eke33 Privacy Policy

eke33 ("eke33", "we", "us", "our") operates the online betting and casino platform accessible at eke33.io, including all associated sub-domains, mobile-optimised versions, and related digital services (the "Platform"). eke33 is the data controller responsible for the personal information collected through the Platform from users and registered members based in Bangladesh and elsewhere.

This Privacy Policy explains how eke33 collects, processes, stores, shares, and protects your personal data when you visit or use the Platform. It also sets out the rights you have in relation to your personal data and how you may exercise those rights by contacting us.

This Privacy Policy should be read alongside the eke33 Terms & Conditions, which form part of the overall agreement governing your use of the Platform. By accessing the Platform or registering for a member account, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

eke33 collects personal data only to the extent necessary to provide you with a safe, secure, and fully functional platform experience. The categories of personal data we may collect are set out below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is necessary for identity verification), or health information unless you voluntarily provide such information in the context of a responsible gaming self-exclusion or support request.

eke33 collects your personal data through the following channels and mechanisms:

• Direct interactions: When you register for an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you directly provide us with personal data.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, web beacons, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-party payment providers: When you transact via bKash, Nagad, Rocket, Upay, or any other integrated payment method, transaction confirmation data is passed to eke33 by the payment provider to allow us to credit or debit your account accurately.
• Identity verification partners: eke33 may use third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers to verify the identity documents you submit. These providers process your verification data on our behalf under strict data-processing agreements.
• Fraud prevention services: eke33 works with specialist fraud detection providers who may supply data about known fraud patterns, device fingerprints, or IP reputation scores to help us protect the platform and its members.

eke33 processes your personal data for the following specific and legitimate purposes:

• Account creation and management: To register your member account, maintain your profile, and provide you with access to all platform features.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with responsible gaming and anti-money-laundering obligations.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard in Bangladeshi Taka (৳ BDT).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other forms of prohibited conduct on the platform.
• Responsible gaming compliance: To monitor gambling behaviour for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit or session limits you have set on your account.
• Customer support: To respond to your queries, complaints, and account-related requests through email and WhatsApp support channels.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of the eke33 platform over time.
• Marketing and promotions: Where you have given explicit consent, to send you personalised promotional offers, bonus notifications, and news about new games or features. You may opt out at any time.
• Legal and regulatory compliance: To meet our obligations under applicable law, including responding to lawful requests from competent authorities and maintaining financial records as required.

eke33 processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing that is required to perform our contract with you as a registered member — including account creation, payment processing, and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations.
• Legal obligation: Certain processing activities, such as identity verification, AML checks, and financial record retention, are required by applicable law and are carried out on the basis of legal compliance.
• Legitimate interests: Processing for fraud prevention, platform security, usage analytics, and improving the member experience is carried out on the basis of eke33's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we process your data for marketing and promotional communications, we do so only with your explicit, freely given, and revocable consent. You may withdraw this consent at any time by contacting support or updating your account notification preferences.

eke33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances, and always under appropriate data-protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive only the minimum data necessary to process your transaction. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: Third-party verification services receive copies of your identity documents and related data solely for the purpose of confirming your eligibility to use the platform. These providers act as data processors under binding contractual agreements with eke33.
• Fraud prevention partners: Risk-scoring and fraud-detection providers may receive Technical Data and Usage Data to assess the risk profile of account activity. No unnecessary personal data is shared beyond what is required for this purpose.
• Game content providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and session token to deliver game content. They do not receive your name, contact details, or financial information.
• Legal authorities: eke33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of eke33, its members, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of eke33's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer that materially affects your privacy rights.

All third parties who process personal data on behalf of eke33 are bound by data-processing agreements that require them to keep your information confidential, use it only for the agreed purpose, and maintain appropriate security standards.

eke33 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session continuity, measure platform performance, and deliver relevant content. A cookie is a small text file stored on your device by your web browser when you visit the platform.

The types of cookies used on eke33.io are as follows:

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable core features such as account login sessions, shopping cart functionality, and security checks. They cannot be disabled without disrupting core platform features.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the platform — which pages are most visited, where errors occur, and how users navigate between sections. This data is used solely to improve the platform.
• Functional cookies: These cookies remember preferences you have set, such as your language selection, display settings, and responsible gaming limits, so that you do not have to re-enter them on each visit.
• Marketing cookies: Where you have consented to marketing, these cookies track your engagement with promotional content so that we can deliver relevant offers and measure the effectiveness of campaigns. You may opt out at any time.

You may manage or delete cookies through your browser settings at any time. Please note that disabling certain types of cookies may affect the availability or functionality of specific platform features. For full details on managing cookies, refer to the help documentation for your specific browser.

eke33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active member accounts: Personal data associated with an active eke33 account is retained for the full duration of the membership relationship.
• Closed accounts: Following voluntary account closure or deactivation, personal data is retained for a minimum period of five (5) years to meet AML compliance, financial record-keeping, and fraud investigation requirements.
• Identity verification documents: KYC documents (NID copies, passport scans, proof of address) are retained for the period required by applicable law, typically five (5) years from the date of the last transaction.
• Transaction records: Financial transaction logs are retained for a minimum of five (5) years from the transaction date.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the most recent interaction in a thread.
• Marketing consent records: Records of your consent to or opt-out from marketing communications are retained for the duration of your membership plus three (3) years to demonstrate compliance.

On expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual. Where anonymisation is not technically feasible, data is pseudonymised and isolated from active processing systems.

eke33 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the eke33 platform.
• Encrypted storage of sensitive data fields, including payment method identifiers and identity document metadata, using industry-standard encryption algorithms.
• Access controls: Access to personal data within eke33 systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication (2FA) on all administrative and operational systems that have access to member data.
• Regular security testing: eke33's systems undergo periodic vulnerability assessments and security reviews to identify and remediate potential weaknesses before they can be exploited.
• Incident response procedures: eke33 maintains documented data breach response procedures. In the event of a personal data breach that poses a risk to your rights and freedoms, affected members will be notified without undue delay.

While eke33 takes all reasonable steps to protect your data, no platform can guarantee absolute security against every possible threat. You are encouraged to use a strong, unique password for your eke33 account and to contact support immediately at [email protected] if you suspect any unauthorised activity on your account.

As a data subject, you hold a number of important rights in relation to your personal data held by eke33. These rights may be exercised at any time by submitting a written request to [email protected]. eke33 will respond to verified requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data eke33 holds about you, along with information about how that data is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that eke33 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction of Processing: You have the right to request that eke33 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to eke33 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on eke33's legitimate interests. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact the eke33 support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may request proof of identity before processing your request to protect against unauthorised access to your data.

The eke33 platform is strictly intended for adults aged 21 years and above. eke33 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the eke33 registration process, and additional documentary verification may be requested at any time to confirm that a member meets the minimum age requirement.

If eke33 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation at registration or through subsequent information — the affected account will be immediately suspended, any funds held in the account will be returned to the verified payment source, and all associated personal data will be deleted from our systems without undue delay.

eke33 may send promotional communications — including bonus offers, new game announcements, seasonal promotions tied to events such as Eid, IPL season, or the BPL cricket tournament, and platform news — to members who have explicitly opted in to receive such communications at the time of registration or through their account settings.

Marketing communications from eke33 are delivered via the following channels where consent has been given:

• Email to the address registered on your eke33 account.
• SMS or WhatsApp notifications to the mobile number registered on your account.
• In-platform notifications displayed within your account dashboard.

You may opt out of any or all marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email you receive.
• Updating your notification preferences in the Account Settings section of the platform.
• Contacting the eke33 support team at [email protected] with a request to be removed from all marketing lists.

Opting out of marketing communications has no effect on your ability to use the platform, receive transactional notifications (such as deposit confirmations and withdrawal updates), or access any games or features. Transactional and service-related communications are not subject to opt-out as they are necessary for the operation of your account.

The eke33 platform integrates with a number of third-party services to deliver a complete gaming experience. These include game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), payment processors (bKash, Nagad, Rocket, Upay), identity verification providers, and fraud prevention partners.

Each of these third-party providers operates under its own privacy policy and data-processing practices. eke33 is not responsible for the privacy practices or data-security standards of third-party providers, and we encourage you to review their respective privacy policies before engaging with their services directly.

eke33 ensures that all third-party providers who handle personal data on our behalf are bound by data-processing agreements that require them to:

• Process personal data only in accordance with eke33's documented instructions.
• Implement appropriate technical and organisational security measures to protect the data they handle.
• Not share or transfer personal data to any sub-processors without eke33's prior written consent.
• Notify eke33 promptly in the event of any personal data breach or security incident involving eke33 member data.
• Delete or return all personal data to eke33 on termination of the service relationship.

eke33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, changes in applicable law, or improvements to the platform. When we make material changes to this Privacy Policy, we will notify registered members by email and by displaying a prominent notice on the platform for a minimum of 30 days prior to the changes taking effect.

Minor or non-material updates — such as corrections to typographical errors, clarifications of existing language, or structural reformatting — may be made without advance notice. The "Effective Date" displayed at the top of this document and in the last-updated bar above will always reflect the date on which the current version came into force.

Your continued use of the eke33 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should cease using the platform and contact our support team to request account closure and data deletion.

If you have any questions, concerns, or complaints regarding this Privacy Policy or eke33's handling of your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and fairly.

• Email: [email protected] (subject line: "Privacy Enquiry")
• WhatsApp: +880 1700 000000
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

eke33 will acknowledge all privacy-related correspondence within two (2) business days and aims to provide a full response within thirty (30) calendar days of receipt of a verified request. For complex requests that require additional time to process, we will notify you of the extended timeline and the reason for the delay.

If you are not satisfied with eke33's response to your complaint or believe that your data rights have not been adequately respected, you retain the right to escalate your complaint to the relevant data-protection authority or to seek independent legal advice. eke33 will cooperate fully with any lawful regulatory investigation into our data-processing practices.