Data Protection & Privacy
a99bed Privacy Policy — How We Protect Your Data
At a99bed, protecting the personal information of every Bangladeshi player is a foundational commitment. This Privacy Policy explains in plain, formal English exactly what data we collect, why we collect it, how we store and secure it, who we may share it with, and what rights you hold over your own information at all times.
Section 1
For the purposes of this Privacy Policy, a99bed acts as the data controller in respect of all personal information collected from users of the Platform. As data controller, a99bed determines the purposes for which and the means by which personal data is processed.
1.1 — Contact Details
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Protection team at the following address:
Platform: https://a99bed.com
Email:
Response Time: Within 72 hours on business days (Bangladesh Standard Time, UTC+6)
We take all privacy-related correspondence seriously and will treat your query with full confidentiality. Please include "Privacy Request" in the subject line of your email so that it is directed to the appropriate team member without delay.
Section 2
a99bed collects personal information only to the extent necessary to deliver its services, comply with applicable legal obligations, and maintain the security of the Platform. We adhere strictly to the principle of data minimisation — we do not collect data that is not reasonably required for a specified, legitimate purpose.
2.1 — Information You Provide Directly
When you register an account, update your profile, make a deposit or withdrawal, contact support, or participate in a promotion, you may provide us with the following categories of personal information:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number, gender | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city: Dhaka, Chittagong, Sylhet, etc.) | Account registration |
| Financial Data | bKash/Nagad/Rocket/Upay account number, bank account details (where applicable), transaction history | Deposit and withdrawal processing |
| Verification Documents | Scanned or photographed copies of government-issued ID, proof of address, selfie photographs | KYC/AML compliance checks |
| Communication Data | Content of emails, support chat transcripts, feedback and complaint submissions | Customer support interactions |
2.2 — Information Collected Automatically
When you visit or use the a99bed Platform, our servers and analytics tools automatically collect the following technical data, which may in some cases constitute personal data:
- Device and Browser Data: IP address, browser type and version, operating system, device type and model, screen resolution;
- Usage Data: Pages visited, features used, games played, bets placed (amount, type, outcome), session duration, click-through events;
- Location Data: Approximate geolocation derived from your IP address (used to apply geographic access controls, not for precise tracking);
- Log Data: Server-side access logs, error reports, timestamps of account login and logout events.
2.3 — Information from Third Parties
In limited circumstances, a99bed may receive personal information about you from third parties, including:
- Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) who confirm transaction status and account ownership;
- Identity verification and fraud-prevention service providers engaged to assist with KYC and AML compliance;
- Publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, or court records, where required by law.
Section 3
a99bed uses the personal information it collects exclusively for the specific, legitimate purposes set out below. We do not use your data for automated decision-making that produces significant legal effects without human review, and we do not sell your personal data to any third party for marketing purposes.
3.1 — Service Delivery
- To create, maintain, and administer your a99bed Account;
- To process deposits and withdrawals via your selected payment method (bKash, Nagad, etc.);
- To enable you to access and play casino games, live dealer tables, slots, and cricket and sports betting markets;
- To apply bonus and promotional credits to your Account in accordance with applicable promotion terms;
- To provide 24/7 English-language customer support and respond to your queries and complaints.
3.2 — Legal and Regulatory Compliance
- To verify your identity and age (18+ requirement) as part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations;
- To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities on the Platform;
- To maintain transaction records as required by applicable financial regulations;
- To respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
3.3 — Platform Improvement and Security
- To monitor Platform performance, diagnose technical issues, and improve the user experience;
- To analyse usage patterns and player behaviour in aggregate to improve game selection, promotional offerings, and Platform design;
- To protect the integrity and security of the Platform against unauthorised access, cyberattacks, and other threats.
3.4 — Responsible Gaming
- To monitor player activity for signs of problem gambling and, where appropriate, to apply responsible gaming interventions such as deposit limits, time-outs, or self-exclusion;
- To comply with self-exclusion requests and ensure that self-excluded players cannot re-register using different details.
3.5 — Marketing Communications
Where you have given explicit consent at registration or subsequently, a99bed may use your email address or mobile number to send you promotional communications about new games, seasonal offers (e.g., BPL cricket promotions, Eid specials, Pohela Boishakh offers), and platform updates. You may withdraw consent to marketing communications at any time by contacting [email protected] or using the unsubscribe link included in every marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Section 4
a99bed processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which a99bed relies are as follows:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing your identity, contact, and financial data is necessary to perform the contract between you and a99bed (i.e., the Terms & Conditions you accepted at registration). Without this data, we cannot provide the Service. |
| Legal Obligation | Processing for KYC, AML, age verification, and responding to lawful authority requests is required by applicable law and regulation. We have no discretion to waive this processing. |
| Legitimate Interests | Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics serves the legitimate interests of a99bed and its player community. We have assessed that these interests are not overridden by your fundamental rights. |
| Consent | Processing for direct marketing communications and non-essential cookies is based on your explicit, freely given, and withdrawable consent. You may withdraw consent at any time without affecting prior processing. |
Section 5
a99bed uses cookies and similar tracking technologies (such as web beacons and local storage objects) on the Platform. Cookies are small text files placed on your device by your browser when you visit the Platform. They serve a variety of functions essential to the operation and improvement of the a99bed service.
5.1 — Types of Cookies Used
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security token validation, load balancing. Without these, core Platform features cannot function. | No — exempt from consent requirement |
| Functional | Remembering your language preferences, game lobby filters, and recent activity so the Platform behaves as expected on return visits. | No — used under legitimate interests |
| Analytics | Aggregate, anonymised data on page views, session lengths, game popularity, and navigation flows. Used exclusively to improve the Platform. | Yes — consent-based |
| Marketing | Tracking clicks from promotional campaigns to measure effectiveness and ensure bonus offers are shown to eligible players only. | Yes — consent-based |
5.2 — Managing Cookies
You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary or functional cookies may impair your ability to use certain features of the a99bed Platform, including logging in to your Account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation. Your cookie preferences can also be updated by contacting [email protected].
Section 6
a99bed does not sell, rent, or trade your personal information to any third party for commercial gain. We share personal data only with carefully selected third parties who assist us in delivering the a99bed Service, and only to the extent strictly necessary for the specified purpose. All third-party data processors engaged by a99bed are bound by contractual data protection obligations that meet or exceed the standards set out in this Policy.
6.1 — Categories of Third-Party Recipients
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction data necessary to process your deposits and withdrawals. Their use of your data is governed by their own privacy policies;
- Game Providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi, and other certified providers may receive your anonymised session data to facilitate game delivery and fairness auditing. They do not receive your identity or financial data;
- Identity Verification Services: Third-party KYC and AML service providers receive identity documents and biographic data solely for the purpose of verifying your identity and screening against sanctions and PEP databases;
- IT and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity partners who operate the technical infrastructure of the Platform under strict data processing agreements;
- Legal and Regulatory Authorities: Courts, law enforcement agencies, and regulatory bodies may receive your data where a99bed is required by law to disclose it or where disclosure is necessary to protect the rights and safety of a99bed or its players.
6.2 — International Data Transfers
Some of a99bed's third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, a99bed takes appropriate measures to ensure that such transfers are subject to adequate data protection safeguards, including contractual clauses that require the recipient to protect data to standards equivalent to those applied by a99bed under this Policy.
Section 7
a99bed retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 7 years after closure | AML and KYC legal obligations |
| Transaction and Financial Records | 7 years from transaction date | Financial record-keeping requirements |
| Communication and Support Records | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Evidence of lawful processing basis |
| Technical and Log Data | 12 months from collection | Security monitoring and fraud detection |
| Self-Exclusion Records | Indefinite (or minimum 7 years) | To prevent re-registration by self-excluded players |
When personal data is no longer required for any of the above purposes, a99bed will securely delete or anonymise it in accordance with our internal data lifecycle management procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
Section 8
a99bed respects and upholds your rights in relation to the personal data we hold about you. The following rights are available to all registered players and, where applicable, to visitors of the Platform. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request". We will respond within 72 hours on business days and aim to fulfil all legitimate requests within 30 calendar days.
Section 9
a99bed employs a comprehensive, multi-layered approach to data security, designed to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following measures:
9.1 — Technical Safeguards
- SSL/TLS Encryption: All data transmitted between your device and the a99bed Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser address bar as confirmation;
- Data Encryption at Rest: Sensitive data stored on a99bed's servers — including identity documents, financial records, and KYC materials — is encrypted at rest using AES-256 encryption;
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. All a99bed staff and contractors with data access are subject to confidentiality obligations and role-based access controls;
- Penetration Testing: a99bed's technical infrastructure undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited;
- Two-Factor Authentication: Administrative access to systems holding player data requires multi-factor authentication.
9.2 — Organisational Safeguards
- All staff who handle personal data receive mandatory data protection training upon joining a99bed and at regular intervals thereafter;
- a99bed maintains an internal data breach response procedure. In the event of a data breach that presents a material risk to your rights and freedoms, a99bed will notify affected players as promptly as circumstances permit;
- Third-party data processors are subject to due-diligence assessments and contractual data security obligations before they are granted access to any personal data.
9.3 — Your Role in Security
While a99bed takes all reasonable precautions, the security of your Account is a shared responsibility. You must keep your login credentials confidential, use a strong and unique password, enable any additional security features offered by a99bed, and notify us immediately at [email protected] if you suspect your Account has been accessed without your authorisation. a99bed cannot be held responsible for security breaches that result from the compromise of your own device or credentials.
Section 10
a99bed reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our Platform. When we make material changes to this Policy, we will:
- Update the "Last Updated" date displayed at the top of this page;
- Display a prominent notice on the Platform upon your next login, summarising the key changes;
- Where required by law or where changes are significant, send a notification to your registered email address in advance of the changes taking effect.
Your continued use of the a99bed Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically. The current version is always available at https://a99bed.com/privacy-policy. If you have questions about any update, please contact [email protected] before continuing to use the Platform.
Our Commitments
Our privacy programme is built around six core principles that every Bangladeshi player can rely on when using the a99bed Platform.
SSL Encryption
Every byte of data exchanged between your device and a99bed travels over TLS-encrypted channels. Your personal and financial information is never transmitted in plain text.
Data Minimisation
a99bed collects only the personal data strictly necessary for a specified, legitimate purpose. We do not harvest data speculatively or retain information beyond its required retention period.
Your Rights Upheld
Access, correct, delete, or port your data at any time. Our dedicated support team responds to all privacy rights requests within 72 hours on Bangladesh Standard Time business days.
No Data Selling
a99bed never sells, rents, or trades your personal information to third parties for commercial gain. Your data is used exclusively to deliver and improve the a99bed Service.
Cookie Transparency
We clearly distinguish between essential and optional cookies. Marketing and analytics cookies are deployed only with your explicit consent, which you may withdraw at any time.
Secure Data Storage
Sensitive records including KYC documents and financial data are encrypted at rest using AES-256 encryption and stored on access-controlled infrastructure with regular security audits.
Your Privacy Is Protected — Now Enjoy the Platform
With your data in safe hands, explore 1,000+ certified casino games, live cricket betting on BPL and T20 fixtures, and instant bKash & Nagad deposits. 18+ only. Please play responsibly.
18+ Only • Play Responsibly • SSL Secured • Fair Play Certified