e2det Privacy Policy

1 Introduction

e2det ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the e2det platform, including its website, casino games, sports betting markets, payment services, and customer support channels. This Privacy Policy describes in clear terms what personal information we collect, why we collect it, how we use and store it, who we may share it with, and what rights you have over your own data.

By registering an account on e2det, making a deposit, placing a bet, or otherwise using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy forms part of the e2det Terms & Conditions and should be read alongside that document.

This policy applies to all registered players, prospective registrants who browse the platform without creating an account, and any person who contacts e2det customer support. It applies to data collected through all channels — the e2det website, mobile-optimised pages, email communications, live chat, and WhatsApp support.

2 Data We Collect

e2det collects personal data through several distinct channels and for different purposes. The categories of personal data we collect are outlined below.

2.1 Registration Data

When you create an e2det account, we collect the information you provide during the registration process. This includes:

• Your full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including city, district, and postcode
• Mobile phone number (used for account verification and two-factor authentication)
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and retain copies of:

• Bangladesh National Identity Card (NID)
• Valid passport (data page)
• Proof of residential address (utility bill or bank statement dated within 90 days)
• Confirmation of payment method ownership (e.g., a screenshot of your bKash or Nagad account)

2.3 Financial Data

We collect and retain records of all financial transactions conducted through your e2det account. This includes deposit amounts, withdrawal requests, transaction dates and times, payment method identifiers (such as a bKash or Nagad mobile number), and transaction reference numbers. e2det does not store full card numbers, CVV codes, or complete banking credentials — payment card data is handled directly by PCI-DSS-compliant payment processors.

2.4 Gaming Activity Data

We retain comprehensive records of your gaming activity on the platform. This includes:

• Games played, bet amounts, game outcomes, and session durations
• Sports betting selections, stake amounts, odds accepted, and settlement results
• Bonus and promotion history, including wagering progress
• Responsible gaming settings you have applied to your account (deposit limits, time-outs, self-exclusion requests)

2.5 Technical and Device Data

When you access e2det, our systems automatically collect certain technical data about your device and connection, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, navigation paths, and time spent on each page
• Referring URL (the web address you visited immediately before arriving at e2det)
• Session identifiers and cookie data (see Section 6)

2.6 Communication Data

When you contact e2det customer support via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages, the date and time of contact, and the outcome or resolution of any query or complaint. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Data

e2det uses the personal data it collects for the following specific purposes:

e2det does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight. Where automated processes are used to flag accounts for fraud or bonus abuse review, a human member of our compliance team reviews the flag before any account action is taken.

4 Legal Basis for Processing

e2det processes personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing your registration data, financial data, and gaming activity data is necessary to provide you with the services you have contracted for — that is, a functional e2det account with the ability to deposit, play, and withdraw.
• Legal obligation: We are required to collect and retain KYC documents, transaction records, and AML-related data in order to comply with applicable anti-money laundering, counter-terrorism financing, and responsible gaming regulations.
• Legitimate interests: We process technical data, device data, and gaming activity data for fraud prevention, platform security, and service improvement purposes. These interests are carefully balanced against your privacy rights; we collect only what is proportionate and necessary.
• Consent: Where we send you optional promotional communications or use non-essential cookies, we do so only on the basis of your explicit consent. You may withdraw consent for promotional communications at any time by contacting [email protected].

5 Data Sharing

e2det does not sell, rent, or trade your personal data to any third party. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for each purpose.

5.1 Payment Processors

To process your deposits and withdrawals, we share relevant financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and card network processors for Visa and Mastercard transactions. Each payment processor operates under its own privacy policy and is contractually required to handle your data securely and in accordance with applicable data protection standards.

5.2 Game Studio Providers

Casino game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver their games within the e2det platform environment. These providers do not receive your full personal profile or financial data.

5.3 Identity Verification Services

Where e2det uses a third-party identity verification service to assist with KYC document checking, your submitted identity documents may be processed by that service. All such providers are contractually bound to data protection obligations consistent with this Privacy Policy and to delete your documents once verification is complete.

5.4 Legal and Regulatory Disclosure

e2det may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other unlawful activity. We will notify affected players of any such disclosure where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of e2det's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is handled as a result.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. e2det uses cookies and similar tracking technologies (such as web beacons and local storage) to maintain session states, remember your preferences, detect fraud, and analyse how the platform is used.

6.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and process transactions securely. These cookies cannot be disabled without preventing access to core platform features.
• Functional cookies: These remember your platform settings and preferences — such as your preferred deposit method or responsible gaming limits — to improve your experience on return visits.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the platform, which games are most popular, and where the user journey can be improved. Analytics data is aggregated and does not identify individual players.
• Security cookies: These help us detect and prevent fraudulent account activity, bot traffic, and suspicious login patterns.

6.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the e2det platform, as session management and payment security depend on them. Instructions for managing cookies in common browsers are available in each browser's help documentation.

7 Data Retention

e2det retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. The key retention periods applicable to different categories of data are set out below:

• Account registration data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in order to satisfy AML record-keeping obligations.
• KYC and identity documents: Retained for the duration of your active account plus a minimum of five (5) years following account closure.
• Transaction and financial records: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with financial record-keeping best practices.
• Gaming activity logs: Retained for a minimum of three (3) years following the date of each gaming session, for the purposes of dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for a minimum of two (2) years following the resolution of each query or complaint.
• Technical and device data: Typically retained for up to twelve (12) months in detailed form, after which it may be aggregated and anonymised for statistical purposes.

When personal data reaches the end of its applicable retention period and there is no overriding legal reason to retain it further, e2det will securely delete or anonymise it in accordance with our internal data destruction procedures.

8 Data Security

e2det takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption across all platform pages and data transmission channels, ensuring that data exchanged between your device and e2det is protected in transit at all times.
• Encrypted storage for sensitive personal data fields, including passwords (stored as salted cryptographic hashes, never in plain text) and identity document images.
• Role-based access controls ensuring that e2det staff can only access personal data that is directly relevant to their job function. Customer service agents, for example, do not have access to full KYC document images unless a specific verification task requires it.
• Two-factor authentication (2FA) available for player accounts and required for all e2det internal staff systems.
• Continuous security monitoring with automated alerting for unusual login patterns, suspected account takeover attempts, and anomalous transaction activity.
• Regular security reviews of platform infrastructure and third-party integrations.

Despite these measures, no internet-connected platform can guarantee absolute security. In the event of a data breach that poses a material risk to affected players, e2det will notify affected individuals promptly and take all necessary steps to contain the breach and prevent further harm.

9 Your Rights

As a data subject, you have the following rights in relation to the personal data e2det holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and the specific right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data e2det holds about you, along with information about how it is processed. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that e2det delete your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain (for example, AML transaction records). Where deletion is possible, we will confirm completion within 30 days.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

e2det will not charge a fee for handling data rights requests except in cases of manifestly unfounded or excessive repetition, in which case a reasonable administrative fee may be applied. We will always communicate the reason for any fee before proceeding.

10 Minors & Age Verification

The e2det platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process, and accounts where the holder is found to be under 21 are immediately closed.

If you are a parent or guardian and believe that a minor in your care has accessed e2det and provided personal data, please contact us immediately at [email protected]. We will investigate and, where confirmed, delete all data associated with the minor's account and return any deposited funds to the originating payment method.

11 Third-Party Services

The e2det platform integrates with a number of third-party services necessary to deliver its features. Each third-party service provider operates under its own privacy policy and data protection practices. e2det conducts due diligence on all third-party providers to ensure they meet appropriate data protection standards before integration.

Third-party integrations on the e2det platform include:

• Payment gateways — bKash, Nagad, Rocket, Upay for mobile financial service transactions; Visa and Mastercard network processors for card payments.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios whose games are hosted within the e2det environment.
• Customer communication tools — live chat infrastructure and WhatsApp Business API for customer support delivery.
• Platform analytics tools — used for aggregated, anonymised analysis of platform performance and user experience.
• Security and fraud detection services — used to identify and block fraudulent account activity, bot traffic, and suspicious financial behaviour.

e2det is not responsible for the privacy practices of third-party websites that may be linked to from external sources pointing to e2det. This Privacy Policy applies exclusively to data processed by or on behalf of the e2det platform.

12 Changes to This Policy

e2det reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made — meaning changes that significantly affect your privacy rights or how your data is used — we will notify registered players via on-platform notification or by email to the address registered on your account, providing a minimum of seven (7) days' notice before the revised policy takes effect.

Minor revisions, such as corrections to typographical errors, clarifications of existing practices, or changes required by applicable law, may take effect immediately upon publication without advance notice.

The current version of this Privacy Policy is always available at e2det.io/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was published. We encourage you to review this policy periodically to remain informed of how e2det handles your personal data.

Continued use of the e2det platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, your sole remedy is to close your account and cease using the platform.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data e2det holds about you, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] (include "Privacy Policy" or "Data Rights Request" in the subject line)
• Live Chat: Available 24/7 via the e2det platform
• WhatsApp Support: Available 9:00 AM – 2:00 AM Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to acknowledge all privacy-related enquiries within 24 hours BST and to resolve them within 30 days