bed99 Privacy Policy

Introduction

Last updated: January 2026

This Privacy Policy ("Policy") describes how bed99 ("we", "us", "our") collects, uses, stores and protects the personal data of individuals ("you", "the Player") who register for or use the bed99 platform at bed99.ws. By registering for a bed99 account or by continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions, which govern your use of the bed99 Platform. Capitalised terms not defined in this Policy have the meanings given to them in our Terms and Conditions. If you do not agree with this Policy, please do not register for or use the bed99 Platform.

Our Privacy Commitments

Six core principles that guide how bed99 handles your personal data.

1.Information We Collect

bed99 collects personal data from you in several ways — when you register an account, when you make a deposit or withdrawal, when you contact the support team, and passively through your use of the Platform (for example, through cookies and device data). The table below summarises the categories of data we collect, the specific data points within each category, and the reason for collection.

2.How We Use Your Information

bed99 uses the personal data we collect for the following purposes. We process data only where we have a lawful basis to do so, as described in the following clause.

• To create and manage your account, verify your identity and age, and maintain the security of your account login credentials.
• To process deposits and withdrawals, settle bets and game rounds, and maintain accurate financial records of your account activity.
• To comply with our anti-money laundering (AML), Know Your Customer (KYC) and responsible gaming obligations, including monitoring account activity for patterns of problematic gambling or suspicious transactions.
• To provide customer support and respond to your queries, complaints or requests. Support communications may be recorded for quality assurance and training purposes.
• To send you transactional communications (such as deposit confirmations, withdrawal notifications and security alerts) that are necessary for the operation of your account. These communications are not promotional and cannot be opted out of while your account is active.
• To send you promotional communications about bonuses, free spins, seasonal promotions (such as BPL or Eid offers) and new features on the Platform — but only if you have opted in to receive marketing communications. You can opt out at any time by contacting [email protected].
• To analyse Platform usage data in aggregate and anonymised form to improve the Platform, optimise game selection, identify technical issues, and develop new features. This analysis does not involve processing individually identifiable data.

3.Legal Basis for Processing

bed99 processes your personal data on one or more of the following lawful bases, depending on the specific purpose for which the data is being used.

• Contract performance: Processing is necessary for the performance of the contract between you and bed99 — for example, creating your account, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing is necessary for compliance with a legal obligation — for example, KYC and AML verification, record-keeping obligations, and reporting suspicious transactions to relevant authorities.
• Legitimate interests: Processing is necessary for the legitimate interests of bed99 — for example, fraud detection, platform security, responsible gaming monitoring, service improvement, and anonymised analytics. In each case, we have assessed that our legitimate interests are not overridden by your interests or fundamental rights.
• Consent: Where processing is based on your consent — for example, sending promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

4.Payment Data and Financial Information

When you make a deposit or withdrawal on the bed99 Platform, the transaction is processed through your chosen payment provider (such as bKash, Nagad or Rocket). bed99 receives a transaction confirmation and reference number from the payment provider. bed99 does not receive, store or process your bKash PIN, Nagad PIN, mobile banking password or any other payment authentication credential. Payment authentication takes place entirely within the payment provider's own secure environment.

bed99 retains records of deposit and withdrawal transactions — including amounts, dates, times, transaction reference numbers and the payment method used — for as long as required to satisfy our AML and regulatory record-keeping obligations, and in any event for a minimum of five years after the date of the transaction. These records are maintained in a secure, access-controlled database environment and are accessible only to authorised personnel who require access for compliance, fraud investigation or dispute resolution purposes.

5.Sharing Your Information

bed99 does not sell, rent or disclose your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment providers (bKash, Nagad, Rocket, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank): We share the minimum transaction data necessary to process your deposit or withdrawal — typically your account reference and the transaction amount. We do not share your full identity data with payment providers beyond what they already hold as your financial institution.
• Game studio providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi and others): To enable you to play games hosted by third-party studios, we pass a session token to the game studio's API. This token identifies you as a valid, authenticated bed99 player but does not include your full name, mobile number or payment details.
• Identity verification and fraud prevention services: We may share identity documents and verification data with licensed KYC service providers who assist us in verifying player identities and detecting fraudulent activity. These providers are contractually bound to process data only on our instructions and not to use it for any independent purpose.
• Law enforcement and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies or other government authorities if we are required to do so by applicable law, court order or regulatory direction. In such cases we will disclose only the data that is specifically required and will notify you if we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bed99's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via your registered contact details before your personal data is transferred and becomes subject to a different privacy policy.

All third parties with whom we share personal data are required to handle that data securely and in accordance with applicable data protection principles. Where third-party processors are involved, we enter into data processing agreements that impose obligations on the processor consistent with our own data protection obligations.

6.Cookies and Tracking Technologies

bed99 uses cookies and similar tracking technologies on the Platform to support core functionality, improve performance, and (where you have consented) deliver relevant promotional content. The following types of cookies are used on the Platform.

• Essential cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language preference, and enable secure account access. You cannot opt out of essential cookies while using the Platform.
• Analytics cookies: These cookies collect anonymised data about how players use the Platform — such as which pages are visited most frequently and where technical errors occur. This information is used to improve Platform performance and user experience. Analytics cookies are only set if you have consented.
• Functional cookies: These cookies remember your preferences and personalise your experience — for example, your preferred sports market or your last-played game. They are not strictly necessary but improve the quality of your experience.
• Marketing cookies: These cookies track your activity across sessions to help us deliver promotional content that is relevant to your interests. Marketing cookies are only used where you have given explicit consent and can be withdrawn at any time.

Most mobile browsers allow you to control cookies through their settings. Disabling essential cookies will prevent the Platform from functioning correctly. To manage your cookie preferences or withdraw consent for non-essential cookies, contact [email protected].

7.Data Retention

bed99 retains your personal data for as long as your account is active and for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our standard retention periods are set out below.

Account data (identity, contact, KYC documents) is retained for the duration of the account relationship and for a minimum of five years after account closure, in accordance with AML record-keeping obligations. Financial transaction records are retained for a minimum of five years after the date of the transaction. Usage and technical data collected via cookies or analytics is retained for up to 24 months in anonymised form. Support communications are retained for up to three years from the date of the communication.

8.Data Security

bed99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. Our security measures include, but are not limited to, the following.

• SSL/TLS encryption on all account login, registration, deposit and withdrawal pages, ensuring that data transmitted between your device and our servers cannot be intercepted in transit.
• Access controls and role-based permissions that restrict access to personal data to authorised personnel only, based on the principle of least privilege — each team member has access only to the data necessary for their specific role.
• Real-time fraud detection and transaction monitoring systems that identify and flag unusual account activity, including patterns consistent with account takeover, identity fraud or money laundering.
• Regular security reviews of our technical infrastructure and third-party integrations. Where security vulnerabilities are identified, we follow an internal incident response procedure to contain, investigate and remediate the vulnerability as quickly as practicable.

No security system is impenetrable. While bed99 takes all reasonable steps to protect your personal data, we cannot guarantee that our security measures will prevent every possible breach. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you as soon as practicable and will take all steps within our power to minimise the impact of the breach.

9.Your Rights

As a player on the bed99 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected]. bed99 will respond to all valid data rights requests within a reasonable timeframe and at no charge to you.

• Right of access: You have the right to request a copy of the personal data that bed99 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data that bed99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: Subject to legal retention obligations, you have the right to request that bed99 delete your personal data. We will action this request where the data is no longer necessary for the purposes it was collected, you have withdrawn consent, or you have successfully objected to processing.
• Right to restrict processing: You have the right to request that bed99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you dispute the lawfulness of processing.
• Right to data portability: Where processing is based on your consent or on contract performance, and processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on bed99's legitimate interests. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.

bed99 will not charge you for making a data rights request and will respond within a reasonable period. Where a request is complex or numerous, we may extend the response period and will notify you accordingly. bed99 reserves the right to verify your identity before actioning a data rights request to protect against unauthorised access to another player's data.

10.Children and Minors

The bed99 Platform is strictly intended for adults aged 21 years and over. bed99 does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register for or use the Platform. If bed99 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, that account will be closed immediately, any balances will be handled in accordance with our Terms and Conditions, and all personal data relating to that individual will be deleted from our systems as soon as practicable, unless retention is required by applicable law.

11.Third-Party Links

The bed99 Platform may from time to time reference third-party services, such as payment providers or game studios. bed99 is not responsible for the privacy practices or the content of any third-party website, application or service. When you access a third-party service through the Platform, your interaction with that service is governed by the third party's own privacy policy and terms. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform.

12.Changes to This Policy

bed99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the structure of the Platform. When we make material changes to this Policy, we will publish the revised Policy at bed99.ws/privacy-policy and, where reasonably practicable, notify registered players via their registered mobile number or email address at least 7 days before the changes take effect.

Your continued use of the Platform after the effective date of any update to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please stop using the Platform and contact [email protected] to request account closure. The date at the top of this Policy indicates when it was last updated.

13.Contact and Data Rights Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how bed99 handles your personal data, please contact the bed99 support team by email. We aim to respond to all privacy-related queries within five business days. If you are not satisfied with our response, you may seek further recourse through any applicable dispute resolution or regulatory process available under relevant law.

bed99 is committed to treating all privacy enquiries with care and confidentiality. Your right to privacy is fundamental to how we operate this Platform.