ek3e Privacy Policy

01 About This Privacy Policy

This Privacy Policy ("Policy") describes how ek3e ("ek3e", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "User", or "Player") who access or use the ek3e website at ek3e.io and all associated services, including betting markets, casino games, account management, and customer support.

By registering an account with ek3e, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data in the manner described herein. If you do not agree with this Policy, you must not use the ek3e platform.

This Policy should be read together with our Terms & Conditions, which govern the overall relationship between you and ek3e. Defined terms used in this Policy have the same meanings as those defined in the Terms & Conditions unless otherwise stated here.

02 Data We Collect

ek3e collects personal data that is necessary to provide you with a safe, compliant, and personalised betting and gaming experience. The categories of personal data we may collect include:

We do not collect or store full card numbers, PINs, or mobile banking passwords. Payment authentication is handled directly by your chosen payment provider (bKash, Nagad, Rocket, or Upay), and ek3e only receives a confirmation token or transaction reference upon successful payment.

03 How We Collect Your Data

We collect personal data through the following channels:

• Directly from you — when you register an account, complete your profile, make a deposit or withdrawal, contact our support team, or submit any form on the platform.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate and interact with the ek3e platform.
• From third-party verification providers — when we conduct identity or age verification checks using authorised third-party KYC services.
• From payment processors — transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other integrated payment partners.
• From fraud prevention and security services — risk-scoring and device-fingerprinting data from trusted security partners used to protect the integrity of the platform.

04 How We Use Your Data

ek3e uses the personal data we collect for the following purposes, each of which is supported by a legitimate legal basis as described in Section 5:

• Account creation and management — to register your account, verify your identity and age, and maintain your account throughout your relationship with ek3e.
• Service delivery — to process bets, settle winnings, credit and debit your account balance, and provide access to all games, sports markets, and platform features.
• Payment processing — to facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other approved payment channels; to reconcile transactions and detect errors.
• Regulatory compliance and KYC — to fulfil our obligations under applicable anti-money laundering (AML) requirements, verify the source of funds, and respond to regulatory enquiries.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and any other prohibited conduct described in our Terms & Conditions.
• Customer support — to respond to your enquiries, resolve disputes, process complaints, and generally provide assistance through our English-language support team.
• Responsible gaming — to monitor betting patterns, identify signs of problem gambling behaviour, and apply responsible gaming tools (deposit limits, self-exclusion) where appropriate or requested.
• Platform improvement — to analyse aggregated usage data, troubleshoot technical issues, and continuously improve the user experience on the ek3e platform.
• Marketing communications — to send you promotional offers, bonuses, and relevant updates about ek3e where you have provided consent or where permitted under applicable law. You may opt out of marketing communications at any time by contacting support.
• Legal obligations — to comply with applicable laws, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

We do not use your personal data to make fully automated decisions that produce significant legal effects, including automated account closures. Where automated tools flag suspicious activity, a human review will be conducted before any account action is taken.

05 Legal Basis for Processing

ek3e processes your personal data on the following legal grounds:

• Contractual necessity — processing required to fulfil the contract between you and ek3e (i.e., operating your account, processing bets, and handling payments).
• Legitimate interests — processing necessary for ek3e's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Legal obligation — processing necessary to comply with applicable legal and regulatory obligations, including AML/KYC requirements.
• Consent — processing for marketing communications and optional analytics, where you have provided clear, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

ek3e does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other integrated payment processors, solely to the extent required to process your transactions.
• Identity and KYC verification services — authorised third-party providers engaged to verify your identity and age as part of our compliance programme.
• Game software providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios, who may receive pseudonymised session and game-round data necessary to operate their games.
• Fraud prevention and security partners — specialised providers who assist ek3e in detecting and preventing fraudulent, abusive, or illegal activity on the platform.
• IT infrastructure and cloud service providers — hosting providers and cloud infrastructure partners who store and process data on ek3e's behalf under strict data processing agreements.
• Competent authorities and regulators — law enforcement agencies, regulatory bodies, or courts where ek3e is legally required to disclose personal data in response to a lawful request or court order.
• Professional advisors — lawyers, auditors, and accountants engaged by ek3e, subject to professional confidentiality obligations.

07 International Data Transfers

Some of ek3e's service providers and infrastructure partners may be located outside Bangladesh. Where personal data is transferred to recipients in other countries, ek3e takes steps to ensure that an adequate level of protection is applied to that data, including through the use of contractual safeguards and data processing agreements with all relevant parties.

By using the ek3e platform, you acknowledge and consent to your personal data being transferred to and processed in jurisdictions outside Bangladesh, where necessary for the purposes described in this Policy, subject to the safeguards described above.

08 Data Retention

ek3e retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulatory obligation. The general retention periods applied by ek3e are as follows:

• Account and identity data — retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping obligations.
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction, in accordance with financial reporting requirements.
• KYC verification documents — retained for the duration of the account relationship plus five (5) years post-closure, unless a longer period is required by applicable law.
• Support and communications records — retained for three (3) years from the date of the final communication, to enable resolution of any subsequent disputes.
• Technical and usage data — retained for up to two (2) years in identifiable form, after which it may be anonymised and retained indefinitely for aggregate analytics purposes.
• Marketing consent records — retained until you withdraw consent, plus a reasonable additional period to demonstrate that the withdrawal was actioned.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ek3e's internal data destruction procedures.

09 Cookies & Tracking Technologies

ek3e uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate, secure, and improve the platform. Cookies are small text files stored on your device when you visit ek3e.io. The types of cookies we use are:

• Strictly necessary cookies — essential for the platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings, display options, and logged-in state, to provide a more personalised experience.
• Analytics cookies — collect anonymised or pseudonymised data about how users interact with the platform, including pages visited, time on page, and navigation paths. This data helps us improve platform design and performance.
• Security cookies — used by our fraud prevention systems to identify and flag suspicious activity, including device fingerprinting and bot detection.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the ek3e platform. For detailed guidance on managing cookies in your specific browser, please consult your browser's help documentation.

10 Your Rights Over Your Data

Subject to applicable law, you have the following rights with respect to your personal data held by ek3e. To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link).

• Right of access — you may request a copy of the personal data ek3e holds about you, along with information about how it is being used.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure — in certain circumstances, you may request that ek3e delete your personal data. Note that this right does not apply where retention is required by law or is necessary to fulfil a contract.
• Right to restrict processing — you may request that ek3e limit the processing of your personal data in certain circumstances, for example while a correction request is being resolved.
• Right to data portability — where processing is based on consent or contract, you may request that ek3e provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object — you may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease that processing immediately.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

ek3e will respond to all rights requests within a reasonable timeframe and in any event within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

11 Data Security

ek3e implements a layered approach to data security, combining technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ek3e platform.
• Encryption of sensitive data fields (including identity document scans and financial details) at rest in our database systems.
• Role-based access controls ensuring that ek3e staff can only access personal data that is strictly necessary for their specific job function.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Intrusion detection and prevention systems (IDS/IPS) monitoring all network traffic in real time.
• Secure, redundant data centre infrastructure with physical access controls.
• Staff training on data protection obligations and security best practices, conducted on a regular basis.

While ek3e takes every reasonable step to protect your data, no digital system is entirely immune from risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ek3e will notify affected users promptly and take all required remediation steps.

12 Children's Privacy

The ek3e platform is strictly intended for adults aged 21 years and above. ek3e does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under the age of 21, we will immediately close the associated account, delete the data, and handle any deposited funds in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered an account with ek3e, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can take appropriate action without delay.

13 Third-Party Links

The ek3e platform does not contain links to third-party websites outside of our own network of pages. However, game providers integrated into the ek3e casino product operate their software within our platform environment under licence. ek3e is not responsible for the privacy practices of game studio software operating within ek3e's platform; those providers process only the minimum session data necessary to operate game rounds, and do so under data processing agreements with ek3e.

14 Updates to This Privacy Policy

ek3e may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered users by email or through a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this document. We encourage you to review this Policy periodically to stay informed about how ek3e protects your personal information. Your continued use of the ek3e platform after any revised Policy has been published constitutes your acceptance of those changes.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the ek3e Data Support team. Our English-language team is available 24 hours a day, 7 days a week.

Email: [email protected] (plain text — not a clickable link)

If you are not satisfied with our response to your data-related query or complaint, you may have the right to escalate your complaint to a competent supervisory authority in your jurisdiction. ek3e is committed to working constructively to resolve all data privacy concerns in a timely and transparent manner.