gold9 Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal data gold9 collects from players in Bangladesh and internationally, how that data is used, who it may be shared with, and what rights you hold over your information. We are committed to handling your data with transparency, care, and the highest standards of security.
How gold9 Protects Your Privacy
Six core principles guide the way gold9 collects and handles personal data. The full legal text follows — these cards summarise the most important points.
Minimal Data Collection
gold9 collects only the personal data that is strictly necessary to operate your account, process transactions, and meet our legal obligations. We do not harvest data beyond what is required for the purposes stated in this policy.
SSL Encryption at All Times
All data transmitted between your device and gold9 servers is protected by 256-bit SSL encryption. This applies to registration, login, deposits, withdrawals, and every other interaction with the gold9 platform — 24 hours a day.
No Sale of Personal Data
gold9 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is yours — we use it solely to operate, improve, and secure the gold9 platform.
Your Rights, Respected
You have the right to access, correct, export, or request deletion of your personal data at any time. Gold9 honours these rights and will respond to all valid data requests within 30 days of receipt via our support channel.
Cookie Transparency
gold9 uses cookies and similar tracking technologies only for functional, analytical, and security purposes. We do not use advertising cookies or behavioural tracking pixels that share your data with ad networks or social platforms.
Clear Retention Periods
gold9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, plus any additional period required by applicable law. Once the retention period expires, data is securely deleted or anonymised.
Contents
01 Introduction
gold9 ("we", "us", "our", or "gold9") is an internationally structured online betting and gaming platform accessible at gold9.io and any associated subdomains or mobile web experiences (collectively, the "Platform"). This Privacy Policy explains how gold9 collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or otherwise interact with the Platform ("you" or "the user").
gold9 is committed to processing personal data in a lawful, fair, and transparent manner. This policy has been written to be as clear and accessible as possible, while meeting the standards expected of a responsible international gaming operator. Where technical or legal terminology is unavoidable, we have provided plain-language explanations.
This Privacy Policy should be read alongside the gold9 Terms & Conditions and the Responsible Gaming guidelines, both of which form part of the overall agreement between you and gold9. In the event of any conflict between this Privacy Policy and any other gold9 document on matters of data processing, this Privacy Policy shall prevail.
gold9 serves players across Bangladesh — including users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — as well as users in other jurisdictions. Regardless of your physical location, this Privacy Policy applies to all personal data collected through the Platform.
02 Data We Collect
gold9 collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in limited cases from third-party sources. The categories of personal data we collect are set out below.
2.1 Data You Provide Directly
- Registration data: Full name, date of birth, email address, mobile phone number, country of residence, and username selected by you at the time of account creation.
- Identity verification (KYC) data: Copies of government-issued photo identification (National ID Card, passport, or driving licence), proof of address documents, and payment method verification screenshots or records as required under our KYC procedures.
- Financial data: Payment method details necessary to process deposits and withdrawals — including bKash account numbers, Nagad account numbers, Rocket (DBBL Mobile Banking) numbers, Upay account details, and bank account references for DBBL and BRAC Bank transfers. gold9 does not store full card numbers or sensitive authentication data beyond what is required for transaction processing.
- Communications data: The content of any messages, complaints, or support requests you send to gold9 via email or any other contact channel, together with metadata such as the date and time of contact.
- Responsible gaming data: Any self-imposed limits, cooling-off requests, or self-exclusion requests you submit through your account settings or via our support team.
2.2 Data Collected Automatically
- Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
- Usage data: Pages visited, time spent on each page, game sessions initiated, bets placed, casino rounds played, deposit and withdrawal history, and clickstream data reflecting your navigation through the Platform.
- Session data: Login timestamps, session duration, and logout timestamps, used to maintain account security and detect unusual access patterns.
- Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 6 of this policy.
2.3 Data from Third Parties
In limited circumstances, gold9 may receive personal data about you from third parties, including:
- Identity verification service providers used to cross-check the documentation you submit during KYC.
- Payment processing intermediaries who relay transaction confirmation details to gold9 on your behalf.
- Fraud prevention and anti-money laundering (AML) screening services that provide risk signals associated with your identity or payment method.
Data received from third parties is handled with the same care and under the same principles as data you provide directly.
2.4 Data We Do Not Collect
gold9 does not collect biometric data, health or medical records, racial or ethnic origin data, political opinions, religious beliefs, trade union membership, or genetic data. We do not access your device's contacts, camera, or microphone. We do not track your physical location beyond the country/region level derived from your IP address.
03 How We Use Your Data
gold9 uses the personal data collected for the following specific purposes:
| Purpose | Description |
|---|---|
| Account management | Creating, maintaining, and administering your gold9 account, including processing login requests and managing account preferences. |
| Transaction processing | Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, DBBL, and BRAC Bank, and maintaining accurate financial records. |
| Identity verification | Verifying your age (must be 21+), identity, and payment methods in accordance with our KYC and AML obligations. |
| Platform operation | Delivering betting markets, casino games, slots, and other features; managing game session data and bet settlement. |
| Customer support | Responding to your queries, complaints, and support requests in a timely and effective manner. |
| Security and fraud prevention | Detecting, investigating, and preventing fraudulent transactions, account breaches, collusion, money laundering, and other prohibited activities. |
| Responsible gaming | Enforcing deposit limits, cooling-off periods, and self-exclusion requests; monitoring for signs of problem gambling behaviour. |
| Legal compliance | Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws and regulations. |
| Platform improvement | Analysing aggregated, anonymised usage patterns to improve the performance, usability, and content of the gold9 Platform. |
| Marketing communications | Sending you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications. |
gold9 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.
04 Legal Basis for Processing
gold9 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:
- Performance of a contract: Processing your registration data, transaction data, and KYC data is necessary to perform the contract we have entered into with you when you create a gold9 account. Without this data, gold9 cannot legally or operationally provide its services to you.
- Legal obligation: Processing data for KYC, AML screening, age verification, and financial record-keeping is required by applicable law. gold9 must retain certain records for prescribed periods and cannot delete this data on request alone.
- Legitimate interests: gold9 processes technical data, usage data, and security data on the basis of its legitimate interest in operating a safe, reliable, and commercially sustainable platform. We have balanced this interest against your privacy rights and concluded that our processing does not unduly infringe on your freedoms.
- Consent: Where we send you marketing communications, personalise your experience beyond what is necessary for platform operation, or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
05 Data Sharing
gold9 does not sell, rent, or trade your personal data. We share your data with third parties only in the limited circumstances described in this section, and only where appropriate data processing agreements or legal obligations are in place.
5.1 Service Providers
gold9 engages carefully selected third-party service providers to support the operation of the Platform. These providers act as data processors under our instruction and are contractually bound to process your data only for the purposes specified by gold9. Categories of service providers include:
- Payment processing and mobile money intermediaries (for bKash, Nagad, Rocket, Upay, DBBL, and BRAC Bank transaction routing)
- Identity verification and KYC technology providers
- Fraud detection and AML screening platforms
- Cloud hosting and data centre infrastructure providers
- Customer support platform providers
- Email and SMS communication delivery services
- Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — these studios receive session-level game data necessary to operate their games within the gold9 environment
5.2 Legal and Regulatory Disclosure
gold9 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or legal process. We will, where permitted, notify you of any such disclosure request.
5.3 Business Transfers
In the event that gold9 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that may result from it.
5.4 No Third-Party Marketing Sharing
gold9 does not share your personal data with any third party for that party's own direct marketing purposes. Any promotional communications you receive from gold9 are sent by gold9 directly and are subject to your opt-in consent.
06 Cookies & Tracking Technologies
gold9 uses cookies — small text files placed on your device — and similar technologies such as web beacons and local storage to support the operation, security, and analysis of the Platform. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Essential for platform operation | Session authentication tokens, CSRF protection, load balancer routing. These cannot be disabled without breaking core functionality. |
| Functional | Enhanced user experience | Remembering your preferred language, storing display preferences, maintaining your active game session across page loads. |
| Analytical | Platform performance and improvement | Aggregate page view counts, error logging, feature usage statistics. Data is anonymised before analysis. No individual profiling occurs. |
| Security | Fraud and bot detection | Device fingerprinting signals used to detect account sharing, automated access, or suspicious login patterns. |
Strictly necessary and security cookies are placed automatically as they are essential for the Platform to function. Functional and analytical cookies are placed only where you have provided consent. You may withdraw consent for non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.
07 Data Retention
gold9 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, plus any additional period mandated by applicable law. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account + 5 years following account closure |
| KYC / identity verification documents | 5 years from the date of verification or account closure, whichever is later |
| Financial transaction records | 7 years from the date of each transaction (AML compliance requirement) |
| Betting and game session records | 5 years from the date of each session |
| Customer support communications | 3 years from the date of last correspondence |
| Technical and security logs | 12 months from the date of collection |
| Marketing consent records | Until consent is withdrawn + 3 years for audit purposes |
| Self-exclusion records | Indefinitely, to prevent re-registration during exclusion periods |
Upon expiry of the applicable retention period, personal data is securely deleted from active systems and backups, or irreversibly anonymised such that it can no longer be attributed to any identifiable individual.
08 Data Security
gold9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your browser and gold9 servers.
- Encryption at rest for all sensitive personal data and financial records stored on gold9 infrastructure.
- Role-based access control (RBAC) ensuring that gold9 staff can access personal data only to the extent required by their specific job function.
- Multi-factor authentication (MFA) required for all gold9 staff with access to systems containing personal data.
- Penetration testing and vulnerability assessments conducted on a regular basis by independent security professionals.
- Intrusion detection and monitoring systems operating continuously to identify and respond to anomalous network activity.
- Secure data centre infrastructure with physical access controls, redundant power, and environmental monitoring.
- Data breach response plan in place to ensure that, in the event of a breach affecting your personal data, you are notified promptly and remediation steps are taken without delay.
While gold9 takes every reasonable precaution to protect your data, no system connected to the internet can be guaranteed to be entirely secure. You also play an important role in keeping your account secure: use a strong, unique password for your gold9 account, enable any available two-factor authentication, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.
09 International Data Transfers
gold9 operates on an international infrastructure, which means that your personal data may be stored or processed on servers located outside of Bangladesh. Where data is transferred to a country that does not provide an equivalent level of data protection to that applicable in the country of origin, gold9 implements appropriate safeguards to ensure that your data remains protected.
These safeguards include:
- Standard contractual clauses (SCCs) approved by relevant data protection authorities, incorporated into agreements with all third-party data processors who receive personal data from gold9.
- Data processing agreements (DPAs) with all service providers that impose binding obligations to protect personal data in accordance with the standards set out in this Privacy Policy.
- Where required, additional technical measures such as encryption and pseudonymisation to reduce the risk associated with cross-border data transfers.
By using the gold9 Platform, you acknowledge that your personal data may be transferred internationally and that gold9 will handle such transfers in accordance with the safeguards described above.
10 Your Rights
As a user of the gold9 Platform, you hold a number of rights in respect of your personal data. gold9 is committed to honouring these rights and will respond to all valid requests within 30 days of receipt. The rights available to you are as follows:
- Right of access: You may request a copy of all personal data that gold9 holds about you, together with information about how it is being used and with whom it has been shared.
- Right to rectification: If any personal data gold9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing was unlawful. Note that gold9 is required by law to retain certain data (e.g., financial transaction records) for prescribed periods, and this right does not override those obligations.
- Right to restriction of processing: In certain circumstances, you may request that gold9 restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
- Right to data portability: You may request that gold9 provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider where technically feasible.
- Right to object: You may object to gold9 processing your data on the basis of legitimate interests. gold9 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for the establishment, exercise, or defence of legal claims.
- Right to withdraw consent: Where gold9 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We may ask you to verify your identity before processing your request to ensure that data is not disclosed to unauthorised parties.
11 Children's Privacy
gold9 applies age verification procedures as part of the account registration and KYC process to prevent underage individuals from accessing the Platform. If gold9 discovers that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the associated account and securely delete all personal data linked to that account, subject to any retention obligations arising from AML or fraud investigation requirements.
If you are a parent or guardian and you believe that your child has registered on gold9 or provided personal data to gold9 without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.
12 Third-Party Links
The gold9 Platform may contain links to third-party websites or services — for example, links to payment provider information pages or game studio websites. These third-party sites are not operated by gold9, and their privacy practices are governed by their own privacy policies, not by this document. gold9 is not responsible for the content, privacy practices, or data handling of any third-party website or service, even if a link to that site appears on the gold9 Platform.
We encourage you to review the privacy policy of any third-party website you visit before providing any personal data to that site. The presence of a link on the gold9 Platform does not constitute an endorsement of the linked site's privacy practices or content.
13 Changes to This Privacy Policy
gold9 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, developments in our business operations, or improvements to our data practices. When we make material changes to this policy, we will:
- Update the "Effective Date" at the top of this document to reflect the date of the most recent revision.
- Display a prominent notice on the gold9 Platform for a reasonable period following the update, drawing your attention to the changes.
- Where the changes are significant and affect your rights in a material way, notify you directly via the email address registered to your gold9 account.
Your continued use of the gold9 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the Platform and may request account closure by contacting our support team.
We recommend that you review this Privacy Policy periodically to stay informed of how gold9 is protecting your personal data. The most current version of this policy is always available at gold9.io/privacy-policy.
14 Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which gold9 handles your personal data, please contact our data support team using the details below. We are committed to resolving all privacy-related queries promptly and fairly.
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response time: Within 30 days of receipt of your request
When submitting a privacy-related request, please include your registered username, the email address associated with your gold9 account, and a clear description of your request or concern. This will help us locate your records and respond as efficiently as possible.
If you are not satisfied with gold9's response to your complaint, or if you believe that gold9 is processing your personal data in a manner that is not compliant with applicable data protection law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. gold9 will cooperate fully with any such authority in the investigation of a complaint.
This Privacy Policy was last updated on 1 January 2026. gold9 thanks you for taking the time to read this document and for trusting us with your personal data.
Explore Everything gold9 Has to Offer
Now that you've reviewed our Privacy Policy, you're fully informed and ready to play. From live cricket betting and premium slots to our full casino suite — gold9 has it all for players across Bangladesh. 21+ only. Play responsibly.