Your Privacy Matters at ek77

01Introduction

This Privacy Policy (the "Policy") describes how ek77 ("ek77", "We", "Us", or "Our") collects, uses, stores, shares, and protects personal data in connection with the online betting and casino platform accessible at https://ek77.vu (the "Platform").

ek77 is committed to safeguarding the privacy of all players who access the Platform from Bangladesh and elsewhere. We recognise that personal data is a sensitive asset and we treat it with the care and respect it deserves. This Policy has been drafted in plain, clear English so that every player can understand precisely how their information is handled.

This Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification (KYC), financial transactions, gameplay, and communications with our support team. It does not apply to data collected by third-party websites or services that may be linked from or integrated with the Platform — those third parties operate under their own separate privacy policies.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the contractual relationship between you and ek77.

02Data Controller

For the purposes of this Privacy Policy, ek77 acts as the data controller in respect of personal data collected from players using the Platform. As data controller, ek77 determines the purposes and means by which personal data is processed.

All data protection queries, subject access requests, and complaints should be directed to the ek77 Data Protection team via email at [email protected]. Please include the subject line "Data Protection Request" and your registered account username to ensure a prompt response.

03Data We Collect

ek77 collects personal data in several categories depending on how you interact with the Platform. The categories below describe the data we may collect and the context in which it is gathered.

3.1 Registration Data

When you create an ek77 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are aged 21 or above).
• Residential address, including division, district, and postal code (Bangladesh addresses).
• Email address and mobile phone number.
• Username and hashed password (passwords are never stored in plain text).

3.2 Identity Verification (KYC) Data

To comply with our obligations to prevent fraud, money laundering, and underage gambling, we collect:

• Scanned or photographed copies of government-issued photo identification (National Identity Card (NID), passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or other official correspondence).
• Proof of payment method (confirmation details of the bKash, Nagad, Rocket, or Upay account used for deposits).
• Source of funds declarations where required by our internal risk thresholds.

3.3 Financial Transaction Data

When you make deposits or withdrawals in Bangladeshi Taka (BDT), we collect:

• Mobile financial service account reference numbers (bKash, Nagad, Rocket, Upay).
• Card type, last four digits, and billing address (Visa and Mastercard transactions only).
• Transaction amounts, timestamps, and transaction reference IDs.
• Wallet balance history and bonus transaction records.

3.4 Gameplay Data

We collect data generated by your use of the Platform's betting and gaming features, including:

• Betting history (markets wagered on, stake amounts, odds accepted, results, and net profit/loss).
• Casino and slot game session logs (game titles, session duration, spin values, and outcomes).
• Bonus and promotion participation records.
• Responsible gaming tool settings (deposit limits, loss limits, session time limits, self-exclusion status).

3.5 Technical & Device Data

When you access the Platform, our servers and analytics systems automatically collect:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session timestamps, page navigation paths, and feature interaction logs.
• Cookie identifiers and local storage values (see Section 8).

3.6 Communications Data

If you contact our support team, we retain records of:

• Email correspondence, live chat transcripts, and support ticket content.
• The nature of your query and the resolution provided.
• Any documents or screenshots submitted in connection with a support request.

04How We Use Your Data

ek77 uses personal data for the following specific purposes. We do not use personal data for any purpose that is incompatible with those listed below without first obtaining your consent.

• Account administration: Creating, maintaining, and securing your player account; processing login requests; resetting credentials.
• Identity verification: Conducting KYC checks to confirm age (21+), identity, and source of funds in accordance with our anti-fraud and anti-money-laundering obligations.
• Transaction processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; maintaining accurate financial records.
• Platform operation: Delivering betting markets, live casino content, slot games, jackpots, and other gaming products to you; recording gameplay outcomes; settling bets.
• Responsible gaming: Monitoring account activity for indicators of problem gambling; enforcing deposit limits, loss limits, and self-exclusion requests; conducting player welfare checks.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, and unauthorised access attempts.
• Legal and regulatory compliance: Retaining records as required by applicable law; responding to lawful requests from competent authorities.
• Service improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and product offering.
• Communications: Responding to support queries; sending transactional notifications (deposit confirmations, withdrawal status updates, account alerts).
• Promotional communications: Sending information about bonuses, promotions, and new features — but only where you have expressly opted in and subject to your right to opt out at any time.

05Legal Basis for Processing

ek77 processes personal data only where a valid legal basis exists. The following table maps each processing activity to its corresponding legal basis.

06Data Sharing

ek77 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

6.1 Payment Service Providers

We share the minimum necessary financial data with our certified payment processing partners (including the operators of bKash, Nagad, Rocket, Upay, and card network processors) to facilitate deposits and withdrawals. These providers are contractually prohibited from using your data for any purpose other than processing the specific transaction.

6.2 Identity Verification Providers

Where automated KYC and document verification services are used, relevant identity documents and personal data may be shared with certified third-party verification service providers. These providers operate under strict data processing agreements and are prohibited from retaining or using your documents beyond the scope of the verification task.

6.3 Game Studio and Platform Providers

Live casino and slot game content is provided by third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. Certain technical session identifiers may be passed to these providers to deliver game content. These providers do not receive your full personal profile and are bound by contractual data protection obligations.

6.4 Legal and Regulatory Authorities

ek77 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or legitimate legal process. We will notify you of such disclosure where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ek77's assets, personal data held by ek77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

07Data Retention

ek77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal, regulatory, or operational obligations. The table below provides indicative retention periods for each data category.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

08Cookies & Tracking Technologies

ek77 uses cookies and similar tracking technologies (such as local storage and session storage) on the Platform. The following table describes the categories of cookies we deploy, their purpose, and their retention period.

ek77 does not deploy third-party advertising or retargeting cookies. You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using the Platform.

09Data Security

ek77 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our core security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your browser or app and our servers.
• AES-256 encryption at rest for stored personal data and financial records.
• Hashed and salted password storage — your login password is never stored in readable form.
• Access controls and role-based permissions — internal staff access to personal data is restricted on a strict need-to-know basis, with all access logged and audited.
• Intrusion detection and monitoring systems that continuously scan for anomalous activity and potential security breaches.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities.
• Segregation of player funds — player wallet balances are held in accounts separate from ek77's operational funds, reducing financial risk exposure.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ek77 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10Your Rights

You hold a number of rights in relation to the personal data that ek77 holds about you. These rights are described below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within fourteen (14) calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data ek77 holds about you (commonly known as a Subject Access Request). We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly from your account settings page.
• Right to Erasure: You may request that ek77 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data (such as financial transaction records and KYC documents) must be retained for the periods specified in Section 7 to comply with legal obligations and cannot be erased earlier.
• Right to Restriction: You may request that ek77 temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests at any time on grounds relating to your particular situation. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional email communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11Children & Minors

The ek77 Platform is strictly restricted to individuals aged 21 years and above. ek77 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If ek77 becomes aware that personal data has been collected from a person under the age of 21 without the required age verification having been completed, the relevant account will be immediately suspended, any bets placed will be voided, deposited funds will be returned to the original payment method, and all associated personal data will be securely deleted as quickly as legally possible.

If you are a parent or guardian and believe that your child has accessed the ek77 Platform or provided personal data to ek77, please contact us immediately at [email protected].

12International Data Transfers

ek77 primarily processes personal data on servers located within or near the Asia-Pacific region to minimise latency for Bangladesh-based players. In certain circumstances, personal data may be transferred to or processed by service providers located in other countries — for example, where a game studio, payment processor, or KYC verification provider operates from a different jurisdiction.

Where personal data is transferred internationally, ek77 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with all third-party processors that impose obligations equivalent to those described in this Policy. ek77 does not transfer personal data to any third party that is not contractually bound to protect it to the standard required by this Policy.

13Third-Party Links

The ek77 Platform may contain references to third-party game providers, payment services, and sports data sources. Where the Platform integrates third-party game content (such as live casino streams or slot titles from Pragmatic Play, Evolution Gaming, or NetEnt), those game environments are operated under the respective provider's own privacy and data practices.

ek77 is not responsible for the privacy practices of any third-party provider whose services are accessible through or alongside the Platform. We encourage you to review the privacy policies of any third-party service you interact with directly. This Policy covers only personal data collected directly by ek77 through the Platform.

14Updates to This Policy

ek77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material, we will notify registered players via email to their registered address and/or by displaying a prominent notice on the Platform at least fourteen (14) calendar days before the changes take effect.

The date at the top of this Policy indicates when it was last revised. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not agree with any change, you must cease using the Platform and may request account closure by contacting our support team.

15Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to make a complaint about how ek77 has handled your personal data, please contact our Data Protection team:

We take all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.