is disclosed to third parties only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy and security obligations.
• KYC Verification Partners: Third-party identity verification services receive copies of documents you submit during the KYC process for the sole purpose of verifying their authenticity. These providers are contractually bound to process your data only for this purpose.
• Anti-Fraud and Security Providers: Fraud detection services may receive technical data (IP address, device data) to assess the risk profile of account activity. No financial or identity data is shared beyond what is necessary for fraud risk assessment.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive session tokens and gameplay data necessary to operate the games you play. These providers do not receive your full identity or payment data.
• Legal and Regulatory Authorities: Where required by applicable law or by lawful order of a regulatory, judicial, or law enforcement authority, fkd9 may disclose personal data to the relevant authority. fkd9 will notify you of such a request where permitted by law.
• Business Transfers: In the event that fkd9 undergoes a merger, acquisition, or sale of business assets, player data may be transferred to the acquiring entity as part of that transaction, subject to the same data protection obligations set out in this Policy.

fkd9 uses first-party cookies and similar tracking technologies on the fkd9.io website. Cookies are small text files placed on your device when you visit the site. fkd9 does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertising networks.

The following types of cookies are used on the fkd9 platform:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in during an active session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and responsible gaming limit configurations. These cookies improve your experience on return visits.
• Analytics Cookies: Used to collect anonymised, aggregate data about how players navigate the fkd9 website — including pages visited, time on site, and navigation paths — to help us improve platform performance. No personally identifiable information is included in analytics data.
• Anti-Fraud Cookies: Used to assign a consistent session identifier to your device to help detect suspicious activity such as multiple account creation or automated bot behaviour. These cookies are part of fkd9's platform security infrastructure.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging in or using core platform features. Blocking functional or analytics cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

fkd9 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the fkd9 platform is encrypted using industry-standard SSL/TLS protocols. This includes login credentials, payment data, and KYC document uploads.
• Encrypted Data Storage: Sensitive personal data stored on fkd9 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within fkd9's internal systems is restricted on a strict need-to-know basis. Only authorised staff with a specific operational requirement can access individual player records.
• Secure Payment Processing: Payment credentials are not stored directly on fkd9 servers. All payment transactions are routed through the secure infrastructure of the respective payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Intrusion Detection: fkd9's platform infrastructure is monitored continuously for anomalous activity, attempted breaches, and unauthorised access attempts.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights, fkd9 will notify affected account holders at the registered email address within 72 hours of becoming aware of the breach, where practicable.

fkd9 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from fkd9's systems or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

As a fkd9 player and data subject, you have the following rights over your personal data held by fkd9:

• Right of Access: You may request a copy of all personal data fkd9 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your fkd9 account. Minor corrections (name spelling, contact details) can be made via account settings; material changes require support verification.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing was unlawful. Note that fkd9 may be legally required to retain certain financial and identity records for the retention periods specified in Section 9, even after an erasure request.
• Right to Restriction: You may request that fkd9 temporarily restricts processing of your data — for example, while the accuracy of data is contested or a legal claim is pending.
• Right to Data Portability: You may request a copy of the personal data you provided to fkd9 in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service.
• Right to Object: You may object to fkd9 processing your data on the basis of legitimate interests, including for direct marketing purposes. An objection to marketing will be honoured immediately; an objection to other legitimate interest processing will be assessed on its individual merits.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact the fkd9 data team at [email protected] with the subject line "Data Rights Request". Please include your registered account email address and a description of your request. fkd9 will acknowledge your request within 5 business days and complete the request within 30 days. Identity verification may be required before processing data rights requests to protect your account security.

fkd9 verifies the age of all account holders as part of the KYC process before approving withdrawal requests. Where age verification reveals that an account holder is under 21, the account is closed immediately, all bets are voided, and any remaining balance is returned to the payment source used for the original deposit minus any winnings derived from gameplay.

Parents and guardians in Bangladesh are strongly encouraged to use parental control software to restrict minors' access to online gambling platforms including fkd9. Responsible gaming resources and guidance for parents are available on the fkd9 Responsible Gaming page at fkd9.io/responsible-gaming.

fkd9 is operated from servers that may be located outside Bangladesh. By using the fkd9 platform and providing your personal data, you acknowledge that your data may be transferred to, stored, and processed in countries outside Bangladesh where fkd9's infrastructure or service providers are located.

Where personal data is transferred outside Bangladesh, fkd9 ensures that appropriate safeguards are in place to protect the security and integrity of your data, including contractual data protection obligations imposed on all third-party processors that receive your data. fkd9 does not transfer personal data to any country or organisation that does not provide an adequate level of data protection.

KYC documents submitted by players in Bangladesh are processed by identity verification partners under strict contractual confidentiality and data protection obligations. Processed verification results — not the raw documents — are retained on fkd9's own systems.

fkd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, data protection best practice, or the way fkd9 operates the platform. The effective date at the top of this page will be updated whenever a material change is made.

Where a change to this Policy materially affects how we process your personal data, fkd9 will notify registered account holders by email at the address registered on their account prior to the change taking effect. For non-material updates (such as wording clarifications), the updated Policy will simply be published at fkd9.io/privacy-policy without individual notification.

Your continued use of the fkd9 platform after any Policy update constitutes your acceptance of the revised terms. If you disagree with any changes to this Policy, you should stop using the platform and contact [email protected] to request account closure and data deletion.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fkd9 handles your personal data, please contact the fkd9 data protection team using the details below. All privacy-related enquiries are handled by our dedicated support team, available 24 hours a day, 7 days a week, including Bangladesh public holidays.

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Enquiries: "Privacy Policy Enquiry"
• Subject Line for Data Breach Reports: "Data Security Report"
• Response Time: Within 5 business days for acknowledgement; within 30 days for full resolution (Bangladesh Standard Time, UTC+6).
• Support Hours: 24 hours a day, 7 days a week, including Eid, Pohela Boishakh, Victory Day, and Independence Day.