eq999 Privacy Policy — How We Handle Your Data

When you register for an eq999 account, complete KYC verification, make deposits, request withdrawals, or contact our support team, you may provide us with the following categories of personal data:

• Identity data: full name, date of birth, nationality, NID number or passport number
• Contact data: mobile phone number (Bangladeshi), email address, and residential address
• Financial data: bKash wallet number, Nagad wallet number, Rocket number, or bank account details used for deposits and withdrawals
• KYC documentation: scanned or photographed copies of government-issued identification documents submitted during the verification process
• Support correspondence: messages, complaints, and other communications sent to eq999 support via email or in-platform messaging

When you access and use the Platform, we automatically collect certain technical and behavioural data, including:

• Device data: device type, operating system, browser type and version, screen resolution, and device identifiers
• Network data: IP address, mobile network operator (e.g. Grameenphone, Robi, Banglalink, Teletalk), and approximate geographic location derived from IP
• Usage data: pages visited, games played, time spent on the Platform, betting and gaming activity logs, deposit and withdrawal history
• Cookie data: session identifiers, preference settings, and analytics data collected via cookies and similar tracking technologies as described in Section 6 of this Policy

eq999 may receive limited personal data from third-party payment processors (such as bKash, Nagad, and Rocket) in connection with the processing of deposits and withdrawals. This data is limited to transaction confirmation details and is used solely to reconcile payment records. We may also receive information from identity verification and fraud prevention service providers engaged to assist with KYC compliance.

eq999 processes personal data on the following legal bases: (a) Contract performance — processing necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and game delivery; (b) Legal obligation — processing required to comply with applicable law, including KYC and anti-money-laundering obligations; (c) Legitimate interests — processing for fraud prevention, platform security, and internal analytics, where those interests are not overridden by your rights; (d) Consent — where you have actively opted in to receive marketing communications, we process your contact data on the basis of that consent, which you may withdraw at any time.

eq999 does not sell or rent personal data. We share data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank partners receive the minimum data necessary to process a specific deposit or withdrawal transaction on your behalf.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and other certified game studios receive session data (player identifier and stake/win amounts) necessary to operate game rounds and settle outcomes. They do not receive full identity data.
• KYC and compliance providers: identity verification services engaged to assist with age verification and anti-money-laundering checks receive identity and documentation data strictly for those compliance purposes.
• Legal authorities: we may disclose personal data to law enforcement, regulatory bodies, or courts where we are required to do so by applicable law or by a valid legal order. We will notify you of such disclosure where we are legally permitted to do so.

Some of eq999's service providers, including certain game studios and technology infrastructure providers, may process data in countries outside Bangladesh. Where such international transfers occur, eq999 requires contractual assurances from those providers that personal data is handled with a standard of protection equivalent to that described in this Policy, and that it is used only for the specific purpose for which it was shared.

eq999 does not store full payment credentials on its own servers. When you make a deposit via bKash, Nagad, or Rocket, the transaction is initiated through the respective payment provider's secure gateway. eq999 receives only a transaction reference number and the confirmed deposit amount. Your mobile wallet PIN, bKash or Nagad account password, and any similar authentication credentials are entered directly on the payment provider's interface and are never transmitted to or stored by eq999.

For bank transfer deposits, eq999 collects the bank account name, account number, and branch details necessary to process the transfer. This financial data is stored securely, accessed only by authorised eq999 personnel for the purpose of processing and reconciling transactions, and is not shared with any party other than the relevant bank institution as required to complete the transfer.

The eq999 Platform uses cookies and similar technologies (including local storage and session storage) to operate the Platform and improve your experience. The cookies we use fall into the following categories:

• Essential cookies: required for the Platform to function correctly, including maintaining your login session, storing your game preferences, and enabling secure payment flows. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Preference cookies: store your language settings, notification preferences, and other personalisation choices so the Platform remembers your settings between visits.

As a user of the eq999 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number for account verification:

• Right of access: you may request a copy of the personal data eq999 holds about you.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data, subject to our legal retention obligations described in Section 8.
• Right to restrict processing: you may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is being considered.
• Right to withdraw consent: where processing is based on consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

eq999 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

eq999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the duration of the account relationship; KYC documentation and transaction records are retained for a minimum of 5 years following account closure in accordance with anti-money-laundering and financial record-keeping requirements; support correspondence is retained for 2 years from the date of the last interaction; analytics and usage data in anonymised form may be retained indefinitely for internal reporting purposes.

When personal data is no longer required for its original purpose and no legal retention obligation applies, eq999 will securely delete or anonymise the data. Where anonymisation rather than deletion is used, the resulting anonymised data cannot be used to identify you and is therefore no longer treated as personal data under this Policy.

eq999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal and financial data at rest, access controls limiting data access to authorised personnel only, regular security assessments and penetration testing of Platform infrastructure, and incident response procedures to address any data security events promptly.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data security incident that is reasonably likely to affect your rights or interests, eq999 will notify you without undue delay in accordance with applicable law. You can assist with the security of your account by keeping your login credentials confidential, using a strong password, and contacting eq999 support immediately if you suspect any unauthorised access to your account.

eq999 reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the effective date shown at the top of this page and, where reasonably practicable, notify registered players via the Platform or by email. Your continued use of the Platform after the updated Policy is published constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way eq999 handles your personal data, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently. eq999 does not have a dedicated Data Protection Officer at this time; all privacy enquiries are handled by our support team and escalated to senior management as necessary.