bed9 Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy") describes how bed9 (hereinafter "bed9", "we", "us", or "our") collects, processes, stores, and protects personal data belonging to users (hereinafter "you", "your", or "the Player") of the bed9 online betting and casino platform, accessible at bed9.io.

bed9 is committed to processing your personal data lawfully, fairly, and transparently. We collect only the data we genuinely need to operate our platform, fulfil our legal obligations, and deliver the best possible experience to players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By creating a bed9 account, making a deposit, or using any feature of the bed9 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the bed9 platform.

bed9 collects personal data from you through several channels. The categories of data we collect, and the specific data points within each category, are described below.

bed9 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, except where specifically required by law or regulation.

bed9 uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or unless required by law.

• Account Registration and Management: To create and maintain your bed9 account, authenticate your identity on login, and enable you to access all platform features.
• Identity and Age Verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate. This is a legal and operational requirement.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods. Financial data is shared with payment processors solely for this purpose.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the platform and to individual players.
• Responsible Gaming: To monitor betting patterns and identify players who may be at risk of problem gambling, and to enforce deposit limits, loss limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Platform Improvement: To analyse anonymised usage data in aggregate to improve platform performance, game selection, and user experience.
• Legal and Regulatory Compliance: To fulfil obligations imposed on us by applicable law, including anti-money laundering (AML) requirements, record-keeping requirements, and responses to lawful data requests from competent authorities.
• Marketing Communications: To send promotional emails and SMS messages to players who have opted in to marketing communications. Consent for marketing is entirely voluntary and can be withdrawn at any time.

bed9 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bed9 — primarily operating your account, processing payments, and delivering platform services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering laws, age verification requirements, and obligations to respond to lawful authority requests.
• Legitimate Interests: Processing carried out to pursue bed9's legitimate business interests, such as fraud detection, platform security, abuse prevention, and anonymised analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where processing is based on consent, we will maintain a record of when and how that consent was obtained. You can review your consent status at any time through your account settings or by contacting [email protected].

bed9 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment processors receive the minimum financial data necessary to process your transactions. These processors are bound by their own privacy policies and are not permitted to use your data for any purpose other than processing the payment.
• Identity Verification Providers: Third-party KYC and document verification services receive your identity documents solely for the purpose of verifying your identity and age. Verification providers are contractually bound to delete documents upon completion of the verification process.
• Game Suppliers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to deliver game functionality. These providers do not receive personally identifiable information that would allow them to identify you as an individual.
• Analytics Providers: Anonymised, aggregated usage data may be shared with analytics platforms to help us understand platform performance. No individually identifiable data is included in these datasets.
• Legal Authorities: bed9 will disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, or where necessary to protect the rights, safety, or property of bed9 or its players.
• Business Transfers: In the event that bed9 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

bed9 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. Cookies are small text files stored on your device by your browser when you visit bed9.io.

The following categories of cookies are used on the bed9 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, remember your language and currency preferences, and maintain the security state of your account. These cookies cannot be disabled without preventing the platform from working correctly.
• Functional Cookies: These cookies remember your choices and preferences (such as your last played game or your preferred deposit method) to provide a more personalised experience. They are not essential but improve convenience.
• Analytics Cookies: Anonymised analytics cookies help bed9 understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is aggregated and does not identify individual players.

bed9 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie settings through your browser's privacy controls. Disabling strictly necessary cookies will prevent you from logging into your bed9 account.

bed9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data must be retained for legal reasons despite an account closure request, we will inform you of the applicable retention period.

bed9 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bed9.io is encrypted in transit using TLS 1.2 or higher. This protects your personal and financial data from interception during transmission.
• AES-256 Encryption at Rest: Sensitive personal data and financial records stored on bed9's servers are encrypted at rest using AES-256 encryption, the same standard used by major financial institutions worldwide.
• Access Controls: Access to personal data is granted on a strict need-to-know basis. All internal access is authenticated, logged, and subject to regular access reviews. Administrative access requires multi-factor authentication.
• Intrusion Detection: bed9's infrastructure is monitored 24/7 by automated intrusion detection systems that alert our security team to any anomalous access patterns or potential breach attempts.
• Regular Security Audits: bed9 conducts regular internal and external security audits of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Employee Training: All bed9 personnel who handle personal data receive mandatory data protection and security awareness training on appointment and annually thereafter.

While bed9 takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, bed9 will notify affected players promptly in accordance with applicable notification requirements.

As a player on the bed9 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request — [your account username]".

• Right of Access: You have the right to request a copy of all personal data bed9 holds about you. We will provide this information in a clear, structured format within 30 days of receiving your verified request.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. Minor corrections (such as updating your mobile number) can be made directly through your account settings panel.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to overriding legal retention obligations — for example, transaction records must be retained for regulatory purposes even after account closure.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another platform where technically feasible.
• Right to Restrict Processing: You have the right to request that bed9 restrict the processing of your data in certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Right to Object: You have the right to object to processing carried out on the basis of bed9's legitimate interests, including profiling for fraud detection purposes. bed9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

All data rights requests are responded to within 30 days. Where a request is complex or where we receive a large volume of requests, this period may be extended by a further 60 days, and we will inform you of the extension within the initial 30-day window.

bed9 enforces a strict minimum age requirement of 21 years for all players. The bed9 platform is not directed at, and does not knowingly collect personal data from, persons under the age of 21.

During registration, all users are required to confirm that they are 21 years of age or older. bed9 may request documentary proof of age at any time during the account lifecycle. If bed9 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all balances will be frozen pending investigation, and the data will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that your child has created a bed9 account without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take all appropriate action.

bed9 operates primarily in the Bangladesh market, and the majority of personal data processing takes place within the operational jurisdiction of the platform. In certain circumstances, your personal data may be transferred to or processed by service providers located in other countries — for example, where a payment processor or game supplier operates data centres outside Bangladesh.

Where such international transfers take place, bed9 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply equivalent data protection standards to those described in this Policy.
• Transferring data only to service providers in jurisdictions that maintain adequate data protection standards.
• Using anonymised or pseudonymised data wherever possible to reduce the risk associated with cross-border data flows.

By using the bed9 platform, you acknowledge and consent to the potential transfer of your personal data across international borders in the manner described above, subject to the safeguards outlined in this section.

The bed9 platform may contain references to third-party game providers, payment services, and other external services. This Privacy Policy applies solely to personal data collected and processed by bed9 directly. It does not extend to any third-party platforms, websites, or services that may be accessible in connection with the bed9 platform.

bed9 does not control the privacy practices of third-party providers and is not responsible for the content or privacy policies of any external services. When interacting with any third-party service in connection with the bed9 platform (for example, completing a payment through your bKash or Nagad application), you are subject to that provider's own privacy policy. We encourage you to review the privacy policies of all third-party services you use.

bed9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The effective date displayed at the top of this document will be updated each time a revision is made.

Where changes are material — meaning they significantly affect your rights or how we use your data — bed9 will notify registered players by email and by displaying a prominent notice on the platform at least 14 days before the changes take effect. Non-material updates (such as clarifications of existing language or minor formatting changes) may take effect immediately upon publication.

Your continued use of the bed9 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you must cease using the platform and request account closure prior to the effective date of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bed9 handles your personal data, please contact our data protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Support Email: [email protected]
• Subject Line: Privacy Enquiry — [your account username]
• Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

When contacting us regarding a data rights request, please include your registered email address, your bed9 account username, and a brief description of your request. Including this information helps us process your request more efficiently and reduces the time required for identity verification.