Privacy Policy — How ea33 Protects Your Personal Data

1 Who We Are

This Privacy Policy is issued by ea33 ("ea33", "we", "us", "our"), the operator of the online casino and sports betting platform available at https://ea33.io. ea33 is the data controller in respect of the personal information collected from players and visitors who access the platform.

ea33 is designed and built specifically for players in Bangladesh. All customer-facing communications, support services, and this Privacy Policy are provided in English. If you have any questions about how ea33 handles your personal data, you can reach the data protection team at any time by writing to [email protected].

By accessing the ea33 website, registering an account, or interacting with any feature of the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data in the manner described herein. If you do not agree with this Privacy Policy, you should not use the ea33 platform.

2 Data We Collect

ea33 collects the following categories of personal data from players and platform visitors:

ea33 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data, except where a government-issued identity document submitted for age or identity verification incidentally contains such information. In those cases the document is reviewed solely for identity verification purposes and is not used for any other purpose.

3 How We Collect Your Data

ea33 collects personal data through the following means:

• Direct collection: Data you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or opting into promotional communications.
• Automated collection: Technical data collected automatically when you visit and interact with the ea33 website, including IP address, browser information, device identifiers, session duration, and pages visited. This data is collected via server logs and cookies (see Section 7 for full cookie details).
• Third-party collection: Identity and address verification data received from KYC (Know Your Customer) verification service providers when you submit identity documents for account verification. Payment confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, and card networks when deposits or withdrawals are processed.
• Inferred data: Information derived from your account activity — such as your preferred game categories, typical deposit amounts, and session patterns — used internally to improve platform personalisation and responsible gaming monitoring.

4 How We Use Your Data

ea33 uses the personal data we collect for the following specific purposes:

• Account registration and management: To create, maintain, and administer your ea33 account, verify your identity and age eligibility (21+), and communicate account-related information to you.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to fulfil verified withdrawal requests to your registered payment method.
• Regulatory compliance: To fulfil anti-money-laundering (AML) and Know Your Customer (KYC) obligations, including identity verification, transaction monitoring, and the reporting of suspicious activity where required.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-account activity, unauthorised account access, and other prohibited conduct described in the ea33 Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and communicate the outcome of account reviews or investigations.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, to apply and enforce deposit limits, session limits, and self-exclusion periods, and to send responsible gaming communications where appropriate.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the ea33 platform, optimise game selection, and enhance the player experience for the Bangladesh market.
• Marketing and promotions: To send you personalised promotional offers, bonus alerts, and platform news by email or SMS — but only where you have opted in to receive such communications. You may opt out at any time.

ea33 does not use personal data for automated decision-making that produces significant legal effects, except where automated systems are employed as part of anti-fraud and AML monitoring. In those cases, any decision that materially affects your account will be subject to human review upon request.

5 Legal Basis for Processing

ea33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and ea33 — including account registration, payment processing, and customer support — is carried out because it is necessary to deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification, age verification (21+), and the retention of financial records, is carried out because ea33 is legally required to do so.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is based on ea33's legitimate interest in operating a secure, compliant, and commercially viable platform — provided that such interests do not override your fundamental rights and freedoms.
• Consent: Processing for the purpose of sending marketing communications by email or SMS is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

ea33 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of third parties only to the extent strictly necessary for the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors receive the payment data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: Third-party KYC and age verification services receive the identity documents you submit during account verification. These providers are contractually bound to process your data only for the purpose of identity verification on behalf of ea33.
• Game content providers: Suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive your account identifier (not your full identity data) to deliver game content and record game outcomes. These suppliers do not receive your financial or identity data.
• IT and hosting providers: Infrastructure and cloud hosting providers that store and process platform data on ea33's behalf under strict data processing agreements that prohibit use of your data for any other purpose.
• Legal and regulatory authorities: ea33 will disclose personal data to law enforcement, financial intelligence units, or other regulatory authorities where required to do so by law or by a valid legal order. ea33 will notify affected players of such disclosures where permitted by law to do so.

7 Cookies and Tracking Technologies

The ea33 website uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, and analyse how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They include session authentication tokens that keep you logged in during a play session, and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without rendering the platform non-functional.
• Functional cookies: These cookies remember your account preferences, language settings, and responsible gaming tool configurations so that your settings are preserved across sessions.
• Analytics cookies: ea33 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical issues occur. This data is aggregated and does not identify you personally.
• Performance cookies: These cookies help ea33 measure page load speeds and identify technical bottlenecks so that the platform experience for Bangladesh players can be continuously improved.

ea33 does not use third-party advertising cookies or permit external ad networks to place tracking cookies on the ea33 website. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and you will not be able to log in to your ea33 account.

8 Data Retention

ea33 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status. If you close your account, identity and financial records are retained for a minimum of five years from the date of account closure in line with standard AML record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years following the date of the transaction.
• Customer support communications: Records of support interactions are retained for three years from the date of the last interaction, to allow for the resolution of any subsequent disputes.
• Marketing preference records: Opt-in and opt-out records for marketing communications are retained for the duration of your account and for two years thereafter, to demonstrate compliance with consent requirements.
• Technical and log data: Server logs and technical session data are retained for a maximum of 12 months and then deleted or anonymised.

When data reaches the end of its applicable retention period, it is securely deleted or anonymised so that it can no longer be attributed to you as an individual. ea33 does not retain personal data beyond what is necessary for the legitimate purposes described in this Policy.

9 Data Security

ea33 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the ea33 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. The padlock symbol in your browser confirms that your connection to ea33 is encrypted.
• Password hashing: Account passwords are never stored in plain text. ea33 uses strong cryptographic hashing algorithms to store password data so that even internal staff cannot access your original password.
• Access controls: Access to personal data within ea33 is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific categories of personal data are granted such access, and all internal access is logged and auditable.
• Two-factor authentication: ea33 supports two-factor authentication (2FA) for player accounts, adding a second layer of security beyond your username and password. Players are strongly encouraged to enable 2FA from their account settings.
• Regular security reviews: ea33 conducts periodic reviews of its data security practices and platform infrastructure to identify and address potential vulnerabilities.

While ea33 takes all reasonable steps to secure your personal data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your own account credentials. If you believe your ea33 account has been compromised, please contact [email protected] immediately.

10 Your Rights

As an ea33 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request — [your account username]":

• Right of access: You have the right to request a copy of the personal data ea33 holds about you, along with information about how it is being used. ea33 will respond to access requests within 30 days.
• Right to rectification: If any personal data ea33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly from your account settings page.
• Right to erasure: You may request that ea33 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that certain data must be retained by ea33 to comply with AML and record-keeping legal obligations even after a deletion request.
• Right to restrict processing: You may request that ea33 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of the personal data you provided to ea33 in a structured, commonly used, machine-readable format, and to have that data transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where ea33 relies on legitimate interests as the legal basis for processing. ea33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

ea33 will acknowledge all data rights requests within five business days and will respond substantively within 30 calendar days. Where a request is complex or involves a large volume of data, ea33 may extend this period by a further 30 days and will inform you of the extension and the reason for it.

11 Marketing Communications

ea33 may send promotional communications — including bonus offers, new game announcements, tournament invitations, and platform news relevant to Bangladesh players — by email and SMS, but only where you have explicitly opted in to receive such communications during registration or via your account settings.

Each marketing email sent by ea33 includes a clearly labelled unsubscribe link. SMS marketing messages include instructions for how to opt out by reply. You may also update your marketing preferences at any time from the notification settings section of your ea33 account, or by writing to [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications will not affect your ability to receive essential account communications such as deposit confirmations, withdrawal notifications, identity verification requests, security alerts, or responsible gaming messages. These transactional and operational communications are sent regardless of your marketing preferences because they are necessary to operate your account.

12 Children and Minors

The ea33 platform is strictly intended for individuals aged 21 years and above. ea33 does not knowingly collect personal data from any person under the age of 21. The registration process includes mandatory age verification steps designed to prevent underage individuals from opening accounts.

If ea33 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, the relevant account will be suspended immediately, the data will be reviewed, and the account will be permanently closed. Any deposits associated with an underage account will be returned minus amounts played, and no winnings will be paid out in respect of bets placed on an underage account.

If you are a parent or guardian and believe that your child may have registered an ea33 account or provided personal data to ea33 without your knowledge, please contact [email protected] immediately with the subject line "Underage Account Report". ea33 will investigate the matter as a priority and take appropriate action without delay.

13 Changes to This Policy

ea33 reviews this Privacy Policy periodically and may update it to reflect changes in platform features, applicable law, regulatory requirements, or data processing practices. When material changes are made to this Policy, ea33 will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players by email at the address associated with their account where the changes are significant.
• Display a prominent notice on the ea33 platform for a reasonable period following the update.

Your continued use of the ea33 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

ea33 recommends that all registered players review this Privacy Policy at least once per year to stay informed of how your personal data is being handled.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ea33, please contact our data protection team using the details below. All communications are handled in English and responses are provided within the timeframes specified in Section 10.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [your account username]"
• Subject line for underage account reports: "Underage Account Report"
• Subject line for security concerns: "Security Concern — [your account username]"
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days