bed666 Privacy Policy

bed666 collects personal data through several channels: directly from you when you register an account or contact support, automatically when you use the platform, and occasionally from third-party verification partners as part of our Know Your Customer (KYC) obligations. The categories of data we collect are described below.

1.1 Registration Data

When you create a bed666 account you are asked to provide the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify that you are 18 years of age or older);
• Residential address, including division, district, and post code;
• Mobile phone number (used for account verification and two-factor authentication);
• Email address (used for account communications and security alerts);
• Preferred currency (Bangladeshi Taka, BDT).

1.2 Identity Verification Data

To comply with anti-money laundering (AML) regulations and to confirm your age, we may ask you to submit copies of identity documents, including but not limited to your National Identity Card (NID), passport, or driving licence. We may also request a recent proof-of-address document such as a utility bill or bank statement issued within the past three months.

1.3 Financial Data

When you make a deposit or withdrawal, bed666 records the payment method used (for example, your bKash mobile number or the last four digits of your Nagad account), transaction amounts, timestamps, and transaction reference numbers. bed666 does not store full debit or credit card numbers on its own servers; card data is handled exclusively by our PCI-DSS compliant payment processing partners.

1.4 Behavioural and Usage Data

As you use the bed666 platform, we automatically collect information about your activity, including:

• Games played, bet amounts, wager history, and session durations;
• Sports markets browsed and betting patterns;
• Device type, operating system, and browser version;
• IP address and approximate geolocation (city level);
• Referral source (how you arrived at the bed666 website);
• Clickstream data and on-site navigation paths.

1.5 Communications Data

When you contact the bed666 support team via email or live chat, we retain records of your enquiries and our responses. These records are used to resolve disputes, improve service quality, and for staff training purposes.

bed666 shares your personal data only where it is necessary to deliver our services, to meet legal requirements, or to protect the integrity of our platform. We do not sell personal data to advertisers, data brokers, or any other commercial third party. The categories of recipients who may receive your data are set out below.

3.1 Payment Service Providers

To process your deposits and withdrawals, bed666 shares relevant transaction data with authorised payment processors, including the mobile financial service providers bKash, Nagad, Rocket, and Upay, as well as banking partners such as Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks where applicable. These partners receive only the minimum data necessary to complete the requested transaction and are bound by their own data protection obligations.

3.2 Identity Verification Partners

bed666 uses accredited third-party KYC and identity verification services to confirm player age and identity. These partners process document images and personal data under strict confidentiality agreements and are not permitted to use the data for any purpose beyond the verification task instructed by bed666.

3.3 Game Providers

Casino games and live dealer tables on the bed666 platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers receive a session token and a player identifier to launch game sessions; they do not receive your full name, contact details, or payment information.

3.4 Regulatory and Law Enforcement Authorities

bed666 will disclose personal data to government bodies, regulatory authorities, or law enforcement agencies where required to do so by law, court order, or where we reasonably believe disclosure is necessary to prevent serious harm, illegal activity, or to protect the rights of other players on the platform.

3.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of bed666's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified by email in advance of any such transfer that materially affects how their data is used.

bed666 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Account and registration data: Retained for the duration of your account plus 5 years after account closure, to satisfy anti-money laundering and fraud prevention record-keeping requirements;
• Identity verification documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later;
• Transaction records (deposits, withdrawals, wagers): Retained for 5 years from the date of each transaction;
• Support communications: Retained for 2 years from the date of the last communication in a support thread;
• Behavioural and analytics data: Retained in identifiable form for 24 months, after which data is anonymised and may be retained indefinitely for aggregate statistical purposes;
• Marketing preference records: Retained until you withdraw your consent, plus 12 months thereafter as evidence of the consent record.

All personal data held by bed666 is stored on servers located within secured data centre facilities. Data at rest is encrypted using AES-256 encryption. Access to personal data is restricted to authorised bed666 personnel and contracted processors on a strict need-to-know basis, with access logs maintained and reviewed regularly.

bed666 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. The key measures in place include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or mobile device and the bed666 platform is encrypted using TLS 1.3, ensuring that data in transit cannot be intercepted or read by third parties;
• AES-256 Encryption at Rest: Personal data, financial records, and identity documents stored on bed666 servers are encrypted at rest using AES-256, an industry-standard encryption algorithm;
• Access Controls: Access to systems that contain personal data is restricted to authorised personnel only, enforced through role-based access controls (RBAC) and multi-factor authentication (MFA) for all internal staff accounts;
• Penetration Testing: bed666's infrastructure undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited;
• Intrusion Detection: Automated intrusion detection and prevention systems (IDS/IPS) monitor network traffic continuously for anomalous patterns indicative of attack attempts;
• Incident Response Plan: bed666 maintains a documented data breach incident response plan. In the event of a confirmed breach, affected players are notified within 72 hours by email to their registered address, with details of what data was affected and the steps being taken to mitigate the impact.

While bed666 implements industry-leading security controls, no online platform can guarantee absolute security. You play an important role in protecting your own account by choosing a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any other person. If you suspect that your account has been accessed without your authorisation, please contact the support team immediately at [email protected].