eb999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to the eb999 online betting and live casino platform accessible at eb999.io ("Platform"), operated by eb999 ("we", "us", "our"). It describes how eb999 collects, processes, stores, and protects the personal data of registered players, visitors, and prospective users who interact with the Platform from Bangladesh and other jurisdictions.

eb999 is committed to protecting your privacy and to processing your personal data in a transparent, lawful, and fair manner. This Policy should be read alongside the eb999 Terms & Conditions, available at eb999.io/terms-conditions, and the eb999 Responsible Gaming policy, available at eb999.io/responsible-gaming.

By accessing or using the eb999 Platform — including registering an account, making a deposit, placing a bet, or browsing the website — you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately and contact [email protected] to request account closure.

2 Data Controller

For the purposes of applicable data protection law, eb999 acts as the data controller in respect of all personal data collected from players who register and use the Platform. As data controller, eb999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully and securely.

If you have any questions or concerns about how eb999 processes your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you may contact the eb999 Data Protection team directly at [email protected]. All privacy-related correspondence is handled with strict confidentiality and will receive a substantive response within 5 business days.

3 Data We Collect

eb999 collects the following categories of personal data from players and platform visitors. The specific data collected depends on the nature of your interaction with the Platform.

3.1 Registration & Identity Data

When you create an eb999 account, we collect the information you provide during the registration process, including:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (required for 21+ age verification)
• Bangladesh mobile phone number
• Email address
• Username and password (password is stored in encrypted, non-reversible form)
• Residential address (city, division, postcode)
• National Identity Card (NID) number, passport number, or other government-issued ID reference (collected during KYC verification)

3.2 Financial & Payment Data

When you make a deposit or request a withdrawal, we collect financial data necessary to process the transaction, including:

• Mobile wallet identifiers for bKash, Nagad, Rocket, and Upay accounts
• Visa and Mastercard card details (card number, expiry, billing name) — note that full card numbers are not stored by eb999; they are passed securely to the payment processor
• Bank account details for bank transfer transactions (account name, account number, bank name, branch)
• Transaction history including deposit amounts in Bangladeshi Taka (৳), withdrawal requests, dates, and payment method used

3.3 Identity Verification (KYC) Documents

In accordance with our obligations to verify player identity and prevent fraud, eb999 may request and collect copies of the following documents:

• National Identity Card (NID) — front and back
• Passport (data page)
• Driving licence (where applicable)
• Utility bill or bank statement (for address verification, dated within 3 months)
• Selfie photograph or video verification (to confirm the player is the same individual as shown in the submitted ID document)

3.4 Usage & Behavioural Data

eb999 automatically collects technical and behavioural data when you interact with the Platform, including:

• IP address and approximate geographic location (city-level, derived from IP)
• Device type, operating system, and browser type and version
• Session start and end times, duration of play sessions
• Pages visited, games played, bet amounts, wagering history, and game outcomes
• Clickstream data (the sequence of pages and elements you interact with during a session)
• Login history including timestamps and device identifiers

3.5 Communications Data

When you contact eb999's support team, respond to promotional communications, or interact with us through any channel, we collect:

• The content of support chat conversations, email correspondence, and any attachments submitted
• Records of consent to receive marketing communications and the date of that consent
• Complaint records and dispute resolution correspondence
• Feedback and survey responses (where voluntarily submitted)

4 How We Collect Data

eb999 collects personal data through the following mechanisms:

• Direct provision: Data you actively provide when registering an account, updating your profile, making a deposit, requesting a withdrawal, submitting KYC documents, or contacting support.
• Automated collection: Technical data collected automatically via server logs, session tracking, and analytics tools when you access or use the Platform.
• Cookies and tracking technologies: eb999 uses first-party cookies and similar technologies to maintain session state, remember preferences, and analyse usage patterns. See Section 10 for full details of our cookie practices.
• Third-party payment providers: When you initiate a deposit or withdrawal, your payment provider (bKash, Nagad, Rocket, Upay, or your bank) shares transaction confirmation data with eb999 to allow us to credit or debit your account balance.
• Identity verification services: Where automated KYC tools are used to verify the authenticity of documents you submit, those services return a verification outcome to eb999 along with any relevant flags or reference numbers.

5 Purpose & Legal Basis for Processing

eb999 processes your personal data only where we have a lawful basis to do so. The table below summarises the primary purposes for which we process data and the corresponding legal basis for each activity.

6 Data Sharing & Disclosure

eb999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

6.1 Payment Processors

To process deposits and withdrawals, eb999 shares the minimum necessary payment data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa/Mastercard processing networks, or your bank. Each payment provider operates under its own privacy policy and data protection obligations. eb999 does not store full card numbers or mobile banking PINs.

6.2 Identity Verification Partners

eb999 may use third-party identity verification services to assist in verifying the authenticity of KYC documents submitted by players. These partners receive only the data necessary to perform verification and are contractually prohibited from using that data for any other purpose.

6.3 Game Providers

Third-party game providers whose titles are available on the eb999 platform — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe — may receive a player session token and anonymised identifier to facilitate gameplay. These providers do not receive your full name, payment data, or KYC documents.

6.4 Legal and Regulatory Authorities

eb999 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, court order, or regulatory obligation. Where permitted, eb999 will notify the affected player of such a disclosure request before complying.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving eb999, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified by email prior to any such transfer taking effect, and the Privacy Policy governing their data will continue to apply until updated.

6.6 Professional Advisers

eb999 may share data with its legal advisers, auditors, and cybersecurity consultants on a strictly need-to-know basis where required for legitimate operational or compliance purposes. All such advisers are bound by professional confidentiality obligations.

7 International Data Transfers

eb999 operates as an offshore platform and its data processing infrastructure may be located outside of Bangladesh. Where personal data is transferred to servers or processors in other countries, eb999 implements appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy.

Safeguards used by eb999 for international data transfers include:

• Standard contractual clauses and data processing agreements with all third-party processors and service providers who receive personal data.
• End-to-end encryption for all data in transit using 256-bit SSL/TLS protocols.
• Encryption at rest for stored personal data including identity documents and financial records.
• Contractual restrictions prohibiting processors from using transferred data for any purpose other than the specific service being provided to eb999.

8 Data Retention

eb999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:

On expiry of the applicable retention period, eb999 will securely delete or anonymise the relevant data. Where data is anonymised rather than deleted, the anonymised dataset no longer constitutes personal data and may be retained for analytical purposes indefinitely.

9 Security Measures

eb999 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the eb999 platform, ensuring that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Encryption at rest for all stored personal data, including identity documents, payment details, and account credentials.
• Password hashing using industry-standard one-way hashing algorithms. eb999 staff cannot view your password in plain text at any time.
• Two-factor authentication (2FA) available for all player accounts, providing an additional layer of login security using a registered Bangladesh mobile number.
• Access controls limiting access to personal data to only those eb999 staff and contractors with a demonstrated operational need, governed by role-based permissions and audit logging.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists to identify and remediate vulnerabilities in the platform infrastructure.
• Data breach response procedure: In the event of a confirmed data breach that poses a risk to player privacy, eb999 will notify affected players by email within 72 hours of becoming aware of the breach, describing the nature of the breach, the data involved, and the steps being taken to contain and remediate it.

10 Cookies & Tracking Technologies

The eb999 platform uses cookies and similar technologies to provide a functional, personalised, and secure user experience. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.

10.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred game category or notification settings — so that you do not need to re-configure them on each visit. These cookies enhance usability but are not strictly required for the Platform to operate.

10.3 Analytics Cookies

eb999 uses first-party analytics cookies to understand how players navigate the Platform, which game categories are most popular, where users encounter friction, and how the overall user experience can be improved. Analytics data is collected in aggregated, pseudonymised form and is not shared with third-party advertising networks.

10.4 Cookie Management

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your eb999 account and using real-money gaming features. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

11 Your Data Rights

As a player on the eb999 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise. All requests will be acknowledged within 24 hours and fulfilled within 30 days, subject to any legal exceptions.

• Right of Access: You have the right to request a copy of all personal data eb999 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For certain data fields (such as name or date of birth), correction requires submission of a supporting identity document.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that eb999 may retain certain data beyond a deletion request where retention is required by law (for example, financial transaction records).
• Right to Restriction: You have the right to request that eb999 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to eb999 in a structured, commonly used, and machine-readable format (such as CSV), and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming purposes. eb999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12 Children's Privacy

The eb999 platform is strictly intended for adults aged 21 years and above. eb999 does not knowingly collect, store, or process personal data from individuals under the age of 21. All account registrations are subject to age verification as described in Section 3.1 and 3.3 of this Policy.

If eb999 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, the data will be deleted, and any funds held in the account will be dealt with in accordance with the eb999 Terms & Conditions. If you believe that a minor has created an account on the eb999 platform, please notify us immediately at [email protected].

13 Third-Party Links

The eb999 platform may contain references to third-party products, services, and game providers. This Privacy Policy applies solely to data processed by eb999 in connection with the Platform. It does not apply to the websites, applications, or services of third-party game providers, payment processors, or any other external entities.

eb999 is not responsible for the privacy practices or data handling of any third party. Players who interact with third-party services through or in connection with the eb999 platform are advised to review the relevant third party's own privacy policy before providing any personal data to that third party.

14 Updates to This Privacy Policy

eb999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features of the Platform. Where updates are material — meaning they significantly affect your rights or how your data is used — eb999 will notify registered players by email to their registered address and by posting a prominent notice on the Platform homepage at least 14 days before the changes take effect.

The effective date and version number at the top of this Policy will be updated each time a new version is published. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. The current version of this Policy is always available at eb999.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or eb999's data practices, please contact the eb999 Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Username]"
• Support availability: 24 hours a day, 7 days a week
• Response time: Acknowledgement within 24 hours; full response within 30 days
• Language: English

When submitting a data rights request, please include your registered username and a clear description of the right you wish to exercise or the concern you wish to raise. Do not include your account password in any correspondence.