Privacy Policy

1 Information We Collect

ec99 collects personal information in several ways: directly from you when you register or interact with the platform, automatically when you use the Services, and occasionally from trusted third-party verification partners. The categories of data we collect are set out below.

1.1 Registration Data

When you create an ec99 account, we collect:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification purposes);
• Email address;
• Mobile phone number (Bangladesh-registered);
• Residential address (city, district, and postal code);
• Chosen username and encrypted password hash.

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, ec99 is required to verify your identity. During this process we may collect:

• A copy of your National Identity Card (NID), passport, or driving licence;
• A selfie or live photo for facial comparison;
• Proof of your registered payment method (e.g., a screenshot of your bKash or Nagad registered mobile number);
• Proof of address (utility bill, bank statement, or similar document issued within three months).

KYC documents are processed securely and retained only for as long as required by our data retention policy (see Section 5). We use third-party identity verification partners who are contractually bound to process your data solely for verification purposes on our behalf.

1.3 Financial Transaction Data

ec99 records the following in connection with each deposit and withdrawal:

• Transaction amount in BDT (৳);
• Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer);
• Transaction reference number provided by the payment network;
• Date, time, and Bangladesh Standard Time (BST, UTC+6) timestamp of the transaction;
• Transaction status (pending, completed, failed, or reversed).

ec99 does not store full mobile wallet PINs or bank account passwords. Only the mobile number or account identifier associated with your payment method is retained for reconciliation and anti-fraud purposes.

1.4 Gameplay and Betting Data

To operate the ec99 platform fairly and to resolve any disputes, we maintain a detailed log of all gaming activity on your account, including:

• Games played, bet amounts, and outcomes;
• Sports betting markets selected, stake, odds, and settlement results;
• Session start and end times;
• Bonus offers claimed and wagering progress.

1.5 Technical and Device Data

When you access ec99, our servers automatically collect:

• IP address and approximate geolocation (country and city level);
• Browser type, version, and language preference;
• Operating system and device type (desktop, mobile, tablet);
• Referring URL (the page you visited immediately before arriving at ec99);
• Pages visited on ec99 and duration of each visit;
• Error logs and performance diagnostics.

This technical data is used to maintain platform stability, detect fraudulent access attempts, and improve the overall user experience for players across Bangladesh, including those connecting from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

2 How We Use Your Data

ec99 processes personal data only for lawful, specified, and legitimate purposes. The primary legal bases for our data processing are: (a) performance of the contract between you and ec99; (b) compliance with legal obligations; (c) legitimate interests of ec99 (including fraud prevention and platform security); and (d) your explicit consent, where required.

Marketing Communications

ec99 will only send you promotional emails or SMS messages if you have actively opted in to receive them during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Unsubscribing from marketing does not affect transactional messages such as deposit confirmations, withdrawal notifications, or security alerts, which are sent as a necessary part of the ec99 service.

3 Cookies & Tracking

ec99 uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, maintain your login session, and analyse how the site is used. A cookie is a small text file stored on your device by your browser. Cookies set by ec99 do not contain your password or payment details.

ec99 does not use third-party advertising cookies or retargeting pixels that track your behaviour across other websites. You may manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in to your ec99 account and using core platform features.

4 Data Sharing & Disclosure

ec99 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and under binding contractual data-protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum transaction data necessary to process your deposits and withdrawals. These entities are subject to their own privacy policies and applicable financial regulations in Bangladesh.
• Identity verification partners: Our KYC provider receives copies of identity documents submitted during the verification process. They are contractually prohibited from retaining or using this data for any purpose other than verifying your identity on behalf of ec99.
• Fraud prevention services: Anonymised or pseudonymised device and IP data may be shared with fraud intelligence networks to detect and prevent account takeovers and payment fraud.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and pseudonymised player ID to launch their games inside the ec99 platform. These providers do not receive your name, email address, or financial details.
• Legal and regulatory authorities: ec99 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by a lawful order, subpoena, or applicable legal obligation. We will notify you of any such disclosure wherever we are legally permitted to do so.
• Business transfers: In the event that ec99 is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance if such a transfer affects the terms under which your data is processed.

All third-party service providers that process personal data on ec99's behalf are required to implement appropriate technical and organisational security measures and to process data only in accordance with ec99's written instructions.

5 Data Retention

ec99 retains personal data only for as long as it is necessary for the purposes for which it was collected or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your ec99 account and for a period of five (5) years following account closure, to satisfy our AML record-keeping obligations.
• KYC identity documents: Retained for five (5) years from the date of submission or from account closure, whichever is later, in accordance with financial compliance requirements.
• Financial transaction records: Retained for seven (7) years from the date of each transaction.
• Gameplay logs: Retained for three (3) years from the date of each session, primarily to facilitate dispute resolution.
• Customer support correspondence: Retained for two (2) years from the date of the most recent interaction.
• Marketing consent records: Retained for the duration of your account plus one (1) year, to provide an audit trail of consent.
• Anonymised analytics data: May be retained indefinitely, as this data cannot be linked back to any individual player.

When personal data is no longer required, it is securely deleted or irreversibly anonymised. Deletion requests submitted by players (see Section 6) will be honoured within 30 days, subject to the legal retention requirements listed above overriding the request where applicable.

6 Your Privacy Rights

As a player on the ec99 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 days.

Please note that some rights may be limited where ec99 has a legal obligation to retain or process your data (for example, AML record-keeping requirements). Where we are unable to fulfil a request in full, we will explain the reason in our response.

7 Security Measures

ec99 implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and ec99 servers;
• Password hashing using industry-standard one-way cryptographic algorithms — ec99 staff cannot read your password in plain text;
• Two-factor authentication (2FA) available to all players for additional account security;
• Role-based access control ensuring that only authorised ec99 staff can access personal data, and only to the extent required for their specific role;
• Regular security audits and vulnerability assessments of the platform infrastructure;
• Encrypted data storage for sensitive fields including identity document references and payment method identifiers;
• Automated fraud detection systems that flag unusual login patterns, IP changes, and abnormal transaction sequences in real time.

Despite these measures, no internet transmission or digital storage system is completely immune to security risks. In the unlikely event of a data breach that poses a material risk to your rights, ec99 will notify affected players as promptly as reasonably possible and will take immediate steps to contain and remediate the breach.

Your Role in Keeping Your Account Secure

You are responsible for keeping your ec99 login credentials confidential. You should use a strong, unique password and enable two-factor authentication. You must not share your account access with any third party. If you believe your account has been compromised, contact support immediately at [email protected] so that we can take protective action, including temporary account suspension, as quickly as possible.

8 Policy Updates & Contact

ec99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify you by sending an email to your registered address at least seven (7) days before the updated policy takes effect. The effective date at the top of this document will be updated with each revision.

Your continued use of the ec99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes to this policy, you must cease using the ec99 Services and may request account closure as described in our Terms & Conditions.

Minor Amendments

For minor, non-material updates — such as corrections to typographical errors or clarifications that do not change the substance of our data practices — we reserve the right to make changes without prior individual notification. The current version of this policy is always available on the ec99 website.

Contact Our Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how ec99 handles your personal data, please contact us using the details below. We aim to respond to all privacy-related enquiries within five (5) working days.