spi9 Privacy Policy

Who We Are

spi9 operates the online casino and sports betting platform at spi9.xyz. We offer games from providers including JILI, Evolution, Pragmatic Play, Spribe, Playtech, Ezugi, and JDB. Players in Bangladesh can deposit and withdraw using bKash, Nagad, Rocket, and Bank Transfer. This Privacy Policy covers all data processing activities carried out through spi9.xyz and the spi9 Android app.

For any privacy-related question, use the 24/7 Live Chat from your spi9 account dashboard. Do not send personal documents over social media or unverified channels.

Information spi9 Collects

spi9 only collects information that is necessary to run a safe, fair betting platform. The table below gives a clear breakdown.

spi9 does not collect or store full payment card numbers, because we do not offer card-based deposits. Mobile wallet transaction data is handled through the respective payment provider's secure API.

Why We Collect It

Each piece of data serves a specific purpose at spi9. There is no collection "just in case."

• Account management: Registration data lets us create, maintain, and protect your spi9 account.
• KYC and fraud prevention: Identity documents are required before your first withdrawal to confirm you are who you say you are and to prevent underage gambling.
• Payment processing: We need your bKash, Nagad, or Rocket details to send and receive funds. Deposits clear in about 2 minutes; withdrawals in about 13 minutes once KYC is complete.
• Responsible gaming: Activity data helps us spot unusual patterns and offer self-exclusion or deposit limits when needed.
• Platform security: Device and IP data helps us detect unauthorised logins and block suspicious access.
• Customer support: Chat logs let agents follow up on unresolved issues without asking you to repeat yourself.
• Legal obligations: Anti-money laundering (AML) rules require spi9 to keep transaction records for a minimum period.

Legal Basis for Processing

spi9 processes your data under the following grounds:

• Contract performance: Processing needed to provide the service you signed up for — your account, deposits, withdrawals, game access.
• Legal obligation: KYC, AML, and transaction record-keeping requirements.
• Legitimate interests: Fraud detection, platform security, and improving game performance.
• Consent: Promotional emails or SMS — only if you opted in. You can withdraw consent at any time through the notification settings in your spi9 account.

When spi9 Shares Your Data

spi9 does not sell your personal data. We share information only where it is necessary to deliver the service:

Game providers

Providers such as Evolution, Pragmatic Play, and JILI receive a session token and your account ID so games load correctly. They do not receive your NID or payment details.

Payment processors

bKash, Nagad, Rocket, and Bank Transfer partners receive only the transaction data required to process a deposit or withdrawal. spi9 does not store your full mobile wallet PIN.

KYC verification services

A third-party identity verification provider reviews documents you submit. This provider is contractually bound to use your data only for the verification purpose and to delete raw document images after review.

Legal and regulatory authorities

spi9 will disclose data to law enforcement or regulatory bodies when legally required to do so. We will notify you if permitted by law.

Analytics tools

Aggregated, anonymised usage statistics may be shared with analytics partners to improve platform performance. No personally identifiable information is included.

How Long We Store Your Data

spi9 keeps your data only as long as necessary:

• Active account: All account and activity data is held for the duration of your account.
• Closed account: Transaction records are kept for at least 5 years after account closure to meet AML obligations.
• KYC documents: Identity documents are retained for 5 years from submission, then securely deleted.
• Support chat logs: Kept for 2 years to allow follow-up on disputes.
• Marketing consent records: Kept until you withdraw consent, then deleted within 30 days.

Security Measures

spi9 takes technical security seriously. Key measures include:

• TLS 1.3 encryption for all data in transit between your device and spi9 servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents.
• Two-factor authentication (2FA) available on all spi9 accounts.
• Regular third-party penetration testing and vulnerability scans.
• Strict role-based access — support staff can only see the data fields needed for their task.
• Automated alerts for logins from new devices or unusual locations.

No system is completely immune to risk. If a breach affecting your data occurs, spi9 will notify you promptly through your registered mobile number or email.

Cookies and Tracking

The spi9 website uses cookies and similar technologies. Here is what each type does:

The spi9 Android app uses device-local storage rather than browser cookies, but follows the same data-minimisation principles. You can clear app data at any time from your Android settings.

Your Rights Over Your Data

As a spi9 player, you have the following rights. To exercise any of them, open a support ticket via 24/7 Live Chat from your account dashboard.

• Access: Request a copy of all personal data spi9 holds about you. We will respond within 30 days.
• Correction: Ask us to fix inaccurate information — for example, a misspelled name or wrong date of birth on your account.
• Deletion: Request deletion of your data. Note that some records (KYC and transaction data) must be retained under AML law and cannot be erased before the legal retention period ends.
• Restriction: Ask spi9 to pause processing while a dispute is being resolved.
• Portability: Receive your account and activity data in a structured, machine-readable format (JSON or CSV).
• Withdraw consent: For any processing based on consent (such as marketing messages), you can withdraw at any time without affecting any other part of your spi9 account.

spi9 will not charge a fee for handling these requests. If a request is complex or you submit multiple requests in a short period, we may extend the response time to 60 days and will let you know.

Players Under 18

spi9 does not knowingly collect data from anyone under 18. You must be at least 18 years old to register. During KYC verification, we check your date of birth against your NID or Passport. If we discover that an account belongs to someone under 18, it will be closed immediately and any remaining balance returned to the payment source. If you believe a minor has registered on spi9, contact our support team right away.

Updates to This Policy

spi9 may update this Privacy Policy when our practices change or when legal requirements are updated. When we make a significant change, we will:

• Post the updated policy at spi9.xyz/privacy-policy/ with a new "Last updated" date.
• Send a notification to your registered mobile number or email if the change affects how we use your existing data.

Continuing to use spi9 after a policy update means you accept the revised terms. If you disagree with a change, you can close your account and request data deletion before the update takes effect.

Reach the Privacy Team

For any question about this Privacy Policy, your data, or a specific request, the fastest route is the 24/7 Live Chat in your spi9 account dashboard. Select the topic "Privacy & Data" when opening the conversation so it reaches the right team.

spi9 does not publish an email address for privacy requests — all data-related requests are handled through Live Chat to keep a secure, verifiable record of the conversation.

We aim to acknowledge all privacy requests within 24 hours and resolve them within 30 days.