mu9 Privacy
Policy
At mu9, your privacy matters. This Privacy Policy explains exactly what personal data we collect when you use our platform, how that data is used, who it may be shared with, and how you can exercise your rights as a Bangladeshi player. We are committed to handling all personal information with transparency, care, and the highest standards of data security.
1 Data We Collect
mu9 collects personal data from you in several ways: directly when you register an account or contact our support team; automatically when you interact with the platform; and from third-party payment providers and identity verification services. The categories of personal data we collect include the following:
1.1 Registration and Identity Data
When you create a mu9 account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number. This information is essential for opening your account, verifying your identity, and maintaining compliance with our age verification and Know Your Customer (KYC) obligations. You may also be asked to provide a copy of a government-issued identification document such as a National ID card, passport, or driving licence.
1.2 Financial and Transaction Data
When you make deposits or request withdrawals on mu9, we collect details of the transaction including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card), the transaction amount in Bangladeshi Taka (BDT), transaction reference numbers, and the date and time of each transaction. This data is necessary to process your payments, prevent fraud, and comply with our financial reporting obligations.
1.3 Usage and Behavioural Data
As you use the mu9 platform — browsing games, placing bets on cricket or football, playing slots or Andar Bahar — we automatically collect data about your activity. This includes the games you play, the bets you place (amount, market, outcome), the frequency and duration of your sessions, and your interactions with promotional content. This data helps us personalise your experience, improve the platform, and fulfil our responsible gaming monitoring obligations.
1.4 Technical and Device Data
We collect technical information about the device and connection you use to access mu9, including your IP address, browser type and version, operating system, device type, screen resolution, and referring URL. We also record session identifiers and authentication tokens to maintain the security of your logged-in sessions. This data is used for fraud prevention, platform security, and service optimisation.
1.5 Communications Data
When you contact the mu9 support team via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and the nature of any issue raised. This helps us maintain service quality, resolve disputes, and improve our support processes.
mu9 does not collect sensitive personal data such as biometric data, health information, or religious or political beliefs. We collect only the data that is necessary for the lawful purposes described in this Privacy Policy.
2 How We Use Your Data
mu9 uses the personal data we collect for the following specific and lawful purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first notifying you and, where required, obtaining your consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration and identity data | Contract performance |
| Age verification and KYC compliance | Identity data, ID documents | Legal obligation |
| Processing deposits and withdrawals | Financial and transaction data | Contract performance |
| Fraud prevention and security monitoring | Technical, financial, and usage data | Legitimate interests |
| Responsible gaming monitoring | Usage and behavioural data | Legal obligation |
| Customer support and dispute resolution | Communications and account data | Contract performance |
| Promotional offers and bonuses | Registration, usage, and preference data | Consent / Legitimate interests |
| Platform improvement and analytics | Technical and usage data | Legitimate interests |
2.1 Marketing Communications
With your consent, mu9 may use your email address and mobile number to send you information about promotions, bonuses, seasonal offers (such as Eid or BPL tournament specials), and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting our support team at [email protected] or by following the unsubscribe instructions included in any marketing email. Withdrawing marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
2.2 Automated Decision-Making
mu9 uses automated systems to detect unusual account activity, flag potential fraud, and monitor for responsible gaming indicators such as rapid session escalation or unusual deposit patterns. Where an automated process results in a material decision affecting your account — such as a temporary freeze or a referral for responsible gaming review — you have the right to request a manual review of that decision by contacting our support team.
3 Data Sharing and Disclosure
mu9 does not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or unaffiliated commercial organisations for their own marketing purposes. Your personal data may, however, be shared with the following categories of trusted third parties strictly on a need-to-know basis and only to the extent necessary for each stated purpose:
3.1 Payment Service Providers
To process your deposits and withdrawals, mu9 shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Islami Bank, Visa, and Mastercard. These providers receive only the minimum data required to complete the payment transaction and are bound by their own data protection obligations.
3.2 Identity Verification Services
As part of our KYC programme, mu9 may use third-party identity verification services to cross-check the personal information and documentation you provide during registration or at the point of withdrawal. These services process your data on our behalf and are contractually prohibited from using your data for any other purpose.
3.3 Game Providers and Technology Partners
The games on the mu9 platform are provided by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To support game functionality and fair-play auditing, limited gameplay and session data may be transmitted to these providers. These studios are responsible for their own data handling practices in respect of any data they independently collect within their game environments.
3.4 Legal and Regulatory Disclosure
mu9 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where such disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other serious crimes. In such cases, mu9 will disclose only the data that is specifically requested and legally required.
mu9 will never proactively share your personal or financial data with third parties for commercial gain. Any sharing of data is strictly limited to service delivery, legal compliance, and player safety. If you believe your data has been mishandled, contact [email protected] immediately.
5 Data Retention
mu9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:
- Account and identity data: Retained for the duration of your active account relationship with mu9, and for a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
- Financial and transaction data: Retained for a minimum of 5 years following each transaction in accordance with financial record-keeping requirements.
- KYC documentation: Retained for a minimum of 5 years following account closure or the conclusion of the relevant compliance review.
- Usage and behavioural data: Retained for up to 24 months following your last active session, after which it is anonymised or deleted.
- Communications and support records: Retained for 2 years following the resolution of the relevant support interaction or dispute.
- Marketing consent records: Retained for 3 years from the date consent was given or last renewed.
When personal data is no longer required, mu9 deletes or anonymises it in a secure and irreversible manner. Anonymised or aggregated data from which individual players cannot be identified may be retained indefinitely for statistical and platform improvement purposes.
If you close your mu9 account, your personal data will not be immediately deleted. Certain categories of data are retained for legally mandated periods as described above. You can request confirmation of what data we hold and when it is scheduled for deletion by contacting [email protected].
6 Your Privacy Rights
As a player on the mu9 platform, you have a number of rights in relation to the personal data we hold about you. mu9 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and a clear description of the right you wish to exercise.
6.1 Right of Access
You have the right to request a copy of the personal data that mu9 holds about you. Upon receipt of a valid access request, mu9 will provide you with a summary of the data held, the purposes for which it is processed, and any third parties with whom it has been shared, within a reasonable timeframe and at no charge for standard requests.
6.2 Right to Rectification
If you believe that any personal data mu9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. mu9 will act on any verified rectification request promptly. Please note that correcting certain identity data (such as your legal name or date of birth) may require you to provide supporting documentation.
6.3 Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. The right to erasure does not apply where mu9 is required to retain data to comply with a legal obligation, such as anti-money laundering record-keeping requirements.
6.4 Right to Object and Restrict Processing
You have the right to object to the processing of your personal data where that processing is based on mu9's legitimate interests, and to request that processing be restricted while a dispute about the accuracy or lawfulness of that processing is resolved. Objecting to processing based on legitimate interests does not automatically mean that processing will cease — mu9 will assess the objection and provide a reasoned response.
6.5 Right to Data Portability
Where mu9 processes your personal data on the basis of your consent or a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format. This right covers data such as your account registration information and transaction history.
mu9 aims to respond to all privacy rights requests within 30 days. In complex cases, we may require an extension of up to a further 60 days, in which case we will notify you of the extension and the reason for the delay. There is no fee for standard requests. We may charge a reasonable administrative fee for manifestly unfounded or excessive requests.
7 Data Security
mu9 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational safeguards to protect it against unauthorised access, loss, alteration, or disclosure. Our key security measures include:
- SSL/TLS Encryption: All data transmitted between your device and the mu9 platform is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. You can verify this by the padlock icon in your browser's address bar when visiting mu9.bio.
- Password Hashing: Player account passwords are never stored in plain text. They are processed through a strong one-way cryptographic hashing algorithm before storage, meaning that even mu9 personnel cannot retrieve your original password.
- Access Controls: Access to systems containing personal data is restricted to mu9 personnel and contractors who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and regular security training.
- Fraud Monitoring: mu9 operates continuous, automated fraud detection systems that monitor for suspicious login attempts, unusual transaction patterns, and other indicators of unauthorised account access.
- Secure Data Storage: Personal and financial data is stored on secure servers. Data backups are encrypted and stored separately from primary systems.
7.1 Data Breach Response
In the event of a personal data breach that poses a risk to player privacy, mu9 will act swiftly to contain the breach, assess its scope and impact, and notify affected players as promptly as possible. Notifications will be sent to the email address registered on your mu9 account and will include a description of the breach, the categories of data affected, the steps mu9 has taken in response, and any actions you should take to protect yourself.
While mu9 employs strong security measures, no online platform can guarantee absolute security. You also have a responsibility to protect your own account by using a strong, unique password and never sharing your login credentials with any third party. If you believe your account has been compromised, contact our support team immediately at [email protected].
8 Policy Updates
mu9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, we will notify registered players by email and/or by displaying a prominent notice on the mu9 platform. The "Last updated" date at the top of this document will always reflect the date of the most recent revision.
Your continued use of the mu9 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. We encourage all players to review this Policy periodically to stay informed about how their data is protected. If you have questions about any change, please contact us at [email protected] before continuing to use the platform.
8.1 Contact and Complaints
For all privacy-related enquiries, rights requests, or complaints, please contact the mu9 privacy team at: [email protected] — with the subject line "Privacy Enquiry". We aim to resolve all privacy complaints within 30 days. If you are not satisfied with our response, you may escalate your complaint through any applicable consumer protection or data protection channels available in your jurisdiction.
How mu9 Protects Your Privacy
Six pillars that define mu9's approach to responsible data handling for Bangladeshi players.
Your Data Is in Safe Hands
At mu9, privacy is not an afterthought — it is built into every layer of the platform. If you have questions about your data or are ready to explore our games, our team is here for you 24/7.