Privacy Policy — How ekpk Handles Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how ekpk ("ekpk", "we", "us", "our"), the operator of the online betting and casino platform at ekpk.io, collects, processes, stores, and protects the personal data of its registered players and website visitors ("you", "your", "Player").

ekpk takes data privacy seriously. We are committed to handling all personal information in a transparent, responsible, and lawful manner. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about using the ekpk platform.

This Policy should be read alongside ekpk's Terms & Conditions and Responsible Gaming guidelines, both of which form part of the overall agreement between you and ekpk. By registering an account on the ekpk platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.

If you have questions about how ekpk processes your personal data, or if you wish to exercise any of your data rights described in Section 9, please contact our support team at [email protected].

2. Data We Collect

ekpk collects the minimum personal data necessary to provide our services, maintain account security, meet legal obligations, and deliver a personalised platform experience. The categories of data we may collect include:

2.1 Identity Data

Full legal name, date of birth, gender, and nationality. This data is collected during account registration and KYC (Know Your Customer) verification. Identity data is required to verify that you meet the minimum age requirement of 21 years and to prevent fraudulent account activity.

2.2 Contact Data

Email address, mobile phone number, and residential address (including city, district, and postcode). Contact data is used for account communications, withdrawal verification, and, where you have opted in, marketing notifications.

2.3 Identity Verification Documents

Copies of government-issued identification documents such as a National Identity Card (NID), passport, or driving licence, and proof of address documents such as a utility bill or bank statement. These documents are required to complete KYC verification as described in ekpk's Terms & Conditions.

2.4 Financial Data

Payment method identifiers such as bKash wallet numbers, Nagad account references, Rocket account references, Upay identifiers, bank account numbers (partial, for verification only), and Visa/Mastercard card details (card number, expiry — stored in tokenised form only, never as raw data). Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

2.5 Account & Activity Data

Username, account creation date, login timestamps, session duration, betting history (sport, market, stake, odds, outcome), casino game history (game title, provider, spin/round count, win/loss), bonus participation history, and responsible gaming tool settings (deposit limits, self-exclusion status).

2.6 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6, is the platform default), referring URL, and pages visited on ekpk.io. Technical data is collected automatically via server logs and analytics tools.

2.7 Communications Data

Records of communications between you and ekpk support staff, including live chat transcripts, email correspondence, and complaint records. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

The following table summarises the categories of data collected and their primary purpose:

3. How We Collect Your Data

3.1 Directly From You

The majority of your personal data is collected directly from you during the registration process, KYC verification, payment transactions, support interactions, and when you update your account profile or responsible gaming settings.

3.2 Automatically

Technical data including IP address, device identifiers, browser information, and session activity is collected automatically when you access the ekpk platform. This data is gathered via server-side logging and first-party analytics tools. ekpk does not use third-party advertising tracking pixels on the platform.

3.3 From Third Parties

ekpk may receive data about you from the following trusted third-party sources:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners may share transaction confirmation data and fraud signals with ekpk as part of the payment processing workflow.
• Identity Verification Partners: ekpk may use certified third-party identity verification services to assist with KYC document validation. These partners process identity documents on ekpk's behalf under strict data processing agreements.
• Anti-Fraud Services: ekpk may receive fraud risk signals from third-party fraud prevention providers to protect the platform and its players from financial crime and account compromise.

4. How We Use Your Data

ekpk processes personal data only where there is a lawful basis to do so. The primary purposes for which we use your data are as follows:

• Account Administration: Creating and maintaining your player account, processing login authentication, and managing account settings.
• Service Delivery: Enabling sports betting, live casino, slots, crash games, and e-sports betting services. Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Identity & Age Verification: Confirming that all players meet the minimum age requirement of 21 years and verifying the authenticity of player-provided information as part of the KYC process.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, money laundering, match-fixing, bonus abuse, and unauthorised account access.
• Responsible Gaming: Monitoring player activity patterns to identify potential problem gambling behaviour, enforcing player-set deposit and loss limits, administering self-exclusion requests, and fulfilling ekpk's duty of care obligations.
• Customer Support: Responding to support queries, processing complaints, resolving bet settlement disputes, and maintaining records of support interactions.
• Legal & Regulatory Compliance: Meeting applicable anti-money laundering (AML), know-your-customer (KYC), and data retention obligations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, user experience, and product offerings.
• Marketing Communications: Sending promotional emails, SMS notifications, or in-app messages about ekpk bonuses, events, and offers — only to players who have explicitly opted in to receive such communications.

5. Data Sharing & Disclosure

5.1 We Do Not Sell Your Data

ekpk does not sell, rent, trade, or otherwise commercially transfer your personal data to any third party. Your information is not used to build advertising profiles or shared with marketing networks.

5.2 Authorised Service Providers

ekpk engages trusted third-party service providers who process data on ekpk's behalf under formal data processing agreements. These providers include payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard networks), KYC verification partners, cloud infrastructure providers, anti-fraud vendors, and customer support software providers. Each provider is bound by contractual obligations to process data only as instructed by ekpk and to maintain appropriate technical and organisational security measures.

5.3 Game Providers

The casino games on the ekpk Casino platform are supplied by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level game data (e.g., game ID, round ID, bet/win amounts) as part of the technical integration required to operate their games within the ekpk platform. Game providers do not receive player name, contact details, or payment information.

5.4 Legal Disclosures

ekpk may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised governmental authorities where required to do so by applicable law, court order, or in connection with a legal investigation. In such cases, ekpk will disclose only the minimum data necessary to comply with the legal requirement.

5.5 Business Transfers

In the event that ekpk undergoes a merger, acquisition, or sale of all or a material part of its assets, player data held by ekpk may be transferred to the acquiring entity as part of that transaction. ekpk will notify affected players via their registered account email address in advance of any such transfer where permitted by applicable law.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website to store preferences, session state, and usage data. ekpk uses a limited set of first-party cookies to operate the platform effectively. We do not use third-party advertising cookies or behavioural tracking technologies.

6.2 Cookies We Use

• Session Cookies (Essential): Required to maintain your login session, store your betting slip, and preserve your account preferences during a single visit. These cookies are deleted when you close your browser.
• Authentication Cookies (Essential): Used to verify your identity across authenticated pages of the platform. These expire after a configurable inactivity period and are required for platform security.
• Preference Cookies (Functional): Used to remember your language preference (English), display settings, and responsible gaming reminder intervals between sessions.
• Analytics Cookies (Performance): First-party analytics cookies that collect anonymised data about page views, session duration, and navigation paths to help ekpk improve platform performance. No personally identifiable data is transmitted via these cookies.

6.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please be aware that disabling essential session and authentication cookies will prevent you from logging in and using the ekpk platform. Disabling functional or analytics cookies will not affect your ability to place bets or access games, but may reduce the personalisation of your experience.

7. Data Retention

ekpk retains personal data for the periods set out in the table in Section 2. These retention periods reflect a balance between operational necessity, legal compliance obligations, and the privacy principle of data minimisation. When a retention period expires, data is either securely deleted from ekpk's systems or irreversibly anonymised so that it can no longer be associated with any individual player. The extended retention periods for financial data (7 years) and identity/KYC data (5 years after account closure) reflect standard anti-money laundering record-keeping requirements applicable to online financial services platforms operating in the Bangladesh market.

Players who request account closure may request a copy of their personal data before deletion. Following the applicable post-closure retention period, ekpk will be unable to recover or provide access to data that has been deleted or anonymised.

8. Data Security

ekpk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your browser/app and ekpk's servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data including identity documents, payment references, and KYC records are stored in encrypted form on ekpk's servers.
• Access Controls: Access to personal data within ekpk's internal systems is governed by role-based access controls. Only authorised personnel with a legitimate operational need may access player personal data.
• Two-Factor Authentication: ekpk offers two-factor authentication (2FA) for all player accounts and mandates 2FA for all internal administrative system access.
• Penetration Testing: ekpk's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ekpk maintains a documented data breach incident response plan. In the event of a confirmed breach affecting player personal data, ekpk will notify affected players and take immediate containment and remediation action.

While ekpk takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for logging out of your account when using shared or public devices.

9. Your Data Rights

As a registered ekpk player, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a request to [email protected] with your account username and a description of your request. ekpk will respond within 30 days.

• Right of Access: You may request a copy of all personal data ekpk holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your ekpk account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that ekpk may be required to retain certain data for legal compliance purposes even following a deletion request.
• Right to Restriction: You may request that ekpk restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request that ekpk provides your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to ekpk's assessment of overriding grounds.
• Right to Withdraw Consent: Where ekpk processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10. Minors & Age Policy

The ekpk platform is strictly for adults aged 21 years or older. ekpk does not knowingly collect personal data from individuals below the age of 21. If ekpk becomes aware that personal data has been collected from an individual below the minimum age threshold, that data will be deleted and the associated account will be permanently closed, with any balance forfeited in accordance with ekpk's Terms & Conditions.

Parents and guardians who believe that a minor may have registered an account on the ekpk platform are encouraged to contact ekpk immediately at [email protected]. ekpk takes underage gambling extremely seriously and will investigate all such reports with the highest priority.

11. Third-Party Services & Links

The ekpk platform integrates third-party services including game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay), and analytics tools. While ekpk takes reasonable steps to ensure that all third-party partners maintain appropriate data protection standards, ekpk is not responsible for the privacy practices of third-party services. Players are encouraged to review the privacy policies of any third-party service they interact with in connection with the ekpk platform.

ekpk's website does not contain links to external third-party websites for commercial or marketing purposes. Any links present on the platform are limited to ekpk's own internal pages as listed in the site navigation structure.

12. International Data Transfers

ekpk's primary data infrastructure is operated to serve players in Bangladesh. Where personal data is processed by third-party service providers whose systems are located outside Bangladesh — for example, cloud infrastructure providers or game studios headquartered in Europe or Asia-Pacific — ekpk ensures that appropriate contractual safeguards are in place to govern the transfer of personal data. These safeguards may include standard contractual clauses or equivalent data transfer mechanisms that provide a comparable level of protection to data subjects as they would receive under applicable local data protection standards.

13. Marketing Communications

ekpk will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, events, and offers if you have explicitly opted in to receive such communications during registration or subsequently via your account notification settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the ekpk account dashboard after logging in.
• Clicking the unsubscribe link included at the bottom of every ekpk marketing email.
• Contacting ekpk support at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect transactional communications related to your account — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts — which ekpk is required to send regardless of marketing preferences.

14. Changes to This Privacy Policy

ekpk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where a change is material — meaning it significantly affects how your personal data is collected, used, or shared — ekpk will notify you via your registered account email address at least 14 days before the revised Policy takes effect. Non-material updates such as typographic corrections or clarifications that do not alter the substantive rights or obligations described in this Policy may be made without prior notice.

The date of the most recent update to this Policy is displayed at the top of this page. Your continued use of the ekpk platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and close your account before the effective date of the changes.

15. Contact & Data Requests

For all privacy-related enquiries, data access requests, data deletion requests, or concerns about how ekpk handles your personal information, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: ekpk aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days of receipt.
• Required Information: Please include your account username, the email address registered to your account, and a clear description of your request or concern. For identity verification purposes, ekpk may request additional documentation before processing a data access or deletion request.