bd9bed Privacy
Policy

bd9bed collects personal data from players through several channels: directly when you register an account or complete KYC verification, automatically when you interact with the platform, and occasionally from third-party sources such as payment providers for fraud-prevention purposes. The categories of data we collect are described below.

1.1 Registration and Identity Data

When you create a bd9bed account, we collect your full legal name, date of birth, email address, mobile phone number registered in Bangladesh, and a username of your choice. This data is required to establish your account identity and to enforce our one-account-per-player policy.

1.2 KYC and Verification Documents

To process withdrawals and to comply with our anti-money laundering obligations, we collect copies of identity documents such as your National Identity Card (NID) or valid passport, proof of address documents, and proof of ownership of the payment method you use. These documents are handled by authorised personnel only and are stored with enhanced access controls.

1.3 Financial Transaction Data

We collect records of all deposits and withdrawals conducted through your bd9bed account, including the payment method used (bKash account number, Nagad reference, Rocket number, or bank account details), transaction amounts , timestamps, and transaction reference numbers. We do not store full payment card numbers on our servers.

1.4 Behavioural and Usage Data

When you use the bd9bed platform, we automatically collect data about your interaction with the site, including pages visited, games played, bets placed, session duration, click patterns, and feature usage. This data is used to improve platform performance, personalise your experience, and detect unusual activity that may indicate fraud or problem gambling behaviour.

1.5 Technical and Device Data

We collect technical data about the device and network you use to access bd9bed, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and approximate geographic location derived from your IP address. This data is used for security monitoring, fraud prevention, and platform optimisation.

1.6 Communications Data

When you contact bd9bed support, whether by email or through the in-platform messaging system, we retain records of those communications including the date, time, and content of messages. These records are used to resolve your enquiry, train our support team, and maintain an audit trail of player interactions.

bd9bed processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The lawful bases and corresponding purposes are set out below.

2.1 Contract Performance

The primary basis on which we process your data is the performance of the contract between you and bd9bed — namely, operating your account and delivering the services you have signed up to use. This includes processing deposits and withdrawals, settling bets, operating casino games, crediting bonuses, and providing customer support. Without processing your data for these purposes, bd9bed cannot deliver its services to you.

2.2 Legal Obligations

bd9bed processes certain categories of your data to comply with applicable legal obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) verification, fraud prevention, and financial record-keeping. These obligations require us to retain certain data for defined periods regardless of your account status (see Article 5 on Data Retention).

2.3 Legitimate Interests

Where it is necessary and proportionate to do so, bd9bed processes data on the basis of legitimate interests, including improving platform performance, detecting and preventing fraudulent or abusive activity, monitoring for problem gambling indicators, conducting internal analytics, and maintaining the security of our systems. We conduct a balancing assessment before relying on this basis to ensure our interests do not override your rights.

2.4 Consent — Marketing Communications

Where you have opted in to receive promotional communications from bd9bed, we will process your contact data to send you offers, bonus notifications, and news about platform updates. This processing is based solely on your consent and may be withdrawn at any time. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

2.5 Responsible Gaming Monitoring

bd9bed uses behavioural data — including betting frequency, session duration, deposit patterns, and changes in play style — to identify players who may be exhibiting signs of problem gambling. Where such indicators are detected, our responsible gaming team may make contact with the player to offer support tools such as deposit limits or self-exclusion. This processing serves both a legitimate interest and a player welfare purpose that we consider essential to our operation as a responsible platform.

bd9bed does not sell, rent, or otherwise commercialise your personal data. We share your data only with the categories of recipient described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, bd9bed shares the minimum necessary transaction data with the relevant payment service provider — for example, transmitting a recipient mobile number to bKash or Nagad when processing a withdrawal. These providers operate under their own privacy policies and data protection obligations. bd9bed is not responsible for the data practices of third-party payment providers.

3.2 Game and Technology Providers

Live casino games and slot titles on bd9bed are delivered by certified third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. To enable gameplay, a session token and the player's account identifier are passed to the relevant provider's game server. These providers do not receive your full identity data or financial history.

3.3 Identity Verification Services

For KYC purposes, bd9bed may use third-party identity verification services to authenticate the documents you submit. These services process your identity documents on our behalf under strict data processing agreements. Verified document data is not retained by the verification service provider beyond the period required to complete the verification.

3.4 Legal and Regulatory Disclosure

bd9bed may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, by court order, or as part of our anti-money laundering reporting obligations. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of bd9bed's assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bd9bed will provide affected players with advance notice via email and will ensure the receiving entity is bound by data protection obligations at least equivalent to those set out in this Privacy Policy.

bd9bed uses cookies and similar tracking technologies on the platform to enable essential functionality, measure performance, and — where you have consented — deliver a personalised experience. The types of cookies we use are described below.

4.1 Strictly Necessary Cookies

These cookies are essential to the operation of the bd9bed platform and cannot be disabled without disrupting core functionality. They include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and load-balancing cookies that ensure consistent performance. No consent is required for strictly necessary cookies.

4.2 Functional Cookies

Functional cookies remember your preferences — such as language, display settings, and previously selected payment methods — so that you do not have to re-enter them on each visit. These cookies improve your experience but are not required for the platform to function. You may disable them via your browser settings, though doing so may affect your experience.

4.3 Analytics Cookies

bd9bed uses analytics cookies to measure how players navigate the platform, which features are used most frequently, and where technical issues occur. This data is aggregated and anonymised before analysis and does not identify individual players. Analytics data is used solely to improve platform quality and user experience.

4.4 Managing Cookies

You may review and manage cookie settings through your browser's privacy controls. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that blocking all cookies will prevent you from logging into your bd9bed account. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

bd9bed retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The retention periods set out below are our standard schedules. In exceptional circumstances — such as ongoing investigations or litigation — data may be retained for longer periods.

• Active account data: Retained for the full duration of your account, plus 5 years from the date of account closure to satisfy AML record-keeping requirements.
• KYC documents: Retained for 5 years from the date of verification completion, or 5 years from account closure, whichever is later.
• Financial transaction records: Retained for 5 years from the date of each transaction in accordance with financial record-keeping standards.
• Support communications: Retained for 2 years from the date of the last message in each support thread.
• Behavioural and usage data: Anonymised after 18 months. Anonymised aggregate data may be retained indefinitely for platform analytics.
• Marketing consent records: Retained for the duration of your marketing opt-in, plus 1 year from withdrawal of consent as evidence of prior authorisation.

5.1 Deletion Requests

You may request deletion of your personal data by contacting [email protected] with the subject line "Data Deletion Request". We will assess your request and confirm which data can be deleted immediately, which data must be retained for legal reasons, and a timeline for deletion of eligible data. We aim to complete deletion of eligible data within 30 days of receiving a valid request.

bd9bed implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. No system is entirely immune to risk, but we maintain controls at a standard commensurate with the sensitivity of the data we process.

6.1 Encryption

All data in transit between your browser or device and bd9bed's servers is encrypted using TLS 1.2 or higher. Sensitive data fields stored in our database — including passwords (stored as salted hashes), KYC document files, and payment references — are encrypted at rest using AES-256 encryption.

6.2 Access Controls

Access to systems that store personal data is restricted to authorised bd9bed personnel on a need-to-know basis. All internal access is subject to role-based access controls, multi-factor authentication, and audit logging. Access rights are reviewed quarterly and revoked immediately upon staff departure.

6.3 Vulnerability Management

bd9bed conducts regular vulnerability assessments and penetration tests on its platform infrastructure. Critical vulnerabilities are remediated within 24 hours of discovery; high-severity vulnerabilities within 7 days. Our security team monitors platform systems continuously for anomalous activity and known attack signatures.

6.4 Data Breach Response

In the event of a personal data breach that poses a risk to affected players, bd9bed will notify affected players by email within 72 hours of confirming the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken or intend to take to address the breach.

As a bd9bed player, you have a number of rights in relation to your personal data. These rights are available to you regardless of whether your account is currently active. To exercise any of the rights described below, contact us at [email protected] with the subject line identifying the right you wish to exercise.

7.1 Right of Access

You have the right to request a copy of the personal data that bd9bed holds about you. We will provide a structured summary of your data within 10 business days of receiving a valid access request. This is provided free of charge for the first request in any 12-month period.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For most data fields, corrections can be made directly through your Account Settings. For identity data linked to KYC verification, corrections require a support request accompanied by updated documentary evidence.

7.3 Right to Erasure

Subject to our legal retention obligations, you have the right to request deletion of your personal data. We will delete data that is no longer required for the purpose for which it was collected and is not subject to a legal retention period. Data that must be retained for AML or financial record-keeping purposes cannot be deleted before the applicable retention period expires.

7.4 Right to Withdraw Consent

Where we process your data based on your consent — specifically for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To opt out of all marketing, email [email protected] or update your preferences in Account Settings.

7.5 Right to Object

You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring and automated fraud detection. Where you object, we will review whether our legitimate interests override your rights in the specific context and respond within 10 business days.

7.6 Right to Data Portability

For data that you have provided to us and which we process by automated means on a contractual or consent basis, you may request a machine-readable copy of that data (in JSON or CSV format) for the purposes of transferring it to another service provider.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the bd9bed privacy team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

8.1 Policy Updates

bd9bed reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify active players by email at least 7 days before the updated policy takes effect. The effective date at the top of this page will be updated accordingly. Continued use of the platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this page periodically.

8.2 Minors

bd9bed is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. 18+ If we discover that personal data has been collected from a minor, that account will be closed immediately and all associated data deleted in accordance with our retention policy. If you believe a minor has registered a bd9bed account, please notify us immediately at [email protected].

8.3 Governing Framework

This Privacy Policy is written in compliance with internationally recognised data protection principles. bd9bed operates on an offshore basis and applies data protection standards consistent with responsible international platform operation. Players are responsible for compliance with their local laws regarding online gaming services.