ek78 Privacy Policy

Introduction

ek78 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy describes the types of personal information we collect, the purposes for which that information is processed, the parties with whom it may be shared, the security measures we have in place to protect it, and the rights available to you as a data subject.

ek78 operates as an online casino and sports betting platform serving the Bangladesh market. All services are provided in English and all financial transactions are conducted in Bangladeshi Taka (BDT) via locally trusted payment channels including bKash, Nagad, Rocket, and Upay.

This policy should be read alongside the ek78 Terms & Conditions, which form the complete legal agreement governing your use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail unless this policy expressly states otherwise.

If you have any questions about how ek78 handles your personal data, you may contact us at any time using the details in Section 14 of this document. Our support team is available 24 hours a day, 7 days a week at Bangladesh Standard Time (BST, UTC+6).

Data Controller

For the purposes of this Privacy Policy, ek78 acts as the data controller in respect of all personal data collected directly through the platform. As data controller, ek78 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

Where ek78 engages third-party service providers to assist in the delivery of platform services — such as payment processors, KYC verification providers, or game studio partners — those providers act as data processors operating under ek78's instructions and subject to contractual data protection obligations. ek78 remains responsible for the overall integrity of the data processing chain.

All enquiries regarding the exercise of data subject rights, data correction requests, deletion requests, or concerns about data handling should be directed to ek78 using the contact details in Section 14.

Data We Collect

ek78 collects personal data in the following categories. We collect only what is genuinely necessary for the purposes described in this policy — we do not collect data speculatively or beyond operational requirements.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond what you voluntarily share in a responsible gaming context), or biometric data.

How We Collect Data

ek78 collects personal data through the following channels:

• Direct submission: Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and activity data collected automatically as you use the platform, including IP address, device identifiers, session logs, and gameplay data captured by our platform infrastructure and analytics systems.
• Third-party sources: Identity and age verification data returned by our KYC partners following document checks. Payment confirmation data returned by bKash, Nagad, Rocket, and Upay upon processing a transaction. Fraud-risk signals from our security partners.
• Cookies and similar technologies: Data collected through browser cookies, session storage, and similar tracking technologies as described in Section 8 of this policy.

In all cases, ek78 ensures that data collection methods are transparent, proportionate, and limited to what is necessary for the stated purpose. We do not purchase contact lists or acquire personal data from data brokers.

Legal Basis for Processing

ek78 processes your personal data on the following legal grounds, depending on the nature and context of the processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the Terms & Conditions — including creating and managing your account, processing deposits and withdrawals, and providing access to games and sports markets.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC and identity verification obligations, anti-money-laundering checks, age verification, and the retention of financial transaction records.
• Legitimate interests: Processing carried out to pursue legitimate business interests that are not overridden by your rights — including fraud detection, platform security monitoring, responsible gaming monitoring, and internal analytics to improve our services.
• Consent: Processing for purposes beyond operational necessity, such as sending you promotional communications about offers, tournaments, or seasonal events (e.g., BPL promotions, Eid bonuses, Pohela Boishakh specials). You may withdraw consent for marketing communications at any time by contacting [email protected].

How We Use Your Data

The personal data collected by ek78 is used for the following specific purposes:

• Account management: Creating, maintaining, and securing your ek78 account; verifying your identity at registration and upon withdrawal requests; enforcing the one-account-per-player rule.
• Payment processing: Facilitating BDT deposits via bKash, Nagad, Rocket, Upay, and supported bank channels; processing withdrawal requests to your registered payment account; maintaining accurate financial records.
• Platform security and fraud prevention: Detecting and investigating suspicious activity, multiple-account abuse, bonus fraud, money laundering, and unauthorised access attempts. Sharing relevant signals with our fraud prevention partners where necessary.
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour; applying deposit limits, self-exclusion periods, or cool-off periods requested by the player or identified as necessary by our responsible gaming team.
• Customer support: Responding to your enquiries, resolving disputes, and processing formal complaints in accordance with our complaints procedure.
• Personalisation: Tailoring the platform experience to your preferences, including displaying relevant game recommendations and sports markets based on your activity history.
• Marketing communications: Sending you information about promotions, bonuses, and seasonal offers — but only where you have given consent or where we have a legitimate interest in informing you of offers directly related to your existing use of the platform.
• Legal compliance: Retaining records as required by applicable law; responding to lawful requests from competent authorities; enforcing our Terms & Conditions and resolving disputes.
• Platform improvement: Analysing aggregated, anonymised usage data to identify areas for improvement in site navigation, game performance, and customer support quality.

ek78 does not use automated decision-making in a way that produces legal effects affecting you or that significantly affects you in a similar manner, without providing you the opportunity to request human review of that decision.

Data Sharing

ek78 does not sell, rent, or trade your personal data to third parties. We share data only where it is necessary to deliver platform services, comply with legal obligations, or protect the security of the platform. The categories of third parties with whom data may be shared are set out below.

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum data required to initiate and confirm payment transactions. Their handling of transaction data is governed by their own privacy policies and terms of service.
• Banking partners: Where bank transfer deposits are used (BRAC Bank, City Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank), basic transaction reference data is shared with the relevant institution for payment reconciliation purposes.
• KYC and identity verification providers: Document images and identity data submitted for verification are shared with our KYC partner(s) for the purpose of confirming your identity, age, and address. These providers are contractually bound to use the data solely for verification purposes.
• Game studio partners: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming receive an anonymised or pseudonymised player identifier to facilitate game session management. They do not receive your full name, contact details, or financial data unless separately required for dispute resolution with that provider.
• Fraud and security partners: Technical data including IP addresses, device identifiers, and session flags may be shared with our fraud detection service providers for the purpose of identifying and blocking fraudulent activity.
• Legal and regulatory authorities: ek78 will disclose personal data to law enforcement or regulatory bodies where required to do so by a lawful order, court direction, or applicable legal requirement. We will, where legally permitted, notify you of such disclosures.
• Professional advisers: Lawyers, accountants, and auditors engaged by ek78 may have access to personal data where strictly necessary for the provision of professional services and subject to confidentiality obligations.

Cookies & Tracking Technologies

ek78 uses cookies and similar tracking technologies to operate the platform effectively and to improve the user experience. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or deliver viruses to your device; they are used solely for the purposes described below.

The cookies used on the ek78 platform fall into the following categories:

• Essential / session cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language and display preferences within a single visit, and enable core features such as game loading and wallet balance display. These cookies cannot be disabled without impairing core platform functionality.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF (cross-site request forgery) tokens and session integrity checks. These are essential for platform security and cannot be disabled.
• Analytics cookies: Used to understand how players navigate the ek78 platform — including which pages are most visited, where users drop off, and how long sessions last. This data is collected in aggregated, anonymised form and is used solely for internal platform improvement purposes. ek78 does not share analytics data with third-party advertising networks.
• Preference cookies: Used to remember your settings between visits, such as responsible gaming reminder intervals or display preferences. These are non-essential and can be managed through your browser settings.

You can manage or disable non-essential cookies through your browser's settings at any time. Most browsers allow you to view and delete existing cookies, block future cookies from specific sites, or set general cookie preferences. Please note that disabling essential cookies will impair your ability to use the ek78 platform, including logging in and accessing your wallet.

ek78 does not use third-party advertising tracking pixels, social media tracking pixels, or cross-site behavioural advertising technologies on the platform.

Data Retention

ek78 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or legitimate business necessity. The general retention periods applied to each category of data are as follows:

• Account registration data: Retained for the duration of your account relationship with ek78, plus a minimum of five (5) years following account closure to comply with financial record-keeping and anti-money-laundering obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law or where an account is under active investigation.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial compliance requirements.
• Activity and gameplay logs: Retained for up to two (2) years from the date of each session, or longer if required in connection with a dispute, investigation, or regulatory enquiry.
• Support correspondence: Retained for up to three (3) years from the date of the final interaction in a support thread, or longer where the correspondence relates to a formal complaint or legal matter.
• Analytics data: Retained in aggregated, anonymised form indefinitely for historical platform performance analysis. Individual-level analytics data is anonymised or deleted after twelve (12) months.
• Marketing consent records: Retained for the duration of the consent period and for up to three (3) years following withdrawal of consent, as evidence of the consent having been obtained and subsequently withdrawn.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it can no longer be linked back to any individual and therefore falls outside the scope of this Privacy Policy.

Data Security

ek78 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and ek78 servers is encrypted using industry-standard TLS protocols. The ek78 platform operates exclusively over HTTPS; unencrypted HTTP connections are not permitted.
• Access controls: Internal access to personal data is restricted to authorised ek78 personnel who require it to perform their specific job functions. Access is granted on a least-privilege basis and is subject to regular review.
• Password security: Account passwords are stored using strong one-way cryptographic hashing. ek78 does not store plaintext passwords and cannot retrieve your password — only reset it via a verified process.
• Fraud monitoring: Automated and manual fraud monitoring systems review account activity and transaction patterns in real time to detect and respond to suspicious behaviour promptly.
• Security reviews: ek78 conducts periodic internal security assessments and works with external security partners to identify and remediate vulnerabilities in the platform infrastructure.
• Data minimisation: We collect only the data we need. Reducing the volume of personal data we hold is itself a security measure — data that is never collected cannot be compromised.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ek78 will notify affected users as soon as practicable and will take all reasonable steps to contain the breach and prevent further unauthorised access.

You also have a responsibility for the security of your own account. You must keep your login credentials confidential, use a strong and unique password, and notify ek78 immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

Your Rights

As a data subject, you have the following rights in relation to the personal data that ek78 holds about you. To exercise any of these rights, please submit a written request to [email protected] with your account username and a description of your request. We will respond within 30 calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data that ek78 holds about you, along with information about the purposes for which it is processed and the parties with whom it has been shared.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account details directly through your account settings or by contacting support.
• Right to erasure: You may request that ek78 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there is no overriding legitimate interest. Note that this right is subject to our legal retention obligations — data that we are required to retain by law cannot be deleted on request until the retention period expires.
• Right to restriction: You may request that ek78 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing pending verification of whether our legitimate interests override yours.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing of your personal data that is based on ek78's legitimate interests, including profiling for personalisation purposes. You may also object to receiving direct marketing communications at any time.
• Right to withdraw consent: Where ek78 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

Children & Minors

The ek78 platform is strictly intended for adults aged 21 years and above. ek78 does not knowingly collect personal data from individuals under the age of 21. All account registration applications are subject to age verification procedures designed to prevent underage access to the platform.

If ek78 becomes aware that personal data has been collected from an individual under the age of 21 — whether through fraudulent registration, misrepresentation of age, or any other means — the relevant account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any funds held in the account will be dealt with in accordance with our Terms & Conditions and applicable legal requirements.

If you believe that a minor may have accessed or registered on the ek78 platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Policy Amendments

ek78 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, the introduction of new platform features, or improvements in how we communicate our privacy commitments to users.

When material changes are made to this Privacy Policy, ek78 will notify registered users by posting a prominent notice on the platform and, where practical, by sending a notification to the mobile number or email address associated with your account. The "Last Updated" date at the top of this document will be revised to reflect the date on which the most recent changes took effect.

Your continued use of the ek78 platform following the publication of a revised Privacy Policy constitutes your acceptance of the amended terms. If you do not agree with any changes to this policy, you should cease using the platform and may request account closure by contacting [email protected]. We recommend reviewing this Privacy Policy periodically to stay informed of how your data is being handled.

Previous versions of this Privacy Policy are available upon written request to our support team and will be provided within a reasonable timeframe. Where a dispute arises regarding data handling practices, the version of the Privacy Policy in effect at the time of the relevant processing activity shall apply.

Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ek78 handles your personal data, our support team is available around the clock and can be reached as follows:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days of receiving a valid request.

When submitting a data subject rights request or a privacy complaint, please include your registered account username, a clear description of your request or concern, and any relevant reference numbers or dates to help us locate the relevant records efficiently.

If you submit a complaint and are not satisfied with our response, or if you believe that ek78 has not handled your personal data in accordance with applicable data protection principles, you have the right to escalate the matter to a competent supervisory authority or seek independent legal advice. ek78 will cooperate fully with any legitimate regulatory investigation into our data handling practices.