stbet9 Privacy
Policy

1 Information We Collect

stbet9 collects personal information that is necessary to provide you with a secure, compliant, and personalised gaming experience. We collect information in three principal ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and from trusted third-party sources as part of our verification processes.

1.1 Information You Provide Directly

When you create a stbet9 account, make a deposit, request a withdrawal, or contact our support team, you provide us with personal information including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you are 18 years of age or older)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh)
• Email address and mobile phone number
• Username and encrypted account password
• Payment method details, including bKash account numbers, Nagad wallet IDs, Rocket numbers, Upay handles, and card numbers (stored in truncated form only)
• Identity documents submitted for KYC verification (National ID card, passport, driving licence)
• Communications you send to the stbet9 support team via live chat or email

1.2 Information Collected Automatically

When you access the stbet9 platform, our systems automatically record certain technical information about your session:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation paths within the platform
• Game activity logs including game titles accessed, bet amounts, outcomes, and timestamps
• Referral source (the URL or channel through which you arrived at stbet9.app)
• Cookie identifiers and similar tracking technology data (see Section 3 for full details)

1.3 Information from Third-Party Sources

stbet9 may supplement the information you provide with data obtained from reputable third-party sources in order to fulfil our legal obligations and improve platform security:

• Identity verification agencies used to validate KYC documents and confirm that submitted documents are genuine
• Payment processors including bKash, Nagad, Rocket, and Upay, which confirm transaction status and the registered ownership of payment accounts
• Fraud prevention and anti-money-laundering (AML) screening services that cross-reference your details against sanctions lists and politically-exposed-persons (PEP) databases
• Device fingerprinting services used to detect multiple accounts or suspicious login patterns

Data Category	Examples	Collection Method
Identity Data	Name, date of birth, NID number	Direct registration & KYC
Contact Data	Email, phone, address	Direct registration
Financial Data	bKash/Nagad number, card last 4 digits	Deposit/withdrawal forms
Technical Data	IP address, device type, browser	Automatic — platform logs
Usage Data	Games played, bets placed, session time	Automatic — game servers
Verification Data	Document scans, selfie photos	KYC submission portal
Communications Data	Support chat transcripts, emails	Support interactions

2 How We Use Your Data

stbet9 processes your personal data only for legitimate, defined purposes. We do not sell your personal data to third parties for their own marketing use under any circumstances. The specific purposes for which we process your data, and the legal basis for each, are set out below.

2.1 Account Creation and Management

We use your registration data to create and maintain your stbet9 account, authenticate your identity at login, process deposits and withdrawals, and communicate important account-related information to you. This processing is necessary for the performance of the contract between you and stbet9 — without it, we cannot provide the service.

2.2 Identity Verification and Regulatory Compliance

We are required to verify the identity of all players as part of our KYC and AML obligations. Your identity documents, date of birth, and payment method ownership details are processed to confirm that you are who you claim to be, that you are at least 18 years old, and that funds deposited to stbet9 originate from legitimate sources. This processing is carried out on the basis of legal obligation.

2.3 Fraud Prevention and Platform Security

We analyse IP addresses, device data, login patterns, and transaction histories to detect and prevent fraudulent activity, bonus abuse, money laundering, multi-accounting, and unauthorised access. This processing is carried out on the basis of our legitimate interest in maintaining a secure and fair gaming environment for all players.

2.4 Personalisation and Player Experience

We use your game activity and usage data to personalise your experience on the stbet9 platform, including surfacing games relevant to your preferences, offering contextually appropriate promotions (subject to your marketing preferences), and optimising the layout and features of the platform interface. This processing is carried out on the basis of our legitimate interest in providing a relevant and engaging experience.

2.5 Marketing Communications

Where you have opted in to marketing communications, stbet9 may send you promotional emails, SMS messages, or push notifications about bonuses, tournaments, new game launches, and seasonal promotions relevant to the Bangladesh market — including Eid, Pohela Boishakh, IPL season, and BPL tournament periods. You may withdraw your marketing consent at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the stbet9 platform.

2.6 Responsible Gaming Monitoring

stbet9 uses your gameplay and transaction data to monitor for patterns consistent with problem gambling behaviour, such as rapidly escalating bet sizes, extended unbroken session durations, and repeated rapid redeposit following significant losses. Where such patterns are detected, our responsible gaming team may reach out to offer support tools. This processing is carried out on the basis of our legitimate interest in player welfare and our commitment to responsible gaming standards.

2.7 Legal Proceedings and Dispute Resolution

We retain records of your account activity, transactions, and support communications to the extent necessary to resolve disputes, defend against legal claims, and comply with any formal legal request from a competent authority in Bangladesh. This processing is carried out on the basis of legal obligation and legitimate interests.

3 Cookies & Tracking Technologies

stbet9 uses cookies and similar tracking technologies on the stbet9.app platform to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the service. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your session — such as whether you are logged in, your preferred language settings, and items in your account preferences. Cookies cannot execute code or transmit viruses, and they cannot access other files on your device.

3.2 Categories of Cookies Used by stbet9

Cookie Type	Purpose	Duration	Can Be Disabled?
Strictly Necessary	Session authentication, CSRF protection, load balancing	Session	No — platform requires these
Functional	Remember language preferences, game lobby view settings	30 days	Yes — platform still works
Analytics	Anonymised page view counts, navigation path analysis	Up to 12 months	Yes
Performance	Game load time monitoring, error tracking	Up to 6 months	Yes
Marketing / Retargeting	Personalised promotional content (where consent given)	Up to 90 days	Yes — requires opt-in

3.3 Managing Your Cookie Preferences

You can manage or disable non-essential cookies at any time through your browser settings. Most modern browsers — including Chrome, Firefox, Samsung Internet (widely used on Android devices in Bangladesh), and Opera Mini — provide options to block or delete cookies. Please note that disabling cookies classified as "Strictly Necessary" will prevent you from logging in to your stbet9 account, as these cookies are essential for session security.

3.4 Local Storage and Similar Technologies

In addition to cookies, stbet9 may use browser local storage and session storage to preserve your platform preferences across page loads within a single session. These mechanisms do not transmit data to external servers and are cleared when you close your browser session or log out of your stbet9 account.

4 Data Sharing & Disclosure

stbet9 does not sell, rent, or trade your personal data to any third party for commercial gain. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

4.1 Service Providers and Technology Partners

stbet9 works with carefully selected third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, and Dutch-Bangla Bank) — to process deposits and withdrawals
• KYC and identity verification platforms — to validate the authenticity of identity documents submitted by players
• Cloud hosting and server infrastructure providers — who store platform data in secure, access-controlled environments
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — who receive anonymised session tokens to authenticate game sessions; these providers do not receive your full identity data
• Fraud detection and AML screening services — who cross-reference your data against watchlists and sanctions databases as part of our compliance programme
• Customer support platform providers — who process support chat transcripts under strict data processing agreements

All third-party service providers are bound by written data processing agreements that prohibit them from using your personal data for any purpose other than providing the specific service contracted by stbet9.

4.2 Legal and Regulatory Disclosure

stbet9 may disclose your personal data to competent governmental or regulatory authorities in Bangladesh, or to law enforcement agencies, where we are required to do so by applicable law, by a valid court order, or by a formal regulatory request. In such cases, stbet9 will disclose only the data specifically requested and will, where permitted by law, notify the affected player of the disclosure.

4.3 Business Transfers

In the event that stbet9 undergoes a corporate restructuring, merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, stbet9 will take reasonable steps to ensure that the successor entity provides data protection standards at least equivalent to those described in this Privacy Policy, and will notify affected players via their registered email address prior to any transfer taking effect.

4.4 Protection of stbet9 and Other Players

Where stbet9 reasonably believes that disclosure is necessary to prevent fraud, money laundering, illegal activity, or serious harm to stbet9 or other players, we may share relevant data with trusted law enforcement or regulatory partners. Such disclosures will always be proportionate to the specific risk and documented accordingly.

5 Data Retention

stbet9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of data we hold:

Data Category	Retention Period	Basis for Retention
Account registration data	Duration of account + 5 years after closure	Legal obligation (AML record-keeping)
KYC identity documents	Duration of account + 5 years after closure	Legal obligation (KYC regulations)
Financial transaction records	Duration of account + 7 years after closure	Legal obligation (financial records)
Game activity logs	Duration of account + 2 years after closure	Legitimate interest (disputes, audits)
Support communications	3 years from last interaction	Legitimate interest (dispute resolution)
Marketing preference records	Duration of consent + 3 years	Legal obligation (consent records)
Technical/session logs	Up to 13 months	Legitimate interest (security monitoring)
Cookie and analytics data	Up to 12 months (see Section 3)	Legitimate interest (platform analytics)

Following the expiry of the applicable retention period, stbet9 will securely delete or irreversibly anonymise your personal data so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

6 Data Security Measures

stbet9 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

6.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and the stbet9 platform is encrypted using 256-bit SSL/TLS protocols, the same standard applied by major Bangladeshi financial institutions including BRAC Bank, City Bank, and Dutch-Bangla Bank.
• Password Hashing: Account passwords are never stored in plain text. stbet9 applies industry-standard one-way cryptographic hashing with individual salts to all stored passwords.
• Database Encryption: Sensitive data fields — including identity document details and payment method references — are encrypted at rest within the stbet9 database infrastructure.
• Firewalls and Intrusion Detection: The stbet9 platform sits behind enterprise-grade firewall systems supplemented by real-time intrusion detection and prevention tools that monitor for anomalous traffic patterns.
• Two-Factor Authentication (2FA): stbet9 supports optional two-factor authentication for player accounts, adding a second verification layer beyond the account password.
• Access Controls: Access to personal data within stbet9's internal systems is restricted on a strict need-to-know basis. Staff access is logged, periodically reviewed, and revoked immediately upon any change in role.

6.2 Organisational Security Measures

In addition to technical controls, stbet9 maintains organisational policies that support data security, including mandatory data protection training for all staff who handle personal data, a formal incident response plan that governs how stbet9 responds to suspected data breaches, and regular internal security reviews of data handling procedures and access logs.

6.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, stbet9 will notify affected players via their registered email address without undue delay. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences of the breach, and the steps stbet9 has taken or proposes to take to address it.

7 Your Data Rights

As a stbet9 player, you have a number of rights in relation to your personal data. stbet9 is committed to enabling you to exercise these rights efficiently and without unnecessary barriers. Requests related to your data rights should be submitted to [email protected] with the subject line "Data Rights Request" and will be acknowledged within 72 hours.

stbet9 will respond to all verified data rights requests within thirty (30) calendar days of receiving the request. In cases of complexity or high volume, this period may be extended by a further two months, in which case stbet9 will notify you of the extension and the reason within the initial 30-day period. There is no charge for exercising your data rights, except where requests are manifestly unfounded or excessive.

8 Contact & Complaints

If you have any questions about this Privacy Policy, about how stbet9 handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact the stbet9 data protection team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 at stbet9.app — average response time under 3 minutes during Bangladesh Standard Time (BST, UTC+6) daytime hours
• Response Time: Email enquiries will receive an initial acknowledgement within 72 hours and a substantive response within 14 business days

8.1 Complaints

If you are not satisfied with stbet9's response to your privacy enquiry or data rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. stbet9 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation initiated by a competent authority.

8.2 Policy Updates

stbet9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, stbet9 will notify registered players via their registered email address at least 14 days before the updated policy takes effect. The version number and effective date at the top of this page will always reflect the most current version. Continued use of the stbet9 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.