ek777 Privacy Policy

1 Introduction

ek777 ("we", "us", "our", "the Platform") is committed to protecting the personal data of all players who register and use its online gaming services at ek777.lol. This Privacy Policy sets out in plain and formal terms how ek777 collects, processes, stores, shares, and protects personal information in connection with the provision of cricket betting, live casino, slot games, and all other services accessible through the Platform.

This policy applies to all individuals who access the ek777 Platform, whether as registered players, visitors browsing the site without an account, or individuals who contact ek777 customer support. By registering an account, depositing funds, or otherwise making use of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

ek777 operates this Platform primarily for players located in Bangladesh. References to "applicable law" throughout this policy include the Digital Security Act 2018 and any other data protection or privacy legislation that applies to the processing of personal data in connection with services offered to persons in Bangladesh.

2 Data Controller

For the purposes of this Privacy Policy, ek777 acts as the data controller in respect of all personal data collected through the Platform. As data controller, ek777 determines the purposes and means by which your personal data is processed. All enquiries relating to this Privacy Policy or to the exercise of your data rights should be directed to the ek777 Privacy team at [email protected].

3 Data We Collect

ek777 collects only the personal data that is necessary for the purposes described in this policy. The categories of data we collect are as follows:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 18+ minimum age requirement)
• Residential address, including city and postal code
• Email address registered on the account
• Mobile phone number associated with the account
• Copies of identity documents submitted during KYC verification (national ID card, passport, or driving licence)

3.2 Financial Data

• Mobile Financial Service (MFS) account numbers for bKash, Nagad, Rocket, and Upay transactions
• Bank account details submitted for withdrawal purposes (Dutch-Bangla Bank, BRAC Bank, or other institutions)
• Payment card details (Visa or Mastercard) where applicable — card numbers are tokenised and never stored in plain text
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method identifiers

3.3 Gaming & Behavioural Data

• Bet history, wagering amounts, game outcomes, and session duration for all games played on the Platform
• Bonus redemption records and wagering requirement fulfilment progress
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records, including chat transcripts and email correspondence

3.4 Technical & Device Data

• IP address at the time of registration and at each login
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Referring URL and pages viewed within the Platform
• Cookie identifiers and session tokens (see Section 9 for full cookie details)

4 How We Collect Data

ek777 collects personal data through the following channels:

• Account Registration: Data provided directly by you when you complete the registration form on the Platform, including your name, date of birth, email address, and phone number.
• KYC Verification: Identity and address documents submitted by you in response to a KYC verification request from ek777.
• Deposits & Withdrawals: Payment details provided by you or automatically passed to the Platform by your payment provider when initiating a transaction.
• Platform Usage: Automatically collected technical and behavioural data generated as you browse and use the Platform, including via cookies and server-side logging.
• Customer Support: Information provided by you when you contact ek777 via live chat, email, or any other support channel.
• Third-Party Verification Services: Identity verification data returned by third-party KYC and fraud-screening service providers when we perform identity checks.

5 How We Use Your Data

ek777 uses the personal data we collect for the following purposes:

ek777 does not use personal data for any purpose that is incompatible with the purposes listed above. Where we intend to use personal data for a new purpose, we will update this Privacy Policy and, where required by applicable law, seek fresh consent from affected players.

6 Legal Basis for Processing

ek777 processes personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform the contract between ek777 and the player — including account creation, payment processing, and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable law, including identity verification obligations, anti-money-laundering screening, and the retention of financial transaction records.
• Legitimate Interests: Processing carried out for ek777's legitimate business interests, such as fraud prevention, platform security, and improving the quality of services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for the sending of promotional and marketing communications. You may withdraw consent at any time by contacting [email protected].

7 Data Sharing & Disclosure

ek777 does not sell, rent, or trade your personal data to any third party for marketing purposes. We may share your personal data only in the following circumstances:

7.1 Service Providers

ek777 engages third-party service providers who process personal data on our behalf and under our instructions. These include payment gateway operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), KYC and identity verification providers, fraud detection and anti-money-laundering screening vendors, and cloud infrastructure and hosting providers. All service providers are contractually required to maintain confidentiality and to implement appropriate security measures.

7.2 Game Studio Partners

When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, Ezugi, or Hacksaw Gaming), limited technical data including your session token and game history for that session may be processed by the studio's gaming servers. ek777 does not share your name, contact details, or financial data with game studio partners.

7.3 Legal & Regulatory Disclosure

ek777 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, by court order, or where ek777 believes in good faith that such disclosure is necessary to prevent fraud, protect the safety of individuals, or enforce ek777's legal rights.

7.4 Business Transfers

In the event that ek777 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by ek777 may be transferred to the acquiring entity as part of that transaction. We will notify affected players via the email address registered on their account prior to any such transfer and will ensure that the recipient entity is bound by data protection obligations no less protective than those set out in this policy.

8 Data Retention

ek777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Gaming history and bet records: Retained for three (3) years from the date of the gaming session, or longer where the records are the subject of an ongoing dispute or investigation.
• Customer support records: Retained for two (2) years from the date of the most recent interaction, or longer if the interaction relates to an unresolved complaint or legal matter.
• Technical and device data: Retained for twelve (12) months from collection, unless required for fraud investigation purposes, in which case the retention period may be extended.
• Marketing consent records: Retained for the duration of consent plus one (1) year following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in such a manner that re-identification is not possible. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

ek777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

ek777 does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertisements on external websites. You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the Platform.

10 Security Measures

ek777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the ek777 Platform is encrypted using 256-bit SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that your connection is encrypted at all times.
• Data Encryption at Rest: Sensitive data fields, including payment card tokens, identity document references, and password hashes, are encrypted at the database level using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ek777 staff and authorised service providers on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: ek777 staff with access to systems holding personal data are required to use two-factor authentication. Players are also strongly encouraged to enable two-factor authentication on their accounts.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ek777 maintains a formal data breach incident response procedure. In the event of a breach affecting player personal data, ek777 will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

11 Your Privacy Rights

As a player whose personal data is processed by ek777, you hold the following rights in respect of your personal information. To exercise any of these rights, submit a written request to [email protected] with "Privacy Request" in the subject line. ek777 will respond within 30 calendar days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data ek777 holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update certain account details directly through the Account settings section of the Platform.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where it has been unlawfully processed. This right is subject to ek777's legal obligation to retain certain data for the periods described in Section 8.
• Right to Restriction: You have the right to request that ek777 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive a copy of personal data that you provided to ek777 in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where ek777 relies on legitimate interests as the legal basis. ek777 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

12 Children's Privacy

The ek777 Platform is strictly intended for adults aged 18 and above. ek777 does not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step during registration, and ek777 employs automated and manual controls to prevent underage access.

If ek777 discovers or is notified that personal data has been collected from an individual under the age of 18, all such data will be immediately deleted and the associated account suspended. If you are a parent or guardian and believe that your child has registered an account on ek777, please contact us immediately at [email protected] so that we can take the appropriate action without delay.

13 Third-Party Links

The ek777 Platform may contain references to or integrations with third-party services, including game studio interfaces provided by Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, Ezugi, and Hacksaw Gaming. While ek777 selects its studio partners carefully, each studio operates its own infrastructure and may be subject to its own privacy practices for data processed within its gaming environment.

ek777 is not responsible for the privacy practices of third-party studios or payment providers. This Privacy Policy applies solely to data processed directly by ek777 through the ek777.lol Platform. Players are encouraged to review the privacy documentation of any third-party service they interact with.

14 Changes to This Policy

ek777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When a material change is made, ek777 will notify registered players by displaying a prominent notice on the Platform or by sending a notification to the email address registered on the player's account at least fourteen (14) days prior to the change taking effect.

The "Last Updated" date at the top of this page will be revised whenever the policy is amended. We encourage you to review this Privacy Policy periodically to remain informed about how ek777 protects your personal data. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ek777 holds about you, please contact us through the following channel:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 via the ek777 Platform support widget
• Response Time: ek777 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days

ek777 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with ek777's response to a privacy enquiry, you retain the right to raise the matter with the relevant data protection authority in your jurisdiction.