eg88 Privacy Policy

1 Introduction

eg88 ("we", "us", "our") operates the online gaming platform at eg88.io (the "Platform"), offering casino games, live dealer tables, sports betting, and related services to players in Bangladesh. This Privacy Policy ("Policy") describes how eg88 collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your") who access or use the Platform.

This Policy applies to all registered players, prospective players who have initiated but not completed registration, and visitors who browse the Platform without registering. By using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the eg88 Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall take precedence.

2 Data We Collect

eg88 collects the following categories of personal data. The specific data points collected in each category may vary depending on the nature of your interaction with the Platform.

eg88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health information unless specifically required by applicable law or with your explicit prior consent.

3 How We Collect Your Data

eg88 collects personal data through the following means:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated Collection: Technical and usage data collected automatically as you interact with the Platform, via server logs, session tracking, and analytics tools. This includes your IP address, device identifiers, and browsing behaviour within the Platform.
• Payment Processors: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity Verification Partners: Where eg88 uses a third-party KYC service to verify the authenticity of identity documents, that service may return verification status information and document metadata to eg88.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and similar tracking technologies placed on your browser when you visit the Platform. See Section 7 for full details.
• Fraud Prevention Services: Risk signals and device reputation data from third-party fraud detection services used to protect the integrity of the Platform.

4 Why We Use Your Data

eg88 uses the personal data we collect for the following purposes. We process data only where a legitimate purpose and a lawful basis for processing exist (see Section 5).

• Account Management: Creating, maintaining, and managing your registered eg88 account, including verifying your identity and age at registration and at withdrawal.
• Service Delivery: Enabling you to access casino games, live dealer tables, sports betting markets, and all other features of the Platform.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and maintaining accurate financial records of all transactions.
• Legal Compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and other legal and regulatory requirements that apply to online gaming platforms operating in Bangladesh.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, collusion, bonus abuse, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusion restrictions set by the player, and communicating responsible gaming information.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Marketing and Promotions: Sending promotional communications about eg88 bonuses, seasonal offers, and new games — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated usage data to understand how players use the Platform and to improve the user experience, performance, and game selection.
• Legal Proceedings: Preserving and disclosing data where required in connection with legal claims, regulatory investigations, or court orders.

5 Legal Basis for Processing

eg88 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the eg88 Terms & Conditions, including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, tax reporting requirements, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate Interests: Processing that serves eg88's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which we have obtained your explicit prior consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Disclosure

eg88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: Transaction data is shared with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard solely to facilitate the processing of deposits and withdrawals.
• Identity Verification Services: Identity document data is shared with KYC verification partners for the sole purpose of confirming player eligibility and age. These partners are contractually bound to process the data only for verification purposes.
• Fraud Prevention and Security Partners: Technical and behavioural data may be shared with fraud detection services to identify and prevent abuse of the Platform.
• Game Software Providers: Certain game session data may be transmitted to licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe) as part of the game delivery infrastructure. These studios are bound by data processing agreements with eg88.
• Legal and Regulatory Authorities: eg88 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or where eg88 reasonably believes disclosure is necessary to protect the rights, property, or safety of eg88, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of eg88's assets, personal data may be transferred to the acquiring entity, subject to the acquiring entity assuming the same privacy obligations set out in this Policy.

All third-party service providers who receive personal data from eg88 are required to process that data only on eg88's documented instructions, to maintain appropriate technical and organisational security measures, and not to engage further sub-processors without eg88's prior written consent.

7 Cookies & Tracking Technologies

The eg88 Platform uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and help prevent fraud. Cookies are small text files stored on your device by your browser when you visit the Platform.

eg88 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic functions of the Platform to operate, including maintaining your login session, remembering your account settings, and processing secure transactions. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and recently played games, to provide a more personalised experience on subsequent visits.
• Analytics Cookies: Used to collect aggregated data about how players use the Platform — such as which pages are visited most frequently and where players encounter errors — to help eg88 improve the Platform experience over time.
• Security Cookies: Used to authenticate users, prevent fraudulent use of login credentials, and protect the Platform against cross-site request forgery (CSRF) and session hijacking attacks.

You may control cookie settings through your browser's privacy or settings menu. Disabling non-essential cookies will not affect your ability to register or play on the Platform, though some preference-based features may be limited.

8 Data Retention

eg88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Account Data: Retained for the lifetime of your active account plus a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Deposit and withdrawal transaction records are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Customer support correspondence is retained for three (3) years from the date of the most recent interaction.
• Technical and Usage Data: Server logs and usage data are retained for up to thirteen (13) months for security, analytics, and fraud investigation purposes.
• Marketing Consent Records: Records of consent and withdrawal of consent for marketing communications are retained for five (5) years as evidence of lawful processing.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

eg88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:

• Encryption in Transit: All data transmitted between your device and the eg88 Platform is encrypted using TLS 1.3 (Transport Layer Security). This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored on eg88's servers, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within eg88's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular security training and are bound by confidentiality obligations.
• Two-Factor Authentication: Player accounts support SMS OTP-based two-factor authentication. eg88 strongly recommends enabling 2FA to protect your account against unauthorised access.
• Penetration Testing: eg88's Platform infrastructure undergoes periodic security assessments and penetration testing by independent security specialists to identify and remediate vulnerabilities.
• Incident Response: eg88 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities in accordance with applicable legal requirements.

While eg88 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring your own device and network security when accessing the Platform.

10 Your Rights Over Your Data

As a data subject, you hold the following rights in relation to the personal data eg88 holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". eg88 will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data eg88 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. You may update basic account details directly through your account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to eg88's legal obligation to retain certain data for regulatory compliance purposes.
• Right to Restrict Processing: You may request that eg88 restricts the processing of your data — for example, while a correction request is being assessed — rather than deleting it outright.
• Right to Data Portability: Where data has been processed on the basis of consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where eg88 relies on legitimate interests as the legal basis. You also have the absolute right to object to processing for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions made solely by automated processing — including profiling — that produce significant legal or similarly significant effects on you, without the opportunity for human review.

11 Children's Privacy

The eg88 Platform is strictly for adults aged 21 years and above. eg88 does not knowingly collect personal data from individuals under the age of 21. If eg88 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be deleted as soon as practicable.

If you believe that a minor may have registered on the eg88 Platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We take all such reports seriously and will investigate and act promptly.

12 Third-Party Links

The eg88 Platform may contain links to third-party websites or services in informational or promotional contexts. These third-party sites are independent of eg88 and are governed by their own privacy policies. eg88 has no control over, and accepts no responsibility for, the privacy practices or content of any third-party site.

We encourage you to review the privacy policy of any third-party website you visit before providing any personal data to that site. The inclusion of a link on the eg88 Platform does not imply eg88's endorsement of the linked site or its privacy practices.

13 Updates to This Policy

eg88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our business. The most current version of this Policy is always available at eg88.io/privacy-policy, with the effective date updated accordingly.

Where changes to the Policy are material — meaning they significantly affect the way we collect, use, or share your personal data — eg88 will notify registered players via the mobile number or email address associated with their account at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree with any changes to the Policy, you should cease using the Platform and may request account closure by contacting support.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way eg88 processes your personal data, please reach out to the eg88 Data Privacy team using the details below:

eg88 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.