ek3e Privacy Policy

When you register for or use the ek3e platform, we collect personal data in several ways. The categories of data we collect, and the context in which each category arises, are described in the table below and the explanatory text that follows.

Data You Provide Directly

The majority of personal data we hold is provided directly by you during account registration, KYC identity verification, deposit and withdrawal requests, and when you contact our support team. You are not obliged to provide personal data to ek3e; however, failing to provide data that is necessary for a specific purpose (for example, KYC documentation for withdrawal processing) may mean we cannot provide that service to you.

Data We Collect Automatically

When you access and use the ek3e platform, certain technical and usage data is collected automatically using cookies, web beacons, server logs, and similar technologies. This includes your IP address, device identifiers, browser version, and a record of the pages and features you interact with. This data is used primarily for platform security, fraud prevention, and improving the overall user experience. See the Cookies & Tracking Technologies section below for full details.

Data From Third Parties

In limited circumstances, ek3e may receive personal data about you from third parties. These circumstances include identity verification checks performed by our KYC service partners, fraud screening checks, and information shared by payment processors (such as transaction reference numbers from bKash, Nagad, or our banking partners) to enable us to match your deposit or withdrawal to your ek3e account.

ek3e uses the personal data we collect for specific, lawful purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The primary purposes for which ek3e processes personal data are as follows:

Account Management and Platform Access

We use your identity and contact data to create and maintain your ek3e account, verify your identity at registration, process login requests, and manage your account settings. This processing is necessary to fulfil our contractual obligation to you as a registered player.

Payment Processing

Your financial data — including mobile money account references and bank account details — is used solely to process deposits you initiate and to send withdrawals to your nominated account. ek3e does not use payment data for marketing or profiling purposes. All financial data processing complies with anti-money-laundering (AML) obligations applicable to online gaming platforms.

Identity Verification and Regulatory Compliance

ek3e is required to verify the identity and age of all registered players. We use KYC (Know Your Customer) processes to confirm that players are at least 18 years of age and are who they claim to be. This processing is necessary to comply with legal obligations and to protect the integrity of the platform. Players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar are subject to the same identity verification standards.

Fraud Prevention and Platform Security

Technical and usage data — including IP addresses, device identifiers, and behavioural patterns — is analysed to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct. This processing is in the legitimate interests of ek3e and its genuine player community.

Responsible Gaming Monitoring

ek3e uses gameplay data, session duration records, and betting pattern analysis to identify players who may be experiencing gambling-related harm. Where our monitoring tools flag a potential concern, our responsible gaming team may make proactive contact. This processing is in your vital interests as a player and forms a core part of ek3e's duty of care.

Customer Support

Communications data, including support chat transcripts and email correspondence, is retained to enable us to resolve your queries efficiently, improve our support quality, and maintain a record of dispute outcomes. Support records are kept for a minimum of two years from the date of the interaction.

Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players navigate the ek3e platform, which games and features are most popular, and where the user experience can be improved. This analysis does not involve identifying individual players and uses statistical aggregates only.

Marketing and Promotional Communications

Where you have explicitly opted in to receive marketing communications from ek3e, we may use your contact data to send you information about promotions, seasonal bonuses (for example, Eid offers or BPL cricket specials), and new features. You may withdraw your marketing consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawing marketing consent does not affect your ability to use the platform.

ek3e does not sell, rent, or trade your personal data to any third party for commercial gain. We share personal data with external parties only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

Service Providers and Technology Partners

ek3e works with a small number of carefully selected third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include:

• KYC and Identity Verification Partners: Third-party identity verification services that cross-check the documents you submit against official records to confirm your identity and age.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — who process deposit and withdrawal transactions. Each payment partner has its own privacy practices and security standards.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive technical session data (such as a pseudonymous player token) to enable game delivery. Game providers do not receive your full name or contact details.
• Infrastructure and Hosting Providers: Cloud and server infrastructure providers that host the ek3e platform and databases under enterprise-grade security arrangements.
• Fraud Prevention Services: Specialist fraud screening tools that analyse technical data signals to detect suspicious account or transaction activity.

Legal and Regulatory Disclosure

ek3e may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law, court order, or to protect the legal rights of ek3e, its employees, or its players. Such disclosures are made on a case-by-case basis and only to the extent strictly required.

Business Transfers

In the event that ek3e undergoes a corporate restructuring, merger, acquisition, or sale of all or a substantial part of its assets, personal data held by ek3e may be transferred to the acquiring entity as part of that transaction. In such circumstances, ek3e will notify affected users of the transfer and the new entity's privacy practices as required by applicable law.

ek3e uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to secure your account session, and to gather anonymised analytics that help us improve the player experience. This section explains the types of cookies we use and how you can manage them.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the ek3e platform to function. They manage your login session, maintain security tokens, and ensure that pages load correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players navigate the ek3e platform — which pages are visited most, where errors occur, and how long sessions last. The data collected is aggregated and does not identify individual users.
• Functionality Cookies: These cookies remember your preferences, such as your chosen language setting (English) and any display options you have selected, so that you do not need to re-enter them on each visit.
• Security Cookies: Short-lived cookies used to support fraud detection and to verify that login requests originate from a legitimate device and session. These are deleted when you close your browser.

Managing Your Cookie Preferences

You can manage cookie settings through your browser's built-in privacy controls. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will affect your ability to log in and use the ek3e platform. Disabling performance cookies will not affect core functionality but will reduce our ability to improve the platform based on real-world usage data.

ek3e does not use third-party advertising cookies or cross-site tracking technologies that follow you across other websites after you leave the ek3e platform.

ek3e retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.

If you request deletion of your personal data before the end of a retention period, ek3e will delete all data that it is not legally required to retain, and will explain to you which categories of data must be retained and for how long.

As a registered player on ek3e, you have a number of rights in respect of the personal data we hold about you. ek3e is committed to making it straightforward for you to exercise these rights without unnecessary barriers or delays.

• Right to Access: You have the right to request a copy of all personal data ek3e holds about you, along with an explanation of the purposes for which it is processed. Requests will be fulfilled within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings, or contact support for corrections to KYC data.
• Right to Erasure: You have the right to request deletion of your personal data. ek3e will honour erasure requests to the fullest extent possible, subject to data that must be retained to meet legal or regulatory obligations (see Data Retention above). Erasure requests typically result in account closure.
• Right to Restriction of Processing: In certain circumstances — for example, where you have contested the accuracy of data we hold — you may request that we restrict processing of your personal data while the matter is resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, subject to our demonstrating overriding grounds for the processing.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact our privacy team at [email protected], clearly stating your request and the right you wish to exercise. We may request identity verification before fulfilling the request to protect your data from unauthorised access.

ek3e implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• Transport Layer Security (TLS 1.2+): All data transmitted between your device and ek3e's servers is encrypted in transit using TLS 1.2 or higher, preventing interception by third parties.
• AES-256 Encryption at Rest: Personal data and financial records stored on ek3e's servers are encrypted at rest using AES-256, an industry-standard symmetric encryption algorithm.
• Access Controls: Access to personal data held on ek3e's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role, and all access events are logged.
• Regular Security Audits: ek3e's platform infrastructure and data handling practices are subject to periodic internal and external security reviews, including vulnerability assessments and penetration testing.
• Secure Password Storage: User account passwords are never stored in plain text. ek3e uses a modern one-way hashing algorithm with salting to ensure that passwords cannot be recovered even in the event of an internal data access event.
• Session Timeout and Two-Factor Authentication: Inactive sessions are automatically terminated after a defined period. Two-factor authentication (OTP-based) is available for all accounts and is strongly encouraged.

Despite these measures, no online platform can guarantee absolute security. In the event that ek3e becomes aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements, without undue delay.

You also play an important role in keeping your account secure. Use a strong, unique password, do not share your credentials with others, and log out fully from shared devices. If you believe your ek3e account has been accessed without your authorisation, contact [email protected] immediately.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ek3e handles your personal data, please contact our privacy team using the details below. We are committed to responding promptly and constructively to all privacy-related enquiries.

Privacy Contact

All privacy enquiries, data subject access requests, erasure requests, and complaints should be directed to:

Email: [email protected] — please include "Privacy Enquiry" or the specific right you are exercising in the subject line of your message.

Operating Hours: 24/7, Bangladesh Standard Time (UTC+6). We aim to acknowledge all privacy enquiries within 72 hours.

Updates to This Policy

ek3e reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users via the email address associated with their account and/or via a prominent notice on the ek3e platform. The "Effective Date" at the top of this document will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how we protect your data.