Privacy Policy — How bedbt Handles and Safeguards Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how bedbt ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data provided by users ("you", "your") when you access or use the bedbt platform available at bedbt.io, including any associated mobile interfaces or subdomains.

bedbt is committed to handling your personal data responsibly and transparently. We recognise that your personal data belongs to you, and we process it solely to the extent necessary to provide you with a secure, reliable, and personalised betting and gaming experience on the bedbt platform.

By registering an account with bedbt, making a deposit, placing a bet, or otherwise using the bedbt platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the bedbt platform.

2 Who We Are

bedbt is an online betting and casino platform operated under the brand name "bedbt" and accessible at bedbt.io. The platform is designed primarily to serve players located in Bangladesh and offers products including cricket sports betting, live casino games, slot games, Plinko, and Double Fortune instant games.

For the purposes of this Privacy Policy, bedbt is the data controller — meaning we determine the purposes and means of processing your personal data. All data collected through the bedbt platform is controlled and processed by bedbt in accordance with this Policy.

If you have any questions about how bedbt processes your personal data or wish to exercise any of your data rights, you may contact us at any time via live chat inside your account or by email at [email protected].

3 Data We Collect

bedbt collects the following categories of personal data from users of the platform:

bedbt does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond identity verification photographs), or health data, except where such data is voluntarily provided by you in the context of a responsible gaming self-assessment or similar tool.

4 How We Collect Data

bedbt collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access and use the bedbt platform, including via cookies, server logs, and session tracking technologies.
• Payment provider data: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. bedbt receives only transaction reference IDs and confirmation status — not your full payment credentials.
• Third-party verification services: Where bedbt uses a third-party identity verification or anti-fraud service to assist with KYC processing, that service may return a verification result and risk assessment to bedbt. The full document data submitted by you is processed by the verification provider under their own privacy policy.
• Game providers: Aggregated, anonymised game session data may be shared between bedbt and its game technology partners (such as Pragmatic Play, Evolution Gaming, Spribe, and similar studios) for the purposes of game integrity monitoring. No identifiable personal data is shared with game providers beyond what is technically necessary for session authentication.

5 Legal Basis for Processing

bedbt processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the bedbt service to you under the Terms & Conditions, including account creation, payment processing, bet placement, and customer support.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out in pursuit of bedbt's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and service improvement, where such interests are not overridden by your own rights and interests.
• Consent: Where bedbt relies on your consent as the basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

bedbt uses the personal data it collects for the following specific purposes:

• Account registration and management: Creating and maintaining your bedbt account, verifying your identity and age, and managing your account preferences and settings.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay; reconciling transactions; investigating payment disputes.
• Platform services: Delivering the full range of bedbt betting and gaming products to you, including cricket betting markets, slot games, live casino tables, Plinko, and Double Fortune.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming: Monitoring your betting and gaming activity to identify signs of problematic gambling behaviour and, where appropriate, proactively offering responsible gaming tools or interventions.
• Customer support: Responding to your support queries, resolving disputes, and maintaining records of your communications with the bedbt support team.
• Legal and regulatory compliance: Complying with applicable legal obligations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by law.
• Platform improvement: Analysing usage patterns and game performance data in aggregate and anonymised form to improve the bedbt platform, fix bugs, and develop new features.
• Marketing communications: Sending you information about bedbt promotions, bonuses, and new features, where you have not opted out of such communications. You may opt out of marketing communications at any time via your account settings or by contacting support.

7 Data Sharing and Disclosure

bedbt does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC and document verification services that assist bedbt in verifying your identity and age. These providers process your verification data under strict confidentiality obligations.
• Game technology providers: Game studios and platform providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive the minimum session authentication data required to deliver their games on the bedbt platform.
• IT and security service providers: Cloud infrastructure, cybersecurity, and platform technology vendors that support the operation and security of the bedbt platform, all of whom are bound by data processing agreements.
• Legal and regulatory authorities: Where bedbt is required by applicable law, court order, or lawful regulatory request to disclose your personal data, we will do so to the extent required and will notify you where we are legally permitted to do so.
• Fraud prevention networks: Where bedbt participates in industry fraud prevention initiatives, anonymised or pseudonymised risk signals may be shared with other participating platforms to protect the broader online gaming community.

8 Payment Data and Mobile Wallets

bedbt accepts deposits and processes withdrawals exclusively through Bangladeshi mobile financial service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay (UCB). The following describes how payment data is handled in this context:

• When you initiate a deposit via bKash, Nagad, Rocket, or Upay, the actual payment transaction occurs entirely within the respective provider's own infrastructure. bedbt does not see, store, or process your mobile wallet PIN or password at any stage of the transaction.
• bedbt receives a transaction confirmation reference and the amount credited to your account balance. Your registered mobile wallet number is stored by bedbt solely for the purpose of processing future withdrawal requests to the correct account.
• Your mobile wallet number is masked in bedbt's administrative interfaces and is accessible only to authorised staff for the purposes of payment processing and fraud investigation.
• bedbt does not retain full payment credential data beyond what is necessary for withdrawal processing and transaction dispute resolution. All stored payment references are encrypted at rest.

9 Cookies and Tracking Technologies

bedbt uses cookies and similar tracking technologies on its platform to deliver core functionality, maintain your login session, and analyse platform usage. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the bedbt platform to function. They maintain your login session, store your account preferences, and enable secure navigation between platform sections. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences (such as language and display settings) so that you do not need to re-enter them on each visit. They are not used for tracking across other websites.
• Analytics cookies: bedbt uses anonymised analytics data to understand how users navigate the platform, which features are used most frequently, and where technical issues occur. This data is used solely to improve the bedbt platform and is not linked to individual user identities.
• Security cookies: Short-lived cookies used to detect and prevent cross-site request forgery (CSRF) attacks and other security threats to your account session.

bedbt does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

10 Data Retention

bedbt retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations, whichever is longer. The following general retention periods apply:

Following expiry of the applicable retention period, personal data is securely deleted from bedbt's systems or irreversibly anonymised so that it can no longer be linked to you as an individual.

11 Data Security

bedbt implements a layered security framework designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:

• Transport Layer Security (TLS): All data exchanged between your device and the bedbt platform is encrypted in transit using TLS 1.2 or TLS 1.3.
• Encryption at rest: Sensitive personal and financial data stored on bedbt's servers is encrypted using AES-256 or equivalent industry-standard encryption.
• Access controls: Access to systems containing personal data is restricted to authorised bedbt personnel on a strict need-to-know basis. All administrative access is logged and subject to regular audit.
• Two-factor authentication: bedbt's internal administrative systems require multi-factor authentication for all staff access to databases containing personal data.
• Penetration testing: bedbt's platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bedbt maintains a data breach response procedure. In the event of a security incident affecting your personal data, bedbt will notify affected users promptly and take immediate steps to contain and investigate the breach.

While bedbt takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials as described in the bedbt Terms & Conditions.

12 Children and Minors

The bedbt platform is strictly intended for adults aged 21 years and over. bedbt does not knowingly collect, process, or store personal data from any person under the age of 21.

During the registration process, users are required to confirm that they are at least 21 years of age and to provide a date of birth that confirms this. Where bedbt has reason to suspect that a registered user is under 21, the account will be immediately suspended pending age verification. If it is confirmed that the account holder is under 21, the account will be permanently closed, all transactions will be voided, and any personal data collected in connection with that account will be deleted as promptly as practicable, subject to any legal retention obligations.

13 Your Rights

As a user of the bedbt platform, you have the following rights with respect to your personal data. These rights are exercisable at any time by contacting bedbt's support team via live chat or email:

• Right of access: You may request a copy of all personal data bedbt holds about you. We will respond to access requests within 5 business days.
• Right to rectification: You may request correction of any personal data held by bedbt that is inaccurate or incomplete. Identity data corrections may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purpose for which it was collected. Note that bedbt may be required to retain certain data for regulatory or legal reasons even after account closure.
• Right to restrict processing: You may request that bedbt pauses its processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved .
• Right to data portability: You may request an export of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) to facilitate transfer to another platform.
• Right to object: You may object to bedbt processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though bedbt may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where bedbt relies on your consent as the legal basis for processing (for example, for optional marketing emails), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact bedbt's support team via live chat inside your account or by emailing [email protected] with the subject line "Data Rights Request". We will verify your identity before processing your request and will respond within 5 business days. There is no charge for submitting a data rights request.

14 Changes to This Policy

bedbt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, bedbt will notify registered users by posting a prominent notice on the platform and, where appropriate, by sending an email notification to your registered address.

The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Policy periodically so that you remain informed about how bedbt handles your personal data. Your continued use of the bedbt platform following notification of a material policy change constitutes your acceptance of the updated Policy.

Where a proposed change significantly affects your rights or the way we process your personal data, bedbt will provide at least 14 days' advance notice before the change takes effect, giving you time to review the update and, if you do not agree, to close your account and request deletion of your data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bedbt's data practices, please contact our support team using any of the following methods:

• Live chat: Available 24/7 inside your bedbt account. Average response time: 2–5 minutes.
• Email: [email protected] — average response time 2–6 hours.

When contacting us about a privacy matter, please include your registered username and a brief description of your query or request so that we can assist you as quickly as possible. If your request relates to a specific data rights exercise (such as access, rectification, or erasure), please use the subject line "Data Rights Request" to ensure prompt routing to the appropriate team.