Your Privacy Matters at eck33

eck33 collects personal data through several means: information you actively provide during registration and account management; information generated automatically through your use of the platform; and information received from trusted third-party partners such as payment processors and identity verification providers. The categories of personal data we collect are described below.

Registration and account data:

• Full legal name
• Date of birth (used for age verification — you must be 18 or older)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Email address
• Bangladeshi mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, ৳ BDT)

Identity verification (KYC) data:

• Government-issued National Identity Card (NID), passport, or driving licence number and image
• Proof of address documents (utility bill, bank statement, or mobile financial service statement)
• Source of funds documentation where required by our due diligence process
• Facial image or selfie submitted for identity matching where requested

Financial transaction data:

• Deposit and withdrawal amounts in ৳ BDT
• Payment method identifiers (e.g., bKash wallet number, Nagad account reference, Rocket account reference, Upay reference, bank account details, card type and last four digits for Visa and Mastercard)
• Transaction timestamps and reference numbers
• Account balance history and wagering activity

Usage and behavioural data:

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Pages visited on the eck33 platform, session duration, click paths, and feature interactions
• Game sessions played, wagers placed, and outcomes (aggregated and individual)
• Search queries entered on the platform
• Timestamps of all login and logout events

Communications data:

• Content of messages sent to eck33 customer support via live chat or email
• Records of any formal complaints or dispute submissions
• Marketing communication preferences and opt-in/opt-out records

Data we do NOT collect: eck33 does not collect full payment card numbers, CVV codes, or online banking passwords. All sensitive payment authentication is handled directly by the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) using their own secure environments. eck33 receives only tokenised or masked references from payment partners.

eck33 does not sell or rent your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment processors and financial partners: To process your deposits and withdrawals in ৳ BDT, eck33 shares relevant transaction data and account identifiers with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card schemes (Visa, Mastercard). Each of these partners operates under its own privacy and security framework and is bound by contractual obligations to handle your data responsibly.

Identity verification providers: Where KYC verification requires document analysis, eck33 may share identity document images and personal data with accredited third-party identity verification service providers. These providers are engaged solely for the purpose of verifying your identity and are strictly prohibited from using your data for any other purpose.

Game content providers: When you play games provided by third-party studios such as Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, or Evolution Gaming, limited technical data (such as a pseudonymised player session token) is shared with the relevant studio to facilitate game delivery and result settlement. Game providers do not receive your full name, NID number, or financial account details.

Legal and regulatory disclosure: eck33 may disclose your personal data to competent government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful request. Where we are legally permitted to notify you of such a disclosure before it occurs, we will endeavour to do so.

Business transfers: In the event of a merger, acquisition, asset sale, or restructuring involving eck33, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

Professional advisers: eck33 may share limited personal data with legal advisers, auditors, or other professional service providers under strict confidentiality obligations where necessary to obtain professional advice or to conduct an audit of our operations.

eck33 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical measures include:

• SSL/TLS encryption for all data in transit between your device and eck33 servers
• Encryption of sensitive data fields at rest in our databases, including password hashes (using industry-standard one-way hashing algorithms) and identity document images
• Multi-factor authentication options available for your eck33 account login
• Automated intrusion detection and rate-limiting on authentication endpoints to protect against credential stuffing and brute-force attacks
• Regular independent security assessments and penetration testing of the platform
• Strict role-based access control ensuring that eck33 staff members can only access personal data that is necessary for their specific job function

Organisational measures include:

• Data protection training for all staff who handle personal data
• Internal data handling policies and procedures reviewed regularly
• Data processing agreements with all third-party service providers who access personal data on behalf of eck33
• A documented incident response plan covering detection, containment, assessment, notification, and remediation of personal data breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, eck33 will notify affected account holders without undue delay, providing details of the nature of the breach, the categories of data affected, the likely consequences, and the steps taken or proposed to address it. You can help protect your own account security by using a strong and unique password for your eck33 account and by not sharing your login credentials with any other person.

As a data subject whose personal data is processed by eck33, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting our support team at [email protected]. eck33 will respond to all valid requests within a reasonable timeframe and will not charge a fee for the exercise of these rights unless a request is manifestly unfounded or excessive.

• Right of access: You have the right to request confirmation of whether eck33 holds personal data about you and, if so, to receive a copy of that data along with information about how it is processed. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. If your registered address, mobile number, or other account details change, you should update them directly in your account settings or contact support.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is not absolute — it does not apply where we are required to retain your data to comply with a legal obligation (e.g., anti-money laundering record-keeping) or to establish, exercise, or defend a legal claim.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in circumstances where you contest the accuracy of the data, where processing is unlawful and you prefer restriction to deletion, or where we no longer need the data but you require it for a legal claim.
• Right to data portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right not to be subject to solely automated decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces significant legal effects concerning you. eck33 ensures that all consequential account decisions involve human review.

To exercise any of these rights, contact eck33 customer support at [email protected] with the subject line "Privacy Rights Request" and clearly state which right(s) you wish to exercise. We may ask you to verify your identity before processing your request to prevent unauthorised access to your personal data.