ec666 Privacy Policy

What This Policy Covers

The following six cards summarise ec666's core privacy commitments. Full details are in the numbered sections below. We recommend reading the complete policy before using the platform.

Who We Are and How to Reach Us

ec666 is an online gaming platform operating at ec666.club and targeting players in Bangladesh. ec666 acts as the data controller in respect of all personal data collected through the platform, meaning we are responsible for deciding how and why your personal data is processed.

If you have any questions about this Privacy Policy, about how ec666 handles your data, or about your rights, you can reach ec666 support at any time via live chat (available 24/7 inside your account) or by email at [email protected].

What Personal Data We Collect

ec666 collects personal data in five broad categories. The table below summarises the categories and examples of the data within each. Data is collected either directly from you (when you register, deposit, or contact support) or automatically (when you use the platform and our systems record technical information about your session).

How We Use Your Personal Data

ec666 uses the personal data we collect for the following purposes. Each purpose is tied to a legitimate legal basis, which is set out in Section 4 of this Policy.

• To create and manage your ec666 account, including verifying your identity at registration and during KYC reviews, maintaining your account settings (including responsible gaming preferences), and securing access to your account.
• To process deposits and withdrawals via bKash, Nagad, Rocket, and supported bank transfer channels, and to maintain accurate transaction records for your account and for AML compliance.
• To operate the gaming platform — including providing access to games, settling bets, calculating and crediting bonus funds, enforcing wagering requirements, and maintaining game session records for audit and dispute resolution purposes.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, multi-accounting, bonus abuse, and other prohibited activities as defined in the ec666 Terms & Conditions.
• To provide customer support, including responding to live chat queries, handling withdrawal and deposit disputes, assisting with responsible gaming tool setup, and recording support interactions for quality assurance.
• To send you account-related communications via SMS to your registered mobile number, including transaction confirmations, deposit receipts, withdrawal notifications, security alerts, and responsible gaming reminders.
• To send you promotional communications (bonus offers, seasonal promotions, tournament announcements) via SMS — but only where you have provided consent. You can withdraw your marketing consent at any time by contacting ec666 support via live chat.

Legal Basis for Processing Your Data

ec666 processes personal data only where there is a lawful basis for doing so. The four legal bases on which ec666 relies are set out below, with the processing activities each basis covers.

• Contractual necessity: Processing that is necessary to perform the contract between ec666 and the player. This covers account creation and management, payment processing, game operation, bet settlement, and customer support.
• Legal obligation: Processing that is necessary to comply with applicable laws and regulatory requirements, including AML transaction monitoring, KYC identity verification, and the reporting of suspicious transactions to relevant authorities.
• Legitimate interests: Processing for purposes that are in ec666's legitimate business interests and that do not override the player's rights or privacy. This covers fraud detection, security monitoring, platform improvement, and aggregate analytics.
• Consent: Processing for marketing communications (promotional SMS). Consent is optional and can be withdrawn at any time. Withdrawing marketing consent does not affect your ability to use the ec666 platform.

Data Sharing and Third-Party Processors

ec666 does not sell your personal data. We share data with third parties only in the following circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors: ec666 shares your payment method identifier and transaction amount with bKash, Nagad, Rocket, and supported bank transfer networks solely for the purpose of processing deposits and withdrawals. ec666 does not share your full financial profile with payment processors — only the data required to execute a specific transaction.
• Game providers: ec666 shares a pseudonymised player identifier (not your name, mobile number, or payment details) with game providers (including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to enable game sessions. Game providers do not receive your real identity or financial data.
• Regulatory and law enforcement authorities: ec666 may share account and transaction data with relevant authorities where required by applicable law, including AML compliance reporting obligations and responses to valid legal process (court orders, law enforcement requests). ec666 will notify the affected player of such disclosure where legally permitted to do so.
• IT and platform service providers: ec666 uses third-party cloud hosting, SMS gateway, and customer support software providers. These providers act as data processors on ec666's behalf under contractual data processing agreements and may not use your data for their own purposes.

Payment Data and Financial Information

All financial transactions on ec666 are processed in Bangladeshi Taka via locally regulated payment channels including bKash, Nagad, Rocket, and bank transfers through Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. ec666 does not store your full mobile wallet PIN, bank account password, or card CVV number. ec666 only stores the payment account identifiers necessary to process your transactions and to match your withdrawal to the correct payment method.

Transaction records — including the date, amount, payment method identifier, and outcome of each deposit and withdrawal — are retained for a minimum of five years from the date of the transaction in compliance with AML record-keeping requirements. These records may be shared with relevant authorities pursuant to a valid legal request. After the retention period expires, transaction records are permanently deleted from ec666's systems.

Cookies and Tracking Technologies

ec666 uses cookies and similar tracking technologies on the ec666.club platform to deliver a functional and secure gaming experience. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These cookies maintain your session state (keeping you logged in during a session), remember your account preferences, and enable security features such as CSRF protection and fraud detection. Essential cookies cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to collect aggregate, anonymised data about how players use the platform — including which pages are visited, session duration, and navigation paths. This data is used solely to improve platform performance and user experience. Analytical cookies do not identify you personally.
• Functional cookies: Used to remember your in-platform preferences — such as your last-used game category, language display preference, and responsible gaming reminder settings. Functional cookies are not required for basic platform operation but improve the convenience of your experience.

ec666 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your mobile browser settings. Disabling essential cookies may impair your ability to log in or use certain platform features.

Data Retention Periods

ec666 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The retention periods for the main categories of data are set out below:

Your Data Protection Rights

As a user of the ec666 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact ec666 support via live chat or by email at [email protected]. ec666 will respond to all valid requests within 7 business days.

• Right of access: You have the right to request a copy of the personal data ec666 holds about you, together with information about how it is used and with whom it is shared. ec666 will provide this in a portable, readable format within 7 business days of a verified request.
• Right to rectification: You have the right to request correction of inaccurate personal data ec666 holds about you. You can update most account details (such as your email address or contact preferences) directly from your account settings without contacting support.
• Right to erasure: You have the right to request deletion of your personal data. ec666 will honour erasure requests subject to legal retention obligations. Where ec666 is required by law to retain data (such as AML transaction records), we will inform you of the specific obligation and the date on which that data will be deleted.
• Right to restrict processing: You have the right to request that ec666 restricts the processing of your personal data — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and ec666 is reviewing that objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller of your choice.
• Right to withdraw consent: Where processing is based on consent (marketing SMS), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact ec666 support via live chat.

ec666 will not charge a fee for handling data rights requests. ec666 may ask you to verify your identity before processing a request, to ensure that your data is not disclosed to an unauthorised person. If ec666 is unable to comply with a request, we will explain why and identify the specific legal obligation that prevents compliance.

Data Security Measures

ec666 takes data security seriously and implements technical and organisational measures appropriate to the risk of processing personal data in the context of an online gaming platform. The principal security measures in place are:

• 256-bit SSL/TLS encryption on all pages, including login, registration, deposit, withdrawal, and account settings pages. All data in transit between your device and ec666 servers is encrypted.
• OTP (One-Time Password) verification for login and withdrawal actions, delivered via SMS to your registered Bangladesh mobile number. OTP verification provides a second layer of authentication beyond your account password.
• Access controls limiting ec666 staff access to player data on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive data protection training as part of their onboarding.
• Regular security reviews and penetration testing of the ec666 platform infrastructure. Where a security vulnerability is identified that may affect player data, ec666 will take immediate remedial action and notify affected players via SMS where required.

Children and Underage Users

ec666 is strictly an adults-only platform. The minimum age to register and use ec666 is 21 years. ec666 does not knowingly collect personal data from anyone under the age of 21. If ec666 becomes aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account. Parents or guardians who believe that a minor may have registered on ec666 should contact us immediately at [email protected] so that we can investigate and take prompt action.

Changes to This Privacy Policy

ec666 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. The updated date at the top of this document will be revised whenever a material change is made. For material changes — those that significantly affect how we process your personal data — ec666 will notify you via SMS to your registered mobile number no less than 7 days before the change takes effect.

Your continued use of the ec666 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated policy. If you do not agree with the changes, you must stop using the platform and contact ec666 support to close your account.

Contact Us About Your Data

For any questions about this Privacy Policy, to exercise any of your data rights, or to report a data protection concern, contact ec666 support 24/7 via live chat from within your account. We aim to acknowledge all data-related requests within 24 hours and to resolve them within 7 business days.

Email: [email protected]