Privacy Policy — e2bdt

1. Who We Are

e2bdt is an online casino and sports betting platform accessible at e2bdt.bio, operated for the benefit of players based in Bangladesh. For the purposes of this Privacy Policy, "e2bdt", "we", "us", and "our" refer to the operator of the e2bdt platform and all services provided through it. "You" and "your" refer to any individual who accesses or uses the e2bdt platform in any capacity, including registered account holders and unregistered visitors.

e2bdt acts as the data controller in respect of all personal data collected through the e2bdt platform. As data controller, e2bdt is responsible for determining the purposes and means by which your personal data is processed. Questions regarding this Privacy Policy or e2bdt's data practices may be directed to our support team at [email protected].

2. Data We Collect

e2bdt collects the following categories of personal data from players and platform visitors:

• Identity Data: Full legal name, date of birth, gender, and national identity document details (such as National ID card number or passport number) provided during registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address in Bangladesh (including city, district, and postal code).
• Financial Data: Mobile banking account identifiers for bKash, Nagad, Rocket, and Upay; card details limited to the last four digits and expiry date for Visa and Mastercard transactions; full transaction history including deposit amounts, withdrawal amounts, and dates.
• Verification Documents: Scanned or photographed copies of government-issued identity documents, proof of address documents (such as utility bills), and any other documentation submitted in connection with the KYC process.
• Technical Data: IP address, device identifier, browser type and version, operating system, screen resolution, time zone setting, and session authentication tokens.
• Usage Data: Game titles played, bet amounts, win and loss records, session start and end times, responsible gaming tool activations, and navigation patterns within the platform.
• Communications Data: Records of all communications between you and the e2bdt support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted through the platform.

e2bdt does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related information is voluntarily provided in connection with a responsible gaming request (for example, a self-exclusion application citing a gambling disorder). Such information is handled with the highest degree of confidentiality and used solely for the purpose for which it was provided.

3. How We Collect Your Data

e2bdt collects personal data through the following channels:

• Direct Submission: Data you provide when completing the e2bdt registration form, submitting KYC verification documents, making a deposit or withdrawal request, completing a responsible gaming tool request, or contacting e2bdt support.
• Automated Technical Collection: Data collected automatically when you access the e2bdt platform, including IP address, device data, and session data via server logs and standard web technologies.
• Payment Processors: Confirmation and reference data received from payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) when a financial transaction is initiated. e2bdt does not receive or store full card numbers; only partial card data and transaction confirmation references are received.
• KYC Verification Partners: Identity and age verification data returned by third-party KYC service providers when processing identity document checks.
• Cookies and Tracking Technologies: Data collected via cookies and similar technologies as described in Clause 10 of this Privacy Policy.

4. How We Use Your Data

e2bdt uses the personal data it collects for the following purposes:

• Account Management: To create and maintain your e2bdt player account, authenticate your identity at login, and manage your account settings and preferences.
• Age and Identity Verification: To verify that you are at least 21 years of age and that the identity information you have provided is accurate, as required prior to processing withdrawals and as part of ongoing compliance obligations.
• Payment Processing: To process deposit and withdrawal transactions in BDT via your chosen payment method, and to maintain an accurate transaction history in your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, bonus abuse, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to administer deposit limits, cooling-off periods, and self-exclusion requests, and to provide appropriate support where concerning patterns are identified.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Legal Compliance: To fulfil e2bdt's obligations under applicable law, including responding to lawful requests from regulatory authorities and law enforcement agencies.
• Platform Improvement: To analyse aggregated usage data in order to improve the functionality, performance, and content of the e2bdt platform. Aggregated data used for this purpose does not identify individual players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have given your consent to receive such communications. See Clause 12 for details on how to opt out.

5. Legal Basis for Processing

e2bdt processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and e2bdt — including account creation, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing that is necessary to comply with applicable legal requirements — including KYC identity verification and the maintenance of financial transaction records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and aggregated usage analysis is carried out on the basis of e2bdt's legitimate interests in operating a safe and compliant platform, where those interests are not overridden by your privacy rights.
• Consent: Processing carried out for marketing communications is carried out on the basis of your explicit consent. You may withdraw this consent at any time as described in Clause 12.

6. Sharing Your Data

e2bdt does not sell, rent, or transfer your personal data to any third party for that third party's own commercial or marketing purposes. Your personal data may be shared with the following categories of third parties solely for the purposes described in this Privacy Policy:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and the card payment networks (Visa, Mastercard) and their banking partners, solely to the extent necessary to process deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party identity verification service providers used to conduct age and identity checks as part of the KYC process.
• Fraud Prevention Services: Third-party fraud detection and prevention services used to identify and investigate suspicious account activity, multiple account creation, and financial fraud.
• IT Infrastructure and Hosting Providers: Providers of the server infrastructure, cloud hosting, and data storage services on which the e2bdt platform operates. All such providers are contractually bound to process data only on e2bdt's instructions and in accordance with appropriate data protection standards.
• Legal and Regulatory Authorities: Regulatory bodies, law enforcement agencies, and courts where e2bdt is required by law to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of e2bdt, its players, or the public.

All third-party service providers with whom e2bdt shares personal data are subject to contractual data processing agreements that prohibit them from using that data for any purpose other than the specific service they are providing to e2bdt.

7. International Data Transfers

e2bdt's primary player base is located in Bangladesh, and the platform is designed and operated with Bangladeshi players as the primary audience. Some of e2bdt's service providers — including IT infrastructure, KYC verification, and fraud prevention partners — may process data in jurisdictions outside Bangladesh. Where personal data is transferred to a jurisdiction outside Bangladesh, e2bdt takes reasonable steps to ensure that the receiving jurisdiction or the receiving entity provides an adequate level of data protection, including through the use of contractual data protection clauses.

By using the e2bdt platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this clause.

8. Data Security

e2bdt employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and e2bdt's servers.
• Encrypted storage of sensitive personal data at rest on e2bdt's secured servers.
• Strict access controls limiting data access to authorised e2bdt personnel who require that data to perform their specific job functions.
• Regular internal security audits and access log reviews.
• Two-factor authentication for internal administrative access to player data systems.

Notwithstanding the above security measures, no data transmission over the internet can be guaranteed to be completely secure. e2bdt cannot warrant the absolute security of data transmitted to or from the platform and shall not be liable for any unauthorised access to data that occurs outside of e2bdt's direct control.

9. Data Retention

e2bdt retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applicable to each data category are set out in the data table provided in the overview section of this Privacy Policy above. The following specific retention rules apply:

• Account Data: Retained for the full duration of your active account relationship with e2bdt, plus a post-closure period of up to 5 years to enable the resolution of any disputes arising after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of your account plus 5 years following account closure.
• Technical and Usage Data: Retained for up to 24–36 months, after which it is either deleted or anonymised such that it can no longer be linked to an individual player.
• Support Communications: Retained for up to 36 months from the date of the most recent communication in a given support thread.

When personal data reaches the end of its applicable retention period, e2bdt will securely delete or irreversibly anonymise that data. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregate analytical purposes.

10. Cookies & Tracking Technologies

The e2bdt platform uses cookies and similar tracking technologies to support platform functionality, maintain session security, and collect usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the operation of the e2bdt platform. They enable core functions such as user authentication, session management, and security token validation. These cookies cannot be disabled without preventing access to the platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your selected language and preferred display options — in order to provide a more personalised platform experience.
• Analytics Cookies: These cookies collect anonymised information about how players navigate the e2bdt platform, including which pages are visited most frequently and how long sessions typically last. This information is used solely to improve the platform. Analytics data is not linked to individual player identities.
• Security Cookies: These cookies help e2bdt detect and prevent fraudulent activity, including bot access and multiple session anomalies.

e2bdt does not use third-party advertising cookies or cross-site tracking technologies for the purpose of delivering targeted advertising to players on other websites. You may adjust your browser settings to refuse or delete cookies at any time; however, doing so may affect the functionality of the e2bdt platform, including your ability to remain logged in.

11. Your Rights

As an e2bdt player, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You have the right to request a copy of all personal data that e2bdt holds about you. We will provide this in a structured, readable format within 10 business days of receiving a verified request.
• Right to Rectification: You have the right to request that e2bdt corrects any inaccurate or incomplete personal data we hold about you. Corrections to account details can also be made directly through the account settings area.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent on which processing is based, or where the data has been unlawfully processed. This right is subject to e2bdt's legal data retention obligations.
• Right to Restrict Processing: You have the right to request that e2bdt restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive the personal data you have provided to e2bdt in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of legitimate interests, on grounds relating to your particular situation.
• Right to Withdraw Consent: Where e2bdt processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the e2bdt support team at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. All requests are handled within 10 business days and are free of charge.

12. Marketing Communications

e2bdt may send you promotional communications — including bonus offers, seasonal promotions (such as those tied to Eid, Pohela Boishakh, BPL season, or IPL), tournament announcements, and platform updates — via email or SMS, where you have opted in to receive such communications during the registration process or at any subsequent point.

You may opt out of receiving marketing communications from e2bdt at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by e2bdt.
• Updating your communication preferences in your e2bdt account settings.
• Contacting the e2bdt support team at [email protected] and requesting removal from marketing communications.

Opting out of marketing communications will not affect your receipt of transactional communications, including account security alerts, deposit and withdrawal confirmations, and support responses. These communications are sent on the basis of contractual necessity and cannot be unsubscribed from while your e2bdt account remains active.

13. Children & amp; Minors

The e2bdt platform is strictly intended for adults aged 21 years and above. e2bdt does not knowingly collect personal data from any individual under the age of 21. The age verification process that forms part of e2bdt's KYC procedure is designed specifically to identify and prevent access by underage individuals.

If e2bdt becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the relevant account, delete the personal data collected from that individual, and reverse any financial transactions associated with that account where this is technically and legally possible.

14. Amendments to This Policy

e2bdt reserves the right to amend this Privacy Policy at any time. Where amendments are made, the updated Privacy Policy will be published on this page with a revised "Last Updated" date. Where amendments are material — meaning they significantly affect the way e2bdt processes your personal data or the rights available to you — e2bdt will notify registered account holders by email prior to the changes taking effect.

Your continued use of the e2bdt platform following the publication of an updated Privacy Policy constitutes your acceptance of the amended terms. If you do not agree to the amended Privacy Policy, you must discontinue use of the e2bdt platform and may request account closure by contacting our support team.

e2bdt recommends that you review this Privacy Policy periodically to remain informed of how your personal data is being handled. The most current version of this Privacy Policy will always be accessible at e2bdt.bio/privacy-policy.

15. Contact Information

For all privacy-related enquiries, data rights requests, or concerns about how e2bdt handles your personal data, please contact our support team using the details below. All communications should be sent in English and should include your registered e2bdt account email address to enable us to identify your account and process your request efficiently.

e2bdt is committed to resolving all privacy-related concerns promptly and transparently. If you feel that your concern has not been adequately addressed following contact with our support team, you retain the right to escalate the matter to the appropriate data protection authority in your jurisdiction.