eeqq Privacy Policy

01Definitions

In this Privacy Policy, the following definitions apply unless the context clearly requires otherwise:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, National ID number, mobile number, email address, IP address, device identifiers, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" means eeqq, the entity responsible for determining the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of eeqq under a contractual data processing agreement.
• "Platform" means the eeqq website accessible at eeqq.io and all associated services, games, and features.
• "Player" means any individual who registers and holds an account on the Platform.
• "Cookie" means a small text file placed on a Player's device by the Platform for the purposes of session management, analytics, or preference storage.
• "KYC" means Know Your Customer — the identity and age verification process required under the Platform's compliance obligations.
• "AML" means Anti-Money Laundering — the regulatory framework requiring the Platform to monitor and report suspicious financial activity.

02Personal Data We Collect

eeqq collects the following categories of Personal Data from Players and prospective Players. The specific data points collected may vary depending on the services used and the stage of the account lifecycle.

2.1 Registration Data

When you create an eeqq account, we collect the information you provide during the registration process, including:

• Full legal name (as it appears on your government-issued identification document);
• Date of birth (to verify the 21+ age requirement);
• Mobile telephone number (used for OTP verification and account communications);
• Email address;
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other);
• Preferred username and encrypted password hash.

2.2 Identity Verification (KYC) Data

To comply with our age verification and AML obligations, eeqq may request and store copies of the following documents:

• National Identity Card (NID) front and back;
• Passport biographical data page;
• Driving licence;
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 90 days);
• Selfie photograph for liveness verification purposes.

2.3 Financial Data

eeqq collects financial data necessary to process deposits and withdrawals. This includes:

• Registered mobile financial service account numbers for bKash, Nagad, Rocket, and Upay (account number only — eeqq never stores mobile banking PINs or passwords);
• Bank account name and account number for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other bank transfer requests;
• Masked card number (last 4 digits), card type, and billing name for Visa and Mastercard transactions (full card numbers are handled exclusively by PCI-DSS certified payment processors and are never stored by eeqq);
• Transaction history, including deposit amounts, withdrawal amounts, timestamps, and transaction reference numbers.

2.4 Technical & Device Data

eeqq automatically collects certain technical data when you access the Platform, including:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session start and end timestamps;
• Pages and game sessions accessed;
• Referring URL (the web address from which you navigated to eeqq.io).

2.5 Communications Data

If you contact eeqq support via live chat or email, we retain records of those communications, including the content of messages exchanged, timestamps, and the support agent who handled the interaction. This data is used for quality assurance, dispute resolution, and staff training.

2.6 Responsible Gaming Data

Where a Player sets deposit limits, session time limits, loss limits, or activates a self-exclusion, eeqq records and retains those preferences and the dates on which they were set or modified. This data is used to enforce the Player's responsible gaming elections and is not used for marketing analysis.

03How We Collect Your Data

eeqq collects Personal Data through the following channels:

3.1 Directly From You

The majority of Personal Data eeqq holds is provided directly by you — through the account registration form, KYC document upload portal, payment method registration screens, responsible gaming settings, and live chat or email communications with our support team.

3.2 Automatically via the Platform

Technical and device data is collected automatically through server logs and first-party cookies when you access the Platform. This collection is necessary for the secure operation of the Platform and cannot be disabled without preventing access to the service.

3.3 From Third-Party Verification Providers

Where eeqq uses a third-party KYC or identity verification service to validate documents submitted by a Player, that provider may return verification status data (e.g., a pass/fail result and a confidence score) to eeqq. eeqq does not receive raw biometric data from these providers; only the verification outcome and a transaction reference are retained.

3.4 From Payment Processors

When a Player initiates a deposit or withdrawal, the relevant payment processor (bKash, Nagad, Rocket, Upay, or a card payment gateway) transmits transaction confirmation data to eeqq, including the transaction reference number, amount, currency, timestamp, and transaction status. This data is necessary to credit your account Balance and to maintain an accurate financial record.

04Legal Basis for Processing

eeqq processes Personal Data under one or more of the following legal bases, depending on the nature of the processing activity:

05How We Use Your Personal Data

eeqq uses the Personal Data it collects for the following specific purposes:

• Account creation and maintenance: To register your account, verify your identity, manage your account settings, and communicate account-related information such as password reset notifications and security alerts;
• Transaction processing: To process BDT deposits and withdrawals via your registered payment methods, maintain accurate transaction records, and resolve payment disputes;
• Regulatory compliance: To fulfil age verification obligations (21+ requirement), conduct AML transaction screening, and respond to lawful requests from regulatory or law enforcement authorities;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, and unauthorised access attempts;
• Platform operation: To deliver the gaming services, sports betting markets, live dealer games, and other features available on the Platform, and to maintain the technical infrastructure that supports them;
• Responsible gaming: To administer and enforce deposit limits, session time limits, loss limits, and self-exclusion elections made by Players;
• Customer support: To handle enquiries, complaints, and disputes submitted through live chat or email, and to maintain records for quality assurance;
• Marketing communications: To send promotional emails, in-platform notifications, and bonus offer communications to Players who have not opted out. Players may unsubscribe from marketing communications at any time via their account settings or by contacting support;
• Platform improvement: To analyse usage patterns, identify technical issues, and make data-informed decisions about Platform features and user experience improvements.

06Data Sharing and Disclosure

6.1 eeqq does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances.

6.2 eeqq may share your Personal Data with the following categories of third party, strictly for the purposes described:

6.2.1 Payment Service Providers

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard payment gateways receive the minimum transaction data necessary to process your deposit or withdrawal. These providers are independently regulated financial institutions and maintain their own data protection standards.

6.2.2 Game and Software Providers

Certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and account identifier to authenticate your game session. These providers do not receive your full registration data, payment details, or KYC documents unless separately required for regulatory compliance in their own jurisdictions.

6.2.3 Identity Verification Providers

Where a third-party KYC provider is used to verify identity documents, that provider receives the document images and selfie you submit. The provider is contractually bound to use this data solely for verification purposes and to delete it in accordance with our agreed data retention schedule.

6.2.4 Legal and Regulatory Authorities

eeqq will disclose Personal Data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or regulatory directive. Where permitted by law, eeqq will notify the affected Player of such a disclosure.

6.2.5 Business Continuity

In the event of a merger, acquisition, or transfer of substantially all Platform assets to a successor entity, Player Personal Data may be transferred to that successor entity as part of the transaction. Players will be notified of any such transfer before it takes effect and will be given the opportunity to request Account closure if they do not consent to the transfer.

07Cookies and Tracking Technologies

7.1 eeqq uses first-party cookies and similar technologies to operate the Platform. The table below summarises the categories of cookies in use:

7.2 eeqq does not use third-party advertising cookies, social media tracking pixels, or cross-site tracking technologies. The Platform does not participate in programmatic advertising networks.

7.3 Players may manage functional and analytics cookie preferences via the account settings dashboard. Disabling strictly necessary or fraud prevention cookies will result in inability to access the Platform, as these are fundamental to its secure operation.

08Data Retention

8.1 eeqq retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform analytics purposes.

09Your Data Rights

9.1 As a Player whose Personal Data is processed by eeqq, you hold the following rights with respect to your data. To exercise any of these rights, please contact us at [email protected] or via live chat. We will acknowledge your request within 2 business days and aim to provide a substantive response within 10 business days.

• Right of Access: You may request a copy of the Personal Data eeqq holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any of the Personal Data eeqq holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to name, date of birth, or payment method details may require re-submission of KYC documents.
• Right to Erasure: You may request deletion of your Personal Data. eeqq will honour deletion requests to the extent permitted by law. Where data must be retained to fulfil legal or regulatory obligations (e.g., AML record-keeping), eeqq will inform you which data cannot be deleted and the legal reason for retaining it.
• Right to Restriction: You may request that processing of your Personal Data be restricted in certain circumstances, such as while a dispute regarding data accuracy is under investigation.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on eeqq's legitimate interests, including profiling for responsible gaming monitoring purposes. Where you object, eeqq will review the specific processing activity and cease it unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted before the withdrawal.

9.2 eeqq will not charge a fee for handling data rights requests unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied.

10Data Security

10.1 eeqq implements a layered set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL (TLS 1.3) encryption for all data transmitted between the Player's device and the eeqq servers;
• AES-256 encryption for Personal Data and financial records stored in the Platform database;
• Role-based access controls limiting database access to authorised personnel on a strict need-to-know basis;
• Multi-factor authentication required for all internal administrative access to Player data systems;
• OTP (one-time password) mobile verification for Player account login and all withdrawal requests;
• Automated intrusion detection and anomaly monitoring with 24/7 alerting;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Segregated production and development environments — no live Player data is used in development or testing contexts.

10.2 In the event of a data breach that is likely to result in risk to Players' rights, eeqq will notify affected Players without undue delay and no later than 72 hours after becoming aware of the breach. Notifications will describe the nature of the breach, the data categories affected, the likely consequences, and the steps eeqq has taken or intends to take to address it.

10.3 While eeqq maintains robust security infrastructure, no online system can guarantee absolute security. Players are reminded that they share responsibility for the security of their accounts by maintaining strong, unique passwords and reporting any suspected unauthorised access immediately to support.

11Children and Minors

11.1 If eeqq becomes aware that Personal Data has been collected from a person under the age of 21 without verified parental or guardian consent, it will take immediate steps to delete that data and close the associated account. Any balance held in such an account will be subject to the refund procedures set out in the Terms & Conditions.

11.2 If you believe that a minor has registered an account on the Platform, please contact eeqq support immediately at [email protected]. Such reports are treated with the highest priority. eeqq cooperates fully with guardians and relevant authorities in resolving such matters.

12Changes to This Privacy Policy

12.1 eeqq reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data processing practices. The version date displayed at the top of this document identifies the current in-force version.

12.2 Where changes are material — meaning they significantly affect Players' rights or the way Personal Data is processed — eeqq will provide at least 14 days' advance notice by publishing the updated Policy on the Platform and sending a notification to all registered Players via email or in-platform messaging.

12.3 Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If a Player does not accept the amended Policy, they must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

12.4 Previous versions of this Privacy Policy are archived and available upon written request to [email protected].

13Contact and Complaints

13.1 For any questions, concerns, or requests relating to this Privacy Policy or eeqq's data processing practices, please contact our Data Support team using the details below. We are available 24 hours a day, 7 days a week.

13.2 If you are not satisfied with eeqq's handling of a data rights request or complaint, you may escalate the matter in writing to our senior compliance team. Details of the escalation process are available on request via live chat or email.

13.3 For general information about the Platform, you may also visit our About Us page, review our FAQ, or read our Responsible Gaming policy. For the full terms governing your use of the Platform, see our Terms & Conditions.