29bed Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how 29bed ("we", "us", or "our") collects, uses, stores, and protects the personal information of users ("you" or "Player") who access or use the 29bed website at https://29bed.vip and all associated services including the online casino, sports betting markets, and promotional platforms. This Policy applies to all players accessing 29bed from Bangladesh and any other jurisdiction where the Platform operates.

By registering an account on 29bed or by continuing to use the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, you must stop using 29bed immediately. We recommend reviewing this Policy periodically, as it may be updated from time to time to reflect changes in our practices or applicable law.

29bed collects personal information from you in the following ways: directly when you register an account or contact our support team; automatically when you use the platform; and through third-party service providers such as payment processors. The categories of personal information we collect include:

• Identity and contact information: full name, date of birth, residential address, email address, and mobile phone number (including your bKash or Nagad registered number where provided).
• Account credentials: username and encrypted password. 29bed never stores passwords in plain text. All credentials are hashed using industry-standard cryptographic methods.
• Financial information: deposit amounts, withdrawal requests, transaction history, and the payment method identifiers (such as a masked bKash or Nagad wallet number) associated with your account. 29bed does not store full payment card numbers.
• Technical and usage data: IP address, browser type and version, operating system, device model, session duration, pages visited, games played, and betting history. This data helps us detect fraud and improve platform performance.
• Communications data: records of your interactions with the 29bed support team, including emails, live chat transcripts, and any documentation you submit as part of identity or payment verification.

We collect only the information that is necessary for the purposes described in this Policy. You are not required to provide more information than is needed to operate your 29bed account and comply with our legal obligations. Where we collect optional information (for example, a promotional preferences form), we will make clear that it is optional at the point of collection.

29bed uses the personal information we collect for the following purposes, each of which is necessary to provide a safe, compliant, and high-quality gaming experience:

• Account creation and management: to register your account, verify your identity and age (KYC), process deposits and withdrawals, and maintain your account preferences and history on the 29bed platform.
• Service delivery and improvement: to operate the online casino, sports betting, and crash game services; to monitor platform performance; and to identify and implement improvements to the user experience based on aggregate usage data.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct as described in the 29bed Terms and Conditions.
• Regulatory compliance: to satisfy our obligations under applicable anti-money laundering regulations, age verification requirements, and any other legal requirements imposed by relevant authorities.
• Customer support: to respond to your questions, process complaints, investigate disputes, and provide assistance with your account, deposits, withdrawals, or gaming activity.
• Marketing and promotions: where you have consented to receive marketing communications, to send you information about promotions, bonuses, seasonal offers, and new features on 29bed. You may withdraw your consent to marketing communications at any time by contacting support.

29bed processes your personal information on the following legal bases, depending on the specific purpose of each processing activity:

• Contractual necessity: processing required to fulfil the contract between you and 29bed, including account management, payment processing, and delivery of gaming services.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC, anti-money laundering obligations, and age verification requirements.
• Legitimate interests: processing necessary for 29bed's legitimate business interests, including fraud detection, platform security, and product improvement, provided these interests are not overridden by your rights.
• Consent: where you have explicitly opted in to marketing communications or to the use of non-essential cookies, 29bed processes the relevant data on the basis of your consent, which you may withdraw at any time.

29bed may share your personal information with the following categories of recipients, each of whom is required to handle your data in compliance with applicable data protection standards:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card payment processors receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• Game content providers: technology providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive session identifiers and game-play data to deliver their games and ensure fair-play compliance. They do not receive your full personal profile.
• Fraud prevention and compliance partners: third-party identity verification and anti-money laundering screening services may receive a subset of your identity and financial data to perform mandatory compliance checks.
• Legal and regulatory authorities: 29bed will disclose personal information to law enforcement, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of 29bed, its players, or the public.

29bed takes additional precautions with financial data given its sensitivity. When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a payment card, the transaction is processed via a secure payment gateway that encrypts your financial details in transit using TLS 1.2 or higher. 29bed retains only a masked version of your payment method identifier (for example, the last four digits of a card or a partially masked mobile wallet number) for the purpose of matching future transactions to your account and for audit purposes.

Full payment card numbers are never stored on 29bed's systems. Card processing is handled by PCI-DSS compliant payment processors. If you believe your payment information has been compromised, you should contact both 29bed support and your payment provider immediately. For bKash and Nagad transactions, 29bed will only initiate transfers to the mobile wallet registered in your name and verified during account setup — we never redirect funds to unverified third-party wallets.

29bed uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. 29bed uses the following categories of cookies:

• Essential cookies: required for the platform to function correctly. These include session authentication tokens, language preference settings, and security tokens. Essential cookies cannot be disabled without breaking platform functionality.
• Analytics cookies: used to collect aggregate, anonymised data about how players use the 29bed platform — which pages are most visited, how long sessions last, and where users navigate after landing on a given page. This data is used solely to improve the platform and is never linked back to your individual identity.
• Preference cookies: store your platform preferences such as language selection, so that your chosen settings are remembered between sessions. These cookies are non-essential and can be cleared via your browser settings without affecting your account.

You can manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block all cookies, delete existing cookies, or be notified when new cookies are set. Please note that blocking essential cookies will prevent some features of the 29bed platform from functioning correctly. 29bed does not use cookies to serve third-party advertising on the platform.

29bed retains your personal information for as long as your account remains active and for a reasonable period thereafter, or for as long as is necessary to fulfil the purposes described in this Policy, including satisfying any legal, regulatory, tax, or audit obligations. The specific retention periods that apply to different categories of data are as follows: account registration data and identity verification documents are retained for the duration of your account plus a minimum of five years after account closure; financial transaction records are retained for a minimum of five years from the date of the transaction in order to comply with applicable financial regulations; communications with the support team are retained for three years from the date of the last interaction; and technical log data is typically retained for twelve months and then anonymised or deleted.

When your personal data is no longer required for the purpose for which it was collected, and there is no legal obligation requiring us to retain it, 29bed will securely delete or anonymise the data in a manner that makes it impossible to re-identify you from the remaining information.

Subject to applicable law and certain legal exceptions, you have the following rights in respect of the personal data 29bed holds about you:

• Right of access: you may request a copy of the personal data 29bed holds about you, along with information about how it is used and with whom it is shared.
• Right of rectification: if you believe that any personal data 29bed holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: in certain circumstances you may request that 29bed delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations even after your account is closed.
• Right to restriction of processing: you may ask 29bed to restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to object: you have the right to object to the processing of your personal data where 29bed relies on legitimate interests as its legal basis, and to object to the use of your data for direct marketing purposes at any time.

To exercise any of these rights, please contact the 29bed support team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We will verify your identity before processing any data request and will respond within five (5) business days. There is no fee for submitting a data rights request.

29bed implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the 29bed platform; encrypted storage of sensitive personal data including identity documents and financial records; strict internal access controls ensuring that only authorised personnel can access player data, and only to the extent necessary for their specific role; regular security audits and vulnerability assessments of the platform infrastructure; and multi-factor authentication options for player accounts to reduce the risk of unauthorised login.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. 29bed cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 29bed will notify affected players as soon as reasonably practicable and will take all necessary steps to contain and remediate the breach.

If 29bed becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data from our systems and close any associated account. If you are a parent or guardian and believe that your child has registered on 29bed or provided personal information to us, please contact the support team immediately at [email protected]. We take underage access extremely seriously and actively use age verification technology as part of our registration process to prevent minors from accessing the platform.

29bed reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via the email address associated with their account. We encourage you to review this Policy periodically so that you are aware of how we protect your information. Your continued use of the 29bed platform following the posting of an updated Policy constitutes your acceptance of the revised terms.