Privacy Policy – How ek777 Protects Your Personal Data

1 Introduction

Welcome to ek777's Privacy Policy. This document explains how ek777 ("we", "us", "our") collects, uses, discloses, stores, and protects your personal information when you access or use our online betting platform at https://ek777.cc (the "Platform") or any related services, mobile applications, or communications.

By creating an account on ek777, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

If you do not agree with any part of this Privacy Policy, you should immediately cease use of the ek777 Platform and contact us to request account closure and data deletion where applicable under law.

2 Data Controller

For the purposes of this Privacy Policy, ek777 is the data controller responsible for the collection, processing, and protection of your personal information. We determine the purposes and means of processing your personal data in accordance with applicable data protection laws and industry best practices.

If you have any questions or concerns about how we handle your personal data, or if you wish to exercise any of your data protection rights, please contact our Data Protection Officer using the contact details provided in Section 16 of this policy.

3 Information We Collect

We collect several categories of personal information from you when you use the ek777 Platform. The types of information we collect include:

3.1 Registration & Account Information

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you are 21 years of age or older)
• Residential address (street address, city, district, postal code)
• Email address
• Mobile phone number
• Username and encrypted password
• Security questions and answers (if applicable)
• Account preferences and settings

3.2 Identity Verification (KYC) Documents

• Government-issued photo identification (National Identity Card, passport, driving licence)
• Proof of address documents (utility bills, bank statements, rental agreements)
• Proof of payment method ownership (screenshots, bank confirmations, mobile wallet account details)
• Selfie photographs for identity verification purposes

3.3 Financial & Transaction Data

• Payment method details (bKash account number, Nagad mobile number, bank account details, card last 4 digits)
• Deposit and withdrawal transaction history
• Transaction amounts, dates, times, and status
• Betting history and game play records
• Bonus and promotional redemption records
• Account balance and currency information

3.4 Technical & Device Information

• IP address and geographic location
• Device type, model, operating system, and browser type
• Device identifiers (IMEI, MAC address, advertising ID)
• Screen resolution and display settings
• Time zone and language preferences
• Referring website or source of traffic

3.5 Usage & Behavioral Data

• Pages visited, features accessed, and links clicked
• Session duration, frequency of visits, and navigation patterns
• Game preferences, betting patterns, and win/loss records
• Search queries and filter selections
• Customer support interactions (chat logs, email correspondence, support tickets)

3.6 Marketing & Communications Data

• Email open rates and click-through rates
• Marketing preferences and opt-in/opt-out status
• Promotional code usage and referral data
• Survey responses and feedback submissions

4 How We Collect Your Data

We collect personal information through the following methods:

4.1 Information You Provide Directly

Most of the personal data we hold is provided directly by you when you register for an account, complete your profile, submit KYC documents, make deposits or withdrawals, place bets, contact customer support, or participate in promotions.

4.2 Automated Collection Technologies

We automatically collect certain technical and usage data through cookies, web beacons, log files, and similar tracking technologies when you access the Platform. This includes information about your device, browsing behavior, and interactions with our content.

4.3 Third-Party Sources

We may receive personal data from third-party sources including payment processors (bKash, Nagad, Rocket, banks), fraud prevention services, identity verification providers, game studios, affiliate partners, and social media platforms (where you choose to connect your account). We may also obtain publicly available information to verify your identity or detect fraudulent activity.

4.4 Customer Support Interactions

When you communicate with our customer support team via live chat, email, or phone, we collect the content of those communications, including any personal information you choose to share during support interactions.

5 Legal Basis for Processing

We process your personal information on the following legal bases:

5.1 Performance of Contract

We process your personal data to fulfill our contractual obligations under the Terms & Conditions you accepted when creating your account. This includes providing access to betting and gaming services, processing deposits and withdrawals, and managing your account.

5.2 Legal Obligation

We are required by law to collect and process certain personal information for identity verification (KYC), age verification (to ensure all players are 21+), anti-money laundering (AML) compliance, fraud prevention, tax reporting, and responding to lawful requests from regulatory authorities and law enforcement.

5.3 Legitimate Interest

We process certain personal data based on our legitimate business interests, including: improving our services and user experience, detecting and preventing fraud and abuse, conducting analytics and research, delivering relevant marketing communications (where you have not opted out), and protecting the security of our Platform and users.

5.4 Consent

In some cases, we process personal data based on your explicit consent, such as when you opt in to receive promotional emails, participate in optional surveys, or enable optional tracking features. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6 How We Use Your Information

We use the personal information we collect for the following purposes:

6.1 Account Management

• Creating and maintaining your ek777 player account
• Verifying your identity and ensuring you meet eligibility requirements (21+ age verification)
• Authenticating your login credentials and securing your account
• Managing account settings, preferences, and responsible gaming limits
• Providing customer support and responding to your inquiries

6.2 Service Delivery

• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets, play casino games, and participate in promotions
• Displaying your account balance, transaction history, and betting records
• Delivering personalized content and game recommendations
• Administering bonuses, free bets, and loyalty rewards

6.3 Legal & Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing fraud, money laundering, underage gambling, and other illegal activities
• Detecting and investigating suspicious betting patterns or account activity
• Enforcing our Terms & Conditions and resolving disputes
• Responding to legal requests, court orders, and regulatory inquiries
• Maintaining records as required by applicable gambling laws and regulations

6.4 Platform Improvement & Analytics

• Analyzing user behavior and preferences to improve our services
• Testing new features, games, and promotional campaigns
• Conducting market research and gathering user feedback
• Monitoring Platform performance, uptime, and technical issues
• Generating aggregate statistical reports (anonymized data)

6.5 Marketing & Communications

• Sending transactional emails (account confirmations, withdrawal notifications, security alerts)
• Delivering promotional emails about bonuses, new games, and special offers (where you have opted in)
• Sending SMS notifications about account activity or promotions (where you have consented)
• Displaying targeted advertising on the Platform and third-party websites
• Managing affiliate and referral programs

6.6 Security & Fraud Prevention

• Protecting against unauthorized access, hacking, and data breaches
• Detecting and preventing bonus abuse, account takeovers, and collusion
• Monitoring for suspicious login attempts and unusual transaction patterns
• Blocking access from restricted jurisdictions or sanctioned entities
• Conducting security audits and vulnerability assessments

7 Data Sharing & Third Parties

We share your personal information with the following categories of third parties, but only to the extent necessary to provide our services, comply with legal obligations, or protect our legitimate interests:

7.1 Payment Service Providers

We share transaction data with payment processors including bKash, Nagad, Rocket, Upay, and banking partners to process deposits and withdrawals. These providers handle your payment information in accordance with their own privacy policies and applicable financial regulations.

7.2 Identity Verification & KYC Partners

We share identity documents and personal details with third-party KYC verification services to confirm your identity, verify your age (21+), and ensure you are not on any sanctions lists or excluded persons databases.

7.3 Game Providers & Software Studios

We share limited user data (username, session ID, bet history) with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver live casino games, slots, and other gaming content. These providers process data under strict confidentiality agreements.

7.4 Fraud Prevention & Security Services

We share personal data with fraud detection services, IP intelligence providers, and security vendors to identify suspicious activity, prevent money laundering, detect multi-accounting, and protect against cyber threats.

7.5 Cloud Service & Hosting Providers

We use secure cloud infrastructure providers to store and process your data. These providers are bound by strict data processing agreements and employ industry-standard security measures including encryption, access controls, and regular audits.

7.6 Marketing & Analytics Partners

We may share anonymized or aggregated data (which cannot identify you personally) with analytics platforms and marketing partners to measure campaign performance, understand user behavior, and improve our services. Where we share identifiable data for marketing purposes, we do so only with your explicit consent.

7.7 Legal & Regulatory Authorities

We may disclose your personal information to law enforcement agencies, courts, regulatory bodies, tax authorities, or other government entities where required by law, court order, subpoena, or regulatory request. We may also disclose information to protect our legal rights, enforce our Terms & Conditions, or prevent harm to our users or the public.

7.8 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will provide notice via email or prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

8 International Data Transfers

ek777 operates primarily in Bangladesh, but some of our service providers (such as cloud hosting, payment processors, and game studios) may be located in other countries. When we transfer your personal data outside of Bangladesh, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

These safeguards may include:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements with third-party providers requiring equivalent data protection standards
• Use of service providers certified under recognized international data protection frameworks
• Encryption of data in transit and at rest

If you have questions about international data transfers or wish to obtain further information about the safeguards we use, please contact us using the details in Section 16.

9 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods vary depending on the type of data and the purpose for which it is processed:

9.1 Active Account Data

While your account is active, we retain all account information, transaction records, and gameplay history to provide ongoing services and support.

9.2 Closed Account Data

After you close your account, we retain certain personal data for a period of up to 7 years to comply with legal obligations including tax reporting, anti-money laundering record-keeping requirements, and potential dispute resolution. After this period, we securely delete or anonymize your data.

9.3 KYC & Identity Verification Documents

Identity documents submitted for KYC verification are retained for a minimum of 5 years after account closure to comply with regulatory requirements and for potential audits by authorities.

9.4 Marketing Communications Data

If you opt out of marketing communications, we retain your email address or phone number on a suppression list to ensure we do not contact you again, unless you later opt back in or open a new account.

9.5 Security & Fraud Records

Data related to fraud investigations, security incidents, or Terms & Conditions violations may be retained for up to 10 years to protect our business interests and prevent repeat offenses.

9.6 Aggregated & Anonymized Data

We may retain aggregated or anonymized data (which cannot identify you personally) indefinitely for statistical analysis, research, and business reporting purposes.

10 Security Measures

We take the security of your personal information extremely seriously and implement a comprehensive range of technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction:

10.1 Technical Security Controls

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored on our servers is encrypted using AES-256 encryption.
• Secure Password Storage: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms and are never stored in plain text.
• Two-Factor Authentication (2FA): Optional 2FA is available to add an extra layer of security to your account login.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
• Regular Security Updates: We apply security patches and software updates promptly to address known vulnerabilities.
• DDoS Protection: We employ distributed denial-of-service (DDoS) mitigation technologies to ensure Platform availability.

10.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and revoked immediately upon termination.
• Staff Training: All employees receive regular training on data protection, privacy best practices, and security awareness.
• Confidentiality Agreements: Employees and contractors with access to personal data are bound by strict confidentiality obligations.
• Security Audits: We conduct regular internal and third-party security audits to identify and address potential vulnerabilities.
• Incident Response Plan: We maintain a documented incident response plan to quickly detect, respond to, and mitigate data breaches or security incidents.
• Vendor Security Assessment: Third-party service providers undergo security assessments and are required to implement appropriate safeguards.

10.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant regulatory authorities without undue delay, and in any case within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws. Notifications will include details of the nature of the breach, the likely consequences, and the measures we are taking to address the incident.

11 Cookies & Tracking Technologies

ek777 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. This section explains what cookies are, how we use them, and how you can manage your preferences.

11.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide analytics data, remember user preferences, and deliver targeted advertising. Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device until deleted or expired).

11.2 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the Platform to function properly. They enable core features such as account login, session management, security, and access to protected areas. Without these cookies, certain services cannot be provided.
• Performance & Analytics Cookies: These cookies collect aggregated information about how visitors use the Platform, such as which pages are most visited, session duration, and error messages. This data helps us improve Platform performance and user experience. We use services like Google Analytics for this purpose.
• Functionality Cookies: These cookies remember your preferences and settings (such as language, time zone, and game favorites) to provide a more personalized experience. They may also remember username fields to simplify login (passwords are never stored in cookies).
• Advertising & Targeting Cookies: These cookies track your browsing activity across websites to deliver targeted advertising based on your interests. They may be set by our advertising partners and used to build a profile of your interests for remarketing purposes. You can opt out of personalized advertising via browser settings or industry opt-out tools.

11.3 Other Tracking Technologies

In addition to cookies, we may use web beacons (also called "pixels" or "clear GIFs"), local storage objects, and similar technologies to track user interactions, measure email open rates, and analyze Platform usage. These technologies function similarly to cookies and are subject to the same management options described below.

11.4 Managing Cookies

You can control and manage cookies in several ways:

• Browser Settings: Most web browsers allow you to block or delete cookies through their settings menu. Refer to your browser's help documentation for instructions. Note that blocking essential cookies may prevent you from accessing certain features of the Platform.
• Opt-Out Tools: You can opt out of targeted advertising cookies using industry opt-out pages such as the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI).
• Google Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-on to prevent Google Analytics from collecting data about your Platform usage.

Please note that if you delete or block cookies, some features of the Platform may not function correctly, and you may need to re-enter your preferences each time you visit.

12 Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information. To exercise any of these rights, please contact us using the details in Section 16.

12.1 Right of Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format, free of charge. You can also access most of your personal data directly through your account settings on the Platform.

12.2 Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion. You can update most personal details (email, phone number, address) directly in your account settings, or contact support for assistance.

12.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data under certain circumstances, including where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where processing is based on consent); (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed.

Please note that we may be required to retain certain data for legal compliance (KYC, AML, tax reporting) even after you request deletion. We will inform you if this is the case.

12.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations, such as while we verify the accuracy of contested data or while we assess whether your objection to processing overrides our legitimate interests.

12.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider without hindrance. This right applies where processing is based on consent or contract and is carried out by automated means.

12.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You may object at any time, and we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.

You have an absolute right to object to direct marketing at any time by clicking the "Unsubscribe" link in promotional emails or by contacting support.

12.7 Right to Withdraw Consent

Where we process your personal data based on your consent (for example, for marketing communications or optional features), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

12.8 Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority or data protection regulator in your jurisdiction.

13 Marketing Communications

ek777 may send you marketing communications about bonuses, promotions, new games, and special offers available on the Platform. We will only send you marketing communications where you have provided explicit consent to receive them during registration or through your account settings.

13.1 Types of Marketing Communications

• Email newsletters featuring new game releases, promotions, and seasonal offers (e.g., Eid bonuses, Pohela Boishakh specials, BPL cricket promotions)
• SMS notifications about account-specific offers and deposit bonuses
• Push notifications (if you have enabled them on the ek777 mobile application)
• Personalized in-Platform banners and recommendations based on your game preferences

13.2 Opting Out of Marketing

You can opt out of receiving marketing communications at any time using any of the following methods:

• Click the "Unsubscribe" link included in every marketing email
• Update your communication preferences in your account settings under "Notifications"
• Contact our customer support team via live chat or email at [email protected]

Please note that even if you opt out of marketing communications, we will continue to send you transactional and account-related messages (such as deposit confirmations, withdrawal notifications, password reset emails, and security alerts). These communications are necessary for the operation of your account and cannot be opted out of while your account remains active.

13.3 Profiling for Marketing Purposes

We may use automated profiling to personalize the marketing communications and offers you receive. This profiling is based on your betting history, game preferences, deposit behavior, and Platform usage patterns. If you object to automated profiling for marketing purposes, please contact us, and we will cease this activity for your account.

14 Children's Privacy

ek777 is strictly an adult gambling platform. Our services are intended solely for individuals who are 21 years of age or older. We do not knowingly collect personal information from anyone under the age of 21.

If you are a parent or guardian and believe that a minor has created an account on ek777 without your knowledge, please contact us immediately at [email protected]. We will take swift action to close the account and delete any associated personal data.

We strongly encourage parents and guardians to use parental control software and internet filtering tools to prevent underage access to online gambling platforms. Resources such as GameBlock, BetBlocker, and Gamban are available to help restrict access to gambling websites.

15 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by:

• Sending an email notification to the address registered on your account
• Displaying a prominent notice on the ek777 Platform for a minimum of 30 days
• Updating the "Effective Date" at the top of this Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you disagree with any changes to this Privacy Policy, you should stop using the Platform and contact us to request account closure and exercise your data deletion rights as described in Section 12.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please do not hesitate to reach out to us. Our Data Protection Officer is available to assist you.

16.1 Data Protection Officer

Platform: ek777
Website: https://ek777.cc
Email: [email protected]
Subject Line: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response Time: Within 30 calendar days of receiving your request
Support Hours: 24/7 Live Chat and Email Support
Languages: English, Bengali

16.2 Responsible Gaming Support

If your privacy inquiry is related to responsible gaming, self-exclusion, or account closure for problem gambling reasons, please visit our Responsible Gaming page for dedicated guidance and support resources. Our responsible gaming team is available around the clock to assist you.

16.3 General Support

For general account queries, deposit and withdrawal issues, or technical support, please visit our FAQ page or contact our customer support team via live chat, available 24/7 on the Platform.