e2bat Privacy
Policy

This Privacy Policy describes how e2bat ("e2bat", "we", "us", "our"), accessible at https://e2bat.im, collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player") who visit our website, register an account, or use any of our Services.

This Policy applies to all personal data processed in connection with your use of the e2bat Platform, regardless of whether you access it via desktop browser, mobile browser, or any other device. It applies to current and former registered Players, as well as to visitors who browse the website without registering.

By accessing the e2bat Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the e2bat Platform.

This Privacy Policy should be read together with e2bat's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

e2bat acts as the data controller in respect of all personal data collected through the Platform. As data controller, e2bat determines the purposes for which your personal data is processed and the means by which that processing takes place.

All data-related enquiries, access requests, and complaints should be directed to the e2bat support team using the contact details set out in Section 15 of this Policy. e2bat is committed to responding to all data-related communications promptly and in accordance with applicable data protection principles.

Depending on how you interact with the e2bat Platform, we may collect the following categories of personal data:

Category	Examples of Data Collected	Collection Trigger
Identity Data	Full name, date of birth, National ID number, photograph	Registration, KYC verification
Contact Data	Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet)	Registration, account updates
Financial Data	bKash / Nagad / Rocket account number, transaction reference numbers, deposit and withdrawal history	Deposit, withdrawal, KYC
Technical Data	IP address, device type, operating system, browser type and version, session tokens	Every platform visit
Usage Data	Pages visited, games played, bets placed, time spent per session, feature interactions	Active platform use
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support interactions
Verification Documents	Copies of NID, passport, driving licence, proof of payment method ownership	KYC / identity verification process

e2bat does not collect special categories of sensitive personal data (such as biometric data, health data, or political opinions) except where strictly required by law or where you have provided explicit consent for a specific purpose.

e2bat collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a survey, or otherwise interact with the Platform.
• Automatically: Through cookies, server logs, and tracking pixels that capture technical and usage data when you visit the Platform. See Section 8 for full details on our cookie practices.
• From payment providers: Transaction confirmation data and limited account identification data shared by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank as part of payment processing.
• From KYC / identity verification partners: Verification status and document authenticity results returned by our third-party KYC service providers.
• From fraud and security partners: Risk signals and device fingerprinting data used to detect and prevent fraudulent account activity, bot traffic, and collusion.

e2bat processes your personal data only where a valid legal basis exists. The primary legal bases on which e2bat relies are:

• Contractual necessity: Processing is necessary to perform our contract with you — that is, to provide the e2bat Services, manage your account, and process your transactions.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) laws, know-your-customer (KYC) regulations, and financial record-keeping requirements.
• Legitimate interests: Processing is necessary for e2bat's legitimate business interests, including fraud prevention, platform security, product improvement, and customer support, where those interests are not overridden by your own privacy rights.
• Consent: Where you have given explicit, freely given, specific, and informed consent — for example, for the receipt of promotional communications or for the use of non-essential cookies.

e2bat uses the personal data we collect for the following specific purposes:

• To create and manage your e2bat Account, including verifying your identity and age in compliance with our 21+ policy.
• To process deposits and withdrawals via your registered payment method, and to maintain accurate financial records of all transactions.
• To provide customer support, respond to your enquiries, and resolve disputes or complaints in a timely and fair manner.
• To detect, investigate, and prevent fraud, money laundering, account manipulation, and other prohibited conduct described in the Terms & Conditions.
• To personalise your experience on the Platform, including game recommendations, promotional offers relevant to your activity, and responsible gaming reminders based on your play patterns.
• To enforce our responsible gaming tools — including deposit limits, cool-off periods, and self-exclusion — and to identify players who may be at risk of gambling-related harm.
• To send you transactional communications, including deposit confirmations, withdrawal updates, account alerts, and security notifications. These communications are not marketing and cannot be opted out of while your account is active.
• To send you promotional communications (such as bonus offers and tournament announcements) where you have consented to receive them.
• To analyse usage patterns and improve the technical performance, security, and content quality of the e2bat Platform.
• To comply with applicable law, respond to regulatory requests, and enforce our legal rights where necessary.

e2bat does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the transaction-level data necessary to process your deposits and withdrawals. These providers have their own privacy obligations under applicable law.
• KYC and identity verification providers: Third-party verification services receive copies of your identity documents to carry out automated and manual identity checks. These providers are contractually bound to process your data only for the purposes of KYC verification.
• Game and technology providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical identifiers (such as an anonymised player ID) necessary to deliver their games on our Platform. They do not receive your full identity or financial data.
• Fraud prevention and security partners: Risk and compliance vendors receive technical data (IP address, device fingerprint, session metadata) to help detect and prevent fraud, multi-accounting, and money laundering.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, e2bat may disclose personal data to relevant authorities. e2bat will not disclose data to law enforcement beyond what is legally required.
• Professional advisers: Lawyers, accountants, and auditors acting on e2bat's behalf may access personal data on a need-to-know basis under strict confidentiality obligations.

All third parties with whom e2bat shares personal data are required to maintain the confidentiality of that data and to use it only for the purposes for which it was shared. e2bat does not permit third-party recipients to use your data for their own marketing purposes.

e2bat uses cookies and similar tracking technologies to operate the Platform, improve user experience, and collect analytical data. A cookie is a small text file placed on your device when you visit a website. e2bat uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how Players use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve Platform performance and content.
• Functional cookies: Used to remember your preferences, such as your preferred language setting and display options, so that you do not have to re-enter them on each visit.
• Marketing and targeting cookies: Used, with your consent, to deliver promotional content relevant to your interests. These cookies may track your browsing activity across sessions. You may opt out of these cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the e2bat Platform. Continued use of the Platform without adjusting your browser settings constitutes consent to the use of strictly necessary and functional cookies.

e2bat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and e2bat servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised e2bat personnel can access personal data, and only to the extent required for their role.
• Multi-factor authentication (MFA) for internal e2bat systems that process personal data.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Intrusion detection and anomaly monitoring systems that alert the security team to suspicious access patterns in real time.
• Secure data centres with physical access controls, environmental protections, and redundant backup systems.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, e2bat will notify affected Players as soon as reasonably practicable.

e2bat retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal obligation (AML / KYC)
Financial transaction records	7 years from transaction date	Legal obligation (financial record-keeping)
KYC identity documents	Duration of account + 5 years after closure	Legal obligation (AML regulations)
Customer support correspondence	3 years from last interaction	Legitimate interest (dispute resolution)
Technical / usage logs	13 months from collection date	Legitimate interest (security, analytics)
Marketing consent records	Until consent is withdrawn + 1 year	Legal obligation (consent records)

Where personal data is no longer required, e2bat securely deletes it or anonymises it in a manner that ensures it cannot be attributed to any identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law and the verification of your identity, you have the following rights in relation to your personal data held by e2bat:

• Right of access: You may request a copy of all personal data that e2bat holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to rectification: You may request that any inaccurate or incomplete personal data be corrected. Minor corrections (such as updating a mobile number) can be made directly within your Account Settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to overriding legal obligations — for example, e2bat must retain financial records and KYC documents for the periods specified in Section 10.
• Right to restriction of processing: You may request that e2bat restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, you may request that e2bat provide your personal data in a machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing that is based on e2bat's legitimate interests, including direct marketing. Where you object to direct marketing, e2bat will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

To exercise any of the above rights, please contact e2bat support at the address set out in Section 15. e2bat will acknowledge your request within 72 hours and respond in full within 30 calendar days. We may ask you to verify your identity before processing a data rights request.

The e2bat Platform is strictly for individuals aged 21 years and above. e2bat does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in our registration and KYC processes.

If e2bat becomes aware that personal data has been collected from an individual under the age of 21 without appropriate age verification having occurred, we will delete that data immediately and close the associated account. If you believe that a minor has registered an account on the e2bat Platform, please contact us immediately at [email protected].

The e2bat Platform may reference or display content from third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While e2bat takes care in selecting reputable technology partners, we are not responsible for the privacy practices of third-party providers once you leave or interact directly with their platform interfaces.

Game provider interfaces embedded within the e2bat Platform operate under the privacy frameworks of the respective provider. We encourage you to review the privacy policies of any third-party services you interact with directly. e2bat does not control the data-handling practices of external providers beyond our contractual obligations with them.

e2bat reserves the right to update this Privacy Policy at any time. Where a change is material — meaning it significantly affects how your personal data is used or the rights available to you — e2bat will provide reasonable advance notice via the Platform or by direct communication to your registered contact details.

The "Last updated" date displayed at the top of this Policy reflects the most recent revision. Continued use of the e2bat Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. e2bat recommends that you review this Policy periodically to stay informed of any changes.

For all privacy-related enquiries, data access requests, complaints, or to exercise any of the rights described in Section 11, please contact the e2bat Data Protection team. All communications must be submitted in English.

Email: [email protected]
Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Platform: https://e2bat.im

e2bat aims to acknowledge all privacy enquiries within 72 hours and to resolve them fully within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with e2bat's response to a privacy complaint, you have the right to escalate the matter through the appropriate formal channels available in your jurisdiction.