Privacy Policy

Our Commitment to Your Privacy

e2bat ("we", "us", "our") operates the online gaming platform at https://e2bat.vin and is committed to protecting the personal data of all users ("you", "your") who access or use the Platform. This Privacy Policy describes the categories of personal data we collect, the purposes for which we use that data, the parties with whom it may be shared, and the rights you hold over your personal information.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the Platform. We encourage you to review this policy periodically, as it may be updated to reflect changes in our data practices or applicable law.

Six Principles That Guide How We Handle Your Data

Categories of Personal Data Collected by e2bat

e2bat collects personal data in three principal ways: information you provide directly when registering or using the Platform, information generated automatically through your use of the Platform, and information received from third-party service providers (such as payment processors and KYC verification partners). The specific categories of data collected under each method are described below.

Information You Provide Directly

• Registration data: your chosen username, mobile phone number (Bangladeshi number required), date of birth, and the password you set. We do not store your password in plain text — passwords are stored using industry-standard one-way hashing.
• Identity verification (KYC) documents: copies of government-issued photo identification (such as your National ID card or passport), proof of address documents, and any selfie or liveness-check image submitted to complete identity verification.
• Communications: the content of any messages you send to e2bat customer support via live chat, email, or any other support channel, including any attachments or screenshots you provide in connection with a support request.
• Responsible gaming preferences: any deposit limits, session time alerts, or self-exclusion requests you set via account settings or through the support team. These are processed and stored to give effect to your instructions.
• Promotional opt-ins: if you choose to receive promotional communications (SMS, email), we store your preference alongside your contact details to manage the delivery of those communications and honour opt-out requests.

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile carrier. This data is used to optimise the Platform for your device, detect fraud, and maintain security.
• Session and usage data: pages visited, features used, time spent on each page, navigation paths, search queries (if any), and referring URL. This data helps us improve the Platform experience and identify technical issues.
• Transaction logs: a complete record of all deposits, withdrawals, bonus claims, bets placed, game rounds played, and account balance changes. Transaction logs are maintained for fraud prevention, dispute resolution, and regulatory compliance purposes.
• Cookies and similar tracking technologies: session identifiers, preference cookies, and analytics tokens. See Section 5 (Cookies and Tracking) for full details of the cookies we use and how to manage your cookie preferences.

Information from Third Parties

• KYC verification results: the outcome of identity and age verification checks performed by our third-party KYC partner. We receive a verified/not-verified result and any flags raised, but we do not receive or store raw document images held by the KYC provider unless submitted directly to us.
• Payment confirmation data: transaction reference numbers, payment method type (e.g. bKash, Nagad, Rocket), and transaction status (success, pending, failed) as reported by our payment processing partners. We do not receive or store full mobile banking account numbers.
• Fraud and risk signals: data from fraud-prevention and risk-assessment tools used to verify player identity, detect unusual betting patterns, and prevent money laundering. This data is processed solely for the purpose of Platform integrity and security.

Purposes for Which We Process Your Personal Data

The table below summarises the key purposes for which e2bat processes your personal data. We apply the principle of purpose limitation, meaning data collected for one purpose is not used for a materially different purpose without your consent or a new legal basis.

Why We Are Legally Permitted to Process Your Data

e2bat processes personal data only where it has a lawful basis for doing so. The primary legal bases on which we rely are set out below. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Contractual necessity: the majority of our data processing is necessary to perform the contract between you and e2bat — specifically, to create and manage your account, process your deposits and withdrawals, verify your identity, and provide access to the games and betting markets on the Platform.
• Legal obligation: certain data processing is required by applicable law, including anti-money laundering obligations, age verification requirements, and record-keeping obligations. We are required by law to retain transaction and identity records for specified minimum periods.
• Legitimate interests: we process certain data (such as device data, IP address, and session logs) on the basis of our legitimate interests in maintaining the security of the Platform, preventing fraud, and improving the quality of our services, provided those interests are not overridden by your rights.
• Consent: where we send you promotional communications (SMS or email about bonuses, new games, or seasonal offers), we do so only on the basis of your explicit opt-in consent. You may withdraw this consent at any time by contacting support or using the opt-out mechanism included in each communication.

Who We Share Your Personal Data With

e2bat does not sell your personal data. We share personal data only with the categories of recipient listed below, and only to the extent necessary for the stated purpose. All third-party processors are bound by data processing agreements that require them to handle your data securely and in accordance with applicable law.

• Payment processing partners (bKash, Nagad, Rocket, Upay): to process your deposit and withdrawal transactions. These partners receive only the transaction data necessary to complete the payment. They operate under their own privacy policies and are independent data controllers for their own platform data.
• KYC verification providers: to perform identity and age verification checks as required by our operating policies. Our KYC partner receives the identity documents you submit and returns a verification result. They are bound by confidentiality obligations and may not use your data for any purpose other than verification.
• Technology and infrastructure providers: cloud hosting, database management, and platform infrastructure providers who process data on our behalf as data processors under binding contractual terms. These providers do not have independent access to or rights over your personal data.
• Fraud prevention and security services: providers of fraud-detection tools, risk-scoring systems, and cybersecurity services that help us protect the Platform and its users. Data shared with these providers is limited to the technical signals needed for risk assessment.
• Law enforcement and regulatory authorities: where we are required by law, court order, or the lawful request of a competent authority to disclose personal data. We will notify you of any such request to the extent permitted by law and practicable in the circumstances.

How e2bat Uses Cookies and Similar Technologies

e2bat uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the Platform, remember your preferences, maintain your login session, and understand how the Platform is used. This section explains the categories of cookies we use and how you can manage them.

Cookie Categories We Use

• Strictly necessary cookies: these are required for the Platform to function. They include session authentication tokens (to keep you logged in), security tokens (to prevent cross-site request forgery), and load-balancing cookies. These cannot be disabled without breaking the Platform.
• Functional cookies: these remember your preferences such as your chosen language, display settings, and responsible gaming tool configurations. Disabling these cookies may affect how personalised your Platform experience feels, but will not prevent basic access.
• Analytics cookies: these collect aggregated, anonymised data about how users interact with the Platform (pages viewed, features used, time on page). This data is used solely to improve Platform performance and user experience. We do not use third-party advertising analytics on the Platform.
• Security and fraud-detection tokens: short-lived tokens used to identify and block suspicious session activity, detect account takeover attempts, and flag anomalous betting patterns. These are a critical part of our fraud prevention infrastructure.

You can manage cookie preferences via your browser settings. Most browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your e2bat account. Blocking functional cookies may reset your language and display preferences on each visit.

How Long We Keep Your Personal Data

e2bat retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide; specific legal obligations may require us to retain certain records for longer periods.

• Active account data (registration details, KYC documents, transaction logs, and responsible gaming settings) is retained for the full duration of your account's active life. If your account is voluntarily closed, active account data is retained for a minimum of 5 years from the date of closure to satisfy anti-money laundering record-keeping requirements.
• Customer support communications are retained for 3 years from the date of the last message in a support thread. This retention period allows us to reference prior interactions when resolving follow-up queries and to defend against or bring any claims arising from support interactions.
• Analytics and session data (anonymised aggregated data) may be retained indefinitely in aggregated, non-personal form for Platform improvement purposes. Individual session logs are deleted within 90 days. Any personal data that is no longer required for its original purpose and for which no legal retention obligation applies will be securely deleted or anonymised.

How We Protect Your Personal Information

e2bat implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, we apply the following protections as a baseline standard across the Platform.

• SSL/TLS encryption is applied to all data transmitted between your device and the Platform. All connections to the Platform are enforced over HTTPS. Unencrypted HTTP connections are automatically redirected to HTTPS.
• Access controls: access to personal data within e2bat's systems is restricted to personnel who genuinely need it to perform their job function. All internal access is logged, and access permissions are reviewed quarterly. Personnel with data access are bound by confidentiality obligations.
• Password security: user passwords are never stored in plain text. All passwords are processed through a one-way cryptographic hash function before storage, ensuring that even in the event of a data breach, plain-text passwords are not exposed.
• Incident response: e2bat maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable legal requirements.

Rights You Hold Over Your Personal Data

Subject to applicable law, you hold a number of rights in relation to the personal data we hold about you. You may exercise any of the rights listed below by contacting our support team at [email protected] or via live chat. We will respond to all rights requests within 14 calendar days and will not charge a fee for exercising your rights in standard circumstances.

• Right of access: you have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared. Requests will be fulfilled within 30 calendar days.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. We will action rectification requests within 7 business days.
• Right to erasure (right to be forgotten): in certain circumstances, you may request that we delete your personal data. This right is subject to our legal obligations to retain certain records (e.g. transaction history for anti-money laundering compliance). Where erasure is not possible, we will explain the specific legal basis.
• Right to restriction of processing: you have the right to request that we restrict our processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to data portability: where our processing of your personal data is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of that data to transmit to another service provider.
• Right to object: you have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis. You also have the right to opt out of promotional communications at any time, regardless of consent basis, by contacting support or using the unsubscribe mechanism in each communication.

To exercise any of the above rights, contact us at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing your request to protect your data from unauthorised access.

Protection of Minors

The e2bat Platform is intended exclusively for adults aged 21 years and older. We do not knowingly collect, store, or process personal data from any person under the age of 21. If we discover or have reason to believe that personal data belonging to a person under 21 has been submitted to the Platform — whether during registration, KYC, or through any other means — we will immediately suspend the relevant account, delete all associated personal data, and void any transactions conducted by the account.

How We Handle Your Financial and Payment Information

All deposits to and withdrawals from your e2bat account are processed via licensed mobile financial service providers in Bangladesh, including bKash, Nagad, Rocket, and Upay. e2bat takes the security of financial transactions seriously and applies the following specific protections to payment-related data.

• e2bat does not store full mobile banking account numbers. We receive and retain only transaction reference numbers, payment method type (e.g. bKash, Nagad), and transaction status (success/pending/failed). Full account credentials remain with your mobile banking provider at all times.
• All payment transactions are processed over encrypted connections. Payment data in transit between e2bat and its payment processing partners is protected by SSL/TLS encryption. e2bat and its payment partners use tokenisation where available to minimise exposure of sensitive financial data.
• Transaction history records (amounts, dates, payment method types, and reference numbers) are retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial record-keeping requirements. You may request a summary of your transaction history via live chat support at any time.

External Links and Third-Party Platforms

The e2bat Platform may reference or display the names and logos of third-party providers such as game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming), payment partners (bKash, Nagad, Rocket, Upay), and sports leagues (BPL, IPL, ICC). These third parties operate independently of e2bat and have their own privacy policies. e2bat is not responsible for the privacy practices or data handling of any third party. This Privacy Policy applies solely to data collected by e2bat through the Platform and does not cover any third-party platform you may access independently.

How We Notify You of Policy Updates

e2bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our business. When we make material changes to this policy, we will update the "Last Updated" date at the top of the page and, where required by applicable law or where we consider it appropriate, notify you directly via the mobile number or email address registered to your account.

How to Reach e2bat About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which e2bat handles your personal data, please contact our support team. We are committed to resolving privacy concerns promptly and transparently. You may reach us via live chat on the Platform (available 24 hours a day, 7 days a week) or by email.

Email support: [email protected]