ef999 Privacy Policy

 Last Updated: 1 January 2026  |  Effective Date: 1 January 2026  |  Version: 2.0

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ef999 ("ef999", "We", "Us", "Our") collects, uses, stores, discloses, and protects the personal data of individuals ("Members", "You", "Your") who access or use the ef999 online casino and sports betting platform available at ef999.bio and its associated subdomains (collectively, "the Platform").

This Policy applies to all personal data processed in connection with:

• The creation and management of a registered ef999 account;
• Financial transactions including deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard;
• Participation in casino games, sports betting markets, and promotional activities;
• Identity verification (KYC) procedures;
• Interactions with ef999 customer support;
• Browsing and navigation of the ef999 Platform.

By registering an account and using the ef999 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not register an ef999 account or use the Platform.

---

2. Data Controller Information

ef999 acts as the data controller with respect to personal data collected from Members using the Platform. As data controller, ef999 determines the purposes for which and the means by which personal data is processed. ef999 is responsible for ensuring that all processing activities carried out on the Platform comply with applicable data protection principles.

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding the handling of your personal data, please contact the ef999 Data Protection team using the contact details provided in Section 16 of this Policy.

---

3. Personal Data We Collect

ef999 collects the following categories of personal data from Members:

3.1 Identity and Registration Data

• Full legal name as it appears on your Bangladesh National ID (NID) or Passport;
• Date of birth;
• Bangladesh National ID number or Passport number;
• Residential address (city, district, division);
• Nationality.

3.2 Contact Data

• Mobile phone number (required for bKash, Nagad, and Rocket payment integration);
• Email address;
• Preferred language and communication preferences.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts in BDT (৳), timestamps, and payment method references;
• Payment method identifiers (e.g., bKash wallet number, Nagad account number, bank account details) — ef999 does not store full card numbers; only masked references are retained;
• Account balance history;
• Bonus and promotion credit records.

3.4 Gaming and Betting Activity Data

• Game sessions, wager amounts, game outcomes, and win/loss records;
• Sports betting selections, odds accepted, and settlement records;
• Responsible gaming tool usage (deposit limit settings, session time reminders, self-exclusion requests).

3.5 Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser type;
• Session duration, pages visited, and navigation path within the Platform;
• Cookie identifiers and similar tracking technology data (see Section 10).

3.6 KYC Verification Data

• Scanned or photographed copies of your NID or Passport submitted for identity verification;
• Selfie photographs submitted alongside identity documents;
• KYC verification status, review notes, and decision timestamps.

3.7 Communications Data

• Records of communications between you and ef999 customer support, including live chat transcripts and email correspondence;
• Dispute records and resolution outcomes.

---

4. How We Collect Your Data

ef999 collects personal data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, make deposits or withdrawals, contact customer support, or participate in promotions;
• Automatically — through cookies, server logs, and similar technologies when you browse and interact with the ef999 Platform (see Section 10 for full details);
• From third-party KYC verification providers — who may return enhanced identity data, verification status, and risk scores as part of the document verification process;
• From payment processors — who confirm transaction status, payment method validity, and may flag transactions for fraud review;
• From game studio providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who provide anonymised game session data for dispute resolution and game-integrity audit purposes.

---

5. Legal Basis for Processing

ef999 processes personal data only where a lawful basis for doing so exists. The legal bases ef999 relies upon are as follows:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract between ef999 and the Member
Processing deposits and withdrawals	Performance of contract; legal obligation (anti-money laundering compliance)
KYC identity verification	Legal obligation; legitimate interests (fraud prevention and platform integrity)
Customer support and dispute resolution	Performance of contract; legitimate interests
Fraud detection and security monitoring	Legitimate interests; legal obligation
Responsible gaming monitoring and intervention	Legal obligation; legitimate interests (Member welfare)
Sending promotional communications	Consent (opt-in at registration or via account settings)
Platform analytics and product improvement	Legitimate interests (improving the ef999 service offering)

---

6. How We Use Your Data

ef999 uses the personal data it collects for the following specific purposes:

• To create, authenticate, and manage your ef999 Member account;
• To verify your identity and age (21+) in compliance with KYC obligations before processing withdrawals;
• To process financial transactions, including deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and banking partners;
• To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access;
• To provide and improve ef999's casino games, sports betting markets, and associated platform features;
• To personalise the gaming experience based on your stated preferences and platform usage patterns;
• To administer bonuses, promotions, and loyalty rewards to eligible Members;
• To monitor gaming activity for responsible gaming compliance purposes and to administer responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion;
• To provide customer support via live chat and email correspondence;
• To send transactional communications relating to your account (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send promotional and marketing communications where you have provided your explicit consent;
• To comply with applicable legal obligations and to respond to lawful requests from competent authorities.

---

7. Sharing Your Data with Third Parties

ef999 does not sell your personal data. ef999 shares personal data with third parties only in the following circumstances and only to the extent strictly necessary for the stated purpose:

7.1 Payment Processors

ef999 shares transaction data with payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard) to facilitate deposits and withdrawals. Payment processors receive only the data required to process the specific transaction and are bound by their own data protection obligations.

7.2 KYC Verification Partners

ef999 shares identity documents and Member registration data with contracted KYC verification service providers to validate the identity and age of Members. KYC partners process this data solely for verification purposes under a data processing agreement with ef999.

7.3 Game Studio Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers to deliver game content and to support game-integrity auditing. Game studios do not receive your full name, contact details, or financial data.

7.4 IT Infrastructure and Security Providers

ef999 uses contracted cloud hosting, content delivery network (CDN), and cybersecurity service providers to operate the Platform. These providers may process certain technical data as data processors acting under instruction from ef999.

7.5 Legal and Regulatory Disclosure

ef999 may disclose personal data to competent legal authorities, regulators, or law enforcement agencies where required by law, court order, or where ef999 has a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of Members, or protect ef999's legal rights.

---

8. International Data Transfers

Some of ef999's third-party service providers, including game studio technology partners and cloud infrastructure providers, may be located outside Bangladesh. Where personal data is transferred to jurisdictions outside Bangladesh, ef999 ensures that appropriate safeguards are in place prior to the transfer, including contractual data protection clauses that impose equivalent protection standards on the receiving party.

ef999 does not transfer your personal data internationally for marketing purposes. International transfers occur only where technically necessary to deliver the Platform's core services, such as game content delivery via globally distributed networks operated by contracted providers.

---

9. Data Retention

ef999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

Data Category	Retention Period
Account registration and identity data	Duration of active account plus 5 years following account closure
Financial transaction records	7 years from transaction date (anti-money laundering compliance)
KYC verification documents	5 years from the date of verification or account closure, whichever is later
Gaming and betting activity records	5 years from the date of the relevant activity
Customer support communications	3 years from the date of the final communication in the thread
Technical and usage data (logs)	12 months from collection date
Marketing consent records	Duration of consent plus 3 years following withdrawal of consent

Upon expiry of the applicable retention period, ef999 will securely delete or anonymise personal data in accordance with its data disposal procedures.

---

10. Cookies and Tracking Technologies

ef999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit the ef999 website. The following categories of cookies are used by ef999:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as session authentication, security, and fraud prevention. These cookies cannot be disabled without rendering the Platform inoperable. No consent is required for strictly necessary cookies.

10.2 Performance and Analytics Cookies

These cookies collect anonymised data about how Members use the Platform, including pages visited, session duration, and error events. This information is used to improve Platform performance and the overall user experience. Performance cookies are activated only with your consent.

10.3 Functional Cookies

Functional cookies remember your preferences such as preferred language, game lobby filters, and responsible gaming settings. They enable a more personalised experience without storing personally identifiable information beyond a session reference. Functional cookies require your consent.

10.4 Managing Cookies

You may control and manage cookie preferences through your browser settings or the ef999 cookie preference centre available on the Platform. Disabling certain categories of cookies may affect the functionality of the Platform. For further information on managing cookies, consult your browser's help documentation.

---

11. Your Data Rights

As an ef999 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the ef999 Data Protection team using the details in Section 16. ef999 will respond to verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data ef999 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Where data is corrected, ef999 will notify relevant third-party processors of the update.
• Right to Erasure: You have the right to request deletion of your personal data where ef999 no longer has a lawful basis to retain it. This right is subject to ef999's legal obligations to retain certain data for regulatory compliance periods as set out in Section 9.
• Right to Restriction: You may request that ef999 restrict the processing of your personal data while an accuracy dispute or objection to processing is under review.
• Right to Data Portability: You have the right to receive a structured, commonly-used, machine-readable copy of personal data you have provided to ef999, where processing is based on consent or contract.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. ef999 will cease all marketing communications immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

---

12. Marketing Communications

ef999 sends promotional and marketing communications only to Members who have explicitly opted in to receive them during account registration or subsequently via their account notification settings. Marketing communications may include information about new games, seasonal promotions tied to events such as BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, and Victory Day, as well as deposit bonus offers and platform feature updates.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your ef999 account dashboard;
• Clicking the unsubscribe link included in any ef999 promotional email;
• Contacting ef999 customer support via the on-site live chat channel.

Opting out of marketing communications does not affect transactional communications, which ef999 will continue to send as they are necessary for the operation of your account (e.g., deposit confirmations, withdrawal status updates, security alerts).

---

13. Children and Minors

The ef999 Platform is strictly intended for adults aged 21 years and above. ef999 does not knowingly collect or process personal data belonging to individuals under the age of 21. If ef999 becomes aware that personal data has been collected from an individual under 21 without parental consent, ef999 will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child under 21 has registered an ef999 account, please contact our Data Protection team immediately using the contact details in Section 16.

---

14. Security Measures

ef999 implements a comprehensive set of technical and organisational security measures designed to protect personal data from unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between Member devices and ef999 servers is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data including identity documents and financial records are encrypted at the storage layer using industry-standard encryption algorithms;
• Access controls: Access to Member personal data within ef999's internal systems is restricted on a need-to-know basis. All internal access is logged and subject to regular audit review;
• Intrusion detection: ef999 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time;
• Penetration testing: ef999 engages independent security specialists to conduct regular penetration tests of the Platform's infrastructure and web application layers;
• Staff training: All ef999 personnel with access to personal data receive mandatory data protection and security awareness training as part of their onboarding and ongoing professional development.

While ef999 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data security breach that is likely to result in a high risk to the rights and freedoms of Members, ef999 will notify affected Members without undue delay in accordance with applicable data breach notification obligations.

---

15. Changes to This Policy

ef999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ef999 will notify registered Members via the email address or contact method registered on their account, or via a prominent notice displayed on the Platform, at least 7 days before the updated Policy takes effect. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.

Your continued use of the ef999 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the Platform and may close your account by contacting customer support.

---

16. Contact and Complaints

For all privacy-related enquiries, requests to exercise your data rights, or concerns regarding ef999's handling of your personal data, please contact the ef999 Data Protection team via the on-site live chat support channel, available 24 hours a day, 7 days a week.

For written data protection correspondence, ef999 may be reached at the following email address (displayed as plain text — not a clickable link):

Data Protection contact: [email protected]

ef999 aims to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 calendar days of receipt of a verified request. Where a request is complex or where ef999 receives a high volume of requests, this period may be extended by up to an additional 60 days; ef999 will inform you of any such extension within the initial 30-day period.

If you are unsatisfied with ef999's response to a privacy concern or data rights request, you have the right to escalate your complaint through any applicable dispute resolution mechanism available in your jurisdiction.