Your Privacy Matters at e8ee —
Here Is How We Protect It

01

Introduction & Scope

This Privacy Policy describes how e8ee ("we", "us", "our") collects, uses, stores, and shares personal information about individuals ("you", "your") who access or use the e8ee platform at https://e8ee.io, including all associated games, betting markets, payment services, and customer support channels.

e8ee is committed to protecting the personal data of its players and to handling all such data in a responsible, transparent, and secure manner. We follow internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality.

This policy applies to all registered players, prospective players who interact with the e8ee platform without completing registration, and visitors to the e8ee website. It applies regardless of the device or network used to access the platform — desktop, mobile browser, or mobile application.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and e8ee.

02

Data We Collect

e8ee collects personal data across several categories depending on the nature of your interaction with the platform. The main categories are as follows:

• Identity data: Your full legal name, date of birth, gender, and copies of identity documents (National Identity Card, passport, or driving licence) submitted during the KYC verification process.
• Contact data: Your email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal district.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details for bank transfer deposits and withdrawals, and a complete record of all deposit and withdrawal transactions conducted through your e8ee account.
• Account credentials: Your chosen username and an encrypted (hashed) representation of your password. e8ee never stores your password in plaintext.
• Technical and device data: Your IP address, device identifier, browser type and version, operating system, screen resolution, and session timestamps recorded each time you access the platform.
• Usage and behavioural data: Records of the games you play, bets you place, bonus campaigns you participate in, session duration, and navigation paths within the platform. This data is used in aggregate for service improvement and at an individual level for responsible gaming monitoring.
• Communications data: The full content of live chat interactions, emails, and any other written correspondence between you and the e8ee support team.
• Preference data: Your chosen communication preferences, self-imposed responsible gaming limits (deposit caps, session time limits, self-exclusion status), and language or display settings.

Where data is optional — for example, a secondary phone number or a preferred Dhaka-area delivery address for any physical prize distribution — we will clearly indicate this at the point of collection. Mandatory fields are those without which we cannot provide the requested service or comply with our legal obligations.

03

How We Collect Your Data

e8ee collects personal data through the following channels:

• Direct registration: When you create an e8ee account, you provide your name, date of birth, email address, phone number, and residential details directly through the registration form.
• KYC verification submissions: When you upload identity documents to complete account verification, those documents and the data extracted from them are collected and stored.
• Payment transactions: When you make a deposit or request a withdrawal, your payment method details and transaction metadata are collected through our payment processing partners.
• Platform interaction: Your usage data — game sessions, bet history, page navigation — is collected automatically as you interact with the platform through server logs and first-party analytics systems.
• Cookies and similar technologies: See Section 7 (Cookies & Tracking) for a detailed explanation of how we use cookies and browser storage on the e8ee website.
• Support interactions: When you contact e8ee's support team via live chat or email, the content of that interaction is recorded and associated with your account.
• Third-party sources: In limited circumstances, e8ee may receive data about you from third-party identity verification providers (for KYC purposes), payment fraud screening services, or from public sources in connection with AML compliance obligations.

04

How We Use Your Data

e8ee uses the personal data we collect for the following clearly defined purposes:

• Account management: To create, maintain, and administer your player account, including processing your registration, authenticating your identity at login, and managing your account settings and preferences.
• Service delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and all other features of the e8ee platform in accordance with our Terms & Conditions.
• Payment processing: To process deposits from and withdrawals to your registered payment methods (bKash, Nagad, Rocket, Upay, bank accounts, Visa, Mastercard), and to maintain an accurate financial record of all transactions on your account.
• Identity verification and KYC: To verify your identity, age (minimum 21 years), and residential status in compliance with our KYC obligations, and to prevent underage gambling and fraudulent account creation.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, match-fixing, bonus abuse, and other forms of prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, to enforce self-imposed limits and self-exclusion arrangements, and to proactively reach out to players whose usage patterns suggest they may benefit from responsible gaming support.
• Customer support: To respond to your support enquiries, resolve disputes, and maintain records of communications for quality assurance and compliance audit purposes.
• Marketing and promotions: To send you information about e8ee promotions, bonuses, and offers that may be of interest to you — but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform improvement: To analyse aggregate usage data to improve the features, performance, and user experience of the e8ee platform for all players in Bangladesh and beyond.
• Legal compliance: To fulfil our obligations under applicable laws and regulations, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

05

Legal Basis for Processing

e8ee processes your personal data on the following legal bases:

• Contractual necessity: The majority of data processing by e8ee is necessary to perform the contract between you and e8ee — that is, to operate your account, process your bets, and handle your payments. Without this processing, e8ee cannot provide its services to you.
• Legal obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and record-keeping — are required by applicable law. e8ee must carry out this processing regardless of your consent.
• Legitimate interests: e8ee processes some data on the basis of its legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and product analytics.
• Consent: Where we process data for marketing or non-essential communications purposes, we rely on your consent. You may withdraw consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.

06

Sharing Your Data

e8ee does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third parties, strictly for the purposes described below:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card networks (Visa, Mastercard) receive the financial data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and is responsible for data they hold independently.
• KYC and identity verification providers: Third-party identity verification services receive your identity documents and associated personal data for the purpose of verifying your age, identity, and residential status. These providers are contractually bound to process data only for the stated KYC purpose.
• Game content providers: Licensed game studios — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Play'n GO, and Spribe — may receive a pseudonymous player session identifier and bet data for the purpose of delivering game content and settling game outcomes. They do not receive your full name, payment details, or contact information.
• IT and hosting infrastructure providers: e8ee uses third-party cloud hosting and content delivery infrastructure. These providers act as data processors under contractual data processing agreements and have no independent right to use your data.
• Fraud and AML screening services: Specialist third-party fraud detection and anti-money laundering screening services may receive transaction data and account activity data to assist e8ee in meeting its compliance obligations.
• Regulatory and law enforcement authorities: e8ee may disclose personal data to governmental, regulatory, or law enforcement bodies where required to do so by a lawful request, court order, or applicable legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of e8ee's business, personal data held by e8ee may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer.

07

Cookies & Tracking

The e8ee website uses cookies and similar browser storage technologies to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit the site. e8ee uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. The platform cannot operate without these cookies, and they are deployed without requiring your consent.
• Functional cookies: These cookies remember your preferences — such as your chosen display settings, language preferences, and whether you have previously dismissed informational notices. They improve usability but are not essential to core platform operation.
• Analytics cookies: e8ee uses first-party analytics to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is collected in aggregate and used only to improve the platform. e8ee does not use third-party analytics platforms that share your data with external parties.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including bot detection, device fingerprinting for account security, and anomalous login detection.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using core platform features including logging into your account. Disabling functional or analytics cookies will not prevent platform access but may affect your experience.

e8ee does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies on the e8ee platform.

08

Data Security

e8ee implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the e8ee platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. You can verify this by the padlock icon in your browser's address bar when visiting e8ee.io.
• Password hashing: Account passwords are stored using a cryptographic one-way hashing algorithm. e8ee cannot retrieve your password in plaintext — if you forget your password, it must be reset rather than recovered.
• Two-factor authentication (2FA): e8ee strongly recommends that all players enable OTP-based two-factor authentication, available in account security settings. 2FA significantly reduces the risk of unauthorised account access even if your password is compromised.
• Access controls: Internal access to personal data is strictly role-based. Only personnel with a documented operational need may access player data, and all access is logged and auditable.
• Payment data isolation: Full payment card numbers are never stored on e8ee servers. Card transactions are processed directly through PCI-DSS compliant payment gateways. Mobile wallet transaction data is handled in accordance with the respective provider's own security standards.
• Penetration testing and vulnerability management: e8ee conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

09

Data Retention

e8ee retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, and in any event for no longer than required by applicable legal and regulatory obligations. Key retention periods are as follows:

• Active account data: Retained for the full duration of your registered account plus a post-closure period (typically 3–7 years depending on data category) to meet AML, fraud investigation, and dispute resolution requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction in accordance with standard financial record-keeping obligations applicable to payment service providers and online gaming operators.
• KYC / identity documents: Retained for a minimum of 5 years from account closure, as required for AML compliance verification and audit purposes.
• Technical and device data (logs): Retained on a rolling 13-month basis, after which logs are purged or anonymised.
• Marketing consent records: Retained for the duration of your account plus 3 years, to demonstrate consent history in the event of a complaint or audit.
• Support communication records: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance processes.

At the end of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with e8ee's internal data disposal procedures. Anonymised or aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and business intelligence purposes.

10

Your Rights

As a data subject, you have the following rights in relation to the personal data e8ee holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request — [Your Username]". We will respond within 30 days of receiving a verified request.

• Right of access: You have the right to request a copy of all personal data e8ee holds about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, correction requests will require re-submission of valid KYC documents.
• Right to erasure: You may request that e8ee delete your personal data where there is no longer a legitimate purpose for retaining it, and where no legal obligation requires its continued retention. Note that AML and financial record-keeping obligations may prevent full erasure in certain cases.
• Right to restriction of processing: You may request that e8ee restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of the data, or while we investigate a complaint.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and to object to direct marketing at any time. Where you object to marketing, we will stop that processing immediately.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that e8ee provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

e8ee will not charge a fee for exercising any of these rights in normal circumstances. However, where requests are manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or to decline to act on the request, with written reasons provided.

11

Children & Minors

21+  The e8ee platform is strictly for adults aged 21 and above. e8ee does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step of the account registration process, and e8ee reserves the right to request documentary proof of age at any stage.

If e8ee becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration of age at registration or by any other means — the affected account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be securely deleted in accordance with our data disposal procedures.

If you believe that a person under the age of 21 has registered an account on e8ee, please notify us immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports promptly.

12

International Transfers

e8ee's primary player base is in Bangladesh and the platform is designed to serve the Bangladeshi market. Some of e8ee's third-party service providers — including cloud infrastructure providers, licensed game studios, and international payment networks — may process or store data outside of Bangladesh.

Where personal data is transferred to third parties operating in other jurisdictions, e8ee takes appropriate steps to ensure that adequate protections are in place for that data. This includes requiring contractual data processing agreements with all third-party processors, selecting service providers who maintain recognised security certifications, and conducting due diligence on the data protection practices of all key vendors before engagement.

e8ee does not transfer personal data to jurisdictions that we have assessed as presenting an unacceptable risk of misuse or inadequate protection. Where a transfer is necessary and the destination jurisdiction does not offer an equivalent level of data protection, e8ee implements supplementary technical and contractual safeguards to compensate for that gap.

For further information about the specific safeguards applied to any international data transfer relevant to your account, you may submit a request to [email protected] and we will provide details within 30 days.

13

Changes to This Policy

e8ee reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in the services we offer, improvements to our data handling practices, or feedback from players and regulators.

When a material change is made to this Privacy Policy, e8ee will notify registered players by email to the address on file, and/or by displaying a prominent notice within the platform. The revised policy will be published at https://e8ee.io/privacy-policy with an updated effective date at the top of the document.

Your continued use of the e8ee platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how e8ee is protecting your personal data. The version history of this policy is available on request.

14

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to how e8ee handles your personal data, please contact our dedicated data protection team using the details below. All privacy-related enquiries are handled with the highest priority and will receive a written response within 10 business days.

• Email (data protection enquiries): [email protected] — subject line "Privacy Enquiry — [Your Username]"
• Email (data subject requests): [email protected] — subject line "Data Subject Request — [Your Username]"
• Response time: Standard enquiries within 10 business days; formal data subject requests within 30 calendar days of identity verification.
• Business hours: Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with e8ee's response to your privacy enquiry or data subject request, you have the right to escalate your complaint to the relevant data protection authority or to seek resolution through applicable legal channels in your jurisdiction.