1. Unusual login detected
If the same account logs in from Dhaka and another device within a short time, the system alerts; new phone, new IP, and unfamiliar browser are checked together.
Until August 2026, what we do after any incident regarding data protection in the bd9 App is clearly stated here.
Download bd9 APK View privacy support
This page covers the bd9 App's data protection, cookies and user rights.
Login, device and session information are kept separately; many Dhaka users connect via bKash or Nagad, so account matching makes viewing faster.
Cookies are used only for session, language and security checks; disabling them may cause some screens not to remember properly.
You can request to view, correct or delete your data; once verification is complete, the team responds within 7 days.
If any risk is detected, we immediately limit access, then investigation, notification and audit run together.
Once you log in to bd9, the session is recorded, but personal chats or files inside the phone are not viewed.
Three-level monitoring for risk detection
If the same account logs in from Dhaka and another device within a short time, the system alerts; new phone, new IP, and unfamiliar browser are checked together.
Session cookies rotate within 24 hours, so old tokens no longer work; this also quickly brings open sessions in the bd9 APK under control.
Reports received at support go directly to the incident team; accounts related to bKash, Nagad or Rocket are checked separately; if a suspicious match is found.
Access is limited when risk is detected
If a suspicious session is detected, only that session is blocked; the entire account is not locked unless there is a major risk.
From a new device, extra verification may be required during bd9 Register; this helps prevent unauthorized access.
API, password reset and profile changes are limited separately; the first lock usually occurs within 15 minutes.
At this stage, users can open a ticket with support; the steps are straightforward, and messages come in clear language.
Two-step verification is followed for alerts.
Risk-affected user, internal security team, and if needed the compliance team are notified about what happened; the message is written in plain language.
What type of information is involved, when, and the next steps; these three aspects are kept, unnecessary details are omitted.
In the case of a major risk, notification is sent within 72 hours; for minor incidents, the investigation is completed first and an update is provided.
bd9 App users receive their rights and actions in the message together, making the next step easier to understand.
Four tasks are performed regularly.
During transmission of sensitive information, it is encrypted, so even if someone sees it mid-transit they cannot use it.
If a weak password is detected, you are asked to change it; the same rule applies to new sign-ins on the bd9 APK.
Information that is not needed is not stored; this reduces risk and makes audits easier.
In Bangladesh, many use mobile data and 3G, so lightweight pages, fewer requests and small cookies are used.
Each incident has a separate audit file
Logs, time, tokens and actions are recorded; later it can be checked who did what.
Audits are checked every month, and major changes are reviewed again; this routine has been in place since 2020.
Requests to copy, correct or delete data can be sent to support; nothing proceeds without verification, so erroneous requests are blocked.
Dhaka users can also check bd9 Login history on the same channel; this helps quickly understand what happened to their account.
Accounts, devices, sessions and support records are kept; personal files or other phone data are not viewed.
Yes, some pages may not remember properly; language settings and security checks may also be limited.
Send a request to support after verification; whatever is possible under the retention policy is done.
No, the same policy applies after installation; the same login, cookies, and session rules apply.
Yes, payment-related records are kept in a separate table; only parts needed for verification and refund tracing are kept.
If you have questions, write to support or message the Data Protection Officer.
Privacy questions about bd9 App, bd9 Login, and bd9 Register are also covered here.
bd9 Download APK Privacy Contact