Privacy Policy — How ek332 Collects, Uses, and Protects Your Personal Data

About This Privacy Policy

This Privacy Policy ("Policy") explains how ek332 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the ek332 online casino and sports betting platform, including all associated web interfaces, game lobbies, the cashier, the sportsbook, and the customer support system.

ek332 is committed to handling your personal information with integrity, discretion, and in compliance with applicable data protection standards. We recognise the trust you place in us when you share your personal information and we take the responsibility to protect that information seriously.

This Policy governs all personal data collected from players based in Bangladesh, including those accessing the platform from Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across the country. It applies regardless of the device used to access ek332 — desktop, mobile browser, or any future mobile application.

This Policy does not apply to any third-party websites, platforms, or services that may be linked to or integrated with ek332. We encourage you to review the privacy policies of any third-party services you use independently of ek332.

Personal Data We Collect

2.1 Registration Data

When you create an ek332 account, we collect the personal information required to establish your player profile and verify your identity. This includes:

• Full legal name as it appears on official identification documents
• Date of birth (used to confirm you meet the 21+ age requirement)
• Residential address, including district and division within Bangladesh
• Valid email address
• Mobile phone number capable of receiving SMS verification
• Username and encrypted password credential

2.2 Identity Verification Data

To comply with identity verification requirements and to protect the integrity of the platform, ek332 may request one or more of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (biographical data page)
• Driving licence
• A recent utility bill or bank statement confirming your residential address (issued within the last three months)

Verification documents are processed solely for the purpose of identity confirmation and are stored securely in accordance with the data retention schedule described in Section 9 of this Policy.

2.3 Financial and Transaction Data

When you make deposits or request withdrawals through ek332, we collect transaction records including deposit amounts, withdrawal requests, transaction timestamps, and the payment method used (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard). We do not store full payment credentials — these are handled entirely within the secure infrastructure of your chosen payment provider.

2.4 Gameplay and Betting Data

We record data relating to your activity on the platform, including game sessions played, bet amounts placed, game outcomes, bonus usage, session durations, and wagering history. This data is used to operate the platform, resolve disputes, detect unusual activity, and deliver responsible gaming interventions where applicable.

2.5 Technical and Device Data

When you access ek332, we automatically collect certain technical information about your device and browsing session. This includes:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages viewed, features accessed, and time spent on specific sections of the platform
• Referring URL (if you arrived at ek332 from another website)
• Cookie identifiers and session tokens (see Section 5 for details)

2.6 Communications Data

When you contact our customer support team via live chat or email, we retain records of those communications including the content of messages, attachments, timestamps, and the outcome of any complaint or inquiry. These records are used to resolve disputes, improve service quality, and maintain a complete history of your interactions with our support team.

How We Use Your Personal Data

ek332 uses the personal data we collect exclusively for defined, legitimate purposes directly connected with the operation of the platform and our relationship with you as a registered player. We do not use your data in ways that are incompatible with the purposes for which it was collected. The specific purposes for which we process your data are:

Where we intend to use your data for a purpose not listed in the table above, we will notify you in advance and, where required, seek your explicit consent before proceeding.

Legal Basis for Processing Your Data

Each data processing activity carried out by ek332 is conducted on one or more of the following legal grounds:

4.1 Contractual Necessity

The majority of data processing carried out by ek332 is necessary to perform our contractual obligations to you as a registered player. This includes processing your registration, verifying your identity, executing financial transactions, operating game sessions, and delivering customer support. Without this processing, ek332 could not provide the services you have registered to use.

4.2 Legal Obligation

Certain data processing activities are required to comply with applicable legal and regulatory obligations. These include identity verification, anti-money laundering checks, fraud prevention, record-keeping requirements, and the maintenance of player protection measures such as self-exclusion and responsible gaming controls.

4.3 Legitimate Interests

ek332 processes some data on the basis of its legitimate business interests, where those interests are not overridden by your rights and interests. This includes technical data processing for platform security, fraud detection, game integrity monitoring, and aggregate analytics used to improve the platform experience. We conduct a balancing assessment before relying on this basis to ensure your interests are protected.

4.4 Consent

Where ek332 seeks to send you marketing communications or use non-essential cookies, we will first obtain your explicit consent. You may withdraw your consent at any time by updating your marketing preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device when you visit ek332. They help the platform recognise your device on return visits, maintain your session while you are logged in, remember your preferences, and gather analytical information about how the platform is used. ek332 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

5.2 Types of Cookies Used by ek332

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without disrupting your ability to use ek332.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently viewed game categories to improve your experience.
• Analytical Cookies: Used to understand how players navigate the platform in aggregate. This data helps us identify performance issues and improve the user experience. Analytical data is anonymised wherever possible.
• Marketing Cookies: Used only where you have provided explicit consent to receive personalised promotional content. You may opt out of marketing cookies at any time.

5.3 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse some or all cookies, or to delete cookies that have already been set. Please note that disabling strictly necessary cookies will impair your ability to log in and use the ek332 platform. Instructions for managing cookies in major browsers are available in your browser's help documentation.

Sharing Your Personal Data

ek332 does not sell or commercially transfer your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with your chosen payment provider. This includes bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. Each of these providers operates under their own privacy and security frameworks and is contractually required to protect any data shared with them.

6.2 Game Content Providers

To deliver casino games and live dealer tables, ek332 operates integrations with licensed game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe. These providers may receive technical identifiers necessary to operate game sessions on their platforms. Game providers do not receive your full personal profile or financial records.

6.3 Identity Verification Services

To fulfil our identity verification obligations, we may engage specialist third-party verification services to cross-reference submitted documents and data. These services process only the data necessary for the specific verification check and are contractually bound to strict data protection standards.

6.4 Legal and Regulatory Disclosure

ek332 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised third parties where we are legally required to do so, or where disclosure is necessary to protect the safety and interests of the platform, our staff, or other players. We will notify you of such disclosures wherever legally permitted to do so.

International Data Transfers

Some of the third-party service providers engaged by ek332 — including certain game content providers and technical infrastructure partners — may store or process data on servers located outside of Bangladesh. Where such international transfers occur, ek332 takes all reasonable steps to ensure that your data receives an equivalent level of protection to that provided within Bangladesh.

Safeguards employed for international data transfers include contractual data protection clauses binding receiving parties to strict data handling standards, data minimisation practices that limit the volume of personal data transferred internationally, and selection of service providers who maintain recognised security certifications.

If you have questions about the specific safeguards applied to any international transfer of your data, you may contact us at the address provided in Section 14 of this Policy.

Data Security Measures

ek332 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ek332 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your data cannot be intercepted during transmission.
• Encrypted Data Storage: Sensitive personal data stored on ek332 servers — including identity verification records — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is subject to role-based permissions, multi-factor authentication requirements, and audit logging.
• Regular Security Assessments: ek332 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident Response Procedures: In the event of a data security incident, ek332 maintains a documented incident response plan to contain the breach, assess its impact, notify affected individuals where required, and implement remediation measures promptly.
• Staff Training: All ek332 personnel with access to personal data receive regular data protection and information security training as part of their ongoing professional obligations.

Data Retention

ek332 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: While your ek332 account remains active, we retain all associated personal data, transaction records, and gameplay history to operate the account and comply with our ongoing obligations.
• Closed Account Data: Following the closure of a player account — whether initiated by the player or by ek332 — we retain core account records, identity verification documents, and financial transaction records for a minimum of five years from the date of closure. This retention period is driven by our legal and regulatory obligations.
• Support and Communications Records: Customer support interactions and formal complaints are retained for a period of three years from the date of the most recent interaction.
• Technical and Log Data: Server logs and technical access records are retained for a rolling period of 12 months, after which they are securely deleted.
• Marketing Preferences Data: Records of your marketing consent status and preference history are retained for as long as your account is active, and for a further two years following account closure, to evidence compliance.

Once the applicable retention period has elapsed and no legal hold or ongoing dispute requires continued retention, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

Your Data Rights

As a registered player on ek332, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting us at the address provided in Section 14:

10.1 Right of Access

You have the right to request a copy of the personal data that ek332 holds about you. We will provide this information within 30 calendar days of receiving a verified request. Where requests are complex or numerous, we may extend this period by an additional 30 days with prior notification to you.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor account detail updates (such as email address or phone number changes), you may update your information directly within your account settings.

10.3 Right to Erasure

You may request that ek332 delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.

10.4 Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending our assessment of that objection.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of the personal data you have provided to ek332 in a structured, commonly used, machine-readable format.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.

Marketing Communications

ek332 may send you promotional communications about bonuses, new games, seasonal offers, and platform updates. We will only send marketing communications where you have provided your explicit consent during registration or subsequently via your account preferences. Each marketing email or SMS will include a clear and easy method for you to unsubscribe from future communications.

You may opt out of marketing communications at any time by:

• Updating your notification preferences within your ek332 account settings
• Clicking the unsubscribe link included in any marketing email
• Contacting our support team at [email protected] and requesting removal from our marketing list

Opting out of marketing communications does not affect transactional notifications that are necessary for the operation of your account, such as deposit confirmations, withdrawal updates, identity verification requests, or security alerts. These communications will continue to be sent regardless of your marketing preferences.

ek332 will never send marketing communications to players who have registered a self-exclusion or who have requested a cooling-off period under our responsible gaming controls. Players who have opted out of marketing at any point will be removed from all promotional send lists within five business days of the opt-out request being processed.

Children and Minors — Strict 21+ Policy

ek332 strictly prohibits access by individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. Our registration process requires date of birth confirmation, and identity verification checks are used to validate age where required.

If ek332 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately, the associated account will be closed without notice, and any funds held in the account at the time of discovery will be handled in accordance with our Terms & Conditions relating to underage play.

If you are a parent or guardian and have reason to believe that a minor under your supervision has registered on ek332, please contact us immediately at [email protected] with the relevant account details so that we can take prompt action.

Updates to This Privacy Policy

ek332 reviews this Privacy Policy periodically and reserves the right to update it at any time to reflect changes in our data practices, applicable law, new services offered on the platform, or feedback from players and regulators. The most current version of this Policy will always be available at ek332.io/privacy-policy.

For material changes — defined as changes that meaningfully affect how your personal data is collected, used, or shared — ek332 will notify registered players via email to the address on file at least 14 days before the change takes effect. For minor or administrative updates (such as clarifications that do not alter the substance of the Policy), the updated version will be published without individual notice, and the effective date at the top of this page will be updated accordingly.

Your continued use of the ek332 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any update to this Policy, you should stop using the platform and may close your account by contacting our support team.

Contact Us — Data and Privacy Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ek332 holds about you, please reach out through one of the following channels:

When contacting us regarding a data rights request or a privacy concern, please include your registered username and a clear description of your inquiry so that we can locate your records and respond accurately and efficiently. For identity verification purposes, we may ask you to confirm additional account details before processing sensitive requests.

ek332 is committed to resolving all privacy-related concerns promptly and transparently. If you feel your concern has not been adequately addressed after contacting us, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.