Privacy Policy — bedbaje
Your privacy matters to us. This Privacy Policy explains what personal information bedbaje collects from players in Bangladesh, how that information is used, stored, and protected, and what rights you hold over your own data. We are committed to full transparency in every aspect of our data practices.
Key Privacy Highlights
The summary cards below outline the most important aspects of our Privacy Policy. They are provided for convenience only — the full binding policy is set out in the sections that follow.
Data We Collect
We collect registration details, identity documents for KYC, transaction records, device and browser information, and gameplay activity. We collect only what is necessary to provide a safe and compliant betting service to players across Bangladesh.
How We Protect It
All data is stored on secured servers protected by 256-bit SSL encryption. Access is strictly limited to authorised personnel. Payment data is handled exclusively through encrypted channels provided by bKash, Nagad, Rocket, and Upay. We never store raw payment credentials.
Who We Share With
We do not sell your personal data to third parties. We share data only with trusted game providers, payment processors, fraud prevention services, and regulatory or law-enforcement authorities when legally required. All third-party partners are bound by strict data protection obligations.
Cookies & Tracking
bedbaje uses essential session cookies to keep you logged in and functional cookies to remember your preferences. We also use analytics cookies to understand platform usage and improve our services. No third-party advertising cookies or cross-site tracking scripts are deployed on the platform.
Your Rights
You have the right to access, correct, or request deletion of your personal data at any time. You may also request a portable copy of your data or object to certain types of processing. All requests are handled by our support team and acknowledged within 48 hours.
Data Retention
We retain account and transaction data for as long as your account is active and for a minimum period thereafter as required by applicable anti-money laundering and financial record-keeping standards. Anonymised analytics data may be retained for longer periods to support platform improvement.
1. Information We Collect
bedbaje collects personal information from players in Bangladesh in order to provide a secure, compliant, and high-quality online casino and sports betting service. We collect information in three primary ways: directly from you when you register or interact with the platform, automatically when you use the platform, and from third-party service providers who help us verify your identity and process payments.
Information You Provide Directly:
- Registration Data: When you create a bedbaje account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to open and maintain your account.
- Identity Verification Documents (KYC): To comply with our obligations and protect the platform against fraud and money laundering, we may request copies of government-issued photo identification (such as a National ID card or passport) and proof of address. These documents are processed securely and used solely for identity verification purposes.
- Payment Information: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, we collect the mobile wallet number associated with the transaction and the transaction reference. We do not store your full PIN, password, or any credential related to your mobile wallet account.
- Communications: When you contact our support team via email at [email protected] or through any in-platform messaging feature, we retain a record of those communications, including the content of your messages, to assist in resolving your queries and improving our service.
- Responsible Gaming Preferences: If you set deposit limits, request a cooling-off period, or apply for self-exclusion, we record those preferences and apply them to your account as instructed.
Information Collected Automatically:
- Device and Technical Data: We automatically collect data about the device you use to access bedbaje, including your IP address, device type, operating system, browser type and version, screen resolution, and time-zone setting.
- Usage and Gameplay Data: We record your activity on the platform, including pages visited, games played, wagers placed, bet outcomes, session duration, click patterns, and navigation paths. This data is used to personalise your experience, detect fraud, and improve platform performance.
- Cookie and Tracking Data: We use cookies and similar technologies to maintain your session, remember your preferences, and analyse platform usage. See Section 4 (Cookies and Tracking) for full details.
2. How We Use Your Data
bedbaje uses the personal information it collects for the following specific purposes. We will not use your data for any purpose that is incompatible with what is described in this Privacy Policy without first notifying you and, where required, obtaining your consent.
bedbaje does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight. Where automated tools are used (for example, to flag potentially fraudulent activity), a qualified member of our compliance team will review any consequential decisions before action is taken.
3. Legal Basis for Processing
bedbaje processes your personal data on the basis of the following recognised legal grounds. For each category of processing activity, we rely on the most appropriate and specific legal basis available.
- Contractual Necessity: The majority of our data processing is necessary to fulfil the contract between bedbaje and you as a registered player. This includes processing your registration data, verifying your identity, processing deposits and withdrawals, enabling gameplay, and providing customer support. Without this processing, we would not be able to provide the bedbaje service to you.
- Legal Obligation: Certain processing activities are required by law. In particular, our KYC and AML obligations require us to collect and retain identity documentation, transaction records, and related correspondence. We are required to maintain these records for defined periods and to share them with relevant authorities upon a lawful request.
- Legitimate Interests: We process certain categories of data — including device and usage data, fraud detection signals, and platform analytics — on the basis of our legitimate interest in operating a secure, fair, and commercially viable platform. We have assessed that these legitimate interests are not overridden by your privacy interests where appropriate safeguards are in place.
- Consent: Where we process data for purposes that are not strictly necessary for the service — such as sending marketing communications or using non-essential cookies — we rely on your freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
If you wish to understand the specific legal basis applied to any particular processing activity carried out by bedbaje, you may request this information by contacting our support team at [email protected]. We will provide a clear explanation within 10 business days.
5. Data Sharing & Disclosure
bedbaje does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only in the circumstances described below, and only to the extent strictly necessary for the relevant purpose.
- Game Providers: To deliver the games available on the bedbaje platform, we share the minimum necessary session and authentication data with our certified third-party game studio partners, including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Hacksaw Gaming, and Spribe. These providers act as data processors under our instructions and are contractually prohibited from using your data for any purpose other than game delivery.
- Payment Processors: Transaction data is shared with our payment processing partners — bKash, Nagad, Rocket, and Upay — to facilitate deposits and withdrawals. Each of these providers operates under their own privacy policy and data handling standards as registered financial service providers in Bangladesh.
- Fraud Prevention and Identity Verification Services: We may share identity and transaction data with specialist third-party KYC and fraud detection services to verify player identities, screen against sanctions lists, and detect suspicious activity. These providers are bound by strict confidentiality and data protection obligations.
- Regulatory and Law Enforcement Authorities: Where we are required to do so by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, we will disclose the relevant personal data. We will notify you of such a request where we are legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of bedbaje's assets, player data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via their registered email address before any such transfer takes place and explain what choices they have regarding their data.
- Professional Advisers: We may share data with our legal, accounting, or auditing advisers on a strictly confidential and need-to-know basis where necessary to obtain professional advice or to comply with our legal obligations.
All third-party recipients of personal data are required to maintain the security and confidentiality of that data and to use it only for the specified purpose. bedbaje takes reasonable steps to ensure that our third-party partners comply with their data protection obligations.
6. Data Retention
bedbaje retains your personal data for as long as your account remains active and for defined periods following account closure, in accordance with applicable legal and regulatory requirements. We do not retain data for longer than is necessary for the purposes for which it was collected.
- Active Account Data: All personal data associated with an active player account — including registration details, KYC documents, transaction history, gameplay records, and correspondence — is retained for the full duration of your account's active status.
- Post-Closure Retention: Following the closure of a player account (whether voluntarily or by bedbaje), we retain core account and transaction records for a minimum of five (5) years in accordance with standard AML and financial record-keeping requirements. This retention period may be extended if the account is subject to ongoing regulatory enquiry or legal proceedings.
- Identity Documents: KYC documentation, including copies of government-issued ID and proof of address, is retained for a minimum of five (5) years from the date of the player's last transaction on the platform.
- Support and Communications: Records of your communications with the bedbaje support team are retained for three (3) years from the date of the communication, or for the duration of your account if longer, to support dispute resolution and service quality review.
- Marketing Data: If you have consented to receive marketing communications, we retain your marketing preferences until you withdraw consent or close your account. Once consent is withdrawn, your data is removed from our active marketing lists within 10 business days.
- Anonymised Analytics Data: Aggregated, anonymised usage statistics that cannot be linked to any individual player may be retained indefinitely for platform improvement and historical analysis purposes.
At the end of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with you. If you wish to request early deletion of your personal data, please refer to Section 7 (Your Data Rights) below.
7. Your Data Rights
bedbaje respects your rights over your own personal data. You may exercise any of the following rights at any time by submitting a request to our support team at [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days of receipt.
You may request a copy of all personal data that bedbaje holds about you, along with information about how it is being used and with whom it has been shared.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may object to processing carried out on the basis of our legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
You may request that we restrict the processing of your data in certain circumstances — for example, while a correction request is being assessed or while an objection is being considered.
To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of the right you wish to exercise. We may ask you to verify your identity before processing your request to ensure that data is not disclosed to an unauthorised party.
8. Data Security
bedbaje takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly in line with current best practices in online security.
- Encryption in Transit: All data transmitted between your device and the bedbaje platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Any connection that does not meet our security standards is automatically refused.
- Encryption at Rest: Sensitive personal data stored on our servers — including identity documents and financial records — is encrypted at rest using strong encryption standards.
- Access Controls: Access to personal data is strictly limited to bedbaje personnel and authorised service providers who need it to perform their defined role. All access is logged and subject to regular audit. Staff with access to personal data receive regular data protection training.
- Two-Factor Authentication: bedbaje strongly encourages all players to enable two-factor authentication (2FA) on their accounts as an additional layer of protection. We also use 2FA internally for staff access to systems that handle personal data.
- Vulnerability Management: Our technical team conducts regular security assessments of the bedbaje platform, including vulnerability scans and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
- Incident Response: In the unlikely event of a personal data breach that poses a risk to your rights or interests, bedbaje will notify affected players promptly via their registered email address and take immediate steps to contain and remediate the breach.
Despite our robust security measures, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee its absolute security. We encourage you to use a strong, unique password for your bedbaje account, to keep your login credentials confidential, and to contact us immediately at [email protected] if you suspect any unauthorised access to your account.
Changes to This Privacy Policy
bedbaje reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify registered players by email to their registered address and display a prominent notice on the platform for a minimum of 30 days before the revised policy takes effect.
The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of the bedbaje platform after a revised policy takes effect constitutes your acceptance of the changes.
If you do not agree with any changes to this Privacy Policy, you should stop using the platform and contact our support team to discuss the options available to you, including account closure.
Questions & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how bedbaje has handled your personal information, please contact our dedicated support team:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: "Privacy Enquiry" or "Data Rights Request"
- Response Time: Acknowledgement within 48 hours; full response within 30 calendar days
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
We take all privacy complaints seriously and will work in good faith to resolve your concern promptly. If you are not satisfied with our response, you may have the right to escalate your complaint to a relevant data protection authority or consumer rights body in Bangladesh.
Ready to Play at bedbaje?
Now that you understand how we handle your data, explore our full range of casino games and sports betting markets — all in a safe, SSL-secured environment built for Bangladesh players.