9bed Privacy Policy

9bed ("we", "us", "our") is Bangladesh's trusted online betting and live casino platform. We are committed to protecting the privacy and personal data of every player who registers and engages with our services. This Privacy Policy sets out, in plain and accessible English, the full scope of our data practices — from the moment you first visit the 9bed platform to the point at which your account is closed and your data is securely deleted or anonymised.

This policy applies to all personal data collected through the 9bed website, any related mobile interface, and all customer support communications conducted via email or any other channel operated by 9bed. It covers data collected from players located in Bangladesh as well as any other jurisdiction from which access to the platform may occur.

This Privacy Policy should be read alongside 9bed's Terms & Conditions, which are available at /terms-conditions, and the Responsible Gaming policy available at /responsible-gaming. Together, these three documents form the complete framework governing your relationship with the 9bed platform.

If you are under 21 years of age, you must not register an account or submit any personal data to 9bed. Our services are strictly for adults aged 21 and above. Any data submitted by a minor that comes to 9bed's attention will be deleted promptly, and the associated account will be permanently closed.

9bed collects personal data across several categories depending on how you interact with the platform. The table below provides a structured overview of each data category, the specific data points collected within it, and the primary reason for collection.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records (other than data relevant to a self-exclusion request made under our Responsible Gaming programme), or biometric identifiers beyond what is contained in a submitted national identity document for age and identity verification purposes.

Where you choose not to provide data that is required for a specific purpose — such as refusing to complete KYC verification — 9bed reserves the right to restrict or suspend the relevant functionality on your account, including the processing of withdrawal requests, until the required information is supplied.

9bed uses the personal data we collect for the following specific and limited purposes:

• Account Registration and Management: To create, verify, and administer your 9bed player account, including processing your initial registration, maintaining your profile, and communicating essential account-related information such as password resets and deposit confirmations.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method — including bKash, Nagad, Rocket, Upay, and linked bank accounts — and to maintain accurate financial records for each transaction.
• Identity and Age Verification: To confirm that you are aged 21 or above and are the legitimate owner of the account and the payment methods associated with it, in compliance with our obligations to prevent underage gambling and financial fraud.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and any other conduct that violates our Terms & Conditions or applicable law. This includes automated monitoring of unusual betting patterns and login behaviour.
• Responsible Gaming Monitoring: To identify players who may be exhibiting signs of problem gambling and to apply appropriate safeguards proactively, including cooling-off suggestions, deposit limit notifications, and referrals to our self-exclusion tools.
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes relating to bets, payments, or account matters in a timely and accurate manner.
• Legal and Regulatory Compliance: To comply with applicable Bangladeshi law, respond to lawful requests from governmental or regulatory authorities, and maintain records as required by anti-money laundering obligations.
• Platform Improvement: To analyse aggregated and anonymised usage data to understand how players engage with different sections of the platform — including cricket betting markets, slots, live casino, and keno — and to improve the overall user experience.
• Direct Communications: Where you have provided explicit consent, to send you promotional communications about 9bed offers, new features, and seasonal promotions (for example, during Eid, Pohela Boishakh, or BPL season). You may withdraw consent to marketing communications at any time by contacting [email protected].

9bed does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, other than in cases where such processing is required by law or is directly necessary to apply a self-exclusion, account suspension, or fraud-related restriction that you or an authority has requested.

9bed processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity in question:

• Contractual Necessity: Processing that is required to perform the contract between you and 9bed — that is, to operate your betting account, settle bets, and process financial transactions — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Certain processing activities — particularly those relating to identity verification, anti-money laundering record-keeping, and responses to lawful requests from authorities — are carried out because they are required by applicable law.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming analysis, and platform improvement is carried out on the basis of 9bed's legitimate business interests, provided those interests are not overridden by your own privacy rights. We conduct a balancing assessment before relying on this basis.
• Consent: Processing for direct marketing communications and the use of non-essential cookies is carried out only where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9bed does not sell, rent, or trade your personal data to any third party. We share data only where it is strictly necessary and only with the categories of third party described below:

• Payment Service Providers: We share the minimum necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank to process deposits and withdrawals on your behalf. These providers are bound by their own data protection obligations and are not authorised to use your data for any purpose beyond completing the transaction.
• Identity Verification Services: Where automated or manual KYC verification is required, we may share relevant identity data with third-party verification service providers who specialise in document authentication and age verification. All such providers are contractually bound to process data solely for verification purposes.
• Technology and Infrastructure Partners: Service providers who assist in hosting, maintaining, and securing the 9bed platform infrastructure may have access to data as a necessary consequence of providing those services. These providers operate under strict data processing agreements and are prohibited from accessing or using data beyond what is required for their contracted role.
• Law Enforcement and Regulatory Authorities: 9bed will disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by law, court order, or lawful regulatory request. Where permitted by law, we will notify you of such a disclosure.
• Fraud and Security Networks: In cases of suspected fraud, match-fixing, or money laundering, 9bed may share relevant account and transaction data with industry fraud prevention networks or relevant Bangladeshi authorities to prevent financial crime.

All third parties with whom 9bed shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only in accordance with 9bed's written instructions and applicable data protection law. 9bed does not transfer player data to third parties located outside of Bangladesh or the immediately adjacent data processing jurisdictions used by our payment partners, except where required by law.

9bed uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while logged in, and to gather anonymised analytics data about how players interact with different areas of the site. The following categories of cookies are used:

9bed does not use third-party advertising cookies or behavioural tracking cookies that profile you across other websites. Analytics data collected via cookies is aggregated and anonymised before being reviewed by our platform team — no individual player's browsing behaviour is reviewed at a personal level for commercial purposes.

You may configure your browser to refuse or delete cookies at any time; however, disabling essential or fraud detection cookies may prevent core platform functionality from operating correctly, including login and bet placement. Disabling functional cookies will mean that your preferences are not remembered between sessions.

9bed retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applicable to the main categories of data are as follows:

• Account and Identity Data: Retained for the duration of the account's active life plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping obligations applicable in Bangladesh.
• Betting Activity Data: Retained for 3 years from the date of each bet for the purposes of dispute resolution and responsible gaming analysis, and thereafter in anonymised form for statistical and platform improvement purposes.
• Customer Support Communications: Retained for 2 years from the date of the final communication in a support thread, or longer if the communication forms part of an ongoing dispute or legal matter.
• Self-Exclusion Records: Retained indefinitely to ensure that a player's self-exclusion request is honoured in perpetuity and that the player cannot be re-registered in circumvention of their own request.
• Marketing Consent Records: Retained for as long as your account is active and for 1 year following its closure, to demonstrate that communications were sent on a legitimate consent basis.

At the end of each applicable retention period, data is either securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual. 9bed conducts periodic internal data audits to ensure that obsolete personal data is promptly identified and removed from active systems.

9bed employs a multi-layered security architecture to protect all personal and financial data held on its platform. Our technical and organisational security measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and 9bed's servers is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. This applies to all platform pages, including account login, deposit flows, and customer support interactions.
• Encrypted Data Storage: Sensitive data at rest — including identity documents submitted for KYC verification and financial account references — is stored in encrypted form using AES-256 encryption. Payment card or mobile financial service credentials are never stored in recoverable form on 9bed's servers.
• Access Controls: Access to personal data within 9bed's internal systems is granted on a strict need-to-know basis. Staff members are assigned the minimum level of data access required for their specific role. All internal access to sensitive data is logged and subject to periodic audit.
• OTP-Based Authentication: 9bed uses one-time password (OTP) authentication as a second factor for account login and for high-value withdrawal requests, significantly reducing the risk of unauthorised account access.
• Fraud and Anomaly Detection: Automated systems monitor account activity in real time for signs of unauthorised access, unusual login patterns, and suspicious transaction behaviour. Alerts generated by these systems are reviewed by 9bed's security team within defined response time windows.
• Regular Security Reviews: 9bed's security infrastructure is subject to periodic internal review. Any identified vulnerabilities are remediated promptly in accordance with a defined security patch management process.

Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights or interests, 9bed will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

As a registered 9bed player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 10 working days.

9bed will not charge a fee for handling data rights requests submitted in good faith. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in nature. We may also request proof of identity before processing a rights request to ensure that data is not disclosed to, corrected at the request of, or deleted at the request of, a person other than the legitimate account holder.

9bed's services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual who is under the age of 21. The age restriction of 21+ applies to all players regardless of the specific product being accessed — whether cricket betting, slots, live casino, keno, or American football markets.

During the registration process, 9bed collects the applicant's date of birth and reserves the right to request a copy of a valid identity document to verify that the minimum age requirement is satisfied. Where an account is found to have been registered by or on behalf of a person under 21, the account will be immediately and permanently closed, all associated funds will be returned to the payment method used for deposit, and all personal data collected in connection with the account will be deleted from 9bed's systems without undue delay.

If you believe a minor has registered an account on 9bed, please notify us immediately at [email protected]. We take such reports extremely seriously and will investigate and act on all credible notifications within 24 hours.

9bed may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made to this policy, we will notify registered players via the mobile number or email address associated with their account at least 14 days before the changes take effect.

Non-material changes — such as minor clarifications of language, corrections of typographical errors, or reorganisation of section structure without substantive change to the underlying practices — may be made without advance notice. The "Effective Date" displayed at the top of this document and the "Last Reviewed" date in the hero section will be updated whenever any change is made.

The most current version of this Privacy Policy will always be accessible at /privacy-policy. We encourage players to review this page periodically to remain informed about how 9bed handles their personal data. Continued use of the platform after a revised policy takes effect constitutes acceptance of the updated terms.