Privacy Policy
for goldbed

goldbed collects personal data that is necessary to operate the platform, verify player identities, process payments, and comply with applicable anti-money-laundering and responsible gaming obligations. We collect only the minimum data required for each stated purpose and do not retain information beyond the periods outlined in Section 5 of this Policy.

Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with information that may include:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (National ID / NID, passport number, or driving licence number).
• Contact data: Email address and mobile phone number (including the number registered to your bKash, Nagad, Rocket, or Upay account).
• Address data: Residential address, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), and postal code as provided during verification.
• Financial data: Payment method details (mobile financial service account reference numbers), transaction history, deposit amounts, withdrawal requests, and account balances. goldbed does not store full card numbers or payment account PINs.
• Support communications: The content of live chat conversations, emails, and any attachments or documents submitted to our support team for verification purposes.

Information Collected Automatically

When you access and use the goldbed platform, certain technical and behavioural data is collected automatically through our platform infrastructure and analytics tools:

• Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, search queries within the platform, and feature interactions.
• Geolocation data: Approximate location derived from your IP address. We do not collect GPS-level precise location data unless explicitly required for a specific platform feature and you have granted permission.
• Cookie & tracking data: Session cookies, persistent cookies, and similar technologies as described in Section 4 of this Policy.

goldbed processes your personal data on the basis of one or more of the following lawful grounds: fulfilment of a contract with you (your player account), compliance with a legal obligation, protection of your vital interests, or our legitimate interests in operating a secure and compliant gaming platform. The table below summarises the primary purposes for which we process your personal data:

goldbed will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

Automated Decision-Making

goldbed uses automated processes for certain fraud-detection and responsible gaming functions. For example, our system may automatically flag an account for review if it detects unusual betting patterns or signs of problem gambling behaviour. Where an automated decision has a significant effect on your account (such as a temporary suspension), you have the right to request human review of that decision by contacting our support team. We will respond to such requests within 5 business days.

goldbed does not sell, rent, or trade your personal data with third parties for their own marketing or commercial purposes under any circumstances. We share your data only where strictly necessary and only with the categories of recipients described below.

Service Providers & Data Processors

We engage a limited number of carefully vetted third-party service providers who process data on our behalf and under our documented instructions. These providers are contractually bound to process your data only for the specific purpose for which it was shared and to maintain appropriate security standards. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial institutions necessary to process your deposits and withdrawals.
• KYC & identity verification providers: Third-party verification technology providers used to validate government-issued identification documents submitted during account verification.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios whose software powers the games available on the goldbed platform. These providers may process limited technical and session data for the purpose of delivering game content and detecting cheating.
• Analytics providers: Platform analytics tools used internally to understand player behaviour and improve the goldbed experience. Analytics data is aggregated and anonymised where possible.
• IT infrastructure & hosting providers: Secure cloud hosting and content delivery network (CDN) providers that store and serve platform data.

Legal & Regulatory Disclosure

goldbed may disclose your personal data to relevant authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or regulatory directive. This includes disclosures made in the context of anti-money-laundering (AML) investigations, fraud reporting, or underage gambling investigations. We will notify you of any such disclosure to the extent permitted by law.

goldbed uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain session security, and to gather anonymised analytics data that helps us improve the user experience. This section explains what cookies we use, why, and how you can manage your preferences.

Types of Cookies We Use

What We Do Not Use Cookies For

goldbed does not deploy third-party advertising cookies, cross-site behavioural profiling cookies, or social media tracking pixels. We do not use cookies to build advertising profiles or to target you with ads on other websites.

Managing Your Cookie Preferences

You can manage or disable cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair or prevent core platform functionality, including your ability to log in and maintain an active game session. Disabling analytics and functional cookies will not affect your ability to use the platform but may result in a less personalised experience.

How Long We Retain Your Data

goldbed retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, in order to comply with anti-money-laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable regulatory guidance.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for up to 3 years from the date of the most recent interaction, unless the communication forms part of an active investigation or dispute.
• Analytics and usage data: Anonymised after 24 months. Personally identifiable usage data is not retained beyond this period.
• Marketing consent records: Retained for the duration of your account plus 2 years following account closure, as evidence of consent or opt-out.

Security Measures

goldbed implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• TLS 1.3 SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption at rest for all sensitive personal and financial data stored on our servers.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a documented operational need can access personal account data.
• Multi-factor authentication (MFA) required for all administrative access to systems that store personal player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures with defined timelines for detecting, containing, and notifying affected players of any data breach.

As a goldbed player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or by email at support@goldbed. We will respond to all valid requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Right of Access

You have the right to request a copy of all personal data that goldbed holds about you. We will provide this in a structured, machine-readable format (such as CSV or JSON) upon request. There is no fee for a standard access request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as a misspelled name) can often be resolved quickly via live chat. Corrections to identity data may require you to submit updated verification documents.

Right to Erasure

You may request that goldbed delete your personal data. Please note that this right is not absolute — we are required by law to retain certain categories of data (such as KYC documents and transaction records) for a minimum of 5 years regardless of any erasure request. Where erasure is legally permissible, we will complete the deletion within 30 days and confirm this to you in writing.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing based on legitimate interests while that objection is being assessed.

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on goldbed's legitimate interests. We will stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

goldbed may send you promotional communications — including bonus offers, tournament announcements, seasonal promotions (such as Eid specials, Pohela Boishakh offers, and BPL cricket promotions), and platform updates — by email or SMS to the contact details registered on your account. We will only send marketing communications where you have provided your consent to receive them, either during account registration or by subsequently opting in through your account settings.

Opting Out of Marketing

You can withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link found at the bottom of any goldbed promotional email.
• Replying STOP to any goldbed promotional SMS message.
• Contacting our support team via live chat or at support@goldbed and requesting to be removed from all marketing lists.

Opt-out requests are processed within 5 business days. Please note that withdrawing your consent to marketing communications does not affect the lawfulness of processing carried out before the withdrawal. You will continue to receive transactional and account-related messages (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preferences, as these are necessary for the operation of your account.

goldbed is the data controller responsible for the personal data collected and processed through this platform. If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which goldbed handles your personal data, please contact our dedicated privacy support team using the details below.

How to Contact Us

• Live Chat: Available 24/7 directly on the goldbed platform. Average response time under 2 minutes.
• Email: support@goldbed — please use the subject line "Privacy Request" for all data-related enquiries. We aim to respond within 4 business hours for general queries and within 30 calendar days for formal data subject rights requests.

Updates to This Privacy Policy

goldbed reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify active account holders via their registered email address and update the effective date displayed at the top of this page. We encourage you to review this page periodically to stay informed about how we are protecting your data.

Continued use of the goldbed platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material changes to this Policy, you should cease using the platform and may request account closure by contacting our support team.

Last updated: 1 January 2026. This Privacy Policy applies to all players accessing goldbed from Bangladesh and any other jurisdiction where the platform is made available. Support is available 24/7 in English.