bebdt Privacy Policy

When you register and use your bebdt account, we collect several categories of personal data. The specific data collected depends on the actions you take on the platform — from initial registration through to making deposits, placing bets, and requesting withdrawals.

Registration and Identity Data

When you create a bebdt account, we collect your full legal name, date of birth, email address, mobile phone number, and the division or district of Bangladesh in which you reside. This information is used to create your account, communicate with you, and verify your identity as part of our Know Your Customer (KYC) process.

Identity Verification Documents

To comply with responsible gaming obligations and prevent fraud, bebdt may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request a recent utility bill or bank statement to confirm your residential address. These documents are processed solely for verification purposes and stored in an encrypted document management system with restricted access.

Financial and Payment Data

When you make a deposit or request a withdrawal, we collect the mobile wallet number or bank account details associated with your transaction (e.g., your registered bKash or Nagad number). We do not store full payment credentials. Transaction reference numbers, amounts, timestamps, and payment method types are logged in your account history for audit and dispute resolution purposes.

Usage and Technical Data

bebdt automatically collects certain technical information when you access the platform. This includes:

• IP address and approximate geographic location (country and city level);
• Device type, operating system, and browser version;
• Session start and end timestamps;
• Pages visited, games played, bets placed, and features accessed;
• Referral source (e.g., how you arrived at bebdt.net).

This data is used for platform security monitoring, fraud prevention, responsible gaming analytics, and improving the overall user experience.

Communications Data

If you contact bebdt support via live chat or email, we retain records of those communications — including the content of messages, timestamps, and the support agent's responses. These records allow us to resolve disputes, maintain service quality, and comply with any applicable legal obligations to retain records.

bebdt uses the personal data it collects for specific, clearly defined purposes. The following table summarises the primary use cases and the types of data involved in each:

Marketing Communications

bebdt may send you promotional emails or in-platform notifications about bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and new game releases — but only if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by emailing [email protected]. Withdrawing marketing consent does not affect our ability to send you service-essential communications (such as deposit confirmations, withdrawal receipts, and security alerts).

Automated Decision-Making

bebdt uses automated systems to flag accounts for responsible gaming review, fraud screening, and bonus abuse detection. Where an automated process results in a restriction being applied to your account, you have the right to request human review of that decision by contacting our support team. No permanent account closure is carried out exclusively by automated means without human oversight.

bebdt processes personal data only when there is a valid legal basis for doing so. The four legal bases that apply to bebdt's data processing activities are described below:

• Contract Performance: Processing is necessary to create and manage your bebdt account, execute financial transactions, and deliver the gaming and betting services you have signed up for. Without this processing, bebdt cannot provide its services to you.
• Legal Obligation: Certain processing activities are required by applicable law, including KYC identity verification, transaction record-keeping for anti-money laundering (AML) compliance, and responsible gaming monitoring obligations. bebdt must perform these activities regardless of your preferences.
• Legitimate Interest: bebdt has a legitimate interest in processing data for fraud prevention, platform security, analytics that improve user experience, and detecting bonus abuse. In each case, bebdt has assessed that its legitimate interests are not overridden by your privacy rights, given the security protections in place and the direct benefit to all platform users of a safe and fair environment.
• Consent: Where bebdt processes data solely for marketing communications or optional analytics features (such as personalised game recommendations), we rely on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

bebdt uses cookies and similar tracking technologies (such as local storage and session tokens) on the bebdt.net website to ensure the platform operates correctly and to improve your experience as a member. A cookie is a small text file stored on your device by your web browser when you visit a website.

Categories of Cookies Used

Third-Party Cookies

bebdt does not deploy third-party advertising cookies or retargeting pixels from external marketing networks. Game content delivered by licensed third-party providers (such as Pragmatic Play or Evolution Gaming) may set their own functional cookies scoped to their game iframe. These cookies are governed by the respective studio's own privacy policies and do not grant those studios access to your bebdt account data.

Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies will prevent the bebdt platform from functioning correctly and may result in you being unable to log in or complete financial transactions. Instructions for managing cookies are available in the help section of all major browsers including Chrome, Firefox, Safari, and Microsoft Edge.

bebdt does not sell, rent, or trade personal data. We share data with third parties only in the limited circumstances described below, and only where appropriate safeguards are in place:

Payment Service Providers

When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), or City Bank, we share the minimum necessary transaction data with those providers to process the payment. Each provider operates under its own privacy policy and regulatory obligations. bebdt is not responsible for the data handling practices of these independent financial institutions beyond the data it transmits to them.

Identity Verification Partners

bebdt may engage third-party KYC verification service providers to assist with document authentication and identity checks. These providers process your identity documents solely for verification purposes under a data processing agreement with bebdt. They are not permitted to use your data for any purpose other than completing the verification task.

Game Content Providers

Game studios whose content is accessible through bebdt — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a pseudonymous player identifier and necessary session tokens to deliver their games. They do not receive your full name, NID number, or payment details. Game providers are prohibited from using bebdt player data for independent marketing or profiling.

Legal and Regulatory Disclosure

bebdt may disclose personal data to law enforcement agencies, financial regulators, or courts where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, protect national security, or comply with a binding legal obligation. In all such cases, bebdt will disclose only the minimum data required and will notify the affected member where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of bebdt's business, member data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected members and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

bebdt retains personal data for defined periods tied to the purpose for which it was collected and to applicable legal retention requirements. The table below sets out the standard retention periods for each major data category:

When a retention period expires, data is either securely deleted from our systems or irreversibly anonymised such that it can no longer be associated with any individual. Anonymised aggregated data (such as platform usage statistics) may be retained indefinitely for research and product development purposes.

As a bebdt member, you hold a range of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of them, send a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered email address and a brief description of the right you wish to exercise. bebdt will acknowledge your request within 48 hours and provide a substantive response within 10 business days.

bebdt takes data security seriously and maintains a comprehensive security programme designed to protect member data against unauthorised access, disclosure, alteration, or destruction. The following measures are in place across our infrastructure:

• Encryption in Transit: All data transmitted between your device and bebdt servers is encrypted using TLS 1.2 or higher. The bebdt.net domain enforces HTTPS exclusively; unencrypted HTTP connections are automatically redirected.
• Encryption at Rest: Personal data and financial records stored in bebdt's databases are encrypted at rest using AES-256 encryption. Backups are encrypted using the same standard.
• Access Controls: Access to production systems and member data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection training.
• Two-Factor Authentication: Internal administrative access to bebdt systems requires multi-factor authentication. Members are strongly encouraged to enable two-factor authentication on their own accounts for an additional layer of personal protection.
• Penetration Testing: bebdt engages independent third-party security firms to conduct regular penetration tests and vulnerability assessments of the platform. Identified vulnerabilities are remediated according to a prioritised risk schedule.
• Incident Response: bebdt maintains a documented incident response plan. In the event of a confirmed data breach affecting member personal data, we will notify affected members and relevant authorities within the timeframes required by applicable law.

While bebdt takes all reasonable and industry-standard steps to protect your data, no system is entirely immune to security threats. We encourage all members to use strong, unique passwords for their bebdt accounts, to avoid sharing login credentials, and to contact [email protected] immediately if they suspect unauthorised access to their account.

The bebdt platform integrates with several categories of third-party service providers to deliver a complete gaming and betting experience. Each provider receives only the minimum data necessary to fulfil their specific function and is bound by a data processing agreement prohibiting use of bebdt member data for any independent purpose.

Payment Providers

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank each operate their own independent payment infrastructure. When you initiate a financial transaction through bebdt, you are interacting with both bebdt's systems and the payment provider's systems. The payment provider's own privacy policy governs their handling of your financial data. bebdt recommends reviewing the privacy policies of any payment provider you use.

Game Studios

Game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is delivered via embedded game clients. These studios may process pseudonymous session data for game integrity and fairness verification purposes. bebdt ensures that no personally identifiable data beyond a pseudonymous player token is transmitted to game studios.

Analytics and Infrastructure

bebdt uses first-party analytics tools and infrastructure hosting services to operate the platform. Hosting infrastructure is located in data centres with ISO 27001 certification or equivalent standards. bebdt does not use Google Analytics, Meta Pixel, or other third-party advertising analytics tools on its platform.

Links to External Sites

bebdt.net does not contain links to external websites or third-party platforms. If you encounter a link that appears to lead outside of bebdt.net, treat it with caution and contact [email protected] to report it, as it may indicate a phishing attempt or unauthorised modification of your browser environment.

bebdt is an online gaming and sports betting platform intended exclusively for adults aged 18 years and above. The platform is not directed at, designed for, or intended to be used by anyone under the age of 18. bebdt does not knowingly collect, store, or process personal data belonging to individuals under 18 years of age.

During the registration process, all applicants are required to confirm that they are at least 18 years old. Where bebdt has reason to suspect that a registered member may be under 18 — whether through KYC document review, account behaviour analysis, or a report from a third party — the account will be immediately suspended pending age verification. If the age verification confirms that the member is under 18, the account will be permanently closed, all funds will be handled in accordance with applicable legal requirements, and the personal data associated with the account will be deleted as promptly as permitted by law.

If you are a parent or guardian and believe that a minor in your care has created a bebdt account without your knowledge, please contact [email protected] immediately with the subject line "Minor Account Report". bebdt will investigate and take appropriate action within 24 hours of receiving your report.

bebdt may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, changes to the services we offer, or for other operational reasons. The effective date at the top of this page will be updated whenever a new version is published.

When material changes are made — that is, changes that meaningfully affect how your data is collected, used, or shared — bebdt will notify registered members through one or more of the following channels:

• An email notification sent to your registered email address at least 7 days before the change takes effect;
• A prominent in-platform notification displayed upon your next login;
• An announcement posted in the bebdt news or updates section of the website.

Minor updates — such as clarifications of existing language, correction of typographical errors, or updates to contact details — may be made without advance notice. Your continued use of the bebdt platform after the stated effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change, you may request account closure before the effective date by contacting [email protected].

bebdt recommends that all members review this Privacy Policy periodically to remain informed about how their personal data is being handled. Archived versions of previous Privacy Policy editions are available on request.

If you have any questions, concerns, or requests relating to this Privacy Policy or bebdt's handling of your personal data, please contact us using the details below. All privacy-related communications are handled by bebdt's dedicated data protection team.

How to Reach Us

• Email: [email protected] — use the subject line "Privacy Query" or "Privacy Rights Request" so your message is routed to the correct team. We aim to respond within 48 hours and provide a full resolution within 10 business days.
• Live Chat: Available 24 hours a day, 7 days a week — including all Bangladeshi public holidays — via the live chat interface on the bebdt platform. Live chat agents can log your privacy request and escalate it to the data protection team immediately.
• Coverage: bebdt serves members across all divisions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. All support is conducted in English.

Response Timeframes

bebdt is committed to the following response standards for privacy-related requests:

• Acknowledgement of receipt: within 48 hours of submission;
• Substantive response or data export: within 10 business days;
• Complex requests (e.g., full data erasure across multiple systems): within 30 calendar days, with a progress update provided at the 10-day mark.