bedbat
Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bedbat ("bedbat", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "User", "Player") who access and use the bedbat website at bedbat.app and all associated services, including sports betting, live casino, slots, and payment processing (collectively, the "Services").

bedbat is committed to protecting the privacy of every user across Bangladesh — including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Policy explains your rights regarding your personal data and how bedbat fulfils its obligations as a data controller.

By creating a bedbat account or accessing any part of the bedbat platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy forms part of the bedbat Terms & Conditions and should be read alongside the Responsible Gaming Policy.

If you have any questions about this Policy or wish to exercise your data rights, please contact the bedbat Data Protection team at [email protected] at any time. The support team operates 24/7 on Bangladesh Standard Time (BST, UTC+6).

2 Data We Collect

bedbat collects personal data that is necessary to operate the platform, verify user identities, process transactions in Bangladeshi Taka (৳), and comply with applicable legal obligations. The categories of personal data collected are described in the table below.

bedbat does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes. Where identity documents contain photographs, those images are processed solely for the purpose of age and identity verification and are not used for any other purpose.

3 How We Collect Data

bedbat collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated technologies: Data collected automatically when you access the bedbat platform, including cookies, session tracking, server logs, and device fingerprinting. See Section 7 for full details on cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank when you initiate a deposit or withdrawal.
• Identity verification partners: Data returned by third-party KYC and fraud-screening services used to verify your identity and assess account risk.
• Third-party game providers: Gameplay data from game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi that is relayed to bedbat for account record-keeping and dispute resolution.

4 Purpose of Processing

bedbat processes your personal data only for the purposes listed below. Data is never processed for purposes incompatible with the reason it was originally collected.

• Account creation and management: Setting up and maintaining your bedbat account, authenticating your identity at login, and enforcing the single-account policy.
• Age and identity verification: Confirming that you are 18 years of age or older and that your identity matches the information provided at registration.
• Payment processing: Processing deposits and withdrawals in Bangladeshi Taka (৳) via your registered payment methods and maintaining accurate financial records.
• Service delivery: Operating sports betting markets, live casino games, slots, and all other features of the bedbat platform.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming: Monitoring account activity to identify signs of problem gambling and applying responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where appropriate.
• Customer support: Responding to your enquiries, processing complaints, and resolving disputes related to your account or any transaction.
• Legal compliance: Meeting obligations imposed by applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated usage data to improve the bedbat interface, game selection, and overall user experience.

5 Legal Basis for Processing

bedbat processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and bedbat, including account setup, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing carried out for the legitimate business interests of bedbat, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for marketing communications. You may withdraw consent at any time by contacting [email protected] or using the opt-out link in any marketing email.

6 Data Sharing

bedbat may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

6.1 Payment Processors

Transaction data is shared with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank — solely to process the deposit or withdrawal you have initiated. bedbat does not retain full payment credentials beyond what is necessary for transaction reconciliation.

6.2 Identity Verification Providers

Identity and document data is shared with third-party KYC service providers engaged by bedbat to perform age verification and anti-money laundering screening. These providers are contractually bound to process your data only for the verification purpose and to maintain equivalent data protection standards.

6.3 Game Providers

Where required to deliver live casino or slot content, a limited set of account identifiers is shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data is used solely to authenticate your session within the game environment and to return game outcomes and stake data to bedbat.

6.4 Legal and Regulatory Authorities

bedbat may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request. bedbat will notify you of any such disclosure to the extent permitted by law.

6.5 Service Providers

bedbat engages third-party service providers for functions including cloud hosting, cybersecurity, analytics, and customer support tooling. These providers act as data processors under written agreements that prohibit them from using your data for any purpose other than providing the contracted service to bedbat.

7 Cookies & Tracking Technologies

bedbat uses cookies and similar tracking technologies on bedbat.app to operate core platform functionality, maintain your session, detect fraud, and analyse platform usage. The categories of cookies used are described below.

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a personalised experience.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the platform, including pages visited and time spent. This data is used solely to improve the bedbat service.
• Security cookies: Detect and prevent fraudulent activity, including bot traffic, automated scripts, and suspicious login patterns.

bedbat does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the platform.

8 Data Retention

bedbat retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable law. The general retention principles applied by bedbat are as follows:

• Active account data: Retained for the full duration of your account being open and active on the bedbat platform.
• Financial and transaction records: Retained for a minimum of 5 years following the date of each transaction, in accordance with financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the last transaction date, whichever is later.
• Support and communication records: Retained for 3 years following the resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required for any retention purpose, bedbat will securely delete or anonymise it so that it can no longer be associated with you as an individual.

9 Data Security

The security measures implemented by bedbat include, but are not limited to, the following:

• SSL/TLS encryption: All data transmitted between your device and bedbat.app is encrypted using Transport Layer Security (TLS) to prevent interception.
• Password hashing: Account passwords are stored as salted cryptographic hashes. bedbat never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access controls: Access to personal data within bedbat's systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging.
• Two-factor authentication: OTP-based verification is applied at login and at key transaction points to prevent unauthorised account access.
• Intrusion detection: bedbat operates continuous monitoring systems to detect and respond to attempted breaches, unusual access patterns, and automated attack vectors.
• Secure data storage: Personal data is stored on secure servers with physical and logical access controls. Regular vulnerability assessments and penetration tests are conducted.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bedbat will notify affected users without undue delay and take all reasonable steps to mitigate the impact of the breach.

10 Your Rights

As a bedbat user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected]. bedbat will respond to all valid requests within 30 days.

• Right of access: You have the right to request a copy of the personal data bedbat holds about you and to receive information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by bedbat be corrected or completed promptly.
• Right to erasure: You have the right to request that bedbat delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that require bedbat to retain the data.
• Right to restrict processing: You have the right to request that bedbat restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Please note that some rights are subject to legal exceptions. Where bedbat is required to retain data by applicable law, a full erasure request may not be fulfilled in its entirety; bedbat will inform you of the specific exception that applies.

11 Children's Privacy

bedbat applies mandatory age verification at the point of account registration and at the point of first deposit to ensure that minors cannot access real-money gambling services. If bedbat discovers or reasonably suspects that personal data has been collected from a person under 18 years of age, the relevant account will be closed immediately, all funds will be returned to the payment method used for deposit (excluding any winnings generated), and all personal data associated with the underage account will be deleted.

If you are a parent or guardian and believe that a minor in your care has created a bedbat account, please contact [email protected] immediately. bedbat will investigate and take appropriate action as a matter of priority.

12 Third-Party Services

The bedbat platform integrates with third-party services to deliver its full feature set, including payment gateways, game content providers, and analytics tools. Each third-party service operates under its own privacy policy and data practices. bedbat is not responsible for the privacy practices of third-party services and encourages users to review the relevant privacy policies of those providers.

bedbat does not embed third-party social media widgets, advertising networks, or data broker services on the platform. Any links that may appear within the platform pointing to third-party websites are provided for informational purposes only; bedbat has no control over and accepts no responsibility for the content or privacy practices of those external sites.

13 Changes to This Policy

bedbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, new services, legal requirements, or operational needs. When material changes are made, bedbat will notify registered users by email or via an on-platform notification prior to the changes taking effect, and will update the "Last Updated" date at the top of this Policy.

Your continued use of the bedbat platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you disagree with any change to this Policy, you must cease using the platform and may request account closure by contacting the support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bedbat handles your personal data, please contact the bedbat Data Protection team using the details below. The email address is provided as plain text and is not a clickable link:

bedbat targets an acknowledgement time of within 2 hours for all privacy-related enquiries and aims to fully resolve requests within 30 calendar days. For complex or legally sensitive requests, bedbat will inform you if additional time is required and will provide a revised resolution timeline.