How egg33 Collects, Uses, and Protects Your Personal Data

Full Document

egg33 Privacy Policy

egg33 ("we", "us", "our") operates as the data controller for all personal data collected through the egg33 Platform. As data controller, egg33 determines the purposes for which and the means by which personal data is processed. For all data-related enquiries, including data access requests, correction requests, and deletion requests, Players should contact the egg33 Data Protection team at [email protected]. All correspondence will be acknowledged within five (5) business days and resolved within thirty (30) calendar days.

egg33 collects personal data from Players through several channels: directly when you register an account or interact with the Platform, automatically through technical systems as you use the Platform, and occasionally from third-party sources for identity verification and fraud prevention purposes. The categories of personal data we collect are set out below.

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify that you meet the minimum age requirement of 21 years.
• Residential address including district, division, and postcode within Bangladesh.
• Email address — used as your primary account identifier and communication channel.
• Mobile telephone number — used for account security, OTP verification, and support communications.
• Username and encrypted password — your account credentials. Passwords are stored in hashed form and are never accessible to egg33 staff in plain text.

• National ID card (NID) number and scan — collected for mandatory Know Your Customer (KYC) verification.
• Passport or driving licence — accepted as alternative government-issued photographic identification where NID is unavailable.
• Proof of address document — such as a recent utility bill or bank statement dated within 90 days, confirming the residential address provided at registration.
• Selfie or live photograph — in certain cases, egg33 may request a recent photograph for biometric comparison against submitted ID documents.

• bKash, Nagad, Rocket, or Upay mobile wallet number — collected to facilitate deposits and withdrawals in BDT.
• Transaction history — records of all deposits, withdrawals, and wagering transactions associated with your Account.
• Bank account details — where a bank transfer is selected as a payment method, we collect the account number and bank name for withdrawal processing.

egg33 does not store full card numbers, CVV codes, or full bank account credentials on its own servers. All sensitive payment data is handled by PCI-DSS-compliant third-party payment processors.

• IP address — logged at login and during active sessions for security monitoring and geographic compliance purposes.
• Device identifiers — including device type, operating system version, browser type and version, and unique device fingerprint.
• Session data — including login timestamps, session duration, pages visited, games accessed, and bet history.
• Cookies and similar tracking technologies — see Section 8 (Cookies) for full details.

When you contact egg33 support via live chat, email, or any other channel, we retain a record of that correspondence including the content of messages, timestamps, and any attachments submitted. This data is used to resolve disputes, improve service quality, and maintain an audit trail of player interactions.

egg33 processes personal data only for the specific, legitimate purposes listed below. We do not use your data for purposes incompatible with those for which it was originally collected without first obtaining your explicit consent.

egg33 does not sell or rent personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

To process deposits and withdrawals, egg33 shares relevant payment data with approved payment service providers including mobile financial services such as bKash, Nagad, Rocket, and Upay, and banking partners. These providers act as independent data controllers for the data they receive in connection with their own services, and are subject to their own privacy policies and applicable financial regulations.

egg33 uses third-party KYC verification partners to authenticate player identities and confirm age eligibility. These partners receive only the minimum data necessary for verification and are contractually bound to process it solely for that purpose.

Third-party game studios and content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session identifiers to facilitate game delivery and RNG certification. These providers do not receive Player names, contact details, or payment information.

egg33 will disclose personal data to competent legal, regulatory, or law enforcement authorities where required to do so by law, court order, or binding regulatory direction. Where legally permissible, egg33 will notify the affected Player of such a disclosure request before complying.

In the event of a merger, acquisition, restructuring, or sale of all or part of egg33's business, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being applied by the successor organisation. Players will be notified of any such transfer in advance where practicable.

egg33 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of the account relationship, plus a period of five (5) years following permanent account closure, to satisfy AML record-keeping obligations and facilitate dispute resolution.
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later, in accordance with applicable financial compliance requirements.
• Transaction records: Retained for a minimum of seven (7) years following each transaction date, as required by standard financial record-keeping practices.
• Support communications: Retained for three (3) years from the date of the most recent communication in a support thread, unless the communication relates to an active dispute, in which case it is retained until the dispute is formally resolved.
• Technical and session data: Retained for up to twelve (12) months for security analysis and fraud prevention, after which it is aggregated and anonymised.
• Marketing consent records: Retained for as long as you remain opted in to marketing, plus two (2) years following withdrawal of consent to maintain an audit trail of your marketing preferences.

As a Player on the egg33 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. egg33 will respond within thirty (30) calendar days.

• Right of Access: You may request a copy of all personal data egg33 holds about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right to Rectification: If any personal data egg33 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. For security purposes, certain corrections (such as changes to name or date of birth) may require supporting documentation.
• Right to Erasure: Subject to applicable legal retention obligations, you may request the deletion of your personal data. Where egg33 is legally required to retain certain data (e.g., AML or transaction records), we will inform you of which data cannot be deleted and the reason why.
• Right to Restriction of Processing: You may request that egg33 restrict the processing of your data in specific circumstances — for example, where you contest its accuracy or object to its processing — while the relevant matter is under review.
• Right to Data Portability: You may request a copy of the personal data you provided to egg33 in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, egg33 will cease all marketing communications to you without delay.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

egg33 implements a layered security architecture to protect player personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the egg33 Platform is encrypted using industry-standard TLS 1.3 protocol, equivalent to 256-bit SSL encryption.
• Data encryption at rest: Personal data stored in egg33 databases is encrypted using AES-256 encryption. Encryption keys are managed under strict key management procedures with regular rotation schedules.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and undergo background screening prior to appointment.
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication. Players are strongly encouraged to enable OTP-based two-factor authentication on their accounts.
• Penetration testing: egg33's infrastructure and applications undergo regular third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.
• Incident response: egg33 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to Players, affected individuals will be notified without undue delay.

egg33 uses cookies and similar technologies (including session storage and device fingerprinting) on the Platform for the purposes described below. By continuing to use the Platform, you consent to the use of cookies in accordance with this Policy.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account.

The egg33 Platform is strictly for adults aged 21 years and over. egg33 does not knowingly collect personal data from persons under the age of 21. If we discover that personal data has been collected from a person who has not reached the minimum age, we will immediately close the associated account, void all transactions, and permanently delete all associated data. If you believe that a person under 21 has registered an account on the Platform, please notify us immediately at [email protected].

The egg33 Platform integrates third-party game content and payment services. These third-party services operate under their own privacy policies and data handling practices, for which egg33 accepts no responsibility. Players are encouraged to review the privacy policies of any third-party service provider they interact with through the Platform. egg33 does not endorse or accept liability for the data practices of external providers beyond its contractual obligations to them.

egg33 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where changes are material — that is, where they affect the rights of Players or change the purposes for which data is processed in a significant way — egg33 will provide at least fourteen (14) days' advance notice via the Platform and by email to the registered address on each affected account. Continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

For all privacy-related enquiries, data subject rights requests, or concerns regarding egg33's data handling practices, please contact the egg33 Data Protection team using the details below. All requests will be acknowledged within five (5) business days and fully resolved within thirty (30) calendar days of receipt.