Privacy Policy — ek2222

1 Introduction

ek2222 is Bangladesh's trusted online casino and sports betting platform, operating at https://ek2222.app. We take the privacy of our players seriously and are committed to protecting the personal information you share with us when you access, register, or use any feature of the ek2222 platform.

This Privacy Policy describes in clear, formal terms the categories of personal data we collect about you, the purposes for which that data is used, the legal bases that justify our processing activities, the parties with whom we may share your data, and the rights you hold in relation to your personal information.

This Policy should be read alongside the ek2222 Terms and Conditions and Responsible Gaming Policy, both of which are published on this website. Where any conflict arises between this Policy and those documents on the subject of personal data, this Privacy Policy shall prevail.

If you have any questions about this Policy or wish to exercise any of your data rights, please contact us at [email protected]. All data-related correspondence is handled within Bangladesh Standard Time (BST, UTC+6) business hours, with an acknowledgement issued within one (1) business day.

2 Data We Collect

ek2222 collects personal data in the categories set out below. In each case, we collect only what is necessary for the stated purposes.

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (to verify that you are 18 years of age or older);
• Residential address in Bangladesh (district, city, and postal code);
• Email address used to register your ek2222 account;
• Mobile phone number associated with your bKash, Nagad, or Rocket account.

2.2 Identity Verification (KYC) Documents

• Scanned copy or photograph of a National ID card, passport, or driving licence;
• Proof of address document (utility bill, bank statement, or official correspondence dated within three months);
• Screenshot or confirmation of payment method ownership (e.g., bKash or Nagad account registered in your name).

2.3 Financial and Transaction Data

• Deposit amounts, dates, and payment method references (bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank);
• Withdrawal requests, amounts, and processing timestamps;
• Bonus credit and wagering history;
• Account balance history in Bangladeshi Taka (BDT).

2.4 Technical and Usage Data

• IP address and approximate geolocation derived therefrom;
• Browser type, version, and language settings;
• Device type, operating system, and screen resolution;
• Pages visited, time on site, game sessions initiated, and betting history;
• Referring URL and exit page.

2.5 Communications Data

• Content of emails, live chat transcripts, and support tickets submitted to ek2222;
• Records of any formal complaints or dispute correspondence.

3 How We Collect Data

ek2222 collects personal data through the following channels:

3.1 Directly From You

When you register an account, complete our KYC verification process, make a deposit or withdrawal, contact our support team, or participate in any promotional activity, you provide personal data directly to us. You are never obligated to provide personal data, but failure to provide required information may prevent us from delivering certain services — including account registration, payment processing, and withdrawal approvals.

3.2 Automatically Through Your Use of the Platform

When you access the ek2222 website, our systems automatically record technical usage data including your IP address, browser type, device identifiers, and session activity. This data is collected via server logs and, where applicable, first-party cookies. See Section 7 for full details of our cookie practices.

3.3 From Third-Party Service Providers

ek2222 may receive personal data about you from the following third-party sources:

• Payment providers (bKash, Nagad, Rocket, and banking partners) — transaction confirmation data and payment method verification details;
• Fraud prevention and identity verification services — confirmation of document authenticity and watchlist screening results;
• Game providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) — game session logs and bet settlement records associated with your account.

4 How We Use Your Data

The table below summarises the primary purposes for which ek2222 processes your personal data and the corresponding legal basis for each purpose.

ek2222 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

5 Legal Basis for Processing

ek2222 relies on the following legal bases when processing your personal data:

• Contract Performance: Processing is necessary to fulfil the agreement between you and ek2222 when you register an account, make a transaction, or use any platform service.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping duties.
• Legitimate Interest: Processing serves ek2222's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where ek2222 processes your data for purposes not covered by the bases above — for example, sending you promotional communications about new games, seasonal offers, or ek2222 bonuses — we will obtain your explicit, freely given consent beforehand. You may withdraw consent at any time by contacting [email protected].

6 Sharing Your Data

ek2222 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

6.1 Payment Service Providers

To process your deposits and withdrawals in BDT, ek2222 shares necessary transaction and identity data with bKash, Nagad, Rocket (Dutch-Bangla Bank), and other banking partners. These providers process your data only to facilitate the payment instruction and are contractually prohibited from using your data for any other purpose.

6.2 Game Providers

Third-party game providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi receive session tokens and account identifiers necessary to authenticate your gameplay. These providers do not receive your full identity or financial data; they receive only the minimum technical information required to deliver the game session.

6.3 Identity Verification and Fraud Prevention Services

ek2222 may use reputable third-party identity verification and fraud screening services to validate your KYC documents and screen your details against watchlists relevant to anti-money laundering compliance. These services act as data processors under contract with ek2222 and may not use your data independently.

6.4 Legal and Regulatory Disclosure

ek2222 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so or where disclosure is necessary to protect the rights, safety, or property of ek2222, its players, or the public. In such cases, ek2222 will disclose only the minimum data required to satisfy the legal demand.

7 Cookies & Tracking Technologies

ek2222 uses first-party cookies and similar browser-based storage technologies to operate the platform effectively. We do not use third-party advertising cookies or cross-site tracking technologies.

7.1 Essential Cookies

These cookies are strictly necessary to enable core platform functionality, including maintaining your authenticated session, remembering your language and currency preferences, and ensuring the security of your account. Essential cookies cannot be disabled without impairing platform functionality.

7.2 Analytical Cookies

ek2222 uses anonymised analytical cookies to understand aggregate patterns of platform usage — such as which game categories are most popular, typical session durations, and common navigation paths. No personally identifiable data is associated with analytical cookies. You may opt out of analytical cookies by adjusting your browser settings at any time.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use key platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8 Data Retention

ek2222 retains your personal data only for as long as is necessary to fulfil the purposes outlined in this Policy, including compliance with applicable legal obligations. The following retention periods apply:

• Account and identity data: Retained for the lifetime of your active account and for a period of five (5) years following account closure, to comply with AML and KYC record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the final communication in a support thread.
• Analytical and usage data (anonymised): Retained for up to twenty-four (24) months from the date of collection, after which it is permanently deleted or further anonymised.
• Consent records: Retained for as long as the consent remains active and for three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Requests for early deletion are handled in accordance with Section 10 of this Policy.

9 Data Security

ek2222 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and ek2222 servers is encrypted using 256-bit SSL certificates, preventing interception in transit.
• Access controls: Access to personal data within ek2222's systems is restricted on a strict need-to-know basis. Staff members can only access the data necessary for their specific role.
• Password hashing: User passwords are stored as salted cryptographic hashes. ek2222 never stores your password in plain text and cannot retrieve it — only reset it.
• Intrusion detection: ek2222 employs automated monitoring systems that detect and alert on suspicious access patterns, failed login attempts, and potential data exfiltration activities.
• Regular security reviews: Platform security configurations are reviewed regularly, and critical patches are applied promptly following disclosure of relevant vulnerabilities.

10 Your Rights

As a player on the ek2222 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your ek2222 account.

• Right of Access: You may request a copy of the personal data ek2222 holds about you, together with information about the purposes and legal bases for processing that data.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it without undue delay.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent and no other legal basis applies. Note that this right may be limited by our legal obligations to retain records.
• Right to Restrict Processing: You may request that we temporarily halt processing of your personal data while a dispute about its accuracy or our legitimate basis for processing is resolved.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming assessments. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request a structured, commonly used, machine-readable copy of your personal data for transfer to another controller.

ek2222 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, of which you will be notified. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

11 Children's Privacy

ek2222 employs age verification checks at the point of registration and during the KYC process specifically to prevent underage gambling. Parents and guardians who are concerned about a minor's potential access to online gambling platforms are encouraged to use parental control software to restrict access to gambling websites.

12 Changes to This Policy

ek2222 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email to the address associated with their account and by posting a notice on the ek2222 platform. The effective date at the top of this document will be updated accordingly.

We encourage you to review this Policy periodically to stay informed about how ek2222 protects your personal data. Continued use of the platform following publication of a revised Policy constitutes your acknowledgement of the changes. If you do not agree with any revision, you should cease using the platform and may close your account in accordance with the Terms and Conditions.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ek2222 handles your personal data, please contact our Data Support team using the details below:

All data rights requests must be submitted from the email address registered to your ek2222 account so that we can verify your identity before processing the request. ek2222 will never charge a fee for handling a standard data rights request.