Privacy Policy — bedbaj Platform

The following definitions apply throughout this Privacy Policy:

• "bedbaj", "we", "us", or "our" refers to the bedbaj platform and its operating team, reachable via https://bedbaj.net.
• "Platform" refers to the bedbaj website, all its pages, features, services, games, and associated tools available at bedbaj.net.
• "User", "you", or "your" refers to any individual who accesses, browses, registers on, or otherwise interacts with the Platform.
• "Personal Data" refers to any information that identifies or can reasonably be used to identify a living individual, including name, email address, mobile number, date of birth, payment details, and device identifiers.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "KYC Data" refers to identity verification documents submitted by a User for the purpose of age and identity verification, including national ID cards, passports, or other government-issued documents.
• "Cookies" refers to small text files placed on your device by the Platform to support session management, analytics, and personalisation functions.
• "Third-Party Services" refers to external providers whose services are integrated into the Platform, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi).

bedbaj acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, bedbaj determines the purposes and means by which your Personal Data is processed and is responsible for ensuring that processing activities comply with applicable data protection standards.

If you have any questions regarding this Privacy Policy or the way in which bedbaj handles your Personal Data, you may contact our data protection team directly at [email protected]. We aim to respond to all data-related enquiries within 10 working days.

bedbaj collects the following categories of Personal Data from Users of the Platform:

bedbaj does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than self-exclusion requests made under the Responsible Gaming programme), or biometric data beyond the KYC photograph required for identity verification.

bedbaj collects Personal Data through the following means:

• Direct submission: Information you provide during account registration, KYC verification, payment transactions, support communications, and responsible gaming tool activation.
• Automated collection: Technical and usage data collected automatically when you access or interact with the Platform, including via cookies, server logs, and analytics tools.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Game content providers: Game session data, round results, and RNG logs received from integrated game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Third-party analytics: Aggregated, anonymised usage data from analytics services used to monitor Platform performance and identify improvement opportunities.

We do not purchase Personal Data from third-party data brokers or marketing lists. All Personal Data collected by bedbaj is provided directly or indirectly by you through your interaction with the Platform.

bedbaj processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the bedbaj Terms & Conditions, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out in pursuit of bedbaj's legitimate interests in operating a secure, fair, and commercially viable platform, including fraud detection, Platform security, analytics, and responsible gaming enforcement — where such interests are not overridden by your rights and freedoms.
• Consent: Where required and where none of the above bases apply, bedbaj will seek your explicit consent before processing your Personal Data. You may withdraw consent at any time by contacting [email protected], although this will not affect the lawfulness of processing carried out before the withdrawal.

bedbaj uses the Personal Data it collects for the following purposes:

• Creating, verifying, and managing your bedbaj account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Verifying your age and identity to ensure compliance with the 18+ minimum age requirement.
• Detecting and preventing fraud, money laundering, collusion, and other forms of prohibited conduct as defined in the bedbaj Terms & Conditions.
• Providing customer support, including responding to queries, handling complaints, and resolving disputes.
• Administering bonuses, promotions, and wagering requirements in accordance with the applicable promotion terms.
• Enforcing responsible gaming tools including deposit limits, cool-off periods, and self-exclusion requests.
• Monitoring and improving the technical performance, security, and user experience of the Platform.
• Sending transactional communications such as deposit confirmations, withdrawal updates, and security alerts. These are not marketing messages and cannot be opted out of while your account remains active.
• Sending marketing communications (where you have provided consent) about new games, promotions, and Platform updates. You may opt out of marketing communications at any time.
• Complying with applicable legal and regulatory obligations.

bedbaj will not use your Personal Data for any purpose that is incompatible with the purposes described in this Privacy Policy without first obtaining your explicit consent or establishing a separate lawful basis.

7.1 Third-Party Service Providers. bedbaj shares Personal Data with the following categories of third parties on a need-to-know basis, solely to the extent necessary to deliver the relevant service:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process financial transactions on your behalf.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver certified game content and maintain game integrity logs.
• Identity verification providers: Third-party KYC service providers engaged to assist in the verification of identity documents submitted during the verification process.
• Analytics providers: Anonymised or pseudonymised usage data may be shared with analytics platforms to support Platform performance monitoring. No directly identifiable Personal Data is shared with analytics providers.
• Fraud prevention services: Data may be shared with fraud intelligence services to identify and block fraudulent activity on the Platform.

7.2 Legal Disclosures. bedbaj may disclose your Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity. bedbaj will make reasonable efforts to notify you of such disclosures unless legally prohibited from doing so.

7.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of bedbaj's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

7.4 No Sale of Personal Data. bedbaj does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to operational necessity as described in this section.

8.1 What Are Cookies. Cookies are small text files stored on your device when you visit a website. bedbaj uses cookies to maintain your login session, remember your preferences, and collect aggregated analytics data about how the Platform is used.

8.2 Types of Cookies Used.

8.3 Managing Cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair your ability to use core Platform features, including the ability to log in to your account. Disabling analytics or preference cookies will not prevent you from using the Platform but may affect the quality of your experience.

8.4 No Cross-Site Tracking. bedbaj does not use tracking pixels, third-party advertising cookies, or cross-site behavioural profiling technologies that track your activity outside of the bedbaj Platform.

bedbaj retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period expires, bedbaj will securely delete or anonymise your Personal Data so that it can no longer be used to identify you. Where anonymisation is used rather than deletion, the resulting data may be retained indefinitely for aggregated statistical purposes.

10.1 Technical Safeguards. bedbaj employs the following technical security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Industry-standard password hashing using bcrypt or equivalent — passwords are never stored in plain text.
• Encrypted storage of sensitive Personal Data and KYC documents at rest.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Network firewalls, intrusion detection systems, and real-time threat monitoring.
• Strict access controls ensuring that only authorised bedbaj personnel with a legitimate operational need can access Personal Data.

10.2 Organisational Safeguards. In addition to technical controls, bedbaj maintains the following organisational security measures:

• All bedbaj personnel who handle Personal Data are subject to confidentiality obligations.
• Access to Personal Data is granted on a least-privilege basis and reviewed regularly.
• Data breach response procedures are in place to detect, investigate, and report security incidents promptly.

10.3 User Responsibility. While bedbaj takes all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for logging out of the Platform when using shared devices. If you suspect that your account has been compromised, please contact [email protected] immediately.

Subject to applicable law, you have the following rights with respect to your Personal Data held by bedbaj:

• Right of Access: You may request a copy of the Personal Data bedbaj holds about you. We will respond to access requests within 30 days.
• Right to Rectification: If any Personal Data bedbaj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your Account settings panel.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that bedbaj may be required to retain certain data for legal compliance purposes even after an erasure request is received.
• Right to Restriction: You may request that bedbaj restricts the processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. bedbaj will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username or email address to allow us to locate your records. bedbaj will acknowledge your request within 5 working days and provide a full response within 30 days.

The bedbaj Platform is strictly intended for adults aged 18 and above. bedbaj does not knowingly collect Personal Data from individuals under the age of 18. Age verification is a mandatory step in the bedbaj registration and KYC process, and any account found to belong to a person under the age of 18 will be closed immediately.

If you believe that bedbaj has inadvertently collected Personal Data from a minor, please contact [email protected] immediately. We will investigate and, where confirmed, delete the relevant data without delay.

Parents and guardians are encouraged to make use of available parental control software and internet filtering tools to prevent minors from accessing gambling platforms. bedbaj supports responsible internet use and cooperates fully with any safeguarding investigation involving the welfare of minors.

The bedbaj Platform integrates services provided by third parties including payment processors and game content providers. When you interact with these services — for example, when initiating a bKash deposit or launching a Pragmatic Play game — certain data is transmitted to the relevant third-party provider as a technical necessity of delivering that service.

Each third-party provider operates under its own privacy policy and data protection framework. bedbaj is not responsible for the data practices of third-party providers once data has been transmitted to their systems. We encourage you to review the privacy policies of the following integrated providers:

• bKash Limited
• Nagad (Bangladesh Post Office)
• Dutch-Bangla Bank (Rocket)
• Upay (UCB Fintech Company Limited)
• Visa Inc.
• Mastercard International
• Pragmatic Play Limited
• Evolution Gaming Group AB
• NetEnt AB
• Microgaming
• Spribe
• Ezugi

bedbaj enters into data processing agreements with all third-party service providers who handle Personal Data on our behalf to ensure that they process such data only in accordance with our instructions and applicable data protection standards.

14.1 Right to Update. bedbaj reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services offered on the Platform. The revised policy will be published on this page with an updated effective date.

14.2 Notification of Material Changes. Where material changes are made to this Privacy Policy — for example, changes to how we share your data or to the legal bases on which we process it — bedbaj will make reasonable efforts to notify registered Users via the email address associated with their account prior to the changes taking effect.

14.3 Continued Use. Your continued use of the bedbaj Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should close your account and cease using the Platform. Requests to close an account may be submitted to [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bedbaj handles your Personal Data, please contact our support and data protection team using the details below. All privacy-related correspondence should be submitted in English for the fastest possible response.