ek22 Privacy Policy

1 Who We Are

ek22 is an online betting and casino platform operated under the brand name ek22, accessible at ek22.io. For the purposes of this Privacy Policy, ek22 is the data controller responsible for the personal information collected from players registered on the platform.

ek22 is dedicated to serving adult players in Bangladesh and operates in compliance with applicable data protection standards. If you have any questions about how your data is handled, you may contact our data team directly at [email protected] at any time.

This Privacy Policy applies to all interactions with the ek22 platform, including account registration, deposits and withdrawals, gameplay activity, customer support communications, and any promotional participation.

2 Data We Collect

ek22 collects personal data in two primary ways: information you provide directly, and information we collect automatically as you use the platform. The specific data collected is set out in the table below.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

ek22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required for regulatory compliance purposes and with your explicit consent.

3 How We Use Your Data

ek22 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your player account, including authenticating your identity at login and processing account closure requests.
• Payment Processing: To facilitate deposits and withdrawals through supported payment methods including bKash, Nagad, Rocket, and Upay, and to maintain transaction records for compliance purposes.
• Identity Verification (KYC): To verify that you meet the age requirement of 21 years or above, confirm your identity, and fulfil our obligations under applicable anti-money laundering standards.
• Service Delivery: To provide access to our betting markets, live casino tables, slot games, and all other platform features, and to personalise your experience based on your stated preferences and gameplay history.
• Customer Support: To respond to your enquiries, handle complaints, process responsible gaming requests, and maintain records of support interactions for quality assurance purposes.
• Security and Fraud Prevention: To detect and investigate suspicious activity, prevent fraud and collusion, protect the integrity of our platform, and comply with law enforcement requests where legally required.
• Responsible Gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour, enforce deposit limits and self-exclusion requests, and proactively reach out to players who may need support.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform news via email or in-platform messages, where you have not opted out of such communications. You may unsubscribe at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated usage data, improve platform performance, fix technical issues, and develop new features based on player behaviour patterns.
• Legal Compliance: To fulfil record-keeping obligations, respond to regulatory enquiries, and comply with any applicable laws or lawful orders from competent authorities.

ek22 will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.

4 Legal Basis for Processing

ek22 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the ek22 Terms and Conditions — including account creation, payment processing, and gameplay delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, anti-money laundering record-keeping, and fraud reporting obligations.
• Legitimate Interests: Processing that serves ek22's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — particularly for non-essential marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before that withdrawal.

5 Data Sharing & Third Parties

ek22 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with the following categories of third parties solely for the purpose of delivering our services to you:

• Payment Processors: bKash, Nagad, Rocket, Upay, and other supported payment providers receive the minimum data necessary to process your deposit and withdrawal transactions securely.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming receive session tokens and player identifiers necessary to deliver their game content within the ek22 platform. These providers operate under their own privacy standards and data processing agreements.
• Identity Verification Services: KYC providers that assist ek22 in verifying player identity and age in compliance with applicable regulations.
• Analytics Providers: Aggregated, anonymised platform usage data may be processed by analytics partners to help ek22 understand platform performance. No personally identifiable information is shared with analytics providers in an identifiable form.
• Legal and Regulatory Authorities: ek22 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, a court order, or to protect the rights and safety of ek22, its employees, or other players.

All third parties who process personal data on ek22's behalf are required to do so under written data processing agreements that obligate them to handle your data securely, use it only for the specified purpose, and not to share it further without ek22's written authorisation.

6 Data Retention

ek22 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal retention obligations. The following retention periods apply:

• Account Data (active accounts): Retained for the full duration of your account's active period, plus a minimum of five (5) years following voluntary or involuntary account closure, to satisfy anti-money laundering and financial crime record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, in line with applicable compliance standards.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the last support interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, and for a further one (1) year thereafter as a record of the opted-out state.
• Technical Logs and IP Records: Retained for ninety (90) days unless flagged as part of a security or fraud investigation, in which case they are retained for the duration of that investigation plus two (2) years.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where anonymisation is used, the resulting aggregated data may be retained indefinitely for statistical purposes.

7 Cookies & Tracking Technologies

ek22 uses cookies and similar browser-based technologies to operate the platform, maintain your session state, remember your preferences, and understand how players use the site. The following types of cookies are used on ek22.io:

To decline non-essential cookies, you can adjust your browser settings to block or delete cookies at any time. Please note that disabling functional or analytics cookies may affect certain aspects of your experience on the platform but will not prevent you from accessing core services.

ek22 does not use third-party advertising cookies or retargeting pixels. No data from your ek22 browsing activity is shared with advertising networks for the purpose of showing you adverts on other websites.

8 Data Security

ek22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and ek22 servers is encrypted using 256-bit SSL/TLS protocols. This applies to all platform pages, login processes, and payment flows.
• At-Rest Encryption: Sensitive data stored in our databases — including identity document references and payment method identifiers — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ek22 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need are granted access to player data, and all access events are logged and audited.
• Two-Factor Authentication: Internal ek22 systems that store or process player data require multi-factor authentication for all staff access.
• Regular Security Audits: ek22 conducts periodic internal and third-party security assessments to identify and remediate potential vulnerabilities in its platform and infrastructure.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected players, ek22 will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach.

While ek22 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security against all forms of threat. You play an important role in keeping your account secure by choosing a strong password, not sharing your credentials, and notifying us promptly if you detect any unauthorised activity on your account.

9 Your Rights Over Your Data

As a player on the ek22 platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data ek22 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that ek22 may be required to retain certain data for legal compliance reasons even where a deletion request is made.
• Right to Restriction of Processing: You may request that ek22 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of ek22's legitimate interests, and to opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

ek22 will not charge a fee for handling rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. Identity verification may be required before a request is processed to ensure that data is not disclosed to unauthorised parties.

10 Children & Minors

The ek22 platform is strictly intended for use by adults aged 21 years and above. ek22 does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification checks are conducted as part of the account registration and KYC process to enforce this requirement.

If ek22 becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, that data will be deleted immediately and the associated account will be permanently closed. All deposits made during that period will be reviewed in accordance with our responsible gaming and compliance procedures.

If you are a parent or guardian and believe that a minor may have registered an account on ek22, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly to investigate and resolve any such report.

11 International Data Transfers

ek22's platform and its primary data processing infrastructure are operated to serve players in Bangladesh and other supported regions. In the course of delivering our services, your personal data may be transferred to or processed by systems located outside Bangladesh — for example, where a game content provider such as Pragmatic Play or Evolution Gaming operates servers in a different jurisdiction.

Where personal data is transferred internationally, ek22 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy. These safeguards may include:

• Standard contractual clauses incorporated into data processing agreements with third-party service providers.
• Transfers to service providers that operate under recognised data protection certifications or frameworks.
• Anonymisation or pseudonymisation of data prior to transfer where the receiving party does not require personally identifiable information.

If you have questions about the specific safeguards applied to any international transfer of your data, please contact us at [email protected].

12 Updates to This Privacy Policy

ek22 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, the revised policy will be published on this page with an updated effective date, and active account holders will be notified via email or an in-platform message where practicable.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the ek22 platform after the publication of a revised policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you may request account closure in accordance with Section 12 of the ek22 Terms and Conditions.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ek22 handles your personal data, please contact our data team using the details below. All privacy-related correspondence is treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Complaint"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year (BST, UTC+6)
• Response Time: Within 30 days for formal data rights requests; within 4 hours for general privacy enquiries

ek22 is committed to resolving all privacy-related complaints fairly and transparently. If you submit a formal complaint and are not satisfied with our response, you may escalate the matter by requesting a senior compliance review. ek22 will acknowledge all escalated complaints within 5 business days and provide a final written response within 30 days.

We take the privacy and security of every player's data seriously. At ek22, protecting your information is not a legal formality — it is a core part of building a platform that players in Bangladesh can trust for the long term.