ec999 Privacy Policy — How We Protect Your Data

1. Data We Collect

1.1 Registration Data

1.1.1 When you create an ec999 account, we collect the following information as part of the registration process: your full legal name, date of birth, residential address in Bangladesh, a valid email address, a mobile phone number capable of receiving SMS verification messages, and the username and password you choose for your account.

1.1.2 This registration data is required to create and administer your account, verify your identity and age eligibility, and deliver the core betting and casino services offered by ec999. Without this data, we are unable to open an account for you.

1.2 Identity Verification (KYC) Data

1.2.1 As part of our Know Your Customer (KYC) obligations, ec999 may request copies of government-issued identity documents (such as a National Identity Card or passport), proof of residential address (such as a recent utility bill or bank statement), and proof of the payment method used for deposits (such as a screenshot of your bKash or Nagad account showing your registered name).

1.2.2 KYC documents are stored securely, used solely for identity and age verification purposes, and are never shared with third parties except where required by law or by the specific payment processor involved in verifying a withdrawal.

1.3 Transaction Data

1.3.1 ec999 records all financial transactions associated with your account, including deposits, withdrawals, bonus credits, bonus deductions, and any adjustments made by the platform following investigation or dispute resolution. Transaction records include the amount in Bangladeshi Taka (৳), the payment method used, the date and time of the transaction (in Bangladesh Standard Time, UTC+6), and the transaction status.

1.3.2 Full payment credentials (such as full bKash wallet numbers, full bank account numbers, or full card numbers) are never stored on ec999 servers. Only tokenised or partially masked references are retained for transaction identification purposes.

1.4 Betting & Gaming Activity Data

ec999 records a complete history of your betting and gaming activity, including sports bets placed (market, selection, stake, odds, outcome), casino game sessions (game title, provider, session duration, stake, outcome), slot spins, crash game rounds, and any other wagering activity conducted through the platform. This data is used to calculate account balances, resolve disputes, identify problem gambling patterns, and fulfil regulatory record-keeping obligations.

1.5 Technical & Device Data

1.5.1 When you access ec999, our systems automatically collect certain technical data about your device and connection, including: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone setting, and the pages of the ec999 platform you visit along with the time and duration of each visit.

1.5.2 This technical data is used for platform security (including fraud detection and multi-account identification), service improvement, and to ensure that the platform displays correctly on your device. IP address data may be used to identify geographic location at a regional level for regulatory compliance purposes.

1.6 Communications Data

If you contact ec999 via live chat, email, or any other support channel, we retain a record of that communication, including the date, the content of the message, and the outcome or resolution. This data is used to provide consistent customer support, train support staff, and maintain a record of any formal complaints or dispute submissions.

2. How We Use Your Data

ec999 uses the personal data described in Section 1 for the following purposes, each of which rests on a specific legal basis:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Performance of contract
Age and identity verification (KYC)	Registration data, KYC documents	Legal obligation
Processing deposits and withdrawals	Transaction data, KYC documents	Performance of contract
Fraud prevention and security monitoring	Device data, transaction data, betting activity	Legitimate interests
Responsible gaming monitoring	Betting activity, session data	Legal obligation / legitimate interests
Customer support and dispute resolution	Communications data, transaction data	Performance of contract
Promotional communications (opt-in only)	Registration data (email, phone)	Consent
Platform analytics and improvement	Device data, anonymised usage data	Legitimate interests

2.1 Marketing Communications: ec999 will only send promotional emails or SMS messages to players who have explicitly opted in to receive marketing communications during registration or via the communication preferences section of their Account Settings. You may withdraw consent and opt out of marketing communications at any time by updating your preferences in Account Settings or by contacting the support team.

2.2 ec999 does not use automated decision-making or profiling in a way that produces significant legal or similarly significant effects on individual players, except where such processing is required for fraud prevention or regulatory compliance purposes.

3. Data Sharing & Third Parties

3.1 Payment Processors

To process deposits and withdrawals, ec999 shares the minimum necessary transaction data with the relevant payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These processors receive only the data required to authenticate and complete the specific transaction. ec999 does not share your betting history, KYC documents, or account preferences with payment processors.

3.2 Game Providers

To deliver casino games and slots, ec999 integrates with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive an anonymised or pseudonymised player session identifier to facilitate game loading and outcome recording. They do not receive your full name, contact details, or financial data.

3.3 Legal and Regulatory Disclosure

3.3.1 ec999 may be required by law or by a lawful order from a competent authority to disclose personal data relating to specific player accounts. In such cases, ec999 will disclose only the data that is strictly required to satisfy the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

3.3.2 ec999 will never voluntarily disclose personal data to law enforcement or government agencies beyond what is legally mandated. ec999 does not participate in mass surveillance programmes.

3.4 Service Providers

ec999 engages a small number of trusted technology service providers to support platform operations, including cloud hosting infrastructure, security monitoring services, and customer support software. These providers process data only on ec999's documented instructions, are contractually prohibited from using the data for their own purposes, and are required to maintain appropriate security standards. All service providers engaged by ec999 are reviewed periodically for compliance.

3.5 No Data Sales

ec999 does not sell, rent, lease, or otherwise commercially transfer personal data to any third party for advertising, profiling, or any other commercial purpose. This commitment applies permanently and is not subject to revision without explicit player notification and consent.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. The ec999 platform uses cookies and similar tracking technologies (including local storage and session tokens) to maintain your login session, remember your preferences, and gather anonymised usage analytics that help us improve the platform experience.

4.2 Types of Cookies Used by ec999

• Strictly Necessary Cookies: These cookies are essential for the ec999 platform to function. They maintain your login session, ensure security tokens remain valid, and prevent cross-site request forgery. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: These cookies remember your preferences such as your selected language, preferred sports markets, and display settings. Disabling functional cookies will not prevent you from using ec999 but may result in a less personalised experience.
• Analytics Cookies: ec999 uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most, where users tend to exit, and how long sessions typically last. This data is aggregated and never linked back to individual player identities.
• Security Cookies: These cookies support ec999's fraud detection systems by helping identify unusual access patterns, login attempts from unrecognised devices, or session behaviour inconsistent with normal play. They are an important layer of account protection.

4.3 Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your ec999 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. ec999 does not respond to "Do Not Track" browser signals at this time, as there is no universally accepted standard for how such signals should be interpreted.

5. Data Security

5.1 ec999 implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ec999 platform.
• Encryption at rest for all personal data stored in ec999 databases, using industry-standard encryption algorithms.
• Multi-factor authentication (MFA) options available to all players via Account Settings.
• Regular automated and manual penetration testing of the ec999 platform by qualified security professionals.
• Role-based access controls ensuring that only authorised ec999 staff — and only those with a legitimate operational need — can access player personal data.
• Continuous security monitoring with automated alerting for anomalous access patterns or potential data breach indicators.

5.2 In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, ec999 will notify affected players without undue delay and will take immediate remediation steps to contain the breach and secure the affected data.

5.3 While ec999 takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their ec999 accounts and to enable MFA where available.

6. Data Retention

6.1 ec999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general framework:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal obligation, anti-money laundering compliance
KYC verification documents	Duration of account + 5 years post-closure	Regulatory compliance, fraud prevention
Transaction records	7 years from transaction date	Financial record-keeping obligations
Betting & gaming history	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming monitoring
Customer support communications	3 years from last interaction	Quality assurance, complaint handling
Analytics data (anonymised)	Up to 26 months on a rolling basis	Platform improvement (no personal identifiers retained)

6.2 When a retention period expires, personal data is securely deleted or irreversibly anonymised. ec999 conducts periodic data audits to ensure that data is not retained beyond its applicable retention period.

6.3 Requests for early deletion (see Section 7 — Your Privacy Rights) will be evaluated against the legal retention obligations described above. Where a legal obligation requires retention, ec999 will explain this clearly to the requesting player and will restrict active processing of the data in the meantime.

7. Your Privacy Rights

As an ec999 player, you hold the following rights in relation to your personal data. These rights may be exercised by contacting the ec999 support team via live chat or by emailing [email protected] with the subject line "Privacy Rights Request". ec999 will respond to all rights requests within 30 days of receipt.

7.1 ec999 will not charge a fee for handling privacy rights requests in ordinary circumstances. Where a request is manifestly unfounded, repetitive, or excessive, ec999 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation provided to the requesting player.

7.2 ec999 may need to verify your identity before processing a privacy rights request to ensure that personal data is not disclosed to an unauthorised party. You may be asked to provide a copy of your registered ID or confirm your identity via your registered email address.

8. Contact & Complaints

8.1 Privacy Enquiries

If you have any question about this Privacy Policy, about the data ec999 holds about you, or about how to exercise your privacy rights, please contact the ec999 support team through any of the following channels:

• Live Chat: Available 24/7 directly on the ec999 platform — the fastest channel for privacy queries.
• Email: [email protected] — use the subject line "Privacy Enquiry" for faster routing.
• WhatsApp: +880 1700 000 000 — available during standard Bangladesh business hours (BST, UTC+6).

8.2 Formal Complaints

If you believe that ec999 has handled your personal data in a manner that violates this Privacy Policy or applicable data protection law, you have the right to submit a formal written complaint. Formal complaints should be submitted via email to [email protected] with the subject line "Formal Privacy Complaint". ec999 will acknowledge your complaint within 5 business days and provide a substantive written response within 30 calendar days.

8.3 Policy Updates

ec999 reviews this Privacy Policy periodically and will update it when changes to our data practices, platform features, or applicable legal requirements make an update necessary. When material changes are made, registered players will be notified via the email address associated with their account at least 7 days before the updated policy takes effect. The current version of the Privacy Policy is always available at ec999.bet/privacy-policy, with the effective date displayed at the top of the page.