ek2286 Privacy Policy

ek2286 is the data controller responsible for the personal data processed through the Platform at ek2286.app. As data controller, ek2286 determines the purposes and means by which your personal data is processed. All data rights requests, privacy enquiries, and complaints relating to data processing should be directed to our Privacy team at [email protected].

We collect personal data in the following categories when you use ek2286:

• Identity data: Full legal name, date of birth, gender, and government-issued identification numbers (National ID Card, Passport number, or Driving Licence number).
• Contact data: Email address, mobile phone number, and residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other).
• Account data: Username, encrypted password hash, account preferences, and communication preferences.
• Financial data: Payment method type (bKash, Nagad, Rocket, Upay, bank account, Visa, Mastercard), transaction reference numbers, deposit and withdrawal amounts in Bangladeshi Taka (৳), and payment timestamps.
• KYC verification data: Copies of identity documents, proof of address documents, and proof of payment method ownership submitted during account verification.
• Gaming activity data: Game session logs, bet placement history, win/loss records, and bonus usage history.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and session duration.
• Communications data: Records of any correspondence you send to our support team, including the content of emails and live chat transcripts.
• Responsible gaming data: Any deposit limits, self-exclusion requests, cooling-off periods, or session reminders you set on your account.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless directly relevant to a responsible gaming assessment or a legal obligation.

Personal data is collected through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you visit the Platform, including via cookies, server logs, and similar tracking technologies.
• Third-party collection: Identity and payment verification data received from payment processors (bKash, Nagad, Rocket, Upay, banks) and KYC verification service providers when processing your transactions or verifying your identity.
• Publicly available sources: In limited circumstances, we may supplement your profile with data from publicly available sources for compliance purposes, such as checking against sanctions or politically exposed persons (PEP) lists.

ek2286 processes your personal data only where a lawful basis exists. The primary bases and corresponding purposes are as follows:

• Contract performance: To operate your account, process deposits and withdrawals, settle bets and game results, and deliver the gaming services you have requested.
• Legal obligation: To conduct identity verification (KYC), screen against sanctions and PEP lists, maintain transaction records for compliance purposes, and respond to lawful requests from authorities.
• Legitimate interests: To detect and prevent fraud, money laundering, and bonus abuse; to secure the Platform against unauthorised access; to analyse gaming patterns for responsible gaming purposes; and to improve Platform functionality.
• Consent: To send you promotional emails, SMS notifications, or in-platform messages about bonuses, game launches, and seasonal offers. You may withdraw this consent at any time by contacting [email protected].

ek2286 uses cookies and similar tracking technologies to operate the Platform and improve your experience. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These enable you to log in, maintain your session, and use core features. These cannot be disabled without breaking Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform, which games are most popular, and where technical issues arise. This data is aggregated and anonymised where possible.
• Preference cookies: Store your account settings and interface preferences so they persist between sessions.
• Security cookies: Used to detect and prevent fraudulent activity, including automated bot traffic and account takeover attempts.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using ek2286, but may affect personalisation features. Strictly necessary cookies cannot be disabled via browser settings as they are essential to Platform security and session management.

ek2286 does not sell your personal data to third parties. We share data only in the following limited circumstances and only to the extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers receive copies of identity and address documents to complete verification checks on our behalf.
• Fraud prevention and security services: Aggregated or anonymised technical data may be shared with fraud detection partners to protect the Platform and its players.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to operate their games within the Platform.
• Legal and regulatory authorities: Where required by applicable law or a valid legal process, we may disclose personal data to government bodies, law enforcement agencies, or regulators.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on our behalf are bound by contractual data processing agreements that require them to process data only on our instructions and in compliance with applicable data protection standards.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with any applicable legal retention obligations. The general retention principles we apply are:

• Active account data: Retained for the duration of your account registration plus a minimum period of five (5) years after account closure to meet anti-money laundering and compliance record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years after account closure or the conclusion of any related compliance matter, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, to allow resolution of any disputes or follow-up enquiries.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after consent is withdrawn, to demonstrate compliance with marketing regulations.
• Analytics and technical data: Retained in anonymised or aggregated form for up to two (2) years for Platform improvement purposes.

Once a retention period expires, data is securely deleted from live systems and any backup copies are destroyed or irreversibly anonymised within a reasonable subsequent timeframe.

ek2286 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including financial data and KYC documents.
• Role-based access controls ensuring that only authorised ek2286 personnel can access personal data, and only to the extent required for their specific role.
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure.
• Secure password hashing — ek2286 never stores plaintext passwords and will never ask you to provide your password via email or support chat.
• Activity logging and anomaly detection to identify and respond to suspicious access patterns or potential data breaches in real time.

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your account has been compromised, you should change your password immediately and contact us at [email protected].

ek2286 primarily processes and stores data on servers serving the Bangladesh market. Where data is transferred to or processed by service providers located outside Bangladesh, ek2286 takes reasonable steps to ensure that an equivalent level of data protection applies, including through contractual data processing agreements that incorporate appropriate safeguards. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside your country of residence.

The ek2286 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has provided personal data to ek2286, please contact us immediately at [email protected]. We will take prompt steps to verify the report and, if confirmed, delete the relevant data and close the account. ek2286 cooperates fully with any lawful request related to the protection of minors.

With your consent, ek2286 may send you promotional communications by email or SMS. These may include information about new games, seasonal promotions tied to events such as Eid, Pohela Boishakh (Bengali New Year), BPL cricket season, or IPL, deposit bonus offers, and Platform updates.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any promotional email.
• Updating your communication preferences in your account settings.
• Sending a written opt-out request to [email protected].

Please allow up to five (5) business days for opt-out requests to take effect across all communication channels. Opting out of marketing communications does not affect transactional messages such as deposit confirmations, withdrawal notifications, or security alerts, which are sent regardless of marketing preferences.

ek2286 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When a material change is made, we will notify registered players via email or an in-platform notice prior to the change taking effect, and update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.