Privacy Policy — bed111

1. Information We Collect

bed111 collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the website, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of information we collect are described below.

1.1 Registration & Account Data

When you create a bed111 account, we collect the information you provide in the registration form, which includes:

• Full legal name — used for account identification and KYC verification.
• Date of birth — used to confirm that you meet the 18+ age requirement.
• Email address — used for account communications, password reset, and promotional messages (where opted in).
• Mobile phone number — used for account security and payment method verification.
• Residential address — used for identity verification and fraud prevention.
• Username and password — your login credentials; passwords are stored in hashed form and are never accessible in plain text.

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer obligations and prevent underage gambling, bed111 may request copies of government-issued identity documents, such as a National Identity Card, passport, or driving licence. We may also request proof of address (e.g., a utility bill dated within the last three months) and proof of payment method ownership. These documents are processed and stored in accordance with Section 5 of this Policy.

1.3 Financial & Transaction Data

We collect records of all financial transactions conducted through your bed111 account, including deposit amounts, withdrawal requests, bet history, bonus credits, and balance adjustments. Payment method identifiers (such as registered mobile wallet numbers and the last four digits of a card) are stored for transaction matching and fraud detection purposes. Full mobile banking credentials and card numbers are never stored on bed111 servers.

1.4 Technical & Usage Data

When you access the bed111 platform, our servers automatically record certain technical data, including:

• IP address and approximate geographic location (city/region level).
• Device type, operating system, and browser version.
• Pages visited, features used, and session duration.
• Referring URL (the website you navigated from, if any).
• Error logs and performance diagnostics.

This data is used to maintain platform security, diagnose technical issues, and improve the overall player experience. It is not used to build advertising profiles.

1.5 Communication Data

If you contact bed111's customer support team — whether via email, live chat, or any other channel — we retain a record of that correspondence, including the content of your messages and any attachments you send. This helps us resolve disputes, provide consistent support, and improve our service quality over time.

2. How We Use Your Data

bed111 processes your personal data only for clearly defined purposes. We do not process data beyond what is reasonably necessary to deliver and improve the platform services. The table below summarises our primary processing activities and the legal basis for each.

2.1 Marketing Communications

bed111 will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your marketing consent at any time by updating your communication preferences in your account dashboard or by contacting [email protected]. Withdrawing marketing consent does not affect the delivery of transactional messages (such as deposit confirmations and security alerts), which are necessary for the operation of your account.

2.2 Automated Decision-Making

bed111 uses automated systems to detect unusual activity patterns that may indicate fraud, account compromise, or bonus abuse. Where an automated process flags your account for review, a member of the bed111 compliance team will manually assess the flag before any significant action (such as account suspension) is taken. You have the right to request human review of any automated decision that materially affects your account.

3. Data Sharing & Third Parties

bed111 does not sell, rent, or trade your personal information. We share data with third parties only where it is strictly necessary for delivering the platform services, complying with legal obligations, or protecting the legitimate interests of our players and the business.

3.1 Service Providers

We work with a limited set of trusted third-party service providers who process data on our behalf under strict contractual data-processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to facilitate deposits and withdrawals. Each provider operates under its own privacy policy for the payment leg of the transaction.
• Identity verification providers: Third-party KYC services that assist in document verification and age confirmation.
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive session tokens and player identifiers necessary to deliver game content. They do not receive your full personal profile.
• Cloud hosting and infrastructure: Servers and databases used to host the bed111 platform, subject to industry-standard security certifications.
• Analytics tools: Aggregated, anonymised usage data may be processed by analytics platforms to help us understand platform performance. No individually identifiable data is shared for this purpose.

3.2 Legal & Regulatory Disclosure

bed111 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. We will only disclose the minimum data necessary to satisfy the specific legal requirement.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of bed111's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide advance notice to affected players before any such transfer takes place, and we will ensure that the receiving entity is bound by privacy commitments no less protective than those in this Policy.

4. Cookies & Tracking Technologies

bed111 uses cookies and similar technologies (such as local storage and session tokens) to deliver a functional, secure, and personalised platform experience. This section explains what types of cookies we use and how you can manage them.

4.1 Types of Cookies Used

4.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies on demand. Please note that disabling essential cookies will prevent you from logging in to your bed111 account and using core platform features. Disabling analytics and preference cookies will not affect your ability to play games or make transactions.

bed111 does not use cookies to track your activity on third-party websites, and we do not participate in cross-site behavioural advertising networks.

5. Data Security & Retention

bed111 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

5.1 Security Measures

• 256-bit SSL/TLS encryption for all data in transit between your browser and bed111 servers.
• AES-256 encryption at rest for sensitive data fields including identity documents and financial records.
• Bcrypt password hashing — passwords are never stored in plain text and are not recoverable by bed111 staff.
• Role-based access controls ensuring that only authorised bed111 personnel with a specific operational need can access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Intrusion detection systems monitoring the platform infrastructure 24/7 for suspicious activity.

5.2 Data Retention Schedule

bed111 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your account and for five years after account closure, in line with anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for five years from the date of submission or from account closure, whichever is later.
• Transaction records: Retained for five years from the date of each transaction.
• Support correspondence: Retained for three years from the date of last contact.
• Technical and usage logs: Retained for 12 months in rolling fashion, then purged or anonymised.

5.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, bed111 will notify affected individuals without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of what data was affected, the likely consequences, and the measures bed111 is taking to address the incident.

6. Your Rights & Choices

As a bed111 player, you have a set of rights in relation to the personal data we hold about you. bed111 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Rights Request".

6.1 Right of Access

You have the right to request a copy of the personal data bed111 holds about you. We will provide this in a structured, commonly used format within 30 calendar days of receiving a verified request. There is no charge for a first access request in any 12-month period.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Minor details (such as your email address or phone number) can be updated directly through your account settings page. Changes to legally significant data (such as your name or date of birth) require supporting documentation.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Please note that certain data must be retained for the periods described in Section 5.2 to meet legal obligations, and erasure requests cannot override these mandatory retention requirements.

6.4 Right to Restrict Processing

You have the right to request that bed111 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while an objection to processing is being assessed.

6.5 Right to Data Portability

Where processing is based on your consent or on contract performance, you have the right to receive a machine-readable copy of the personal data you have provided to bed111, and to transmit that data to another service provider if you choose.

6.6 Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on bed111's legitimate interests, including profiling for fraud detection purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or processing is required for the establishment, exercise, or defence of legal claims.

7. Children's Privacy

bed111 operates a strict 18+ policy. The platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 18. Age verification is a mandatory step in the account registration process, and bed111 reserves the right to request further documentary evidence of age at any point during the lifetime of an account.

If bed111 becomes aware — through its own verification processes or through a report from a third party — that an account is held by a person under 18 years of age, we will immediately suspend the account, conduct an investigation, and close the account if the age breach is confirmed. Any real-money deposits made by an underage player will be returned to the originating payment source, and any bonus or winnings accrued will be forfeited.

Parents and guardians who have reason to believe that a minor in their care has registered or attempted to register on bed111 are encouraged to contact us immediately at [email protected]. We will investigate and act on all such reports promptly.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

bed111 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational needs. When a material change is made, we will notify registered players by email at least 14 days before the revised Policy takes effect, and will post a prominent notice on the bed111 platform. The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically.

Continued use of the bed111 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised terms, you should cease using the platform and may request account closure in accordance with the procedures described in our Terms & Conditions.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bed111's handling of your personal data, please contact our support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support hours: 24 hours a day, 7 days a week
• Language: English
• Response target: Within 3 working hours during normal operating periods; within 5 working days for formal data rights requests

bed111 is committed to resolving all privacy-related concerns through direct dialogue before any formal escalation is necessary. We treat every enquiry with the same standard of care regardless of its size or complexity.