srd9 Privacy Policy —
Your Data, Protected

srd9 collects personal data from players through several channels: the account registration process, ongoing account activity, identity verification (KYC), payment transactions, customer support interactions, and automated data collection via cookies and server logs. The categories of personal data we collect are described below.

srd9 does not knowingly collect data from individuals under the age of 18. If we discover that personal data belonging to a minor has been submitted to our platform, we will delete it immediately and permanently close the associated account. We collect only the minimum data necessary to fulfil the specific purpose for which it is being gathered — a principle commonly referred to as data minimisation.

srd9 processes your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or complying with a legal obligation that compels disclosure.

• Account creation and management: Your identity and contact data are used to create and maintain your srd9 player account, authenticate your login sessions, and enable account recovery.
• Identity verification (KYC): Document data is used solely to verify your age and identity in compliance with anti-money laundering and responsible gaming obligations. KYC data is not used for profiling or marketing.
• Processing deposits and withdrawals: Financial data is used to execute payment transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank transfers. Transaction records are retained for financial compliance purposes.
• Delivering and improving the platform: Account activity and technical data are used to personalise your experience, troubleshoot technical issues, and improve the performance and reliability of srd9 services.
• Fraud prevention and security: Technical data (including IP address and device fingerprint) and account activity data are monitored to detect unauthorised access, multi-accounting, money laundering, and other fraudulent behaviour.
• Responsible gaming monitoring: Betting and session data may be reviewed to identify patterns that suggest problematic gambling behaviour, enabling srd9 to offer timely support or apply responsible gaming measures.
• Customer support: Communication data is retained to provide effective customer support, resolve disputes, and maintain a record of service interactions.
• Marketing communications (opt-in only): Where you have explicitly opted in, your contact data may be used to send promotional emails or SMS messages about srd9 bonuses, offers, and seasonal promotions. You may withdraw consent at any time.
• Legal compliance: srd9 may process and disclose your personal data to the extent required by applicable law, regulation, or a lawful order from a competent authority.

srd9 does not use automated decision-making or algorithmic profiling to make decisions that have significant legal or financial effects on individual players, except where such systems are used as part of fraud detection and are subject to human review prior to any punitive action.

srd9 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only with the categories of recipients described in this section, and only to the extent strictly necessary for the stated purpose.

• Payment processors: To execute deposits and withdrawals, srd9 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks. These providers are bound by their own privacy and security obligations and are not authorised to use your data for any other purpose.
• Game providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and anonymised player identifier to facilitate game delivery. They do not receive your full name, contact details, or financial data.
• KYC and identity verification services: Where automated identity verification tools are used, document images and identity data may be processed by a certified third-party KYC provider operating under strict data processing agreements.
• Analytics providers: Anonymised and aggregated technical data may be shared with analytics platforms to help srd9 understand platform usage patterns and improve service quality. No individually identifiable data is transmitted to analytics providers.
• Legal and regulatory authorities: srd9 will disclose personal data when required to do so by law, court order, or the lawful request of a competent regulatory or law enforcement authority. We will notify you of any such request where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all srd9 assets, player data may be transferred to the acquiring entity. We will provide advance notice of any such transfer via the registered email address on your account.

srd9 uses cookies and similar technologies (local storage, session tokens) to operate the platform, maintain your login session, and gather anonymised performance data. A cookie is a small text file stored on your device by your browser when you visit srd9. The cookies used on srd9 fall into three categories:

srd9 does not use advertising cookies, retargeting pixels, or any third-party tracking technology designed to follow your activity across other websites. The analytics cookies used by srd9 are configured to anonymise IP addresses and do not create individual user profiles linked to your srd9 account.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block all cookies, accept only essential cookies, or delete existing cookies at any time. Please note that disabling essential cookies will prevent you from logging in to or using certain features of the srd9 platform. Instructions for managing cookies in popular browsers are available via your browser's help documentation.

srd9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The retention periods applied to each category of personal data are as follows:

• Account data (identity and contact): Retained for the duration of your active account, plus a minimum of 5 years after account closure, to satisfy financial record-keeping and anti-money laundering obligations.
• KYC documents (NID, passport, utility bills): Retained for the duration of the account relationship, plus 5 years following account closure. Documents that fail verification are deleted within 30 days of the failed verification outcome.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial compliance requirements.
• Game and betting history: Retained for 3 years from the date of each session, after which records are anonymised and aggregated for statistical purposes only.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless the communication forms part of an ongoing dispute or legal matter.
• Analytics and technical data (cookies, logs): Retained for up to 12 months, after which they are permanently deleted or anonymised.
• Marketing opt-in preferences: Retained until you withdraw consent, after which your contact details are removed from all marketing lists within 5 business days.

All srd9 data is stored on secure servers. Access to personal data is restricted on a strict need-to-know basis and is subject to role-based access controls. Regular access audits are conducted to ensure that data is available only to authorised personnel.

When personal data reaches the end of its retention period or a deletion request is fulfilled, srd9 permanently deletes the data from all active systems and backup stores. Deletion from backup systems may take up to 30 days from the deletion date due to backup rotation schedules.

Protecting the personal data of srd9 players is a continuous operational priority. The following technical and organisational security measures are in place across the srd9 platform:

• Transport encryption: All data transmitted between your browser and srd9 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. The srd9 domain enforces HTTPS across every page with HTTP Strict Transport Security (HSTS) headers.
• Password security: Player passwords are never stored in plain text. All passwords are hashed using a modern, salted hashing algorithm before storage. srd9 staff cannot retrieve your password — only a reset link can be generated.
• Two-factor authentication: srd9 offers SMS-based two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to protect against unauthorised access even if login credentials are compromised.
• Access controls: Internal access to player personal data is restricted to authorised staff on a role-based, need-to-know basis. All internal access is logged and subject to regular audit.
• Intrusion detection: srd9 operates continuous server-level monitoring and intrusion detection systems to identify and respond to suspicious activity in real time.
• Penetration testing: srd9 engages independent security professionals to conduct periodic penetration testing of the platform's infrastructure and web application layers.
• Payment data isolation: Full payment credentials (card numbers, bank PINs) are never stored on srd9 servers. Payments are processed via the respective payment provider's secure hosted environment; srd9 stores only a transaction reference.

While srd9 applies industry-standard security practices, no internet-based platform can guarantee absolute security. Players are also responsible for maintaining the confidentiality of their own login credentials and for using strong, unique passwords on their srd9 account.

As a registered player on srd9, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact srd9 support at [email protected] from your registered email address, clearly stating the right you wish to exercise and the specific data concerned.

• Right of access: You may request a copy of all personal data that srd9 holds about you. We will respond to access requests within 30 days. The information will be provided in a commonly used electronic format.
• Right to rectification: If any personal data srd9 holds about you is inaccurate or incomplete, you may request that it be corrected. Corrections to identity data may require re-submission of a KYC document for verification.
• Right to erasure: You may request deletion of your personal data. srd9 will fulfil erasure requests subject to any overriding legal obligations (for example, financial records required by law). Erasure requests will be processed within 30 days.
• Right to restrict processing: You may request that srd9 pause processing of your personal data in certain circumstances, for example if you dispute the accuracy of the data or object to its use for a specific purpose.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to srd9. This export will be provided in JSON or CSV format within 30 days.
• Right to withdraw marketing consent: If you have opted in to marketing communications, you may withdraw that consent at any time via your account settings or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of marketing sent prior to withdrawal.
• Right to object to processing: You may object to srd9's processing of your data where that processing is based on legitimate interests. srd9 will consider your objection and respond within 30 days, explaining whether the objection has been upheld and, if not, the grounds for continuing to process the data.

srd9 will not charge a fee for exercising any of the above rights under normal circumstances. If a request is manifestly unfounded or excessive, srd9 reserves the right to charge a reasonable administrative fee or decline to action the request, providing written reasons for doing so.

srd9 reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this policy, srd9 will notify registered players via their registered email address at least 14 days before the updated policy takes effect. The updated policy will also be published on this page with a revised effective date.

Your continued use of the srd9 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you should stop using srd9 and may request account closure by contacting our support team.

Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to contact information — may be made without advance notice and will be effective immediately upon publication.

srd9 takes all privacy enquiries seriously and will respond to every request in English. Players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all other regions of Bangladesh are equally entitled to exercise their rights under this policy, and all communications with our support team will be handled in English regardless of the player's location within Bangladesh.

This Privacy Policy is governed by and construed in accordance with applicable data protection principles. This document was last reviewed and updated on 1 January 2026. The version published on this page at any given time is the current, operative version.