e28et Privacy Policy — How We Handle Your Data

1Introduction

This Privacy Policy ("Policy") describes how e28et ("we", "us", "e28et") collects, uses, stores, and protects personal information relating to individuals ("you", "User", "Player") who access or use the e28et platform at e28et.net and any associated subdomains. This Policy applies to all personal data collected through the e28et website, including during account registration, during gameplay, during payment transactions, and through any communications you have with our support team.

By creating an account on e28et or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the e28et platform. This Policy should be read alongside our Terms and Conditions, which are accessible at /terms-conditions.

3How We Use Your Personal Data

e28et uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent or being required to do so by law.

• Account creation and management: to register your account, verify your identity, maintain your account profile, and communicate essential account-related information to you via your registered mobile number.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; to maintain accurate transaction records; and to reconcile payment discrepancies.
• Legal compliance and fraud prevention: to fulfil our anti-money laundering (AML) and know-your-customer (KYC) obligations; to detect, investigate, and prevent fraudulent activity, account abuse, and prohibited conduct as defined in our Terms and Conditions; and to cooperate with law enforcement and regulatory authorities where required by law.
• Platform improvement and personalisation: to analyse gameplay patterns, page performance, and user behaviour in aggregate (non-personally-identifiable) form in order to improve the e28et platform; and to personalise your experience by surfacing game categories and promotions that are relevant to your interests and activity history.
• Responsible gaming support: to monitor your gaming activity for indicators of problem gambling behaviour; to deliver responsible gaming alerts, session reminders, and reality checks; and to administer self-exclusion and deposit limit requests in accordance with your preferences.
• Customer support: to respond to your enquiries, complaints, and requests; to investigate and resolve disputes relating to bets, payments, or account access; and to maintain records of support interactions for quality assurance and compliance purposes.
• Promotional communications: to send you information about e28et promotions, bonuses, and events that may be of interest to you, via your registered mobile number. You may opt out of promotional communications at any time by contacting our support team.

Where e28et relies on your consent as the legal basis for a specific data processing activity (such as promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing that took place before your withdrawal. Withdrawing consent for promotional communications does not affect your ability to use the e28et platform or access your account.

5Data Sharing and Third Parties

e28et does not sell your personal data. We may share your personal data with third parties only in the following limited and specific circumstances:

• Payment service providers: we share the minimum necessary financial data (such as your mobile wallet number and transaction amounts) with our payment processing partners — bKash, Nagad, and Rocket — solely to process your deposits and withdrawals. These partners process your data as independent data controllers under their own privacy terms, which you should review separately.
• Game content providers: game providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and NetEnt may process certain technical data (such as session tokens and game outcome data) as part of delivering their game content to you through the e28et platform. Game providers do not receive your identity data or financial data.
• Legal and regulatory authorities: we will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, court order, or lawful regulatory direction. e28et will inform you of any such disclosure where it is legally permitted to do so.
• Business transfers: in the event that e28et or substantially all of its assets are acquired by or merged with another entity, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer via the mobile number registered to your account before the transfer takes place.

7Data Security

e28et implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our key security measures include:

• SSL/TLS encryption on all data transmitted between your device and e28et's servers. This applies to the login process, payment transactions, account settings pages, and all other data exchanges between your browser or app and our platform.
• Encrypted storage of sensitive personal data fields, including identity document data and financial data, using industry-standard encryption algorithms. Access to encrypted data stores is restricted to authorised personnel and subject to multi-factor authentication requirements.
• Access controls and audit logging to ensure that e28et staff can only access personal data that is necessary for their specific job function, and that all access to sensitive data is logged and periodically reviewed by our compliance team.
• Regular security assessments and vulnerability testing of the e28et platform infrastructure to identify and remediate potential weaknesses before they can be exploited. e28et's technical team monitors platform systems around the clock for signs of unauthorised access or anomalous activity.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data security incident that affects your personal data, e28et will notify you via your registered mobile number as soon as reasonably practicable and will take all necessary steps to contain the incident, assess its impact, and remediate any vulnerabilities that were exploited. If you believe your e28et account has been accessed without your authorisation, you must contact our support team immediately.

9Your Privacy Rights

As a data subject, you have the following rights in relation to your personal data held by e28et. To exercise any of these rights, contact our support team at [email protected] with your account mobile number and a description of your request. e28et will respond to all legitimate rights requests within 30 days.

• Right of access: you have the right to request a copy of the personal data that e28et holds about you. We will provide this information in a clear, portable format within 30 days of receiving a valid access request.
• Right to rectification: you have the right to request that e28et correct any inaccurate or incomplete personal data we hold about you. If you believe any of your account information is incorrect, you should contact support promptly, as inaccurate KYC data may affect your ability to withdraw funds.
• Right to erasure: you have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to e28et's legal obligations — where applicable law requires retention of your data (e.g. AML record-keeping), e28et cannot comply with a deletion request for that data until the legal retention period expires.
• Right to restrict processing: you have the right to request that e28et restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being investigated, or while you are contesting the lawfulness of our processing of your data.
• Right to object to promotional communications: you have the right to object at any time to e28et processing your personal data for direct marketing purposes. Once you opt out, we will stop sending promotional communications to you within 5 business days. Opting out of marketing does not affect our ability to send you essential account-related communications (e.g. deposit confirmations, withdrawal notifications, security alerts).

To exercise any of the rights described above, or to raise a concern about how e28et is handling your personal data, please contact our support team using the contact details provided in Section 13 of this Policy. e28et takes all privacy rights requests seriously and will acknowledge your request within 5 business days of receipt.

11Children and Underage Players

The e28et platform is strictly intended for adults aged 21 and above. e28et does not knowingly collect personal data from individuals under the age of 21. If we discover or are notified that an account has been registered by or for an individual under the age of 21, we will immediately close that account, delete all personal data associated with it, and report the incident to the relevant authorities where required by law. If you are a parent or guardian and believe that a person under the age of 21 has registered an account on e28et using your contact details or payment wallet, please contact our support team immediately at [email protected].

13Contact Us About Your Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how e28et handles your personal data, our support team is available 24/7 to assist you. You can reach us using the contact details below.

Email (plain text only): [email protected]

Please include your registered mobile number and a clear description of your request or concern when contacting us. e28et will acknowledge all privacy-related enquiries within 5 business days and will provide a substantive response within 30 days.