ek555 Privacy Policy

This Privacy Policy ("Policy") is published by ek555 ("Platform", "we", "us", "our") and describes our practices regarding the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "your") who access or use our website at ek555.ws and all associated services. By registering an account or using the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must not use the platform.

ek555 is committed to protecting the privacy and security of your personal data. We process personal data only for the purposes described in this Policy and only to the extent necessary for those purposes. This Policy is to be read alongside our Terms & Conditions, which are incorporated by reference.

Data you provide directly

• Account registration information: full name, date of birth, email address, username, password (stored in hashed form), and mobile phone number.
• Identity verification documents submitted during KYC: national ID card, passport, driving licence, utility bill or bank statement for proof of address.
• Financial information provided when making deposits or requesting withdrawals, including bKash wallet numbers, Nagad account details, or bank account information.
• Communications you send to our support team, including chat transcripts, emails, and any attachments you choose to provide.

Data generated automatically

• Device and browser information: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: pages visited, time spent on each page, links clicked, search queries within the platform, and game session history including bets placed, wins, and losses.
• Transaction logs: timestamp, amount, payment method, currency, and outcome of every deposit and withdrawal.
• Cookies and tracking technologies — see Section 6 for full details.

Data from third parties

• Transaction confirmation and fraud-screening data from payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity verification results from third-party KYC service providers where applicable.
• Fraud intelligence and responsible gaming exclusion data shared by industry bodies to which ek555 is a subscriber, used to protect players and the platform.

ek555 uses the personal data we collect for specific, legitimate purposes only. The table below summarises each purpose alongside the type of data used and our justification for processing it:

ek555 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: processing is required to fulfil our contractual obligations to you — for example, operating your account, processing payments, and providing access to games.
• Legal obligation: processing is required for compliance with applicable laws, including anti-money laundering regulations, KYC requirements, and responsible gaming rules.
• Legitimate interests: processing is carried out for our legitimate business interests, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your data protection rights.
• Consent: where we send marketing communications or use non-essential cookies, we do so on the basis of your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ek555 may share your personal data with the following categories of recipients:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): to process your deposits and withdrawals and to conduct fraud screening on financial transactions.
• KYC and identity verification providers: to verify your identity and age in compliance with our legal obligations. These providers act as data processors under contract and are prohibited from using your data for any other purpose.
• Regulatory authorities and law enforcement agencies: where we are legally required to disclose personal data in response to a court order, regulatory investigation, or other lawful request. We will notify you of any such disclosure where permitted by law.
• IT infrastructure and cloud service providers: who host and maintain the platform's technical infrastructure under strict contractual data processing agreements. These providers have no right to access or use your data for their own purposes.

ek555 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. Cookies help us remember your preferences, keep you logged in securely, and understand how players navigate the platform so we can make it better.

We use the following types of cookies:

• Essential cookies: strictly necessary for the platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without breaking the platform.
• Performance cookies: collect anonymised information about how you use the platform (e.g. pages visited, time on page, error messages) to help us improve overall performance and reliability.
• Functional cookies: remember your preferences such as language setting, display options, and last visited game category so you do not need to reset them each visit.
• Analytics cookies: help us understand aggregate player behaviour across the platform to inform product decisions. Data collected by analytics cookies is pseudonymised and never linked to an identifiable individual without additional steps.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain features of the platform. For full details on the cookies we use and how to control them, please contact our support team at [email protected].

ek555 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide: account and identity data is retained for the duration of your account and for a minimum of five years following account closure, to comply with anti-money laundering and record-keeping regulations. Financial transaction data is retained for a minimum of five years from the date of the transaction. Communications with our support team are retained for three years from the date of the last communication.

When data is no longer required for any legitimate purpose, ek555 will securely delete or anonymise it. Where anonymisation is not possible due to the nature of the data or technical constraints, we will ensure the data is isolated from further processing until deletion is possible.

Subject to applicable law and certain conditions, you have the following rights with respect to your personal data held by ek555. To exercise any of these rights, please contact our support team at [email protected] with your full name and the specific right you wish to exercise:

• Right of access: you may request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to rectification: you may request that inaccurate or incomplete personal data be corrected or completed without undue delay.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists for processing.
• Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: you may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to object: you may object to processing of your personal data where processing is based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

We will respond to all valid data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you within the first 30 days. We will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

ek555 implements a layered security architecture to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security measures include but are not limited to:

• Encryption of all personal data in transit using TLS 1.2 or higher, and encryption of sensitive data fields at rest using AES-256.
• Role-based access controls ensuring that only authorised personnel with a legitimate need may access personal data, with full access logging.
• Regular penetration testing and security audits conducted by independent third-party specialists to identify and remediate vulnerabilities before they can be exploited.
• A documented incident response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ek555 will notify affected players without undue delay.

While we apply robust technical and organisational measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. ek555 cannot guarantee absolute security but is committed to maintaining the highest practical standard of protection for your personal data.

The ek555 platform may contain links to third-party websites or services, such as payment provider portals. These third-party sites have their own privacy policies, which are independent of this Policy. ek555 is not responsible for the privacy practices or content of any third-party website. We recommend that you review the privacy policy of any third-party site you visit before providing personal data to that site.

ek555 is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If we become aware that personal data of an underage individual has been collected, we will delete that data immediately and close the associated account. If you believe that an underage person has registered on ek555, please notify us immediately at [email protected] so we can investigate and take appropriate action.

ek555 primarily stores and processes personal data within secure data centres. In some circumstances, personal data may be transferred to, or accessed by, service providers located outside Bangladesh — for example, cloud infrastructure providers or specialist KYC verification platforms. Where such transfers occur, ek555 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements requiring the recipient to maintain standards equivalent to those described in this Policy. By using the ek555 platform, you consent to such international transfers where they are carried out in accordance with this Policy.

ek555 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email and update the "Last updated" date at the top of this page. The revised Policy will take effect immediately upon publication. Your continued use of the platform after the revised Policy has been published constitutes your acceptance of the changes.

We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. If you have any questions about changes to this Policy, please contact our support team.