Privacy Policy — How ee333 Protects Your Data

Introduction

ee333 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who uses the ee333 platform available at ee333.io. This Privacy Policy sets out in clear, plain English precisely how ee333 collects, processes, stores, shares, and ultimately deletes the personal information of our players, visitors, and prospective registrants.

This policy applies to all personal data collected through the ee333 website, any mobile-optimised version of the platform, and all related communications — including emails sent by ee333 to registered players. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

By accessing the ee333 platform, registering an account, making a deposit, or otherwise interacting with our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not consent, you must not use the ee333 platform.

Data Controller

For the purposes of applicable data protection law, ee333 acts as the data controller in respect of all personal data collected from players accessing the platform from Bangladesh and other permitted jurisdictions. As data controller, ee333 determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, access requests, erasure requests, and complaints should be directed to ee333's designated data contact using the information set out in Section 16 of this policy.

Data We Collect

ee333 collects several categories of personal data depending on how you interact with the platform. The table below summarises the main categories and provides examples of the specific data points within each category.

ee333 does not intentionally collect any special categories of sensitive personal data, such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes. If any such data is inadvertently included in documents submitted for KYC verification, it will not be processed for any purpose other than confirming the authenticity of the document itself.

How We Collect Data

4.1 Data You Provide Directly

The majority of personal data ee333 holds about you is data you provide voluntarily when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion. This includes your name, contact details, payment information, and any documents you submit in connection with a KYC review.

4.2 Data Collected Automatically

When you access the ee333 platform, our servers and analytics infrastructure automatically record certain technical and usage data. This includes your IP address, the type of device and browser you are using, the pages you visit within the platform, the games you interact with, and the duration of your sessions. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 Data from Third Parties

In certain circumstances, ee333 may receive personal data about you from third parties. This can include:

• Identity verification data from KYC/AML screening service providers used to authenticate the documents you submit.
• Transaction confirmation data from mobile financial service providers such as bKash, Nagad, and Rocket when you make a deposit or receive a withdrawal.
• Fraud and risk signals from payment processors and financial crime intelligence services.
• Publicly available information where ee333 has a legitimate compliance reason to conduct enhanced due diligence on a specific account.

In all cases, data received from third parties is handled in accordance with this Privacy Policy and used only for the purposes described in Section 5.

How We Use Your Data

ee333 uses the personal data it collects for the following specific purposes:

• Account creation and management: Processing your registration, maintaining your account, authenticating your identity at login, and enabling account recovery.
• Payment processing: Crediting deposits to your account balance, processing withdrawal requests, verifying the ownership of payment instruments, and resolving payment disputes.
• Identity verification (KYC): Confirming that you are who you say you are, that you are at least 21 years of age, and that the payment methods you use are registered in your own name.
• Anti-money laundering (AML) compliance: Monitoring transaction patterns, screening names against sanctions lists, and reporting suspicious activity where required by our internal compliance policies.
• Platform security and fraud prevention: Detecting unauthorised access attempts, identifying multi-accounting, blocking known fraudulent devices and IP addresses, and protecting the integrity of our betting markets.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling, applying deposit limits and self-exclusion restrictions requested by players, and fulfilling our duty of care obligations.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of all support interactions for audit and quality assurance purposes.
• Marketing communications: Sending promotional emails and on-platform notifications about bonuses, new games, and special offers — but only where you have explicitly opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players navigate the platform, which games are most popular, and where the user experience can be enhanced.
• Legal compliance: Retaining data for the periods required by applicable law and making disclosures to law enforcement or regulatory bodies when legally obligated to do so.

Legal Basis for Processing

ee333 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are set out below, matched to the processing activities they support:

Where ee333 relies on legitimate interests as a legal basis, we have balanced those interests against your privacy rights and concluded that our interests do not override your fundamental rights and freedoms. Where we rely on your consent — principally for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

7.1 Third Parties We Share Data With

ee333 shares personal data with third parties only where necessary and only to the extent required for the specific purpose. The categories of third parties with whom we may share your data are as follows:

• Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive certain technical identifiers (such as a pseudonymous player ID) in order to operate their games within the ee333 platform. Full identity data is not passed to Game Providers.
• Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and card payment processors receive the transaction data necessary to process your deposits and withdrawals. They process this data under their own privacy policies and as independent data controllers.
• KYC / Identity Verification Providers: Specialist third-party KYC service providers may receive copies of your identity documents and personal details in order to carry out automated and manual identity checks on our behalf.
• Fraud and Risk Intelligence Services: ee333 may share IP addresses, device fingerprints, and account identifiers with fraud prevention services to identify and block known bad actors from accessing the platform.
• IT Infrastructure Providers: Cloud hosting, database management, and content delivery network providers that host or transmit ee333 platform data on our behalf under strict data processing agreements.
• Professional Advisers: Lawyers, accountants, and auditors who require access to certain data in connection with the professional services they provide to ee333.
• Law Enforcement and Regulatory Authorities: Where ee333 is legally required to disclose personal data to law enforcement agencies, courts, regulators, or government bodies, we will do so without prior notice to you if required by law.

7.2 Data Processing Agreements

All third parties that process personal data on behalf of ee333 as data processors are required to enter into a formal data processing agreement with ee333 confirming that they will process the data only in accordance with ee333's documented instructions, maintain appropriate security standards, and comply with applicable data protection requirements.

Data Retention

ee333 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The retention periods we apply to the main categories of personal data are set out below:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained beyond the standard period due to an ongoing investigation, legal proceeding, or regulatory hold, the extended retention will be documented internally and data will be deleted as soon as the hold is lifted.

Data Security

ee333 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our current security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your browser and our servers.
• Encryption at rest for all databases containing personal and financial data.
• Multi-factor authentication (MFA) for all internal staff accounts with access to production systems.
• Role-based access controls ensuring that employees can only access personal data relevant to their specific job function.
• Firewalls and intrusion detection systems monitoring all network traffic entering and leaving our infrastructure.
• Regular penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Comprehensive audit logging of all access to personal data, with regular reviews of access patterns by our security team.
• Staff security training on data handling, phishing awareness, and incident response procedures.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ee333 will notify you without undue delay using the contact details associated with your account.

Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to remember information about your visit, such as your preferred settings and whether you are logged in. ee333 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively and securely.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: These remember your preferences, such as your preferred language, display settings, and any responsible gaming limits you have set in your account. Disabling them may reduce your experience but will not prevent you from using the platform.
• Analytics Cookies: These help us understand how players use the platform by collecting anonymised data about pages visited, session duration, and feature engagement. We use this data to improve the platform's design and performance. Analytics cookies are set only where you have consented.
• Security and Fraud Prevention Cookies: These help us identify suspicious access patterns, detect bot activity, and protect your account from unauthorised access. They operate continuously in the background and are non-negotiable for account security.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in or using core platform features. Instructions for managing cookies in common browsers are available in each browser's help documentation.

Your Privacy Rights

As a player on the ee333 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that ee333 holds about you, together with information about how it is being processed. We will provide this in a structured, commonly used format at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. You can update many data points directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that ee333 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restriction of Processing: In certain circumstances, you may request that ee333 restrict the processing of your data — for example, while the accuracy of the data is being contested or while a complaint is under investigation.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a machine-readable format and to request that we transmit it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where ee333 processes your data on the basis of your consent, you may withdraw that consent at any time by contacting us or using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Minors & Age Verification

The ee333 platform is strictly intended for adults aged 21 years and above. ee333 does not knowingly collect or process personal data from individuals under the age of 21. As part of our registration and KYC process, all players are required to confirm their date of birth and submit government-issued identity documents demonstrating that they meet the minimum age requirement.

If ee333 discovers or reasonably suspects that an account has been registered by a person under the age of 21, the account will be suspended immediately, all funds will be frozen pending investigation, and the account will be permanently closed following review. Any winnings credited to an underage account will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account with ee333, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate the matter as a priority and take appropriate action within 48 hours of your report.

International Data Transfers

To operate the ee333 platform and provide our services to players in Bangladesh, it may be necessary to transfer your personal data to servers or third-party service providers located outside of Bangladesh. This can occur when we use cloud infrastructure providers, KYC verification services, or game providers whose systems are hosted in other countries.

Where such transfers occur, ee333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh. These safeguards may include:

• Contractual clauses requiring the recipient to protect the data to an adequate standard.
• Transfers to countries or organisations recognised as providing an adequate level of data protection.
• Data processing agreements with sub-processors that include binding security and confidentiality obligations.

By using the ee333 platform and consenting to this Privacy Policy, you acknowledge and agree to your personal data being transferred to and processed in countries outside Bangladesh where necessary for the delivery of our services.

Third-Party Links & Services

The ee333 platform may contain references to third-party game providers and payment services. While ee333 takes care to work only with reputable partners, we have no control over the privacy practices of third-party organisations and this Privacy Policy does not extend to their services. When you interact with a payment provider such as bKash, Nagad, or Rocket, or when you play a game operated by a third-party studio, that provider's own privacy policy governs the processing of any personal data you provide to them directly.

ee333 encourages you to review the privacy policies of any third-party services you interact with in connection with your ee333 account. We are not responsible for the content, accuracy, or privacy practices of any third-party service.

Changes to This Policy

ee333 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, legal and regulatory requirements, or feedback from players and regulators. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by sending an email to the address associated with your registered ee333 account and by displaying a prominent notice on the platform for a minimum of 30 days following the change.

For non-material changes such as clarifications of existing language, corrections of typographical errors, or restructuring of the document for readability, ee333 may update the policy without individual notification. We therefore encourage you to review this page periodically to stay informed of our current privacy practices.

Your continued use of the ee333 platform after any revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree with any revision, you must stop using the platform and may close your account in accordance with the procedures set out in the Terms & Conditions.

Contact & Data Requests

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which ee333 processes your personal data, please contact our data team using the details below. All communications must be submitted in English to ensure accurate and timely processing.

When submitting a data rights request, please include your full name as registered on your ee333 account, your registered email address, and a clear description of the right you wish to exercise. We may request additional information to verify your identity before processing your request. We will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive.

ee333 is committed to resolving all privacy-related concerns promptly and professionally. If you are dissatisfied with our response to a privacy concern, you may raise the matter as a formal complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". Our senior data team will review your complaint and provide a final written response within 15 business days.