Privacy Policy — ebb999

1 Introduction

This Privacy Policy applies to all personal data collected and processed by ebb999 in connection with your use of ebb999.app — Bangladesh's premier online casino and cricket betting platform. It covers the website, its games lobby, live casino, sportsbook, cashier, and all associated support channels.

By creating an ebb999 account or by continuing to use ebb999.app after this policy has been published, you acknowledge that you have read and understood the practices described herein. Where we require your consent as the legal basis for a specific processing activity, we will request it explicitly at the point of collection.

Throughout this document, "ebb999", "we", "us", and "our" refer to the operator of ebb999.app. "You" and "your" refer to any natural person who accesses or uses the platform in any capacity, including registered players and casual visitors.

2 Personal Data We Collect

ebb999 collects personal data in two broad categories: information you provide directly to us, and information we collect automatically as you interact with the platform. The specific data points within each category are described below.

Data you provide directly:

Data collected automatically:

• Technical Data: IP address, browser type and version, operating system, device type and model, screen resolution, referring URL, and time zone setting.
• Usage Data: Pages visited, games played, bet amounts placed, session duration, in-game events, bonus activations, and feature interactions.
• Cookie and Tracking Data: Session cookies, persistent cookies, and similar technologies as described in Section 7 of this policy.
• Geolocation Data: Approximate geolocation derived from your IP address, used for fraud detection and jurisdiction compliance purposes. ebb999 does not collect GPS-level precise location without your explicit consent.

3 How We Collect Your Data

ebb999 collects personal data through the following channels and mechanisms:

• Direct interactions: When you fill in the registration form, complete the KYC process, make a deposit or withdrawal request, contact our support team, or update your account profile settings.
• Automated technologies: As you navigate ebb999.app, our servers automatically receive and log technical and usage data. This is an inherent function of how web servers operate and does not require your active input.
• Payment providers: When you initiate a transaction through bKash, Nagad, Rocket, or Upay, ebb999 receives a transaction confirmation reference from the provider. We do not receive your full mobile wallet credentials or PIN — only the reference data necessary to credit or debit your account balance.
• Game providers: When you play a game on ebb999, the game provider's software (e.g., Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt) may collect gameplay data independently. ebb999 receives a summary of the round outcome and wagering data for the purpose of maintaining your account balance and game history.
• Fraud and security partners: ebb999 may receive risk-signal data (e.g., device fingerprint flags, IP reputation scores) from third-party fraud prevention services in order to protect players and the integrity of the platform.

4 Legal Basis for Processing

ebb999 processes personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual necessity: Processing that is required in order to provide you with the services you have requested — including account creation, transaction processing, game access, and customer support. Without this processing, we cannot provide the ebb999 service.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing that is necessary for ebb999's legitimate business interests, provided those interests are not overridden by your data protection rights. This includes fraud detection, platform security, abuse prevention, and aggregate analytics for service improvement.
• Consent: For specific processing activities where no other legal basis applies — such as sending you promotional email newsletters or targeted offers — ebb999 will request your explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in Account Settings.

5 How We Use Your Data

ebb999 uses the personal data we collect for the following defined purposes. We will not use your data for any purpose that is incompatible with these stated purposes without first informing you and, where required, obtaining your consent.

• Account management: Creating and maintaining your registered player account, verifying your identity, enabling login access, and managing account security settings including two-factor authentication (2FA).
• Transaction processing: Processing your deposits and withdrawals in BDT (৳) via your chosen mobile financial service (bKash, Nagad, Rocket, Upay), crediting winnings, and maintaining an accurate record of your financial history on the platform.
• KYC and compliance: Verifying your age (18+ requirement), identity, and residential address as required by our responsible gaming obligations and anti-money laundering policies. Retaining KYC documentation for the periods required by applicable law.
• Customer support: Responding to your enquiries, complaints, and dispute submissions across all support channels (Live Chat, email, WhatsApp). Support interaction records are retained to facilitate continuity of service and to track resolution outcomes.
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour, enforcing self-exclusion decisions, applying deposit limits and cooling-off periods, and sending responsible gaming reminders where appropriate.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms and Conditions.
• Platform personalisation: Displaying relevant game recommendations, bonus offers, and promotional content based on your playing history and preferences, subject to your communication preferences.
• Service improvement: Conducting aggregate, anonymised analysis of usage patterns to identify technical issues, improve navigation, optimise game loading performance, and develop new platform features.
• Legal proceedings: Preserving and producing records in connection with any legal claim, regulatory investigation, or law enforcement request to which ebb999 is subject.

6 Data Sharing & Disclosure

ebb999 does not sell, rent, or commercially transfer your personal data to unaffiliated third parties. We share data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your deposit or withdrawal request. Each provider operates under its own privacy policy and data protection obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other game studios receive an anonymised player session token and wagering data required to operate the game. They do not receive your full name, NID, or payment account details.
• Fraud prevention and KYC service providers: ebb999 may use third-party identity verification and fraud detection services to assist with KYC document validation and transaction monitoring. These partners act as data processors under contract and are prohibited from using your data for any purpose beyond the contracted service.
• Legal and regulatory authorities: ebb999 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of ebb999 or its players.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of ebb999's assets, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by that entity. Affected players will be notified prior to any such transfer.

7 Cookies & Tracking Technologies

ebb999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. The following categories of cookies may be set when you visit ebb999.app:

• Strictly necessary cookies: These cookies are required for the platform to function. They manage your authenticated session, maintain your account balance display, preserve your game state, and ensure the cashier operates securely. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate ebb999.app — which pages are visited most frequently, how long sessions last, and where technical errors occur. This information is used exclusively to improve platform performance and is not linked to your individual identity.
• Functional cookies: These cookies remember your preferences, such as your chosen language setting (English), odds format, and responsible gaming reminder intervals, so that you do not need to re-configure them on each visit.
• Fraud detection cookies: These cookies help ebb999 identify unusual account behaviour, such as access from a new device or location, that may indicate unauthorised account access or fraudulent activity.

Most web browsers are configured to accept cookies by default. You may configure your browser to reject or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in to your ebb999 account. Instructions for managing cookies are available in your browser's help documentation.

8 Data Security

ebb999 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The principal technical and organisational measures in place include:

• 256-bit SSL/TLS encryption: All data in transit between your device and ebb999 servers is encrypted using industry-standard TLS 1.2 or higher. The ebb999.app domain is secured with an extended validation (EV) SSL certificate.
• Data encryption at rest: Sensitive data fields — including identity document references, payment account identifiers, and support communication records — are encrypted in ebb999's database using AES-256 encryption.
• Access controls: Access to personal data within ebb999's internal systems is restricted on a strict need-to-know basis. Employee access is governed by role-based access controls, and all access events are logged and audited.
• Two-factor authentication (2FA): ebb999 offers SMS OTP-based 2FA for all registered player accounts. We strongly recommend enabling 2FA in your Account Security Settings to add an additional layer of protection against unauthorised login.
• Intrusion detection and monitoring: ebb999's infrastructure is protected by automated intrusion detection systems and 24/7 security monitoring. Anomalous access patterns trigger automated alerts and manual review.
• Password security: Player passwords are stored in hashed form using a modern, salted cryptographic hashing algorithm. ebb999 staff cannot retrieve or view your password in plain text under any circumstances.

Despite these measures, no method of data transmission or storage over the internet is completely immune to interception. While ebb999 takes all reasonable precautions, we cannot guarantee absolute security. If you suspect that your account has been compromised, please contact [email protected] immediately.

9 Data Retention

ebb999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players under Section 10 below are processed subject to any overriding legal retention obligations — for example, financial transaction records subject to a 7-year legal retention requirement cannot be deleted earlier in response to a data erasure request.

10 Your Data Rights

As a player on ebb999, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 48 hours (BST) and complete our response within a maximum of 30 calendar days, in accordance with applicable data protection standards.

• Right of access: You have the right to request a copy of all personal data we hold about you, together with information about how it is used, stored, and shared. We will provide this information in a structured, commonly used, machine-readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor profile updates (such as email address or mobile number changes) can be made directly via Account Settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Deletion requests are subject to any overriding legal retention obligations.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction to deletion — you may request that we restrict our use of your data pending resolution of the relevant issue.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you have the right to receive a copy of your personal data in a portable format and, where technically feasible, to request its direct transfer to another controller.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for personalisation purposes. Where you object, ebb999 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.

11 Children's Privacy

ebb999 is strictly an 18+ platform. We do not knowingly collect, use, or retain any personal data from individuals under the age of 18. The registration process includes date-of-birth verification, and age is confirmed again during the KYC process required prior to any withdrawal.

If ebb999 discovers or is notified that personal data has been collected from a person under 18, we will take immediate steps to permanently close the relevant account, delete all associated personal data, forfeit any account balance in accordance with our Terms and Conditions, and where appropriate, report the matter to the relevant authorities.

If you are a parent or guardian and you believe your minor child has accessed ebb999.app or created an account, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and respond within 24 hours (BST).

12 International Data Transfers

ebb999 primarily processes and stores player data within secure server infrastructure. Some of our third-party service providers — including game content providers and fraud prevention services — may process data outside of Bangladesh as part of their global operations.

Where data is transferred internationally, ebb999 takes reasonable steps to ensure that equivalent data protection standards are applied by the receiving party. This is achieved through contractual data processing agreements that impose data protection obligations on our processors, including restrictions on sub-processing and requirements to implement appropriate technical and organisational security measures .

By using ebb999.app, you acknowledge and consent to the transfer of your personal data to third-party service providers located outside Bangladesh, subject to the safeguards described in this section. If you have concerns about a specific international transfer, please contact us at [email protected].

13 Third-Party Links

ebb999.app may contain references to third-party payment providers such as bKash, Nagad, Rocket, and Upay, as well as game studios including Pragmatic Play, Evolution Gaming, Spribe, and others. While these parties are integrated into the ebb999 platform experience, each operates under its own independent privacy policy and data processing practices.

ebb999 exercises no control over the content, privacy policies, or data handling practices of these third parties once you leave the ebb999.app environment or interact directly with a third-party interface embedded within the platform. We encourage you to review the privacy notices of any third-party service you use in connection with your ebb999 account.

ebb999 accepts no responsibility or liability for the privacy practices, security measures, or data handling conduct of any third-party provider, partner, or service referenced on or integrated with ebb999.app.

14 Policy Updates

ebb999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect new legal obligations, updated business practices, new product features, changes to third-party service providers, or improvements in how we communicate our data practices to players.

When a material change is made to this policy, ebb999 will notify registered players via their registered email address at least 14 calendar days before the updated policy takes effect. The "Last Updated" date at the top of this document and in the sidebar will be revised accordingly. For minor or clarificatory changes that do not materially affect your rights or ebb999's processing practices, we may update the policy without advance notice.

Continued use of ebb999.app after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your account and request deletion of your personal data before the revised policy takes effect, subject to any applicable legal retention requirements.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ebb999 handles your personal data, please reach out to our team through any of the following channels. All privacy-related enquiries are handled by our dedicated Data Protection team.

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing to the Data Protection team.
• Live Chat: Available 24 hours a day, 7 days a week via the ebb999.app platform. Response time typically under 5 minutes during peak hours (BST, UTC+6).
• WhatsApp: +880 1700 000 000 — available during Bangladesh business hours (09:00–22:00 BST).
• Email response time: We aim to provide a substantive response to all privacy-related email enquiries within 2–6 hours during BST business hours, and within 24 hours for enquiries submitted outside those hours. Formal data rights requests (Section 10) are handled within a maximum of 30 calendar days.