Your Privacy & Data Rights

Data We Collect

ek9996 collects personal data only to the extent necessary to operate the Platform, comply with legal obligations, prevent fraud, and deliver a high-quality gaming experience to members across Bangladesh. We collect information in three ways: directly from you when you register or interact with the Platform, automatically as you use the Platform, and from trusted third-party service providers involved in payment processing and identity verification.

The categories of personal data we may collect are summarised in the table below. The legal basis for processing each category is also indicated to ensure full transparency about why we hold this information.

We do not collect special category data such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for age verification purposes. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has provided us with data, we will delete it immediately and suspend the associated account.

How We Use Your Data

ek9996 processes your personal data for defined, legitimate purposes only. We do not use your data for any purpose that is incompatible with the original reason it was collected. The primary purposes for which we process member data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your wallet balance in BDT (৳), and provide access to the full range of ek9996 services including sports betting, live casino, slots, arcade, and esports.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Transaction data is retained as required by financial regulations.
• Identity and age verification (KYC): To comply with our legal obligations to prevent underage gambling and financial crime. KYC checks are mandatory before withdrawals can be processed. All members must be 18 years of age or older.
• Fraud prevention and security: To monitor transactions and account activity for signs of fraud, money laundering, collusion, bonus abuse, and other prohibited conduct. Technical data such as IP addresses and device fingerprints are used as part of this monitoring.
• Customer support: To respond to your enquiries, resolve disputes, process account closure requests, and provide assistance with responsible gaming tools including self-exclusion and deposit limits.
• Personalisation: To tailor the ek9996 experience to your preferences, including displaying relevant promotions, recommending game categories, and adjusting content based on your betting history — where you have not opted out of such personalisation.
• Marketing communications: To send promotional emails, SMS notifications, and in-platform messages about bonuses, new games, cricket tournaments (BPL, T20, IPL), and seasonal campaigns — only where you have provided explicit consent. You may withdraw consent at any time via your account settings.
• Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions and other policies.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, conduct A/B testing, and improve the overall quality, performance, and usability of the ek9996 Platform.

Data Sharing & Disclosure

ek9996 does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only where it is necessary to deliver the Platform's services, meet legal obligations, or protect the security of our members and operations. All third-party data processors are contractually required to maintain strict data security standards and may only process your data for the specific purposes we authorise.

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to authorise and process your financial transactions. These providers maintain their own data protection obligations under applicable Bangladeshi financial regulations.
• Identity verification providers: Third-party KYC and AML screening services receive identity document data to assist in verifying member age and identity and screening against financial crime watchlists. These providers are bound by strict data processing agreements.
• Game software providers: Game studios and content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to deliver and audit their games. No personally identifiable data beyond a session token is shared with game providers.
• IT infrastructure and cloud services: Hosting providers, content delivery networks, and cybersecurity vendors who process technical and usage data as part of operating the Platform's infrastructure. These providers are bound by data processing agreements and may not use your data for their own purposes.
• Legal and regulatory authorities: Where required by applicable law, court order, or a formal request from a competent regulatory or law enforcement authority in Bangladesh or an internationally recognised jurisdiction, ek9996 may disclose member data. We will notify the affected member where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ek9996's assets, member data may be transferred to the successor entity. Members will be notified of any such transfer and of any changes to how their data is processed.

Under no circumstances do we share your data with advertising networks, data brokers, social media platforms, or any commercial third party for their independent marketing or profiling purposes. Any such use would require your separate, explicit consent.

Data Retention

ek9996 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. Retention periods vary by data category as described below.

When personal data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes. Where a legal hold is in place — for example, in connection with ongoing litigation or a regulatory investigation — data is retained until the hold is lifted, regardless of the standard retention period.

Cookies & Tracking

ek9996 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively, maintain your session, prevent fraud, and understand how members interact with the site. Cookies are small text files stored on your device by your web browser. They do not contain executable code and cannot carry viruses.

The following categories of cookies are used on the ek9996 Platform:

You may manage your cookie preferences at any time through your browser's cookie settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Functional and optional cookies can be disabled without affecting your ability to place bets or manage your account, though some personalised features may not function as expected.

Data Security

The security of your personal data is a technical and operational priority at ek9996. We employ a layered defence approach combining encryption, access controls, monitoring, and staff training to protect member data against unauthorised access, loss, destruction, or disclosure. The following technical and organisational security measures are in place:

• Transport encryption: All communications between your device and the ek9996 Platform are encrypted using TLS 1.3. Our SSL certificate is maintained by a trusted certificate authority. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Password security: Member passwords are hashed using a strong, salted cryptographic algorithm (bcrypt). Passwords are never stored in plain text and are never transmitted outside the authentication system. Our support team cannot retrieve your password — only reset it via a verified OTP process.
• Two-factor authentication (2FA): OTP-based two-factor authentication is available and strongly recommended for all ek9996 accounts. Critical account actions including withdrawals and password changes trigger OTP verification by default.
• Payment data tokenisation: Sensitive financial data including bKash wallet numbers, Nagad account details, and card numbers (where applicable) are tokenised before storage. Raw payment credentials are never retained in our database.
• Access controls: Internal access to member data is restricted on a strict need-to-know basis. All staff with access to production systems undergo background checks and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.
• Infrastructure security: The Platform's servers are hosted in access-controlled data centres with physical security measures. Regular penetration testing and vulnerability scanning are conducted by qualified security professionals.
• Incident response: ek9996 maintains a documented data breach response procedure. In the event of a confirmed breach affecting member data, affected members will be notified within 72 hours of ek9996 becoming aware of the breach, along with details of what data was involved and the remediation steps taken.

While ek9996 takes all reasonable and industry-standard precautions, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect unauthorised access to your account.

Your Data Rights

As an ek9996 member, you hold a set of rights with respect to the personal data we hold about you. ek9996 is committed to honouring these rights promptly and without undue restriction. To exercise any of the rights below, please contact our Data Protection Officer via the details in the Contact & DPO section of this policy.

• Right of access: You may request a copy of all personal data ek9996 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Most contact and preference data can be updated directly via your account settings panel without needing to contact support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that data subject to mandatory legal retention periods (such as financial transaction records) cannot be deleted before those periods expire.
• Right to restrict processing: You may request that we limit the processing of your data — for example, while a dispute about its accuracy is being resolved. During restriction, we may store the data but not process it for other purposes.
• Right to data portability: You may request a machine-readable export of data you have provided to us directly (such as profile data and transaction history) so that you may transfer it to another service provider.
• Right to object: You may object at any time to the processing of your data for direct marketing purposes, including profiling for marketing. You may also object to processing based on legitimate interests; we will then assess whether our interests override your rights in that specific context.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, personalisation cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

ek9996 will respond to all data rights requests within 30 calendar days of receipt and verification of identity. In complex cases, this period may be extended by a further 30 days, with notification provided to you explaining the reason for the extension. We do not charge a fee for exercising data rights under normal circumstances.

Contact & DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ek9996 handles your personal data, please contact our Data Protection Officer (DPO) or the general support team using the details below. All privacy-related communications must be made in English or will be acknowledged in English.

• Data Protection Officer (DPO): ek9996 has designated a Data Protection Officer responsible for overseeing compliance with this Privacy Policy. The DPO can be reached at the email address below and will respond to formal data rights requests within the statutory timeframes.
• Email contact (plain text — not a link): [email protected]. Please include "Privacy Request" or "Data Rights" in the subject line of your email to ensure your message is routed to the DPO team immediately.
• Live chat: For general privacy questions that do not require formal documentation, ek9996's 24/7 live chat support is available inside your account dashboard. Live chat agents can escalate privacy concerns to the DPO team on your behalf.
• Response times: Live chat privacy questions are addressed within 2 minutes during all hours (BST, UTC+6). Formal written data rights requests are acknowledged within 5 business days and fully resolved within 30 calendar days.
• Policy updates: When this Privacy Policy is materially updated, we will notify all registered members via their registered email address and display a prominent notice on the Platform homepage. The "Last Updated" date at the top of this document reflects the most recent revision.

ek9996 is committed to resolving all privacy-related concerns directly and transparently with our members. We take every data rights request seriously and treat privacy compliance as a fundamental aspect of maintaining the trust of our Bangladeshi player community.