ek99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ek99 ("ek99", "we", "us", "our") collects, uses, stores, shares, and protects personal information belonging to players, visitors, and any other individuals ("you", "your") who interact with the ek99 platform, including the website at ek99.io, its associated mobile interfaces, and any related services.

We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is written in plain, professional English so that every player — whether based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or anywhere else in Bangladesh — can clearly understand how their information is managed.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, both of which are incorporated by reference into the overall agreement between you and ek99.

2 Who We Are

ek99 is an international online entertainment platform providing sports betting, live casino, slot games, and related digital gaming services to players in Bangladesh. The platform operates under the ek99 brand and is accessible at ek99.io.

For the purposes of this Privacy Policy, ek99 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers (such as payment processors or game software providers), those parties may act as data processors on our behalf, processing data only under our documented instruction and subject to contractual data protection obligations.

For all privacy-related enquiries, corrections, or complaints, you may contact our data team directly at [email protected] (plain text — not a clickable link). We aim to respond to all privacy queries within five (5) business days.

3 Data We Collect

The categories of personal data we collect depend on how you interact with the ek99 platform. The table below summarises the main data categories and the circumstances under which they are collected.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers beyond what is strictly required for identity verification (i.e., a photograph for KYC purposes).

4 How We Use Your Data

ek99 uses the personal data we collect for the following specific purposes:

• Account Management: To create, verify, maintain, and close your ek99 player account, including identity verification (KYC) and age verification (players must be 21 or older);
• Transaction Processing: To process deposits, withdrawals, and bonus payments via bKash, Nagad, Rocket, Upay, Visa, and Mastercard securely and accurately;
• Platform Delivery: To provide access to sports betting markets (including BPL, IPL, T20 World Cup), live casino games, slot titles, and all other ek99 services;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, collusion, money laundering, underage access, and other prohibited conduct;
• Responsible Gaming: To monitor gaming patterns, flag potential problem gambling behaviour, and enforce player-set deposit limits, time-out periods, and self-exclusion requests;
• Customer Support: To respond to your enquiries, complaints, and requests submitted via live chat or email;
• Legal Compliance: To fulfil our obligations under applicable anti-money-laundering (AML), know-your-customer (KYC), and data retention regulations;
• Service Improvement: To analyse aggregated, anonymised usage patterns and improve platform performance, game selection, and user experience;
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and seasonal promotions (Eid, Pohela Boishakh, BPL season) — only where you have explicitly opted in to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

ek99 processes your personal data only where a valid legal basis exists. The principal legal bases we rely on are as follows:

• Contractual Necessity: Processing required to fulfil the contract between you and ek99 (i.e., operating your account, processing bets, and handling payments);
• Legal Obligation: Processing required to comply with applicable KYC, AML, and data retention laws;
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and service improvement, where our legitimate interests are not overridden by your rights and freedoms;
• Consent: Processing for optional activities such as marketing communications, where you have given a clear, freely withdrawn consent.

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

6 Cookies & Tracking Technologies

ek99 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate the platform, personalise your experience, and gather analytical data. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for core platform functions such as maintaining your login session, remembering your language preference, and securing your account. These cannot be disabled without breaking the platform.
• Performance & Analytics Cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most frequently, which games are popular, and where errors occur — so that we can continuously improve the ek99 experience.
• Functionality Cookies: Remember your settings and preferences (such as preferred deposit method and odds format) to provide a more personalised experience on repeat visits.
• Marketing Cookies: Used only where you have consented to receive targeted advertising based on your browsing behaviour. You may withdraw this consent via your browser settings or account preferences at any time.

Most browsers allow you to control or delete cookies through their settings. Please note that disabling strictly necessary cookies will impact your ability to use core features of the ek99 platform, including logging in and placing bets.

7 Third-Party Sharing

ek99 does not sell your personal data. We may share specific categories of data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data protection agreements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data (including your registered mobile number or masked card details) solely to process your deposit or withdrawal;
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player identifiers to deliver their games within the ek99 platform. They do not receive your full identity data;
• Identity Verification Partners: Where third-party KYC technology is used to verify documents or match selfie photographs, identity documents are shared with that provider for the sole purpose of verification and are not retained by the provider beyond the verification window;
• Legal and Regulatory Authorities: ek99 will disclose personal data to law enforcement, regulatory authorities, or courts where required by applicable law, court order, or to protect the legal rights of ek99 or its players;
• Professional Advisors: Solicitors, auditors, and compliance consultants may access personal data on a strictly confidential basis when required to provide professional services to ek99.

8 International Data Transfers

ek99 serves players primarily in Bangladesh and processes most data within secure server infrastructure. In some cases, data may be transferred to or accessed from locations outside Bangladesh — for example, when a game is served by a software provider whose servers are located in a different country, or when our cloud infrastructure providers maintain data centres in multiple regions.

Where international transfers occur, ek99 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. Safeguards may include contractual clauses, data processing agreements, or reliance on the recipient country's recognised data protection framework.

If you have questions about a specific data transfer or wish to know more about the safeguards in place, please contact us at [email protected].

9 Data Security

ek99 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and ek99 servers is encrypted using industry-standard SSL/TLS protocols;
• Password Hashing: Account passwords are hashed using a one-way cryptographic function before storage — ek99 staff cannot view your password in plaintext;
• Payment Tokenisation: Payment method identifiers are tokenised so that raw card numbers or full mobile money account details are never stored in our systems;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access privileges are subject to background checks and confidentiality obligations;
• Intrusion Detection: Our infrastructure is monitored 24/7 for suspicious activity, including automated anomaly detection and real-time alerting;
• Regular Security Reviews: ek99 conducts periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses.

Despite these measures, no online system can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, ek99 will notify affected players as soon as reasonably practicable and take immediate steps to contain and remediate the incident.

10 Data Retention

ek99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements. The general retention periods we apply are as follows:

• Active Account Data: Retained for the full duration of your account being open and active on the ek99 platform;
• Post-Closure Account Data: Following account closure (whether voluntary or due to a Terms violation), identity data, transaction records, and gaming history are retained for a minimum of five (5) years to comply with anti-money-laundering regulations;
• KYC Documents: Retained for five (5) years following account closure or the completion of the identity verification process, whichever is later;
• Customer Support Records: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction;
• Marketing Data: Retained until you withdraw consent to receive marketing communications, after which your details are removed from our active marketing lists within 30 days;
• Technical and Analytics Data: Anonymised or aggregated usage data may be retained indefinitely for statistical and platform improvement purposes, as it cannot be used to identify individual players.

When personal data is no longer required, it is securely deleted or permanently anonymised in accordance with ek99's internal data destruction procedures.

11 Your Data Rights

As a player on the ek99 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You may request a copy of the personal data ek99 holds about you, along with information about how it is used and shared;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Some corrections (such as name changes) require supporting documentation;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may prevent full deletion;
• Right to Restrict Processing: You may request that we pause or limit the processing of your data in certain circumstances — for example, while a correction request is being reviewed;
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format where technically feasible;
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, we will cease immediately;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

12 Children's Privacy

The ek99 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been created by or is being operated by a person under 21, we will immediately suspend the account, notify the account holder, delete or restrict the associated personal data, and conduct a review in accordance with our underage access procedures.

If you are a parent or guardian and believe that a person under 21 has created an ek99 account using their information or yours, please contact us immediately at [email protected]. We will take prompt action to investigate and resolve the matter.

13 Changes to This Policy

ek99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When changes are material, we will notify registered players via email and/or a prominent notice on the ek99 platform at least seven (7) days before the revised Policy takes effect.

The effective date at the top of this page reflects the date on which the current version of the Policy came into force. We encourage you to review this page periodically to stay informed about how your data is managed. Your continued use of the ek99 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

All previous versions of this Policy are superseded by the current published version. If you have questions about a specific change, please contact us at [email protected].

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ek99 handles your personal data, please contact our team using the details below. All communications should be in English.

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 within the ek99 platform. Average response time: 2–5 minutes.
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 30 days.

We take all privacy complaints seriously. If you submit a complaint and are not satisfied with the outcome of our internal review, you retain the right to seek further recourse through applicable legal channels in your jurisdiction.

For responsible gaming concerns — including requests for self-exclusion, deposit limits, or cooling-off periods — please visit our Responsible Gaming page or contact support directly. Responsible gaming requests are treated with the highest priority and are actioned immediately upon receipt.