ek555 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, or transmitted by ek555 (hereinafter referred to as "ek555", "we", "us", or "our") in connection with your access to and use of the ek555 online casino and sports betting platform, accessible at ek555.io (the "Platform"). References to "you", "your", or "the Member" refer to any individual who accesses, browses, registers on, or uses the Platform in any capacity.

ek555 acts as the data controller in respect of the personal data it collects about you through the Platform. As data controller, we are responsible for determining the purposes for which and the means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to process personal data only in accordance with our documented instructions and this Policy.

By registering an account with ek555, by depositing funds, or by otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the ek555 Platform. This Policy should be read alongside the ek555 Terms & Conditions, which are incorporated by reference.

ek555 is committed to handling your personal information with the highest standards of data security and confidentiality. Our data practices reflect our obligation to maintain a trustworthy, compliant, and secure environment for all members across Bangladesh, including those accessing the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and elsewhere.

2. Personal Data We Collect

ek555 collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include, but are not limited to, the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory 21+ age verification).
• Gender (optional, collected at registration).
• Nationality and country of residence.
• Residential address, including division, district, and postal code where applicable.
• Email address and mobile phone number.
• Username and hashed account credentials.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of residential address documents (utility bills, bank statements dated within 3 months).
• Selfie or live photograph taken during the identity verification process.
• Source of funds documentation where required under our compliance procedures.

2.3 Financial and Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers used for deposits and withdrawals.
• Visa or Mastercard details (card number, expiry date) where applicable — stored in tokenised form only.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference identifiers.
• Account balance information.

2.4 Gaming and Behavioural Data

• Game session logs, including games played, wager amounts, game outcomes, and session duration.
• Sports betting history, including markets selected, stake amounts, odds accepted, and settlement results.
• Bonus usage history, including bonuses claimed, wagering progress, and bonus expiry data.
• Responsible gaming settings you have configured, including deposit limits and self-exclusion status.

2.5 Technical and Device Data

• IP address and geolocation data derived from your IP address at the time of access.
• Device type, operating system, browser type and version, and screen resolution.
• Unique device identifiers where technically collected.
• Session timestamps, page views, navigation paths, and time spent on individual pages or game interfaces.
• Referral source data (how you arrived at the ek555 Platform).

2.6 Communications Data

• Records of live chat conversations between you and the ek555 support team.
• Email correspondence sent to or received from ek555's support address.
• Records of any formal complaints submitted, including content and resolution notes.
• Preference data related to marketing communications, including opt-in and opt-out records.

3. How We Collect Your Data

ek555 collects personal data through the following mechanisms:

• Direct submission: Data you provide when you complete the registration form, submit identity verification documents, make a deposit or withdrawal request, contact support, or update your account settings.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device information, browser fingerprint data, session logs, and cookie-derived behavioural data.
• Third-party verification providers: Data returned by KYC identity verification service providers when we submit your details for automated identity or age verification checks.
• Payment processors: Transactional confirmation data received from bKash, Nagad, Rocket, Upay, and card payment processors in connection with deposits and withdrawals on your account.
• Game providers: Game session result data and round-level transaction data provided by Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and other certified game studios integrated into the Platform.
• Fraud detection and compliance tools: Risk signals and device-level indicators returned by third-party fraud prevention or responsible gaming screening services that ek555 uses to protect its members and the integrity of the Platform.

4. How We Use Your Personal Data

ek555 uses the personal data we collect for specific, documented purposes only. The table below provides an overview of the primary purposes for which your data is used and the corresponding lawful basis for each type of processing activity.

ek555 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review step. Where any automated profiling is used for purposes such as responsible gaming risk assessment, you have the right to request human review of any decision that materially affects your account.

5. Legal Basis for Processing

ek555 processes your personal data only where a lawful basis for doing so exists. The lawful bases we rely on are as follows:

• Contract performance: Processing is necessary to provide the services you have requested when creating an ek555 account, including account management, game access, and payment processing.
• Legal obligation: Processing is required for ek555 to comply with applicable legal and regulatory obligations, including identity verification, anti-money laundering checks, and responsible gaming obligations.
• Legitimate interest: Processing serves a legitimate business interest of ek555 — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Where no other lawful basis applies, ek555 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw any consent-based processing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

ek555 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Identity verification providers: To fulfil our legal obligation to verify the age and identity of all account holders, we share registration and KYC data with licensed identity verification service providers. These providers process data solely on our behalf and under strict contractual data processing agreements.
• Payment processors: Financial data is shared with bKash, Nagad, Rocket, Upay, and card payment networks strictly to facilitate the processing of your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable payment industry data security standards.
• Game providers: To deliver game services, ek555 shares session-level data with integrated game studios such as Pragmatic Play, Evolution Gaming, Spribe, and others. This data is limited to what is technically required to operate the game session and record outcomes.
• Fraud prevention and compliance services: We may share technical and transactional data with third-party fraud prevention, risk management, and AML screening providers to protect the integrity of the Platform and its members.
• Legal and regulatory disclosure: ek555 may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required by applicable law, court order, or legal process. We will notify you of any such disclosure where we are legally permitted to do so.
• Business restructuring: In the event of a merger, acquisition, or sale of all or part of ek555's business assets, personal data held by ek555 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections remaining in place.

7. Data Retention

ek555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our internal compliance obligations. Our standard retention guidelines are as follows:

• Active account data: Retained throughout the period your account remains active and for a minimum of five (5) years following the closure of your account, in accordance with standard anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five (5) years following each transaction, in line with financial record-keeping obligations.
• Gaming and betting history: Retained for a minimum of three (3) years from the date each game session or bet is settled.
• Customer support records: Retained for a minimum of two (2) years from the date each support interaction is closed.
• Marketing preference data: Retained until you withdraw your consent, at which point your preference will be updated to reflect your opt-out and marketing communications will cease within five (5) business days.
• Technical and log data: Typically retained for up to twelve (12) months unless a specific security or compliance investigation requires longer retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction or re-identification.

8. Security Measures

ek555 implements a comprehensive and layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Transport encryption: All data transmitted between your browser or device and the ek555 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced site-wide with no unencrypted fallback permitted.
• Data-at-rest encryption: Sensitive personal data, including KYC documents and payment method identifiers, is encrypted at rest using AES-256 encryption within our database infrastructure.
• Access controls: Access to personal data within ek555's systems is restricted on a strict need-to-know basis. Employees and contractors are granted the minimum level of data access necessary to perform their assigned functions. All access is logged and audited.
• Password security: Account passwords are stored exclusively in hashed form using a strong, industry-standard hashing algorithm. ek555 staff cannot retrieve or view your password in plain text.
• Payment tokenisation: Card payment details are not stored in raw form on ek555 systems. Card data is tokenised by our payment processor, and only the token — not the underlying card number — is retained by ek555.
• Fraud and intrusion monitoring: ek555 operates continuous automated monitoring for suspicious access patterns, unusual transaction activity, and potential intrusion attempts. Alerts are reviewed by our security team around the clock.
• Regular security reviews: Our platform and infrastructure undergo periodic security assessments. Identified vulnerabilities are triaged and remediated in accordance with our internal security incident response procedures.

While ek555 takes all reasonable precautions to protect your data, no digital system is entirely immune from risk. You also have a responsibility to keep your account credentials secure and to notify ek555 immediately via live chat if you suspect that your account has been accessed without your authorisation.

9. Your Data Rights

As a data subject, you hold a number of rights with respect to the personal data that ek555 holds about you. These rights are described below. To exercise any of these rights, please contact our support team via live chat or by email at the address provided in Section 14 of this Policy.

ek555 will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is particularly complex or we have received a high volume of requests simultaneously, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and its reasons within the initial thirty-day window.