spi9 Privacy Policy

Last updated: 6 November 2026

This Privacy Policy explains how spi9 (spi9.lat) collects, uses, stores, and shares your personal information when you create an account, make a deposit, play games, or use our customer support. By registering or continuing to use spi9, you agree to the practices described here.

Information We Collect

spi9 collects information from you at different points during your account lifetime. The table below lists each category, what it includes, and when we collect it.

Why We Collect Your Data

We collect only what we need for a specific, legitimate reason. Here is a plain-language breakdown:

• Running your account. We need your name, mobile number, and date of birth to open and maintain your spi9 account, process deposits and withdrawals via bKash or Nagad, and send you transaction confirmations.
• Verifying your identity. Bangladesh regulations and responsible gambling standards require us to confirm you are who you say you are before releasing funds. We collect NID or passport documents for this purpose only.
• Fraud and security. Device data and IP addresses help us detect unusual login activity and protect your account balance.
• Improving spi9. Anonymised usage patterns (which games load slowly, which screens cause drop-offs) help our developers improve the platform for all players.
• Responsible gaming. We review gaming activity to identify signs of problem gambling and reach out when our tools flag a concern.
• Legal compliance. We may be required by law to retain certain transaction records for a defined period.

Storage and Retention

Your data is stored on servers with encrypted connections. We keep your account data for as long as your account is active. If you close your spi9 account, we retain transaction and identity records for the period required by applicable law — typically five years — after which the data is securely deleted.

Payment transaction logs (bKash/Nagad/Rocket/Bank Transfer) are kept for seven years to satisfy financial reporting obligations. Support chat transcripts are stored for 24 months.

When We Share Your Data

spi9 does not sell your personal data to advertisers or third-party data brokers. We share data only in these situations:

• Payment processors. Your mobile number or bank details are passed to bKash, Nagad, Rocket, or the relevant bank solely to complete your transaction.
• Game providers. When you launch a game from JILI, JDB, Playtech, KA Gaming, or Ezugi, an anonymised player token is shared with that provider's server so the game session can run.
• Legal authorities. We disclose data when required by a valid court order, law enforcement request, or regulatory directive under Bangladesh law.
• Service providers. We use third-party tools for hosting, analytics, and fraud detection. These providers process data only on our instruction and under strict confidentiality agreements.

Cookies and Tracking

spi9 uses cookies and similar technologies to keep you logged in, remember your language preference, and understand how players navigate the site. Here are the main cookie types in use:

Essential cookies

These are required for the site to work. They maintain your session while you play and preserve your cart during a deposit flow. You cannot opt out of essential cookies while using the site.

Analytics cookies

These count page visits, measure load times, and report which games are most played. The data is aggregated and cannot identify you individually. You can disable analytics cookies in your browser settings without affecting gameplay.

Marketing cookies

If you arrived at spi9 through a referral link, a cookie records that so our affiliates are credited correctly. These cookies do not track your activity across other websites.

Security Measures We Apply

We use industry-standard technical controls to protect your data:

• TLS 1.3 encryption for all data in transit between your browser or spi9 App and our servers.
• AES-256 encryption for sensitive fields stored at rest, including payment details and document scans.
• Two-factor authentication (2FA) available on your account to prevent unauthorised logins.
• Automated anomaly detection that flags unusual login locations or large rapid withdrawals for a manual review.
• Staff access to personal data is limited to those who need it for their specific job role, with access logs maintained.

No system is completely immune to breaches. If we ever detect a data incident that affects your account, we will notify you within 72 hours through the contact details on file.

Your Rights as a Player

Regardless of where you are based, spi9 respects the following data rights:

• Access. You can request a copy of the personal data we hold about you at any time by contacting our support team via 24/7 Live Chat.
• Correction. If your name, mobile number, or other details have changed, contact support to update your record.
• Deletion. You may request deletion of your account and associated personal data, subject to our legal retention obligations described above.
• Restriction. You can ask us to restrict how we use your data while a correction or objection request is being processed.
• Portability. We can provide your gaming history and account data in a machine-readable format on request.
• Objection. You may object to any processing that is based solely on our legitimate interests.

We will acknowledge data rights requests within 48 hours and aim to complete them within 30 days. Complex requests may take up to 60 days; we will tell you if that is the case.

Identity Verification (KYC)

KYC is required before your first withdrawal from spi9. The process works as follows:

• Upload a clear scan or photo of your National ID Card (NID), passport, or driving licence through the account verification section.
• Our team reviews the document within 6 hours and either approves your account or asks for a clearer image.
• Once approved, your withdrawal limit is fully active up to ৳1,90,000 per day at the Member tier.

KYC documents are stored encrypted and are never shared with any party other than the verification team and, where required, legal authorities. We do not use your NID for any purpose beyond confirming your identity and age.

Players Under 18

spi9 is strictly for adults. If we discover that a player is under 18, we will immediately suspend the account, reverse any active bonus, and return any remaining balance to the payment method used for deposit. We will then delete that player's personal data within 30 days, except records needed to demonstrate the age-verification failure.

If you believe a minor has registered on spi9, contact our 24/7 Live Chat immediately.

Changes to This Policy

We may update this Privacy Policy when our practices change, when we add new payment methods, or when regulatory requirements are updated. When we make a material change, we will post a notice inside your spi9 account dashboard and update the "Last updated" date at the top of this page. Continued use of spi9 after the notice date means you accept the updated policy.

We will not reduce your rights under this policy without giving you at least 14 days' prior notice.

Get in Touch

For any question about this Privacy Policy — data access requests, correction requests, or complaints — please use our 24/7 Live Chat available on every page of spi9. This is the fastest way to reach our team and start a formal request.

Live chat transcripts are saved automatically, which creates a written record of your request and our response. If you prefer a less immediate channel, raise a support ticket from within your spi9 account dashboard.