gaya9 Privacy Policy — Your Data, Your Rights

We are committed to protecting the personal information of every gaya9 player in Bangladesh. This policy explains exactly how we do that.

Last Updated: January 2026
🔒
gaya9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your information is used only to operate the platform, process payments, meet legal obligations, and improve your experience on gaya9.

This Privacy Policy ("Policy") describes how gaya9 ("we", "us", "the Platform") collects, uses, stores, and discloses personal information about users ("you", "Player") of the gaya9 online casino and sportsbook platform, accessible at gaya9.asia. This Policy applies to all services provided by gaya9 including account registration, deposits, withdrawals, gameplay, customer support interactions, and marketing communications. By creating an account or using the gaya9 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

gaya9 takes data protection seriously. This Policy is written in plain, accessible English so that every player in Bangladesh — from Dhaka to Cox's Bazar — can understand exactly what information we hold about them, why we hold it, how long we keep it, who we share it with, and what rights they have in relation to it. If you have any questions about this Policy or wish to exercise your data rights, please contact our support team via live chat at any time.

Information We Collect

gaya9 collects personal information only when it is necessary to provide services or meet legal requirements.

SECTION 1.1
Account Registration Data
When you create a gaya9 account, we collect: your full legal name, date of birth (to verify you are 21 or older), mobile phone number (used as your primary account identifier), and any other details you voluntarily provide during registration. This information is required to create and maintain your account, verify your identity, and comply with age verification obligations.
SECTION 1.2
Identity Verification (KYC) Data
When we are required to perform KYC verification — either as part of our standard verification process or in response to a withdrawal request above a threshold — we may collect copies of your National Identity Card (NID), a selfie photograph, and documentation confirming ownership of the payment account used for deposits. KYC documents are stored securely and used solely for identity verification and anti-fraud purposes. We do not store images of payment card numbers in full.
SECTION 1.3
Transaction & Payment Data
gaya9 records all financial transactions made through your account including deposit amounts, withdrawal amounts, dates and times, and the mobile financial service provider used (bKash, Nagad, Rocket, or Upay). Transaction records are retained for a minimum of 5 years in accordance with financial record-keeping requirements. We do not store your bKash, Nagad, Rocket, or Upay PIN or password at any point.
SECTION 1.4
Technical & Usage Data
When you access gaya9, our servers automatically log certain technical information including your IP address, device type and operating system, browser type and version, pages visited, session duration, game activity logs (games played, bet amounts, game outcomes), and error logs. This technical data is used for platform security, fraud detection, and service improvement. It does not identify you personally on its own but may be combined with your account data for the purposes described in this Policy.

How We Use Your Information

Your personal information is used for the following specific purposes only.

🎮
Platform Operation
To create and maintain your account, process deposits and withdrawals via bKash and Nagad, calculate and credit bonuses, resolve support queries, and deliver a functional, personalised gaming experience on gaya9.
💳
Payment Processing
To verify the ownership and authenticity of payment accounts used for deposits, prevent fraudulent transactions, comply with financial monitoring requirements, and ensure that withdrawals are sent only to accounts belonging to the verified account holder.
🛡️
Security & Fraud Prevention
To detect and investigate suspicious activity, identify attempts to circumvent platform rules (such as operating multiple accounts), monitor for signs of underage gambling, enforce responsible gaming policies, and protect the integrity of games and sports markets.
📣
Marketing Communications
To send you promotional offers, bonus notifications, and platform updates via SMS or push notification to your registered mobile number — but only if you have not opted out of marketing communications. You can opt out at any time by contacting support or updating your account notification preferences.

gaya9 does not use your personal data for automated decision-making that produces legal effects or similarly significant effects without human review. Any account restriction, suspension, or closure decision involving disputed circumstances is reviewed by a human member of the gaya9 team before being finalised. If you believe an automated decision has negatively affected your account unfairly, you have the right to request a manual review by contacting support.

Data Sharing & Third Parties

gaya9 shares player data only in limited, defined circumstances as described below.

SECTION 3.1
Service Providers
gaya9 shares necessary data with third-party service providers who assist in operating the platform, including: game suppliers (Evolution Gaming, Pragmatic Play, Spribe, and others) who require session tokens and bet data to deliver games; mobile financial service providers (bKash, Nagad) for payment processing; and fraud detection and KYC verification service providers. All such providers are contractually bound to use your data solely for the purpose for which it was shared and to maintain appropriate security standards.
SECTION 3.2
Legal & Regulatory Disclosure
gaya9 may disclose your personal information to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of gaya9, its players, or the public. In such cases, gaya9 will disclose only the minimum amount of information required by the legal obligation and will, where legally permitted, notify you of the disclosure.
SECTION 3.3
Business Transfers
In the event of a merger, acquisition, sale of assets, or other corporate transaction affecting gaya9, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the Privacy Policy of the successor entity before it takes effect. If the successor entity's privacy practices materially differ from this Policy, you will be given the opportunity to close your account and withdraw your balance before the transfer takes effect.

gaya9 will never sell, rent, license, or otherwise transfer your personal data to third parties for their own marketing, advertising, or commercial purposes. Any sharing of data beyond the circumstances described in this section is strictly prohibited under gaya9's internal data handling policies and requires explicit written authorisation from gaya9 senior management before it can occur.

Cookies & Tracking Technologies

gaya9 uses cookies and similar technologies to operate the platform and improve your experience.

SECTION 4.1
Types of Cookies Used
gaya9 uses the following categories of cookies: (a) Essential cookies — required for the platform to function correctly, including session management, login state, and security tokens; (b) Analytics cookies — used to understand how players navigate the platform, which games are most popular, and where technical errors occur, so we can improve performance; (c) Preference cookies — used to remember your language preference and other display settings. gaya9 does not use third-party advertising cookies or tracking pixels that follow you across other websites.
SECTION 4.2
Managing Cookies
You can control cookie behaviour through your mobile browser settings. Most mobile browsers allow you to view, delete, and block cookies. Note that disabling essential cookies will prevent the gaya9 platform from functioning correctly — for example, you will not be able to stay logged in between pages. Disabling analytics cookies will not affect your ability to use the platform but will prevent us from improving it based on usage data.

gaya9 does not use browser fingerprinting, ultrasonic beacons, or any tracking technology that operates beyond the scope described in this section. The analytics data collected by gaya9 is stored on gaya9's own servers and is not shared with third-party advertising networks. If you use a VPN or proxy service, your apparent IP address may differ from your actual location — this does not affect how gaya9 handles your personal data, but may affect the payment methods available to you.

Data Security

gaya9 implements multiple layers of technical and organisational security to protect your personal data.

🔐
SSL Encryption in Transit
All data transmitted between your device and gaya9 servers is encrypted using TLS (Transport Layer Security). This means that your login credentials, payment information, and personal data cannot be intercepted in transit by third parties. The gaya9 platform operates exclusively over HTTPS — unencrypted HTTP connections are rejected.
🗄️
Secure Data Storage
Player personal data and transaction records are stored on servers protected by industry-standard access controls, including role-based access restrictions (only gaya9 staff with a legitimate operational need can access player data), encryption at rest for sensitive fields such as passwords and KYC documents, and regular security audits. KYC documents are stored in isolated environments with additional access controls beyond those applied to standard account data.
👁️
Ongoing Security Monitoring
gaya9 continuously monitors platform activity for signs of unauthorised access, data breaches, or anomalous behaviour. In the event of a data breach that affects your personal information, gaya9 will notify affected players within a reasonable timeframe, describe the nature of the breach, the categories of data affected, and the steps taken to contain and remediate the incident.

While gaya9 implements all reasonable measures to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure: never share your password with anyone, use a strong and unique password for your gaya9 account, and contact support immediately if you suspect your account has been compromised. Remember that gaya9 will never ask for your password via any communication channel.

Your Data Rights

As a gaya9 player, you have the following rights in relation to your personal data.

👁️Right to Access your data
✏️Right to Correct inaccurate data
🗑️Right to Delete your account data
📦Right to Data Portability
🚫Right to Object to marketing use
📧Right to Withdraw consent at any time

To exercise any of these rights, contact the gaya9 support team via live chat and identify yourself. We will respond to data rights requests within 30 days. Some rights are subject to legal limitations — for example, we are required to retain transaction records for a minimum period regardless of a deletion request, and we cannot delete data that is subject to an ongoing fraud investigation or legal hold.

If you are not satisfied with our response to a data rights request, you have the right to escalate your complaint to our senior support team. gaya9 takes all data rights requests seriously and is committed to resolving them fairly and transparently. We do not charge fees for exercising your data rights, and we will not penalise you for making a legitimate data rights request.

Data Retention & Protection of Minors

We retain your data only for as long as necessary and take extra steps to protect underage individuals.

SECTION 6.1
Data Retention Periods
Account data is retained for the duration of your account and for a period of 5 years after account closure, in line with standard financial record-keeping requirements. Transaction records are retained for a minimum of 5 years. KYC documents are retained for 5 years after the last transaction associated with the verified account. Technical log data (IP addresses, session data) is retained for up to 12 months. Marketing preference data is retained until you withdraw your consent or close your account. After the applicable retention period, data is securely deleted or anonymised.
SECTION 6.2
Protection of Minors
gaya9 is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21, we will immediately close the associated account, void all transactions made through it, and securely delete the personal data collected. If you believe that a minor has registered on gaya9, please contact our support team immediately via live chat so we can investigate and take appropriate action.

gaya9 uses age verification checks at registration and may perform additional verification at any time where we have reason to believe a player may be under the age of 21. Accounts flagged as potentially underage are immediately suspended pending verification. We take our obligations regarding the protection of minors extremely seriously — responsible gaming and child protection are non-negotiable priorities for gaya9.

Your privacy matters to us. gaya9 uses your data only to deliver a safe, secure, and enjoyable gaming experience — never to sell or exploit it. Questions? Our support team is available 24/7 via live chat.

Have Questions About Your Privacy?

Our FAQ covers common questions about data and security. You can also visit your account settings to manage your data preferences and marketing opt-outs.

Go to gaya9 Login Read Our FAQ Responsible Gaming