eb44 Privacy Policy

Introduction

eb44 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all players who register and interact with the eb44 online betting and casino platform at eb44.io. This Privacy Policy sets out, in plain and accessible English, the basis on which any personal data we collect from you — or that you provide to us — will be processed by eb44.

This Privacy Policy applies to all users of the eb44 platform, including players registered in Bangladesh accessing the Platform via web browser or any other supported interface. It covers all personal data collected in connection with your use of the Platform, including account registration, deposits and withdrawals, gameplay activity, customer support interactions, and any marketing communications you have opted into.

Please read this Privacy Policy carefully and in full before registering an account or using the eb44 Platform. This document should be read alongside our Terms & Conditions, which govern the overall relationship between eb44 and its players, and our Responsible Gaming policy, which sets out the protective measures eb44 applies in relation to player welfare.

We may update this Privacy Policy from time to time to reflect changes in technology, regulation, or our operational practices. The effective date at the top of this document indicates when the current version was last revised. We encourage you to review this page periodically. Where changes are material, we will notify registered players via their registered email address prior to the change taking effect.

Data We Collect

eb44 collects several categories of personal data in the ordinary course of operating the Platform. The specific data collected depends on how you interact with eb44 and which features of the Platform you use. The principal categories are as follows:

2.1 Identity Data

This includes your full legal name as it appears on your government-issued identification, date of birth, gender, and nationality. This data is collected at registration and during the identity verification process required before withdrawals can be processed.

2.2 Contact Data

This includes your mobile phone number, email address, and — where provided — your residential address in Bangladesh (including city, district, and postal code). Contact data is used for account communication, transaction notifications, and customer support purposes.

2.3 Financial Data

This includes details of the payment methods you register or use on the Platform, including bKash wallet numbers, Nagad account references, Rocket account references, Upay account references, and where applicable, masked card numbers and card type for Visa and Mastercard transactions. eb44 does not store full unmasked card numbers. Full payment instrument details are handled exclusively by our certified payment processing partners.

2.4 Account Activity Data

This includes your login history, session timestamps, betting history across sports and casino products, game play records, deposit and withdrawal transaction logs, bonus claim history, and any responsible gaming tool settings you have applied to your account.

2.5 Technical Data

This includes your IP address at the time of each session, device type and operating system, browser type and version, screen resolution, and unique device identifiers where available. This data is collected automatically via server logs and cookies.

2.6 Communications Data

This includes the content of any customer support tickets, live chat conversations, or email correspondence you initiate with the eb44 support team. Where calls are recorded (if telephone support is introduced), you will be notified prior to recording.

2.7 Verification Documents

Where you submit identity or address verification documents — such as a National Identity Card (NID), passport, or utility bill — we retain copies of these documents in secure storage for the purposes of compliance with anti-money laundering obligations and for resolving any future identity disputes.

How We Collect Your Data

eb44 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide actively when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotional communications;
• Automated technologies: Data collected automatically when you access the Platform, including via cookies, server logs, session tracking scripts, and device fingerprinting technology;
• Third-party sources: Data received from payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) in connection with processing your financial transactions; data received from identity verification service providers in connection with KYC compliance checks; and data received from fraud prevention and anti-money laundering screening services;
• Publicly available sources: In limited circumstances relating to fraud prevention or regulatory compliance, eb44 may reference publicly available information to verify details provided at registration or during the account lifecycle.

eb44 does not purchase personal data lists from third-party marketing data brokers. All personal data processed by eb44 is collected directly in connection with your use of the Platform or obtained from service providers acting on eb44's behalf in specific, defined operational contexts.

Purpose of Processing

eb44 processes your personal data for the following defined purposes. The table below maps each processing purpose to the category of data involved and the applicable legal basis:

eb44 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where expressly required by anti-money laundering or fraud screening obligations. Where automated screening flags an account for review, a human member of the eb44 compliance team conducts the final assessment before any account action is taken.

Legal Basis for Processing

eb44 processes personal data only where a valid legal basis exists. The legal bases relied upon by eb44 are as follows:

• Contractual necessity: Processing required to perform the contract between eb44 and a registered player — that is, to operate your account, process transactions, deliver gaming services, and manage your account in accordance with the Terms & Conditions you accepted at registration;
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, record-keeping requirements, and any order or direction from a competent authority;
• Legitimate interests: Processing carried out in pursuit of eb44's legitimate operational interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics. Where eb44 relies on legitimate interests, a balancing assessment has been conducted to confirm that the processing is proportionate and necessary;
• Consent: Processing based on your specific, freely given, and informed consent — principally in the context of promotional and marketing communications. You may withdraw your consent to marketing at any time by contacting [email protected] or adjusting your account communication preferences. Withdrawal of marketing consent does not affect the lawfulness of any prior processing.

Data Sharing & Third Parties

eb44 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following defined circumstances, and only to the minimum extent necessary for each purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for the data they collect through their own platforms;
• Identity verification services: Third-party KYC providers receive identity and document data submitted during the verification process, solely for the purpose of completing the verification check required before withdrawals can be processed;
• Game studios: Game providers including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe may receive a pseudonymous player identifier and session data necessary to deliver their games. Full identity data is not shared with game studios;
• Fraud and AML screening services: Transaction and identity data may be cross-referenced against fraud prevention databases and AML screening tools operated by specialist third-party providers under contractual data processing agreements;
• Legal and regulatory authorities: eb44 may disclose personal data to competent legal authorities, law enforcement bodies, or courts where required to do so by a valid legal order, court direction, or applicable regulatory requirement. eb44 will not voluntarily disclose data to authorities beyond what is legally required;
• Business continuity partners: In the event of a corporate restructure, merger, or acquisition involving eb44, player data may be transferred to the acquiring or successor entity under equivalent data protection terms.

All third-party processors who handle eb44 player data on eb44's behalf are required to enter into data processing agreements that mandate confidentiality, security standards consistent with those applied by eb44, and strict limitations on the use of data to the specified processing purpose only.

Data Retention

eb44 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

Where data is retained beyond the life of the account for legal compliance reasons, it will be held in a restricted access environment and will not be used for any active operational purpose. Upon expiry of the applicable retention period, data will be securely deleted or anonymised in a manner that prevents re-identification.

Cookies & Tracking Technologies

eb44 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session integrity, and gather analytical data on Platform usage. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential to the operation of the Platform. They maintain your login session, enable secure navigation between pages, and preserve your account settings during a session. These cookies cannot be disabled without impairing Platform functionality;
• Functional cookies: These cookies remember your language preference, display settings, and responsible gaming tool configurations. They improve the usability of the Platform by retaining your personalisation choices between sessions;
• Analytical cookies: These cookies collect anonymised or pseudonymised data about how visitors use the Platform — including which pages are visited most frequently, where users enter and exit the site, and how long sessions last. This data is used by eb44 to improve the design, performance, and content of the Platform;
• Fraud prevention and security cookies: These cookies assist eb44 in detecting unusual or potentially fraudulent session behaviour by comparing current session characteristics against known device and usage patterns.

eb44 does not use third-party advertising or retargeting cookies. No personal data collected via eb44 cookies is shared with advertising networks for the purpose of serving targeted advertisements on other websites.

Most web browsers are configured by default to accept cookies. You may configure your browser to decline cookies or to alert you when cookies are set. However, disabling strictly necessary cookies will prevent you from logging into your account and using core Platform features. eb44's cookie implementation does not rely on consent pop-ups for strictly necessary cookies, as no consent is required for their use.

Payment Data & Financial Security

Given the nature of the eb44 Platform, payment data security is a critical component of our privacy framework. The following principles govern the handling of financial data at eb44:

• All deposit and withdrawal transactions processed via bKash, Nagad, Rocket, and Upay are conducted through those providers' official APIs. eb44 receives only the confirmation reference and transaction amount — not the full wallet credentials of the player;
• Withdrawal processing is subject to a payment method matching requirement: withdrawals are directed to the same payment instrument used for the most recent deposit wherever technically feasible, to reduce the risk of funds being directed to a third-party account;
• All financial transaction records are maintained in encrypted format in eb44's secure data environment and are accessible only to authorised finance and compliance personnel on a need-to-know basis;
• eb44 does not accept cash transactions, cryptocurrency payments, or any payment method that cannot be linked to a verified identity. All payment methods must be registered in the player's own name;
• In the event that eb44 identifies a transaction that raises an anti-money laundering concern, the transaction may be held pending investigation. The player will be notified where legally permissible to do so, and the investigation will be conducted under eb44's AML compliance procedures.

Children's Privacy & Underage Protection

eb44 enforces a minimum age of 21 years across all products and services offered on the Platform. Age verification procedures are applied at the point of registration and prior to the processing of any withdrawal. Players are required to submit valid government-issued photographic identification confirming their date of birth before full account functionality is unlocked.

If eb44 has reason to believe — whether through its own verification procedures, a report from a third party, or any other information — that a registered account is held by a person under the age of 21, it will:

• Immediately suspend the account pending investigation;
• Void and forfeit any winnings accumulated on the account;
• Return any real-money deposits to the source payment method after satisfying itself as to the circumstances of the account's creation;
• Permanently close the account and record the closure in its fraud and AML monitoring systems.

Parents or guardians who believe a person under 21 in their household may have registered or attempted to register an account on eb44 are encouraged to contact us immediately at [email protected]. eb44 will investigate all such reports promptly and confidentially.

Your Privacy Rights

As a player registered on the eb44 Platform, you hold the following rights in relation to your personal data. These rights may be exercised by submitting a written request to [email protected] with your registered account username or reference number included:

eb44 will acknowledge all data rights requests within 5 business days and will respond substantively within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. Requests are processed free of charge unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

Data Security

eb44 applies a layered security architecture to protect personal and financial data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the eb44 servers is protected by industry-standard SSL/TLS encryption. The padlock icon visible in your browser address bar confirms that your connection to eb44.io is secured;
• Encryption at rest: Sensitive data fields — including identity document references, payment identifiers, and verification records — are stored in encrypted format in eb44's database environment;
• Access controls: Access to systems containing personal data is restricted to authorised eb44 personnel on a strict need-to-know basis. Multi-factor authentication is required for all administrative access;
• Intrusion detection: eb44's infrastructure is monitored continuously for unusual access patterns, injection attempts, and other indicators of compromise. Alerts are reviewed by our security operations team on a 24/7 basis;
• Penetration testing: eb44 conducts regular security assessments including penetration testing by qualified third-party security specialists to identify and remediate vulnerabilities before they can be exploited;
• Incident response: In the event of a confirmed data security incident that affects player personal data, eb44 will assess the incident, contain it as rapidly as possible, and notify affected players via their registered email addresses as soon as practicable.

While eb44 maintains robust technical and organisational security measures, no internet-based platform can guarantee absolute security against all threats. Players are also responsible for maintaining the security of their own devices, login credentials, and internet connections. If you believe your account has been compromised, contact [email protected] immediately.

Third-Party Links & Embedded Content

The eb44 Platform may contain links to third-party websites or may embed content delivered by third-party game studios. This Privacy Policy applies only to data collected and processed by eb44 directly. eb44 does not control and is not responsible for the privacy practices of any third-party website or service.

If you follow a link from the eb44 Platform to a third-party website — including the websites of payment providers such as bKash or Nagad — you will be subject to that website's own privacy policy and terms. eb44 recommends reviewing the privacy policies of any third-party services you use in connection with your eb44 account.

Game content embedded on the Platform from studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe is delivered via those studios' platforms. Those providers may collect limited technical data — such as session identifiers and game event data — as part of delivering their game content. Such data collection is governed by the respective studio's data processing arrangements with eb44, and studios are contractually prohibited from using that data for independent marketing purposes.

Changes to This Privacy Policy

eb44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or the technology we use. Any revised version will be published on this page at eb44.io/privacy-policy with an updated effective date at the top of the document.

For material changes — those that substantially affect how we collect, use, or share your data, or that affect your rights — eb44 will provide advance notice of at least 14 days via the email address registered to your account before the changes take effect. Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you object to any change to this Privacy Policy, you should stop using the Platform and contact [email protected] to request closure of your account. Any personal data collected under the previous version of the Privacy Policy will continue to be processed in accordance with the version under which it was collected until the updated retention period takes effect.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data eb44 holds about you, please contact our support team. Our English-language support team is available around the clock on Bangladesh Standard Time (BST, UTC+6).

All privacy-related enquiries, data rights requests, and data security concerns should be directed to the following address. Note that this email address is displayed as plain text and is not a clickable link:

When submitting a data rights request, please include your registered username or account reference number, a clear description of the right you wish to exercise, and any supporting information that may help us locate and process your request accurately. eb44 will acknowledge all privacy enquiries within 5 business days and will aim to resolve them within 30 calendar days.

For queries related to responsible gaming tools, self-exclusion, deposit limits, or problem gambling support, please visit our dedicated Responsible Gaming page for full guidance and direct access to those tools via your account dashboard.