e2bit Privacy Policy

1. Introduction

e2bit ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or register on the e2bit platform ("Platform"). This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the circumstances under which we may share it, the security measures we apply, and the rights available to you as a data subject. This Policy applies to all users of e2bit, including visitors who browse the Platform without registering and Players who hold a registered account.

By accessing the e2bit Platform, registering an account, or using any of its services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you should cease using the Platform immediately and contact us to request account closure.

2. Personal Data We Collect

e2bit collects personal data through several channels: data you provide directly during registration and account management, data generated automatically when you use the Platform, and data received from payment processing partners when you make a deposit or withdrawal. The categories of personal data we collect include:

• Identity data: full name, date of birth, gender, and copies of government-issued identity documents (National ID, passport) provided during KYC verification.
• Contact data: mobile phone number, email address, and residential address (district, city — e.g., Dhaka, Chittagong, Sylhet, Khulna) provided during registration or account updates.
• Financial data: bKash account number, Nagad account number, Rocket number, bank account details (where applicable), transaction reference numbers, deposit and withdrawal amounts, and account balance history.
• Gameplay data: game session records, betting history, wagering amounts, game outcomes, bonus redemptions, and any self-exclusion or deposit limit settings you have applied.
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, clickstream data, and approximate geolocation derived from IP.
• Communications data: the content of any messages you send to e2bit support via email or live chat, including complaint records and dispute correspondence.

3. How We Use Your Personal Data

e2bit processes your personal data only for the purposes set out below. We do not process your data for any purpose that is incompatible with the purposes described, and we do not use your data for automated decision-making that produces legal or similarly significant effects without human review. The purposes for which we process your data are:

• Account management: to create, verify, maintain, and secure your e2bit account, including processing login authentication, conducting KYC verification, and responding to account recovery requests.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer methods, to reconcile transaction records, and to investigate disputed transactions.
• Legal and regulatory compliance: to meet our obligations under applicable anti-money-laundering rules, to conduct sanctions screening, to respond to lawful requests from competent authorities, and to maintain records required by law.
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour, to apply self-exclusion and deposit limit settings you have activated, and to contact you with responsible gaming information where warranted.
• Platform improvement: to analyse aggregated, anonymised gameplay and navigation data to improve the Platform's features, fix bugs, optimise performance, and develop new products that serve e2bit's Bangladesh user base.
• Marketing communications: to send you promotional offers, bonus notifications, and news about new games or tournaments (such as BPL season promotions) where you have opted in to receive marketing. You may withdraw consent to marketing at any time by contacting [email protected].

4. Legal Basis for Processing

e2bit processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing your identity, contact, financial, and gameplay data is necessary to perform our contract with you — namely, to provide you with access to the e2bit Platform, to process your deposits and withdrawals, and to credit bonuses to your account.
• Legal obligation: processing identity and financial data for KYC, AML (anti-money-laundering), and sanctions screening is required by applicable law. We cannot waive this processing even if you request it.
• Legitimate interests: processing technical and gameplay data to improve platform security, detect fraud and bonus abuse, and develop new features serves our legitimate business interests and the broader interests of our honest user base. We have balanced these interests against your privacy rights and consider this processing proportionate.
• Consent: processing your data for direct marketing communications (bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, or Bangladesh Tiger cricket campaigns) is based on your consent, which you may withdraw at any time.

5. Sharing Your Personal Data

e2bit does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the relevant purpose:

• Payment service providers: we share the minimum necessary financial data with bKash, Nagad, Rocket, and Upay solely to process your deposits and withdrawals. These providers are contractually required to handle your data securely and use it only for payment processing.
• Game technology providers: providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive session identifiers necessary to deliver game content to your device. These providers do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: we may disclose personal data to competent authorities where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted.
• Fraud prevention and security services: we may share technical data (IP addresses, device fingerprints) with fraud detection service providers to identify and block fraudulent account activity, bonus abuse, or money-laundering attempts.

All third parties with whom e2bit shares personal data are subject to contractual data processing obligations that require them to maintain appropriate technical and organisational security measures and to process your data only for the purposes specified in our agreement with them. e2bit remains responsible for ensuring that these obligations are honoured.

6. Cookies and Tracking Technologies

e2bit uses cookies and similar tracking technologies to operate certain Platform features, remember your session preferences, and collect anonymised analytics data. We use three categories of cookies:

• Strictly necessary cookies: these are essential for the Platform to function. They maintain your login session, remember your language preference, and enable secure payment flows. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: these collect anonymised data about how users navigate the Platform — which pages are visited most, how long sessions last, and where users exit. This data helps us improve the Platform's usability and content. You may opt out of analytics cookies through your browser settings.
• Functional cookies: these remember optional preferences you have set, such as display settings. They are not strictly necessary but improve your experience. Disabling them will not affect core Platform functionality.

You can manage or delete cookies at any time through your mobile browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in or completing transactions on e2bit. For guidance on managing cookies in popular mobile browsers used in Bangladesh, refer to your browser's help documentation.

7. Data Retention

e2bit retains your personal data for as long as your account remains active and for such further period as may be required by applicable law or necessary to resolve disputes, enforce agreements, or maintain fraud-prevention records. In practice, we apply the following retention periods: account and identity data is retained for a minimum of 5 years from the date of account closure, in line with standard AML record-keeping requirements; financial transaction records are retained for a minimum of 5 years from the date of each transaction; gameplay logs are retained for 3 years from the date of each session; and communications data (support tickets, dispute records) is retained for 3 years from closure of the relevant case.

When your personal data is no longer required for any of the purposes above and no legal retention obligation applies, e2bit will securely delete or anonymise it so that it can no longer be associated with your identity. You may request early deletion of certain data categories — subject to our legal retention obligations — by contacting [email protected].

8. Data Security

e2bit implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include: SSL/TLS encryption for all data in transit between your device and our servers; encryption at rest for sensitive data fields including identity document copies and financial account identifiers; access controls that restrict internal access to personal data on a strict need-to-know basis; regular security assessments and penetration testing of the Platform's infrastructure; and staff training on data protection and information security obligations.

While e2bit takes all reasonable steps to safeguard your data, no online platform can guarantee absolute security. If you become aware of any suspicious activity on your e2bit account — including unrecognised logins or unexpected transactions — you should contact our support team immediately at [email protected]. In the event of a personal data breach that is likely to result in a high risk to your rights, e2bit will notify affected users without undue delay.

9. Your Data Rights

As a data subject, you hold the following rights with respect to your personal data held by e2bit. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 days:

• ✔Right of access: you may request a copy of the personal data e2bit holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• ✔Right to rectification: you may request correction of any inaccurate or incomplete personal data we hold about you. Where technically feasible, we will update the data within 10 business days of your confirmed request.
• ✔Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the processing is unlawful. This right is subject to our legal retention obligations — data we are required by law to retain cannot be deleted on request.
• ✔Right to restriction: you may request that we restrict processing of your data while a rectification or erasure request is under review, or where you contest the lawfulness of our processing.
• ✔Right to data portability: for data you provided to us and which we process on the basis of consent or contractual necessity, you may request a copy in a structured, commonly used, machine-readable format.
• ✔Right to object: you may object at any time to processing of your personal data for direct marketing. You may also object to processing based on legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

10. Minors

The e2bit Platform is strictly intended for adults aged 21 and above. e2bit does not knowingly collect or process personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data from our systems immediately and close the associated account. If you believe that a minor has registered on e2bit, please notify us at [email protected] so that we can take prompt action.

11. Third-Party Links

The e2bit Platform does not contain links to external third-party websites. If for any reason a third-party link appears within the Platform and you navigate to an external site, please be aware that e2bit has no control over and accepts no responsibility for the content, privacy practices, or security of any third-party website. We encourage you to review the privacy policy of any third-party site you visit. This Privacy Policy applies exclusively to data processed by e2bit on the e2bit Platform.

12. Changes to This Privacy Policy

e2bit reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. When we make a material change to this Policy, we will update the "Last Updated" date at the top of this page and, where the change significantly affects your rights, notify you via your registered contact details. Your continued use of e2bit following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed of how we protect your data.

13. Contact and Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way e2bit handles your personal data, please contact our support team. We are committed to responding to all data-related queries in a clear and timely manner. All formal data rights requests must be submitted in writing and will be acknowledged within 5 business days, with a full response provided within 30 days.