polo9 Privacy Policy
At polo9, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains exactly what personal data polo9 collects from users in Bangladesh, why we collect it, how we use and protect it, and what rights you have over your own information. We believe transparent data practices are inseparable from a trustworthy betting platform.
1. Who We Are
polo9 operates the online betting and casino platform accessible at polo9.io. For the purposes of this Privacy Policy, polo9 is the data controller responsible for the personal information you provide when creating an account, placing bets, making deposits or withdrawals, contacting support, or otherwise interacting with the polo9 platform.
polo9 is built specifically for the Bangladesh market. Our platform is designed to serve Bangladeshi players aged 21 and above who enjoy cricket betting, live casino games, and slot games, with full support for local payment methods including bKash, Nagad, Rocket, and Upay. Our primary support language is English, and all privacy-related communications will be conducted in English.
If you have any questions about this Privacy Policy or about how polo9 handles your personal data, you may contact our dedicated privacy support team at [email protected] at any time. Our team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6).
2. Data We Collect
polo9 collects the following categories of personal data from users of the platform. The specific data points collected may vary depending on the nature of your interaction with polo9 — for example, a user who only browses the platform without registering will have a smaller data footprint than a fully registered and verified account holder.
2.1 Identity and Registration Data
- Full legal name (as it appears on your national identity document)
- Date of birth (used to verify the 21+ age requirement)
- Bangladesh National ID (NID) number or passport number
- Residential address (city, district, and postal area within Bangladesh)
- Username and hashed password for your polo9 account
- Profile photo or selfie (if submitted as part of enhanced KYC verification)
2.2 Contact Data
- Email address (used for account communications, transaction confirmations, and support)
- Mobile phone number (used for account security, deposit/withdrawal verification via bKash, Nagad, or Rocket)
2.3 Financial and Transaction Data
- Deposit and withdrawal transaction records (amounts in BDT, timestamps, payment method used)
- bKash, Nagad, Rocket, or Upay mobile wallet account references (not full wallet credentials)
- Bank account name and branch (for bank transfer methods including Dutch-Bangla Bank, BRAC Bank, City Bank)
- Visa or Mastercard partial card number (last four digits only; full card numbers are processed exclusively by our certified payment gateway partner and are never stored by polo9)
- Bonus redemption history and polo9 Coin balance records
2.4 Betting and Gaming Activity Data
- Individual bet records: market selected, stake amount in BDT, odds at time of placement, outcome, and settlement result
- Live casino session records: game title, provider (Evolution Gaming, Ezugi, Pragmatic Play Live), session duration, stakes, wins and losses
- Slot game records: game title, provider, spin history, RTP information as recorded by the provider
- Account balance history over time
2.5 Technical and Device Data
- IP address at time of registration, login, and each session
- Device type, operating system version, and browser type/version
- Approximate geolocation derived from IP (country and city level only — polo9 does not request or use GPS-level location data)
- Session timestamps, page navigation patterns, and feature interaction logs
- Cookie identifiers and similar tracking tokens (see Section 7)
2.6 Support and Communications Data
- Content of support emails and chat transcripts when you contact polo9
- Records of responsible gaming tool requests (deposit limit changes, self-exclusion requests, session reminder settings)
- Complaint and dispute records
3. How We Collect Your Data
polo9 collects personal data through the following channels:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or use any interactive feature on the polo9 platform.
- Automatically — when you visit polo9.io, our servers automatically record technical data including your IP address, browser type, device details, and session behaviour. This data is collected via server logs and cookies.
- From payment providers — when you complete a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank partner, the payment provider confirms the transaction reference and the sending account identifier to polo9 for reconciliation and fraud prevention purposes.
- From game providers — providers such as Evolution Gaming, Pragmatic Play, and NetEnt transmit session outcome data back to polo9 to enable correct settlement of bets, calculation of winnings, and maintenance of accurate account balances.
- From identity verification services — when enhanced KYC is required, polo9 may use a third-party identity verification partner to cross-check document authenticity and confirm that the submitted identity matches the account holder.
4. Why We Use Your Data
polo9 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not described in this policy without first obtaining your explicit consent.
| Purpose | Data Categories Used |
|---|---|
| Account creation and authentication | Identity data, contact data, technical data |
| Age verification (21+ compliance) | Identity data (date of birth, NID/passport) |
| Processing deposits and withdrawals | Financial data, identity data, contact data |
| Settling bets and gaming sessions | Betting and gaming activity data, financial data |
| Fraud prevention and anti-money laundering | All categories as required by AML obligations |
| Responsible gaming monitoring | Betting activity, financial data, communications data |
| Customer support | Identity data, communications data, transaction data |
| Platform improvement and analytics | Technical data, aggregated/anonymised activity data |
| Promotional communications (opted-in users only) | Contact data, activity data |
| Legal and regulatory compliance | All categories as required by applicable law |
5. Legal Basis for Processing
polo9 processes your personal data under the following legal bases. We are committed to processing data only where a valid legal justification exists.
- Contractual necessity: The majority of data processing on polo9 is necessary to perform the contract between polo9 and you as a registered user — including account management, processing transactions, and settling bets. Without this data, polo9 cannot deliver its core services.
- Legal obligation: polo9 is required by applicable law to conduct identity verification, retain transaction records, and cooperate with lawful requests from authorities. Processing for these purposes is mandatory and cannot be refused without polo9 breaching its legal obligations.
- Legitimate interests: polo9 processes certain technical and behavioural data for fraud prevention, platform security, and service improvement. These processing activities are necessary to protect the integrity of the platform and the interests of all users.
- Consent: For marketing communications and any non-essential cookies, polo9 relies on your explicit, freely given consent. You may withdraw consent at any time without prejudice to your account access.
6. Data Sharing and Disclosure
polo9 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the specific, limited circumstances described below.
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card payment gateway partners receive only the minimum data required to process your specific transaction. These partners are bound by their own privacy and data security standards.
- Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and other integrated game providers receive a session token and stake/outcome data to operate the game. They do not receive your full identity or payment data via polo9.
- Identity verification partners: When KYC is performed, your identity documents and facial image are transmitted securely to our verification partner for authentication. These partners are contractually bound to use the data solely for that verification purpose.
- Legal authorities: polo9 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal instrument such as a court order, lawful search warrant, or regulatory notice. polo9 will not voluntarily disclose user data to authorities beyond what is legally required.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of polo9's business, user data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
7. Cookies and Tracking Technologies
polo9 uses cookies and similar tracking technologies on polo9.io to ensure the platform functions correctly, to maintain your login session, and to understand how users interact with the site so we can improve it. The following categories of cookies are used on polo9.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential / Functional | Maintain your login session, remember language preference, enable core platform features such as bet placement and deposit flow | Yes — cannot be disabled without breaking core functionality |
| Analytics | Understand aggregate user behaviour — most-visited pages, average session length, feature adoption rates — using anonymised data. polo9 does not use third-party analytics that share your data externally. | No — consent required |
| Fraud Prevention | Detect and prevent suspicious login patterns, credential stuffing, and unusual transaction behaviour by fingerprinting device characteristics | Yes — necessary for platform security |
| Preference | Remember your display preferences such as odds format and notification settings across sessions | No — consent required |
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair or prevent core polo9 functionality. polo9 does not use advertising or retargeting cookies that track your activity across third-party websites.
8. Data Retention
polo9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as general guidelines.
| Data Category | Retention Period |
|---|---|
| Account identity and KYC documents | Duration of the account relationship, plus 5 years after account closure |
| Financial transaction records | 7 years from the date of the transaction (standard financial record-keeping obligation) |
| Betting and gaming session logs | 3 years from the date of the session |
| Support communications | 3 years from the date of the last communication in a thread |
| Technical and device logs | 13 months from date of collection |
| Marketing preference records | Until you withdraw consent, plus 1 year as evidence of consent history |
When retention periods expire, polo9 will securely delete or anonymise the relevant data. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and platform improvement purposes.
9. Your Rights Over Your Data
As a polo9 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact polo9 at [email protected]. polo9 will respond to all valid requests within 30 days of receipt.
- Right of access: You may request a copy of all personal data polo9 holds about you. polo9 will provide this in a structured, commonly used, machine-readable format upon verified request.
- Right to rectification: If any personal data polo9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that corrections to identity data may require re-submission of KYC documents.
- Right to erasure ("right to be forgotten"): You may request that polo9 delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to polo9's legal retention obligations — data required to be kept by law cannot be erased ahead of schedule.
- Right to restriction of processing: In certain circumstances (for example, where you contest the accuracy of data polo9 holds), you may request that polo9 restrict processing of your data while the issue is resolved.
- Right to data portability: You have the right to receive personal data you have provided to polo9 in a structured, machine-readable format, and to request that this data be transmitted to another data controller where technically feasible.
- Right to object: You have the right to object to polo9 processing your data on the basis of legitimate interests, including profiling for responsible gaming monitoring. polo9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where polo9 processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
10. Data Security
polo9 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:
- 256-bit SSL/TLS encryption on all data transmitted between your device and polo9.io, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
- Encrypted storage for sensitive data including hashed passwords (using bcrypt or equivalent), KYC document images, and financial records at rest.
- Access controls restricting polo9 employee access to personal data on a strict need-to-know basis. Staff who handle personal data are trained in data protection obligations and are subject to confidentiality agreements.
- Regular security assessments including vulnerability scanning and penetration testing of the polo9 platform infrastructure.
- Fraud monitoring systems that detect anomalous login patterns, unusual transaction behaviour, and potential account takeover attempts in real time.
- While polo9 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Users are responsible for keeping their own login credentials confidential and for using strong, unique passwords. If you suspect unauthorised access to your polo9 account, contact [email protected] immediately.
11. Children's Privacy and the 21+ Rule
polo9 is strictly an adults-only platform. Users must be aged 21 years or older to register an account, place bets, or participate in any gaming activity on polo9. polo9 does not knowingly collect personal data from individuals under the age of 21.
Age verification is performed as part of the KYC process using government-issued identity documents. If polo9 discovers that a user has provided false information about their age and is under 21, the account will be immediately and permanently closed, all balances (including deposits and winnings) will be forfeited, and any personal data collected in connection with that account will be retained only for the legally mandated period required for compliance and fraud prevention purposes before being securely deleted.
12. Third-Party Links and Game Providers
The polo9 platform integrates games and services from third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. When you launch a game from one of these providers, you interact with software operated by that provider. Each provider maintains their own privacy and data security practices, which govern the limited session data transmitted during gameplay.
polo9 is not responsible for the privacy practices of third-party game providers or payment partners beyond the contractual data processing obligations polo9 imposes on them as data processors. polo9's Privacy Policy applies only to data processed by polo9 directly in connection with your polo9 account and your use of polo9.io. polo9 does not control any third-party websites that may be linked to or from polo9.io — such links are provided for reference only and do not constitute an endorsement by polo9 of the privacy practices of those sites.
13. Changes to This Privacy Policy
polo9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. Where changes are material — meaning they significantly affect the way polo9 collects, uses, or shares your personal data — polo9 will provide advance notice via the platform and by email to your registered address at least 14 days before the changes take effect.
For non-material changes such as typographical corrections, formatting updates, or clarifications that do not alter the substance of polo9's data practices, the updated policy will be published on this page without advance notice. The effective date displayed at the top of this page will be updated to reflect the date of the most recent revision.
Continued use of the polo9 platform after revised Terms have been published constitutes acceptance of the updated Privacy Policy. If you do not accept the revised policy, you should stop using polo9 and contact our support team to request account closure and data deletion in accordance with your rights under Section 9 of this policy.
14. Contact Us About Privacy
polo9 is committed to handling all privacy-related enquiries transparently and promptly. If you have questions about this Privacy Policy, wish to exercise any of your data rights, want to report a potential data security incident, or have a complaint about how polo9 has handled your personal information, please contact us using the details below.
Please mark your email with the subject line "Privacy Request" or "Data Rights Request" so our team can route it to the correct handler. polo9 aims to acknowledge all privacy-related emails within 4 hours on Bangladesh Standard Time (UTC+6) and to provide a substantive response within 30 days. For urgent matters such as suspected account takeover or data breach reports, our security team prioritises responses within 2 hours around the clock.
If you are not satisfied with polo9's response to a privacy complaint, you have the right to escalate the matter by replying to your support thread and requesting escalation to a senior compliance representative. polo9 treats all unresolved privacy complaints as a priority matter and will engage with you in good faith to reach a satisfactory resolution.
Our Six Privacy Commitments
polo9's approach to data privacy is built on six principles that govern every decision we make about your personal information. Here is what each commitment means in practice for players across Bangladesh.
polo9 collects only the data that is genuinely necessary to operate your account and deliver our services. We do not ask for information we do not need. Every data field collected on polo9 has a documented, specific purpose tied to account management, payment processing, or legal compliance.
polo9 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is used exclusively to operate the polo9 platform and fulfil our legal obligations. We do not monetise your data profile.
All data transmitted between your device and polo9.io is protected by 256-bit SSL/TLS encryption. Sensitive stored data including passwords and KYC documents is encrypted at rest. Your financial details are never stored in plain text on polo9 servers.
polo9 fully supports your right to access, correct, export, restrict, or delete your personal data. All valid data rights requests are acknowledged within 4 hours and resolved within 30 days. Submit your request any time to [email protected] and our privacy team will handle it with care.
polo9 publishes a clear, plain-English Privacy Policy that explains exactly what data is collected, why it is collected, how long it is kept, and who it is shared with. We update this policy whenever our practices change and notify registered users of any material amendments at least 14 days in advance.
polo9 does not hold your data indefinitely. Every category of data has a clearly defined retention schedule. When the retention period expires, data is securely deleted or anonymised. We do not accumulate personal data beyond what our legal and operational obligations require.
Ready to Play on polo9?
Now that you understand how polo9 protects your privacy and personal data, explore what Bangladesh's most trusted online betting platform has to offer — from live cricket markets and premium slots to a world-class live casino experience.