ek998 Privacy Policy

Welcome to ek998. This Privacy Policy ("Policy") explains how ek998 collects, uses, shares, and safeguards your personal information. By using our website, creating an account, or accessing any of our services, you are deemed to have accepted this Privacy Policy.

We understand how sensitive your personal data is. That is why ek998 has made privacy a top priority from day one. From registration to every transaction, your information is completely safe with us.

Our Privacy Policy is updated regularly. If any changes are made, we will notify you by email and update the "Last Updated" date at the top of this page. We recommend checking this page from time to time.

Ek998 only collects the information needed to deliver the best possible service. We never collect data beyond what is necessary.

a) Information you provide directly:

• Name, date of birth & gender
• Email address & phone number
• Current address & country
• National ID or passport information (for KYC verification)
• Payment method details (bKash, Nagad, bank account number, etc.)
• Username & Password

b) Automatically collected information:

• IP Address & Device Type
• Browser Type & Operating System
• Cookies & Session Data
• Platform activity logs (login times, game history)
• Referral Source & Page Visit Data

c) Information received from third parties:

• Transaction verification data from payment processors
• Verification results from identity verification service providers
• Risk assessment data from fraud prevention services

Ek998 uses your data solely for specific, legitimate purposes. The table below provides a full picture of how we handle your data:

Before any use, your data is always checked for compatibility with the stated purposes above. If we need to use your data for a new purpose, we will obtain fresh consent from you.

Ek998 never sells or unnecessarily shares your data. In certain limited cases, specific information may be shared with trusted partners:

• Payment Processors: Necessary information is shared with bKash, Nagad, Rocket, and banking partners to process transactions.
• Identity Verification Service: Information is shared with licensed verification agencies to complete the KYC process.
• Fraud Prevention: Limited data is shared with cybersecurity partners to keep your account secure.
• Legal Authorities: Data may be disclosed in response to court orders, regulatory requests, or other legal requirements.
• Business Transfers: In the event of an acquisition or merger involving ek998, your data may be transferred to the new owner.

When sharing data, all partners are required to comply with ek998's strict confidentiality agreements. They may only use the data for specified purposes and within defined time limits.

Ek998 uses cookies and similar technologies to make your experience smoother and more secure. Cookies are small text files stored in your browser.

Types of cookies we use:

• Essential Cookies: These are essential for maintaining login sessions and ensuring security. They cannot be disabled.
• Functional Cookies: Used to remember your language preference, theme, and other settings.
• Analytics Cookies: Used to understand website traffic and usage patterns. All data collected is fully anonymous.
• Security Cookies: Used to detect fraud and protect your account.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect the availability of certain platform features.

Ek998 retains your data only for as long as necessary. A separate retention policy applies to each type of data:

• Account Information: For the duration of account activity and up to 5 years after closure.
• Transaction Records: A minimum of 7 years as required by law.
• KYC Documents: Up to 7 years, in accordance with regulatory requirements.
• Customer Service Contact: Up to 3 years after the issue is resolved.
• Log Files & Analytics Data: Typically 12 to 24 months.
• Marketing Preferences: Deleted within 30 days of consent withdrawal.

Once the retention period has expired, your data is securely deleted or fully anonymized so that you can no longer be identified in any way.

Under ek998's Privacy Policy, you hold the following rights:

To exercise any of these rights, please contact our support team. We will respond to your request within 30 days.

Ek998 uses industry-leading security technology to protect your data. Our security framework operates on multiple layers:

• 256-Bit SSL/TLS Encryption: All communication between your browser and our servers is encrypted.
• Two-Factor Authentication (2FA): An additional layer of security applied when logging into your account.
• Firewall & DDoS Protection: Servers are protected against external attacks.
• Regular Penetration Testing: Third-party experts conduct regular audits of our systems.
• Encrypted Database: All stored data is kept in an encrypted state at all times.
• Access Control: Only authorized personnel may access specific data.

In the event of a data breach, we will notify the relevant authorities and affected users within 72 hours. Our robust security measures, however, make such incidents highly unlikely.

Ek998 is strictly for users aged 18 and above. We never knowingly collect personal data from minors.

If we become aware that we hold personal data belonging to anyone under the age of 18, we will immediately delete that data and close the associated account.

Ek998 operates in Bangladesh and several other countries. In some cases, your data may be processed on servers located abroad. Regardless of where processing takes place, we ensure the same high standard of protection.

For international data transfers, we ensure the following protective measures are in place:

• We verify that adequate data protection laws are in place in the destination country.
• Strict agreements are signed with all data processors.
• Standard Contractual Clauses (SCC) are followed.
• Encryption and other technical safeguards are maintained at all times.

If you have any questions, concerns, or complaints regarding this privacy policy, please contact our Data Protection Officer. We take all requests seriously and aim to respond within 30 days.

If you are not satisfied with our response, you may file a complaint with the data protection authority in your country.