Privacy Policy – How ey382 Protects Your Personal Data

1 Who We Are

ey382 is an online betting and casino platform ("Platform") that provides sports betting, live casino games, slots, Teen Patti, Andar Bahar, and related gaming services to players in Bangladesh and other eligible jurisdictions. ey382 acts as the data controller in respect of all personal data collected through the Platform. As data controller, ey382 determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities comply with applicable data protection obligations.

References in this Policy to "ey382", "we", "us", or "our" refer to the ey382 platform operator. For any privacy-related enquiry, Players may contact the ey382 data protection contact at support at ey382.io (plain text — not a clickable link).

2 Personal Data We Collect

ey382 collects the following categories of personal data in the course of operating the Platform and providing services to Players:

2.1 Account Registration Data

When you register an account with ey382, we collect: full name, date of birth, gender, email address, mobile phone number, residential address (including city, district, and postcode), username, and password (stored in hashed form — never in plain text).

2.2 Identity Verification (KYC) Data

To comply with our responsible gaming and fraud prevention obligations, we may collect copies of identity documents including your National Identity Card (NID), passport, driving licence, or other government-issued photo identification. We may also collect proof of address documents and documentation confirming ownership of the payment method used for deposits.

2.3 Financial and Transaction Data

We collect data relating to your financial transactions on the Platform, including: deposit and withdrawal amounts and timestamps, the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank name), transaction reference numbers, and account balance history. We do not store full payment instrument credentials such as full card numbers or bKash PINs — these are processed securely by the respective payment service providers.

2.4 Gaming Activity Data

We collect records of your betting and gaming activity on the Platform, including: game type, bet amounts, bet outcomes, session duration, and the responsible gaming tools you have configured. This data is used to detect potential problem gambling behaviour and to fulfil our responsible gaming obligations.

2.5 Technical and Device Data

When you access the Platform, our servers automatically collect: IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, time and duration of visits, and error logs. This data helps us maintain platform performance and security.

2.6 Communication Data

If you contact ey382 support, we will retain records of that correspondence, including the content of emails, chat transcripts, and any attachments you provide. This enables us to track the resolution of your query and to improve support quality over time.

2.7 Marketing Preference Data

Where you have opted in to receive promotional communications from ey382, we maintain a record of your marketing preferences, the communications sent to you, and your interaction with those communications (e.g., email open rate, link clicks) to the extent permitted by applicable law.

The following table summarises the main data categories and their primary purpose:

3 How We Collect Your Data

ey382 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically: through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the Platform.
• From payment providers: transaction confirmation and status data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard in connection with deposit and withdrawal processing.
• From game providers: aggregated game session data from third-party game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi in connection with the provision of casino game services.
• From fraud and identity verification services: risk scoring data and document verification results from third-party KYC and anti-fraud service providers engaged by ey382.

4 Legal Basis for Processing

ey382 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, settle bets, and deliver the services you have requested from ey382.
• Legal obligation: Processing required to comply with applicable laws, including KYC and age verification requirements, anti-money laundering obligations, and record-keeping requirements.
• Legitimate interests: Processing necessary for ey382's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 How We Use Your Personal Data

ey382 uses the personal data we collect for the following purposes:

5.1 Account Management

To create, maintain, and manage your ey382 account, including processing your registration, authenticating your identity at login, updating your account details, and managing account closures or self-exclusion requests.

5.2 Transaction Processing

To process deposits, withdrawals, and bet settlements. This includes communicating with payment service providers to authorise and confirm transactions and to investigate disputed transactions.

5.3 Identity and Age Verification

To verify that you meet the minimum age requirement of 21 years and to confirm your identity as part of ey382's KYC process. This is a mandatory requirement for access to real-money services on the Platform.

5.4 Responsible Gaming

To monitor gaming activity patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to proactively reach out to Players where ey382 identifies behaviour consistent with gambling-related harm.

5.5 Fraud Prevention and Security

To detect and prevent fraudulent activity, bonus abuse, money laundering, account takeover, and other forms of abuse or illegal conduct on the Platform. This includes automated risk scoring, device fingerprinting, and IP analysis.

5.6 Customer Support

To respond to your enquiries, resolve complaints, and provide technical assistance. Support records are retained to enable follow-up and to improve the quality of ey382's support services.

5.7 Platform Improvement

To analyse aggregated usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the Platform. Where possible, this analysis is carried out on anonymised or pseudonymised data.

5.8 Marketing Communications

Where you have explicitly opted in, to send you promotional offers, bonus notifications, tournament announcements, and other marketing communications related to ey382 services. You may opt out at any time by contacting ey382 support or by following the unsubscribe instructions included in any marketing email.

5.9 Legal Compliance

To comply with applicable laws, regulatory requirements, court orders, or lawful requests from government authorities. ey382 will disclose personal data to authorities only to the extent required by law and will, where legally permissible, notify the affected Player prior to such disclosure.

6 Data Sharing and Disclosure

ey382 does not sell, rent, or trade your personal data to third parties for their independent commercial or marketing purposes. We share personal data only in the following circumstances:

6.1 Payment Service Providers

We share the personal and financial data necessary to process your transactions with our approved payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your data solely for the purpose of completing your transaction and are bound by their own privacy and security obligations.

6.2 Game Providers

We share a limited set of player identifiers with third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — to enable the delivery of casino game services. These providers do not receive your full profile or financial data; they receive only a pseudonymised player reference, your account currency, and your balance where required by the game integration.

6.3 Identity Verification and Fraud Prevention Services

We share identity document data and transaction data with third-party KYC and fraud prevention service providers for the purpose of verifying your identity and assessing fraud risk. These providers operate under strict data processing agreements with ey382.

6.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, where necessary to protect the legal rights of ey382 or third parties, or where such disclosure is necessary to prevent or investigate suspected illegal activity.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ey382's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and given the opportunity to request deletion of your data prior to the transfer taking effect, subject to any overriding legal retention requirements.

7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. ey382 uses cookies and similar technologies (including web beacons and local storage) to ensure the Platform functions correctly, to improve your experience, and to gather aggregated analytics data.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how Players use the Platform, such as which pages are visited most frequently and where technical errors occur. This data is used solely to improve Platform performance.
• Functional cookies: Used to remember your preferences, such as your selected language, preferred odds format, and notification settings, so you do not need to re-enter them on each visit.
• Fraud prevention cookies: Used as part of ey382's device fingerprinting and fraud detection processes. These cookies help identify suspicious activity patterns across sessions and devices.

7.3 Managing Cookies

You may configure your browser to reject or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including your ability to log in and maintain an active session. Instructions for managing cookies are available in your browser's help documentation. ey382 does not respond to browser Do Not Track signals at this time.

8 Data Security

ey382 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ey382 servers, ensuring that information in transit cannot be intercepted by third parties.
• One-way password hashing using a recognised cryptographic algorithm, ensuring that your password cannot be recovered in plain text by any party — including ey382 staff.
• Access controls that restrict access to personal data within ey382 to authorised personnel with a documented business need. Administrative access is protected by multi-factor authentication.
• Regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Data centre security including physical access controls, 24/7 monitoring, and redundant infrastructure to protect against hardware failure and environmental threats.
• Incident response procedures that ensure any suspected data breach is investigated promptly, affected Players are notified without undue delay, and appropriate remediation steps are taken.

While ey382 takes all reasonable steps to protect your personal data, no security system is completely impenetrable. You are responsible for maintaining the security of your own account credentials and for notifying ey382 immediately if you suspect unauthorised access to your account.

9 Data Retention

ey382 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applicable to each data category are summarised in the table in Section 2 of this Policy.

Upon expiry of the applicable retention period, ey382 will securely delete or anonymise the relevant personal data. Where anonymisation is applied, the resulting data can no longer be linked back to any individual and is no longer subject to this Policy.

Where you request deletion of your personal data before the end of the applicable retention period, ey382 will action that request to the extent permitted by law. In some cases, ey382 may be required by law to retain certain data (particularly financial transaction records) for a minimum period regardless of your deletion request; in such cases, ey382 will inform you of the data being retained and the legal basis for doing so.

10 Your Data Rights

As an ey382 Player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact ey382 support in writing at support at ey382.io. ey382 will respond to all data rights requests within 20 business days of receipt.

10.1 Right of Access

You have the right to request a copy of the personal data ey382 holds about you, together with information about how that data is being used, with whom it has been shared, and for how long it will be retained.

10.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where a correction is made, ey382 will notify relevant third parties who hold the same data where technically feasible.

10.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the data has been processed unlawfully, subject to any overriding legal retention requirements that prevent deletion.

10.4 Right to Restriction of Processing

You have the right to request that ey382 restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while ey382 verifies it, or where you have objected to processing pending verification of whether ey382's legitimate interests override your rights.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.

10.6 Right to Object

You have the right to object to processing of your personal data where that processing is carried out on the basis of ey382's legitimate interests. You have an absolute right to object to the use of your data for direct marketing purposes; ey382 will honour such objections immediately upon receipt.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting ey382 support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11 Children's Privacy

The ey382 Platform is strictly intended for adults aged 21 years and above. ey382 does not knowingly collect personal data from individuals under the age of 21. If ey382 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all relevant data will be deleted, and any associated balance may be withheld pending investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account with ey382, please contact ey382 support immediately at support at ey382.io so that the account can be closed and the data deleted without delay.

12 Third-Party Links

The ey382 Platform may contain references to third-party payment providers and game studios whose own platforms and services operate under their own privacy policies. ey382 is not responsible for the privacy practices of third-party providers and encourages Players to review the privacy policies of any third-party services they use in connection with their ey382 account. This Policy applies solely to personal data collected and processed by ey382 in connection with the Platform.

13 Updates to This Privacy Policy

ey382 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — ey382 will notify registered Players via the email address associated with their account at least 7 days before the changes take effect.

Continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. The most current version of this Policy is always available at /privacy-policy. We recommend reviewing this Policy periodically to stay informed of how ey382 protects your information.

Last reviewed and updated: 1 January 2026. This Policy supersedes all prior versions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to ey382's handling of your personal data, please contact the ey382 data protection team. All privacy-related enquiries are handled by trained personnel and will receive a substantive response within 20 business days.

Contact email: support at ey382.io (plain text — not a clickable link)

Please include "Privacy Request" in the subject line of your email, along with your registered username and a clear description of your request. Providing your registered email address and username will help ey382 verify your identity and process your request more efficiently.