Privacy Policy — bed77 Online Casino

bed77 collects personal data through several means: information you provide directly when registering or using the Services, information generated automatically through your interaction with the platform, and information received from third-party service providers such as payment processors and fraud-prevention partners. The categories of personal data we collect are set out below.

Registration & Account Data

When you create a bed77 account, we collect the personal information necessary to establish and manage your account. This includes your full legal name, date of birth, email address, mobile phone number, residential address, and any username or display name you choose. This data is used to verify your identity, communicate with you about your account, and fulfil our legal obligations under anti-money-laundering regulations.

Identity Verification (KYC) Data

To comply with applicable financial crime prevention standards, bed77 may request identity documents from you at registration or at any point during your account lifecycle. Such documents may include a National Identity Card (NID), passport, driving licence, proof of residential address (such as a utility bill or bank statement), and confirmation of payment method ownership. Images and data extracted from these documents are processed solely for verification purposes.

Financial & Transaction Data

bed77 records all deposits, withdrawals, wagers, bonus transactions, and balance adjustments associated with your account. We also collect and retain the payment method details necessary to process your transactions — for example, your bKash or Nagad mobile number, the last four digits of a card number, or your Dutch-Bangla Bank account reference. We do not store full card numbers or mobile banking PINs.

Technical & Usage Data

When you access the bed77 platform, we automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, time zone, session duration, pages visited, games played, and referring URL. This data is used for security monitoring, fraud prevention, platform optimisation, and aggregate analytics.

Communications Data

If you contact bed77 via email, live chat, or any other support channel, we retain records of those communications, including the content of your messages, the date and time of contact, and any attachments you provide. These records are used to resolve your query, train our support team, and maintain a dispute-resolution history.

bed77 does not share your personal data with third parties except in the specific circumstances described below. All third parties with whom we share data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was disclosed.

Payment Service Providers

To process your deposits and withdrawals, bed77 shares the minimum necessary transaction data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and USDT network operators. These providers receive only the data required to execute and confirm your specific transaction and are bound by their own regulatory obligations regarding data security.

Game Software Providers

bed77's game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver seamless game sessions, a session token and anonymised player identifier may be passed to the relevant game provider when you launch a game. These providers do not receive your name, contact details, or full payment information.

Fraud Prevention & AML Partners

bed77 works with specialised third-party providers for identity verification, fraud scoring, and anti-money-laundering screening. These partners may receive your registration data, device fingerprint, and transaction patterns for the sole purpose of assessing risk and flagging suspicious activity. Their processing is governed by data-processing agreements that restrict use to these specific purposes.

Legal & Regulatory Disclosure

bed77 may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where required by applicable law, pursuant to a valid court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or a serious threat to public safety. Where permitted, we will notify you of any such disclosure request.

Business Transfers

In the event that bed77 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and ensure that the receiving entity is bound to honour this Privacy Policy with respect to their data.

bed77 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention framework applies to the principal categories of data we hold.

Active Account Data

Personal data associated with an active player account — including registration details, transaction history, game activity logs, and communication records — is retained for the lifetime of the account and for a minimum period of five (5) years following account closure. This five-year minimum retention period reflects AML record-keeping requirements applicable to offshore gaming platforms.

KYC & Identity Documents

Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years after the last transaction on the account, in accordance with financial crime prevention standards. Where a KYC document is submitted but the account is not successfully opened (for example, where verification fails), the document data is deleted within 90 days of the final verification decision.

Support Communications

Records of customer support interactions are retained for three (3) years from the date of the last communication in a given support thread. This retention period allows bed77 to reference prior interactions in the event of a related dispute or follow-up query.

Technical & Usage Logs

Server logs, IP address records, session data, and security event logs are retained for up to twelve (12) months in their detailed form, after which they are aggregated and anonymised for long-term statistical analysis. Fraud-related records may be retained for longer periods where they form part of an active investigation or legal proceeding.

Deletion Requests

Where you request deletion of your personal data, bed77 will action that request to the extent permitted by law. Data that must be retained to satisfy AML obligations, resolve open disputes, or comply with a court order cannot be deleted ahead of the applicable retention period. All other personal data will be securely deleted or irreversibly anonymised within 30 calendar days of a valid deletion request.

bed77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme is designed with a layered, defence-in-depth approach and is reviewed and updated on a regular basis to address evolving threats.

Encryption in Transit

All data transmitted between your browser or device and the bed77 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This ensures that your login credentials, payment details, and personal information cannot be intercepted by third parties while in transit. Our SSL certificate is maintained and renewed continuously to prevent lapses in encryption coverage.

Encryption at Rest

Sensitive data fields stored in our databases — including identity document references, payment method details, and KYC records — are encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel on a strict need-to-know basis and is subject to comprehensive audit logging.

Access Controls

Access to systems that hold personal data is governed by role-based access controls (RBAC). Staff members are granted access only to the data categories necessary for their specific job function. Administrative access requires multi-factor authentication (MFA) and is reviewed on a quarterly basis. All access events are logged and monitored for anomalous activity.

Security Monitoring

bed77 operates continuous security monitoring across its infrastructure, including intrusion detection systems, real-time alerting for suspicious login attempts, and automated blocking of IP addresses associated with known malicious activity. Security events are reviewed by our technical team and escalated according to a documented incident response plan.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, bed77 will notify affected players without undue delay, providing details of the nature of the breach, the data categories affected, the likely consequences, and the measures taken or planned to address it. We will also fulfil any applicable notification obligations to relevant authorities within the prescribed timeframes.

Your Role in Security

The security of your account is also dependent on the steps you take to protect your login credentials. bed77 strongly recommends that you use a strong, unique password for your account, enable any two-step verification options available in your account settings, and never share your password with any third party. If you suspect that your account has been compromised, contact [email protected] immediately so that we can take protective action.