Legal Document

koya9 Privacy Policy — Your Data, Your Rights

koya9 is committed to protecting the privacy of every player on our platform. This document explains what personal data we collect, how we use it, and the controls available to you as a registered player in Bangladesh.

Introduction


Last updated: January 2026

This Privacy Policy ("Policy") describes how koya9 ("Platform", "we", "us", "our") collects, uses, stores, and protects personal information provided by or collected about players ("you", "your") who access and use the koya9 online gaming platform available at koya9.club. This Policy applies to all services offered through the Platform, including live casino, cricket betting, slots, crash games, fish shooting games, and all related promotional programmes.

By registering an account on koya9, accessing any game, or otherwise using the Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform. We recommend reading this Policy periodically as it may be updated from time to time.

Your privacy matters: koya9 does not sell, rent, or commercially trade your personal data to third-party marketers. Your data is used solely to operate the Platform, process transactions, comply with legal obligations, and improve your experience as a player.

Our Privacy Commitments at a Glance

🔒
SSL Encrypted
All data transmitted between your device and the koya9 platform is protected with SSL encryption at all times.
🚫
No Data Selling
We never sell or rent your personal data to advertisers, marketers, or any other commercial third parties.
👁️
Transparent Use
We tell you clearly what data we collect and why. No hidden data collection beyond what is described in this Policy.
🛡️
Your Rights
You have the right to access, correct, or request deletion of your personal data held by koya9 at any time.

1. What Personal Data We Collect


koya9 collects personal data only to the extent necessary to operate the Platform, process transactions, comply with applicable legal and regulatory obligations, and provide you with a safe and enjoyable gaming experience. The categories of personal data we collect are set out below.

Registration and Identity Data

When you create a koya9 account, we collect the following information:

  • Your registered mobile phone number (used as your primary account identifier and for account recovery).
  • Your date of birth (required to verify that you meet the 21+ age requirement before account approval).
  • Your preferred display name or username as selected during registration.
  • Identity verification documents (such as a National ID card or passport) if you are required to complete KYC verification. These documents are stored securely and used solely for identity verification purposes.

Transaction and Payment Data

When you make deposits or submit withdrawal requests, koya9 records the following transaction-related data:

  • The mobile wallet number (bKash, Nagad, Rocket, or Upay) or card details associated with your deposit or withdrawal transaction. koya9 does not store full card numbers; only the last four digits and card type are retained for reference.
  • Transaction amounts, dates, times, and reference numbers for all deposits and withdrawals processed on your account.
  • Records of any bonus credits, wagering activity, and balance adjustments associated with your account, maintained for audit and dispute-resolution purposes.

Technical and Usage Data

When you access the koya9 Platform, our systems automatically collect certain technical information to ensure the security and performance of the Platform. This includes your IP address (used for fraud detection and geographic access controls), your device type and operating system, your mobile browser version, session timestamps (the date and time of each login and logout), and the specific games, pages, or features you interact with during your session. This technical data is used exclusively for security monitoring, Platform improvement, and support purposes — it is never used to identify you personally to third-party advertisers.

2. How We Use Your Personal Data

The table below sets out the primary purposes for which koya9 uses your personal data and the lawful basis for each use:

Purpose Data Used
Account creation and management Registration data, mobile number, date of birth
Processing deposits and withdrawals Transaction data, payment method details, account balance records
Age verification and KYC compliance Date of birth, identity documents submitted during KYC
Fraud detection and security monitoring IP address, session logs, device data, transaction patterns
Player support and dispute resolution Account history, transaction records, communication logs with support team

3. Payment Data and Mobile Wallet Security


koya9 processes all payment transactions through established mobile financial service channels including bKash, Nagad, Rocket, and Upay — services that are already widely trusted by millions of Bangladeshi users. When you initiate a deposit or withdrawal on koya9, the actual transaction is processed directly between your mobile wallet and the Platform's payment processing system. koya9 does not act as an intermediary that stores or relays your full mobile wallet credentials.

For transactions processed via Visa or Mastercard, koya9 retains only a truncated card reference (last four digits and card type) for reconciliation purposes. Full card numbers and CVV codes are never stored on koya9 systems. Any card-based transaction processing is handled by PCI-DSS compliant payment service providers, and card data at rest on those providers' systems is subject to their own security standards.

Never share your PIN or OTP
koya9 will never ask you for your bKash PIN, Nagad PIN, Rocket PIN, or any one-time password (OTP) via any communication channel. If you receive a message claiming to be from koya9 requesting your mobile wallet PIN or OTP, treat it as a phishing attempt and do not respond. Report it immediately to koya9 support using the email in the footer.

4. Sharing Your Personal Data

koya9 does not sell, rent, or trade your personal data to any external party for marketing or commercial purposes. We may share your personal data with third parties only in the limited circumstances described below:

  • Service providers and technology partners who assist koya9 in operating the Platform — including payment processing providers, game content suppliers (such as Pragmatic Play, Evolution Gaming, and Spribe), fraud detection systems, and cloud infrastructure providers. These service providers act under strict data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service to koya9.
  • Law enforcement agencies, regulatory bodies, or other government authorities when koya9 is legally required to disclose personal data — for example, in response to a valid court order, legal process, or investigation into suspected financial crime.
  • Financial intelligence units or anti-money-laundering authorities in cases where koya9's transaction monitoring systems detect activity that meets the threshold for mandatory reporting under applicable financial crime prevention frameworks.
  • A successor entity in the event of a business merger, acquisition, or transfer of substantially all assets of the koya9 Platform, in which case player data will transfer as a business asset subject to the same privacy protections described in this Policy.

Outside of these limited circumstances, koya9 will not share, sell, disclose, or otherwise make available your personal data to any external party without your explicit prior written consent.


The koya9 Platform uses cookies and similar lightweight tracking technologies to ensure the Platform functions correctly and to improve your experience. We do not use cookies to track your activity across other websites or to build advertising profiles.

Essential Cookies

These cookies are required for the Platform to function and cannot be disabled. They are used to maintain your login session, remember your language preference , and ensure secure navigation between pages. Without these cookies the Platform cannot operate correctly.

Analytics Cookies

We use limited first-party analytics to understand how players navigate the Platform — for example, which pages are visited most frequently and where players encounter difficulties. This data is aggregated and anonymised and is used solely to improve the Platform. No personal identifiers are attached to analytics data.

Managing Cookies

Most mobile browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling essential cookies may prevent some or all features of the koya9 Platform from functioning correctly. Disabling analytics cookies will not affect your ability to use the Platform.

6. Data Retention

koya9 retains your personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal retention obligations. As a general principle, account data (including identity, registration, and transaction records) is retained for the duration of your active account and for a period of at least five years after account closure, in order to meet anti-money laundering record-keeping requirements and to enable resolution of any dispute that may arise after account closure.

Technical session logs and device data are retained for a shorter period (typically 90 days) unless a specific security investigation requires them to be retained for longer. When your data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

7. Your Rights Over Your Personal Data


As a player on the koya9 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact koya9 support using the email address shown in the footer of this website.

  • Right of access: You may request a copy of the personal data koya9 holds about you. We will provide this within a reasonable timeframe and in a format that is readable on a standard mobile device.
  • Right to correction: If any personal data we hold about you is inaccurate or out of date, you have the right to request that we correct it. For basic account data such as your registered mobile number, you may be able to update this directly in your koya9 account settings.
  • Right to erasure: You may request deletion of your personal data. Note that this right is subject to our legal retention obligations — we may be required by law to retain certain categories of data (such as transaction records) for a minimum period even after account closure. We will inform you of any such limitation when responding to an erasure request.
  • Right to restrict processing: In certain circumstances — for example, if you believe data we hold is inaccurate and have asked us to correct it — you may request that we restrict our use of that data while the correction is under review.
  • Right to withdraw consent: Where our use of your personal data is based on your consent (for example, for optional marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to the withdrawal.

koya9 will acknowledge all data rights requests within a reasonable period and respond substantively as quickly as reasonably practicable. In some cases, we may need to verify your identity before processing a data rights request, to ensure that we do not disclose or delete personal data in response to a fraudulent request.

8. Data Security

koya9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data in transit between your device and the Platform, restricted access controls ensuring that only authorised koya9 personnel can access personal data, regular security reviews of Platform systems and third-party integrations, and secure data storage with access logging.

While koya9 applies industry-standard security practices, no online platform can guarantee absolute security. Players can help protect their accounts by using strong, unique passwords, by never sharing their login credentials or OTPs with anyone, and by logging out of their koya9 account when using a shared or public device.

Report a security concern
If you believe your koya9 account has been accessed without your permission, or if you notice any suspicious activity associated with your account or payment methods, please contact koya9 support immediately at the email address shown in the footer. We treat all security reports with priority and will investigate promptly.

9. Protection of Minors


koya9 strictly prohibits the use of the Platform by any person under the age of 21. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been provided by or collected about a person under 21, that data will be deleted and the associated account will be closed immediately. If you are a parent or guardian and believe that a minor in your care has registered on koya9 or provided personal data to the Platform, please contact koya9 support using the email in the footer so that we can investigate and take immediate action.

10. Third-Party Links and Integrations

The koya9 Platform integrates game content provided by third-party game suppliers. While these suppliers are required to meet security standards under their agreements with koya9, their own privacy practices are governed by their own privacy policies, which are separate from this Policy. koya9 is not responsible for the privacy practices of game content providers. The koya9 website does not contain links to external third-party websites, and this Policy does not extend to any external website that you may access independently of the koya9 Platform.

11. Changes to This Privacy Policy


koya9 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last updated" date at the top of this document. We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform after any amendment constitutes your acceptance of the updated Policy.

Where changes to this Policy are significant, koya9 may additionally notify registered players via their registered contact details. However, it remains your responsibility to keep your registered contact details current and to check this page for the latest version of the Policy.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how koya9 has handled your personal data, please contact our support team at the email address listed in the footer of this website. We serve players across Bangladesh including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh and Cox's Bazar, and we are committed to responding to all privacy-related enquiries promptly and thoroughly.

Please note that koya9 support is not able to provide legal advice. If you require independent legal guidance regarding data protection or privacy law, you should seek advice from a qualified legal professional.

Ready to Play? Your Privacy Is Protected

Explore koya9's games knowing your data is safe. Visit our FAQ for answers to common questions, or head to the koya9 Casino to get started.

Visit FAQ Explore koya9 Casino
⚠️ 21+ only. Real-money gaming involves financial risk. Please play responsibly.