ep66 Privacy Policy – How We Protect Your Personal Data

1. Introduction

ep66 ("we", "us", or "our") operates the online casino and sports betting platform accessible at ep66.app (the "Platform"). We are committed to protecting the privacy and personal data of every player who uses our Platform. This Privacy Policy ("Policy") sets out in clear terms what personal information we collect, the purposes for which we use it, the conditions under which we may share it, and your rights in relation to your personal data.

This Policy applies to all personal data collected through the Platform, including data provided during registration, during account verification (KYC), during deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and through your general use of the Platform. By registering an account on ep66 or using our services, you acknowledge that you have read this Policy and agree to the collection and use of your information as described herein.

2. Information We Collect

ep66 collects personal information in several categories depending on how you interact with the Platform. The categories below set out what we collect, why we collect it, and how it is generated.

3. How We Use Your Information

ep66 uses personal information only for the purposes set out in this Policy. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which we use personal data are set out below.

• Account Management
  To create and maintain your ep66 Account, verify your identity and age (KYC), process your deposits and withdrawals, and provide access to all Platform features including games, betting markets, and promotions.
• Fraud and Security
  To detect and prevent fraud, money laundering, multiple account abuse, bonus abuse, underage gambling, and other prohibited activities. Technical data and activity data are integral to our fraud detection systems.
• Legal Compliance
  To comply with applicable legal obligations, including maintaining transaction records, responding to lawful requests from authorities, and conducting KYC and anti-money-laundering checks as required by applicable standards.
• Service Improvement
  To analyse Platform usage patterns, identify technical issues, improve game performance, optimise the Platform for mobile networks used in Bangladesh (including Grameenphone, Robi, Banglalink, and Teletalk), and develop new features.
• Customer Support
  To respond to your support queries submitted via [email protected], resolve disputes, process account closure requests, and provide responsible gaming assistance including self-exclusion processing.

4. Legal Basis for Processing

ep66 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used.

• Contractual Necessity
  Processing is necessary to perform the contract between you and ep66 — i.e., to operate your Account, process your transactions, and deliver the gaming and betting services you have registered to use.
• Legal Obligation
  Processing is necessary to comply with a legal obligation applicable to ep66, including KYC verification requirements, transaction record-keeping, and responding to lawful authority requests.
• Legitimate Interests
  Processing is necessary for ep66's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming enforcement — provided those interests are not overridden by your own data protection rights.
• Consent
  Where ep66 relies on your consent as the legal basis for processing — for example, for sending you promotional communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Information

ep66 does not sell your personal data to any third party, under any circumstances. We do not share your personal data with advertising networks, data brokers, or any commercial third party for their own marketing purposes.

ep66 may share personal data with the limited categories of third parties described below, and only to the extent necessary for the specified purpose.

• Payment Processors
  Transaction data (wallet number, amount, reference) is shared with bKash, Nagad, Rocket, Upay, and relevant banking partners solely to process your deposits and withdrawals. These providers handle your transaction data under their own privacy policies and are not permitted to use it for any other purpose.
• Game and Technology Providers
  Limited technical and activity data may be shared with licensed game studios (such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe) and technology infrastructure providers solely to operate game sessions, ensure RNG integrity, and maintain platform performance. These providers act as data processors on ep66's instructions.
• Legal Authorities
  ep66 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid court order, or a lawful authority request. ep66 will, where legally permitted, notify the affected player of any such disclosure.

6. Payment Data and KYC

When you make a deposit or withdrawal on ep66 via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through that payment provider's own infrastructure. ep66 records the mobile wallet number associated with your Account, the transaction reference number provided by the payment provider, and the amount deposited or withdrawn. ep66 does not have access to, store, or process your bKash PIN, Nagad PIN, banking passwords, or any authentication credentials used within those payment applications.

As part of ep66's KYC (Know Your Customer) process, we may request identity verification documents — such as a national ID card (NID) or passport — from players prior to processing large withdrawals, in cases of suspected fraud, or as required by applicable due diligence standards. KYC documents are stored securely, used only for the purposes of identity verification and legal compliance, and are never shared with commercial third parties.

7. Cookies and Tracking Technologies

ep66 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and improve Platform performance on mobile devices across Bangladesh. We do not use third-party advertising cookies or tracking pixels that serve advertisements on other websites.

Most mobile browsers allow you to control or disable cookies through browser settings. However, disabling essential cookies will prevent you from logging in or using core Platform features. Since ep66 is a mobile-first platform, we recommend keeping essential cookies enabled for the best experience on Android and iOS devices.

8. Data Retention

ep66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy. The specific retention periods we apply are as follows: Account data and KYC documents are retained for the duration of your Account and for a minimum of 5 years following Account closure, in line with anti-money-laundering record-keeping standards. Transaction records (deposit and withdrawal history) are retained for a minimum of 5 years. Support correspondence is retained for 2 years from the date of the last interaction.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, it may be retained for analytical purposes indefinitely, as anonymised data no longer constitutes personal data.

9. Data Security

ep66 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and the ep66 Platform; encrypted storage of sensitive data at rest; access controls limiting which ep66 personnel can access personal data, on a need-to-know basis; regular security testing and vulnerability assessments of the Platform infrastructure.

While ep66 takes all reasonable steps to protect your personal data, no data transmission over the internet or mobile network is 100% secure. You are responsible for keeping your own Account login credentials confidential. If you believe your Account has been compromised, please contact [email protected] immediately so we can suspend your Account and investigate.

10. Your Data Rights

You have the following rights in relation to the personal data that ep66 holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all verifiable rights requests within 30 days.

• 👁️
  Right of Access

  You have the right to request a copy of the personal data ep66 holds about you, along with information about how it is used.
• ✏️
  Right to Rectification

  You have the right to request correction of any inaccurate personal data ep66 holds about you, or to have incomplete data completed.
• 🗑️
  Right to Erasure

  You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ep66's legal obligations to retain certain records (such as transaction history and KYC documents) for compliance purposes.
• ⛔
  Right to Object

  You have the right to object to ep66 processing your personal data on the basis of legitimate interests, including for direct marketing or profiling. If you object, ep66 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• 📦
  Right to Data Portability

  Where processing is based on your consent or on a contract with you, you have the right to receive a structured, machine-readable copy of the personal data you have provided to ep66, and to request that it be transmitted to another controller where technically feasible.

11. Children and Minors

The ep66 Platform is strictly for adults aged 21 years and above. ep66 does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated Account.

12. Changes to This Privacy Policy

ep66 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where practical, provide notice to Players via the Platform. Your continued use of the ep66 Platform after any changes to this Policy constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically so that you are always informed about how ep66 handles your personal data. If you do not agree to a revised Privacy Policy, you must stop using the Platform and may request Account closure in accordance with the Terms & Conditions.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how ep66 handles your personal data, please contact our support team. All privacy-related requests and queries must be submitted in writing via email. ep66 does not handle privacy requests by telephone.

Privacy contact: [email protected] — We aim to respond to all data rights requests within 30 days and general privacy queries within 5 business days (Bangladesh Standard Time, UTC+6).