Your Privacy Matters to 09bed

Introduction

This Privacy Policy (hereinafter "the Policy") describes how 09bed (hereinafter "the Platform", "we", "us", or "our") collects, uses, stores, and protects the personal data of individuals (hereinafter "you", "the Player", or "the User") who access or use the services available at 09bed.io.

09bed is an online betting and casino platform built specifically for players in Bangladesh. We understand that the trust of our players depends not only on the quality and fairness of our games, but equally on our commitment to handling personal data with discretion, integrity, and full transparency. This Policy has been written in plain English to ensure it is accessible and comprehensible to all players, regardless of their technical or legal background.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your agreement with 09bed. By registering an account or using any service on the 09bed platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

Data We Collect

2.1 Data You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact our support team, or participate in a promotion, you provide us with personal data directly. This includes:

• Identity information: Full legal name, date of birth, gender, and government-issued ID numbers (such as your Bangladesh National ID Card number or passport number).
• Contact information: Email address, mobile phone number, and residential address including district and division (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Financial information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) as applicable.
• Account credentials: Your chosen username and a hashed representation of your password (we never store passwords in plain text).
• Support communications: Any information you include in emails, live chat messages, or feedback submissions sent to the 09bed support team.

2.2 Data Collected Automatically

When you access the 09bed platform, certain technical data is collected automatically by our systems and infrastructure:

• Device and browser data: Device type (mobile, tablet, desktop), operating system, browser type and version, and screen resolution.
• Network data: IP address and approximate geographic location derived from IP (country and city level; we do not track precise GPS coordinates).
• Session data: Login timestamps, session duration, pages visited, games launched, bets placed, and navigation path through the platform.
• Cookie and tracking data: As described in Section 6 of this Policy.

2.3 Data from Third Parties

In limited circumstances, 09bed may receive personal data about you from third parties. This includes identity verification information from our KYC service providers, fraud scoring data from payment processors, and, where applicable, self-exclusion status information from responsible gaming databases. We use such third-party data solely for the purposes stated in this Policy and do not combine it with your data in ways that would create unjustified privacy risks.

How We Use Your Data

09bed uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and manage your player account on the 09bed platform, including processing your registration and keeping your account details up to date.
• Identity and age verification: To verify that you are at least 21 years of age and that the identity information you have provided is accurate, in line with our Know Your Customer (KYC) obligations.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka via your chosen payment method, including mobile financial services (bKash, Nagad, Rocket, Upay) and bank transfers.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other unauthorised or illegal conduct.
• Customer support: To respond to your support enquiries, resolve disputes, and communicate with you about your account.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling and to administer deposit limits, session controls, cooling-off periods, and self-exclusion requests you have made.
• Legal compliance: To comply with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and range of games and services offered on the platform.
• Promotional communications: Where you have opted in, to send you information about promotions relevant to BPL season, Eid, Pohela Boishakh, and other events of interest to Bangladeshi players. You may opt out at any time.

Legal Bases for Processing

09bed processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Much of the data processing we carry out is necessary to perform the contract between you and 09bed — that is, to operate your account, process your bets, and fulfil your withdrawal requests. Without this processing, we could not provide the services you have signed up for.
• Legal obligation: Certain processing activities are required by law, including identity verification for anti-money laundering purposes, retention of financial records, and responding to lawful regulatory requests.
• Legitimate interests: We process some data — such as technical and security logs — on the basis of our legitimate interest in maintaining the security and integrity of the platform, preventing fraud, and improving our services. We have carefully balanced these interests against your privacy rights and are satisfied that this processing does not override your fundamental rights and freedoms.
• Consent: Where we send you marketing communications or deploy non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

5.1 Service Providers

09bed works with a limited number of trusted third-party service providers who process personal data on our behalf in order to deliver our services. These include payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners), KYC and identity verification providers, cloud infrastructure and hosting providers, and customer support platform providers. All such providers are bound by strict data processing agreements that prohibit them from using your data for any purpose other than performing services for 09bed.

5.2 Game Providers

Where you play games operated by third-party studios — such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, or Microgaming — a limited set of technical data (such as a pseudonymised player identifier and session token) is shared with the relevant studio solely to enable the game session. These studios do not receive your full name, contact details, or financial information.

5.3 Legal and Regulatory Disclosure

09bed may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity including fraud and money laundering. We will notify you of any such disclosure where legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 09bed's business assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity in advance, and you will retain the right to request deletion of your data if you do not wish it to be transferred.

Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to remember information about your visit — such as your preferred language, login session status, and certain browsing preferences — making your next visit more convenient and the site more useful to you.

6.2 Types of Cookies Used by 09bed

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, remember your account preferences, and ensure secure navigation. These cookies cannot be disabled without preventing the platform from working correctly.
• Analytical cookies: We use anonymised analytics to understand how players navigate the platform in aggregate — for example, which game categories are most visited and how long sessions typically last. This data does not identify you personally and is used solely to improve platform performance.
• Functional cookies: These remember choices you have made (such as responsible gaming settings or display preferences) to provide a more personalised experience on your next visit.

6.3 What We Do Not Use

09bed does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie that tracks your behaviour across other websites. Our cookie use is strictly limited to the functional and analytical purposes described above.

6.4 Managing Cookies

You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 09bed account. Disabling functional or analytical cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

Data Security

09bed takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 09bed platform.
• AES-256 encryption at rest for all sensitive personal and financial data stored on our servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need may access personal data, and that access is logged and audited.
• Multi-factor authentication for all internal systems that hold personal data.
• Regular security audits and penetration testing of our platform and infrastructure conducted by independent security professionals.
• Incident response procedures that enable us to detect, contain, and respond to any data security breach in a timely manner, including notifying affected players where required.

While we take all reasonable steps to protect your data, no system can guarantee complete security. You are also responsible for keeping your account credentials secure. If you believe your account has been compromised, please contact us immediately at [email protected].

Data Retention

09bed retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. Our general retention principles are as follows:

• Active accounts: All personal data associated with an active player account is retained for the duration of the account's existence.
• Closed accounts: Following account closure, identity and financial records are retained for a minimum of five to seven years to comply with anti-money laundering regulations and financial record-keeping requirements.
• Communications data: Support chat transcripts and email correspondence are retained for three years from the date of the communication, after which they are securely deleted.
• Technical and session data: IP logs and session records are retained for thirteen months, after which they are automatically purged from our active systems.
• Marketing consent records: Records of your marketing opt-in or opt-out preferences are retained for the duration of your account plus two years to demonstrate compliance in the event of a dispute.

At the end of each applicable retention period, personal data is either securely and permanently deleted from our systems or anonymised in such a way that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Your Rights Over Your Personal Data

As a player on the 09bed platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all verifiable requests within a reasonable timeframe, and in any event within thirty (30) days of receipt.

Please note that certain rights are subject to limitations. For example, we may not be able to delete data we are legally required to retain for anti-money laundering compliance purposes. We will explain any such limitations clearly when responding to your request.

Children & Minors

The 09bed platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes an age declaration step, and we conduct identity and age verification checks on all players prior to authorising withdrawals.

If we discover or are notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question, and return any deposited funds to the payment method from which they originated, subject to verification.

International Data Transfers

09bed primarily processes personal data of players in Bangladesh. In the course of operating the platform and delivering our services, some personal data may be transferred to, or accessed from, locations outside Bangladesh — for example, where our cloud infrastructure, game providers, or technical service partners maintain servers or operate from overseas jurisdictions.

Where such transfers occur, 09bed takes appropriate steps to ensure that your personal data receives a level of protection equivalent to that described in this Policy. These steps may include executing standard contractual clauses with service providers, conducting data transfer impact assessments, and applying supplementary technical safeguards such as end-to-end encryption.

09bed does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing the appropriate safeguards described above. If you have questions about the specific safeguards applied to any international transfer of your data, please contact our support team at [email protected].

Policy Updates

09bed reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify you by posting a prominent notice on the 09bed platform and, where appropriate, by sending a notification to the email address registered on your account.

The effective date at the top of this Policy will be updated each time a new version is published. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the 09bed platform following the publication of any updated Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

Where a proposed change would materially reduce your privacy protections or expand how we use your personal data in ways that require your consent, we will seek your explicit consent before applying the change to your account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 09bed handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email: [email protected]

Support hours: Round-the-clock, 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

Response time: We aim to acknowledge all privacy-related requests within 48 hours and provide a substantive response within 30 days of receipt. If a request is particularly complex or voluminous, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.