ev333 Privacy Policy

ev333 collects personal data in the following categories when you register, use, or interact with the platform:

• Registration data: full name, date of birth, email address, Bangladesh mobile number, and a chosen username and password.
• KYC identity documents: National Identity Card (NID), passport, or other government-issued photo identification submitted for account verification.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. the last four digits of a mobile wallet number), and transaction timestamps.
• Usage data: login timestamps, IP addresses, device type and browser information, pages visited, games played, bet history, and session duration.
• Communications data: messages sent to ev333 customer support via email or live chat, including the content and timestamps of those communications.

ev333 collects only the minimum data necessary to operate your account securely, comply with applicable verification requirements, and provide you with a reliable and personalised gaming experience. We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health information.

ev333 uses the personal data we collect for the following lawful purposes:

• Account creation and management: to register your account, verify your identity, process your deposits and withdrawals, and maintain your account in good standing.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited activity on the platform.
• Service improvement: to analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, payment processing speeds, and the overall user experience for Bangladesh players.
• Customer support: to respond to your support queries, process complaints, and fulfil any data subject access requests you submit. Support communications are retained for audit and quality assurance purposes.

ev333 processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: processing required to fulfil the contract between you and ev333, including account creation, transaction processing, and delivering platform services.
• Legitimate interests: fraud detection, platform security monitoring, abuse prevention, and the analysis of anonymised usage data for service improvement — where these interests do not override your fundamental privacy rights.
• Consent: where you have given specific, freely given, and informed consent — for example, if you opt in to receive promotional communications from ev333 beyond your account activity notifications.
• Legal obligation: processing required to comply with anti-money laundering laws, Know Your Customer (KYC) obligations, fraud reporting duties, or any other legal obligation applicable to ev333's operations.
• Vital interests: in rare cases where processing is necessary to protect the vital interests of a person — for example, where a player's responsible gaming self-exclusion needs to be enforced to protect their wellbeing.

Where ev333 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing that took place before the withdrawal.

ev333 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processing partners: transaction data (amount, timestamp, payment method identifier) is shared with bKash, Nagad, Rocket, Upay, or other payment processors solely to process your deposit or withdrawal request. These partners operate under their own privacy policies and are bound by data processing agreements with ev333.
• Game content providers: anonymised session identifiers may be shared with game providers (e.g. Pragmatic Play, Evolution Gaming, Spribe) strictly for the purpose of delivering game content and resolving technical disputes. No directly identifying personal data is shared.
• Legal and regulatory authorities: ev333 will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or lawful governmental request. ev333 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of ev333's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections remaining in place.

ev333 requires all third parties to whom personal data is shared to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose. ev333 does not permit third-party recipients to use your data for their own independent marketing purposes.

ev333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: retained for the duration of your account plus a minimum of 5 years after account closure to satisfy anti-money laundering record-keeping obligations.
• KYC identity documents: retained for a minimum of 5 years from the date of submission, or longer if required by applicable law or ongoing investigation.
• Transaction records: retained for a minimum of 5 years from the date of each transaction for financial audit and fraud investigation purposes.
• Customer support communications: retained for 3 years from the date of each communication for quality assurance, dispute resolution, and audit purposes.

When personal data is no longer required for any purpose and no legal retention obligation applies, ev333 will securely delete or anonymise that data. Anonymised and aggregated data that cannot be used to identify you may be retained indefinitely for statistical and platform improvement purposes.

ev333 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or alteration:

• SSL/TLS encryption on all data transmissions between your device and ev333 servers, ensuring that data in transit cannot be intercepted in readable form.
• At-rest encryption for stored personal data and KYC documents, using industry-standard encryption protocols on secure servers with restricted access controls.
• Role-based access controls ensuring that ev333 staff can only access personal data that is strictly necessary for their job function. Access to KYC documents and financial data is logged and audited.

While ev333 takes data security seriously and implements robust measures, no internet-based platform can guarantee absolute security against all threats. If you suspect that your ev333 account has been compromised, please contact [email protected] immediately so that our security team can investigate and take protective action.

As a person whose personal data is processed by ev333, you have the following rights with respect to your data:

• Right of access: you have the right to request a copy of all personal data ev333 holds about you, along with information about how it is being used.
• Right to rectification: you have the right to request that ev333 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other legal basis applies. Note that this right is subject to ev333's legal data retention obligations.
• Right to object: you have the right to object to ev333 processing your personal data on the basis of legitimate interests, particularly for direct marketing purposes. Where you object to direct marketing, ev333 will cease that processing immediately.
• Right to data portability: where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a copy of your data in a commonly used, machine-readable format.

To exercise any of these rights, submit a written request to [email protected], clearly identifying yourself and the right you wish to exercise. ev333 will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing the request. Exercising these rights is free of charge.

The ev333 platform is strictly for adults aged 21 and above. ev333 does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or use the platform. If ev333 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all associated personal data will be securely deleted. Parental controls and monitoring software are strongly recommended for households with persons under 21 who may have unsupervised internet access.

• If you have reason to believe that a person under the age of 21 has registered an ev333 account, please contact us immediately at [email protected] so we can investigate and take appropriate action.
• ev333 uses age verification as part of the KYC process to confirm that all account holders are 21 or older. Accounts that cannot be verified as belonging to an adult aged 21 or above will be suspended pending verification and, if age verification fails, permanently closed.
• This policy applies globally to all ev333 account holders regardless of geography, and is not limited to Bangladesh-based players.
• ev333 reserves the right to request proof of age at any time from any account holder. Failure to provide satisfactory proof of age within the required timeframe will result in account suspension.

ev333's servers and those of certain third-party partners may be located outside of Bangladesh. When personal data is transferred outside Bangladesh, ev333 takes steps to ensure that adequate protections are in place, including:

• Contractual protections: data processing agreements incorporating standard data protection clauses that bind recipient parties to equivalent privacy standards.
• Vendor due diligence: ev333 assesses the privacy and security practices of all third-party vendors before sharing personal data with them.
• Data minimisation on transfer: only the minimum data required for the specified purpose is transferred internationally. Full KYC documents are not transferred to game providers or marketing partners.

By using the ev333 platform, you acknowledge and consent to the transfer of your personal data as described above. If you have concerns about international data transfers affecting your account, please contact [email protected].

The ev333 platform may contain references to third-party payment services and game providers. ev333's Privacy Policy applies only to the ev333 platform (ev333.vip) and does not extend to any third-party websites, mobile applications, or services that you may access via those providers. The following applies to third-party interactions:

• ev333 is not responsible for the privacy practices of bKash, Nagad, Rocket, Upay, or any other third-party payment provider. Please review those providers' own privacy policies before using their services.
• Game provider sessions: when you launch a game from a provider such as Pragmatic Play or Evolution Gaming, you may be interacting directly with that provider's game client. ev333 shares only anonymised session identifiers with game providers, never full personal profiles.
• ev333 conducts vendor assessments to ensure that game and payment partners maintain adequate data protection standards, but cannot guarantee the practices of independent third parties beyond our contractual requirements.
• If you discover that a third-party provider has used your personal data in a way that violates your privacy, you should contact that provider directly and may also inform ev333 at [email protected] so we can review our partnership arrangements.

ev333 recommends that all players review the privacy policies of any third-party service they interact with through or alongside the ev333 platform, particularly payment wallet providers such as bKash and Nagad, which have their own independent data governance frameworks.

If you believe that ev333 has handled your personal data in a manner that violates your privacy rights or applicable data protection law, you have the right to lodge a complaint. ev333's preferred first step is to resolve privacy complaints directly:

• Submit your privacy complaint in writing to [email protected], clearly describing the nature of your concern and the personal data involved.
• ev333 will acknowledge privacy complaints within 3 business days and provide a substantive response within 21 business days.
• If your complaint is not resolved to your satisfaction through ev333's internal process, you may escalate to any applicable data protection supervisory authority or seek independent legal advice regarding your rights.

ev333 takes all privacy complaints seriously and is committed to resolving them promptly, fairly, and transparently. Our goal is to ensure that every ev333 player in Bangladesh and beyond can use the platform with full confidence that their personal data is handled responsibly.