Privacy Policy — eonkick

Section 1

Data We Collect

eonkick collects personal data only to the extent necessary to provide our platform services, fulfil legal obligations, and maintain a safe and fair environment for all users. The categories of data we collect are set out below.

Registration Data: When you create an account on eonkick, we collect your full legal name, date of birth, residential address, email address, and a Bangladesh-registered mobile phone number. This information is required to create and administer your account, verify your age (18+), and comply with our Know Your Customer (KYC) obligations.

Identity Verification Documents: To complete KYC verification, we may request copies of government-issued identification (such as a National ID card or passport), proof of address (such as a utility bill or bank statement), and proof of ownership of your registered payment method (such as a screenshot of your bKash or Nagad account). These documents are processed securely and retained only as required by applicable regulations.

Financial Transaction Data: We record details of all deposits and withdrawals processed through your eonkick account, including transaction amounts in BDT (৳), payment method identifiers (e.g., the registered mobile number for bKash or Nagad), timestamps, and transaction reference numbers. This data is essential for account administration, fraud detection, and Anti-Money Laundering (AML) compliance.

Platform Activity Data: We collect records of your betting and gaming activity on eonkick, including games played, bets placed, stakes, outcomes, bonus usage, and session durations. This data is used to administer your account, resolve disputes, detect problem gambling patterns, and improve our platform.

Technical & Device Data: We automatically collect certain technical information when you access eonkick, including your IP address, browser type and version, operating system, device identifiers, referring URL, and pages visited. This data helps us maintain platform security, detect fraudulent access attempts, and optimise the user experience.

Communications Data: If you contact our support team via live chat or email, we retain records of that correspondence, including the content of messages and any attachments provided, for a period of up to 3 years. This is used for quality assurance, dispute resolution, and regulatory compliance.

Section 2

How We Use Your Data

The personal data we collect is used for clearly defined purposes. We do not use your data for any purpose that conflicts with what is described in this Privacy Policy. The primary purposes for which we process your data are as follows:

Marketing Communications: eonkick will only send you promotional emails or SMS messages regarding bonuses, seasonal offers (such as BPL or Eid promotions), or new game launches if you have explicitly opted in to marketing communications during or after registration. You may withdraw this consent at any time by contacting support@eonkick or updating your account communication preferences.

Automated Decision-Making: Certain account-level decisions — such as triggering a responsible gaming alert, flagging a transaction for AML review, or temporarily limiting account access during a fraud investigation — may be made using automated systems. Where an automated decision materially affects your account, you have the right to request human review by contacting our support team.

Section 3

Data Sharing & Third Parties

eonkick does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent required in each case.

Payment Processing Partners: To process your deposits and withdrawals, your financial transaction data is shared with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and card-processing networks via participating Bangladeshi banks such as City Bank, BRAC Bank, and Dutch-Bangla Bank. These providers process your data solely for payment execution and are bound by their own privacy and security obligations.

Game Technology Providers: eonkick integrates casino and instant-game content from third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. When you play a game hosted by one of these providers, certain anonymised session and outcome data may be shared with the provider for the purposes of game integrity verification and RNG certification audits. No personally identifiable information is shared with game providers beyond what is strictly necessary for fraud prevention.

Legal & Regulatory Disclosures: We may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other government authorities in Bangladesh or internationally if we receive a valid legal request, court order, or are otherwise obligated to do so under applicable law. We will notify you of any such disclosure where we are legally permitted to do so.

Professional Advisors: We may share limited account data with our legal counsel, auditors, or compliance consultants where necessary for the administration of our business. All such third parties are bound by strict confidentiality obligations.

Section 4

Cookies & Tracking Technologies

eonkick uses cookies and similar browser-based technologies to enable core platform functionality, maintain security, and gather anonymised analytics data. This section explains what types of cookies we use and how you can manage them.

Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, prevent cross-site request forgery (CSRF), and remember your language and display preferences. Without these cookies, eonkick cannot operate correctly. These cannot be disabled.

Analytics Cookies: We use anonymised analytics tools to understand how users navigate eonkick — for example, which game categories are most visited, how long sessions last, and where users encounter friction. This data is collected in aggregated, non-personally-identifiable form and is used solely to improve our platform. No raw analytics data is shared with third-party advertisers.

Security Cookies: These cookies assist our fraud detection systems by fingerprinting device characteristics across sessions. They help us identify suspicious login patterns such as credential stuffing, account takeover attempts, and multi-account abuse. These are active by default as part of our platform security infrastructure.

Preference Cookies: These store your optional settings such as odds display format, notification preferences, and responsible gaming reminders. They are active only if you customise your account settings.

Managing Cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impair platform functionality — for example, you may be logged out automatically or experience display issues. Please refer to your browser's help documentation for instructions specific to your browser type.

Section 5

Data Security & Storage

eonkick takes the security of your personal data seriously. We implement a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

Encryption in Transit: All communications between your browser or mobile device and the eonkick platform are encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed to ensure continuous protection. You can verify this by checking for the padlock icon in your browser's address bar when accessing eonkick.

Encryption at Rest: Sensitive data — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption on our storage infrastructure. Plain-text passwords are never stored; passwords are hashed using a secure cryptographic algorithm before being written to our database.

Access Controls: Access to personal data within eonkick's internal systems is restricted to authorised personnel who require it to fulfil their specific job function. Access is granted on a role-based, need-to-know basis, and all internal access events are logged for audit purposes.

Infrastructure Security: Our servers are hosted in secure data centres with physical access controls, 24/7 monitoring, and redundant network infrastructure. We conduct regular vulnerability assessments and apply security patches promptly following disclosure.

Incident Response: In the event of a data breach that poses a risk to your rights and freedoms as a user, eonkick will notify affected users via their registered email address within a reasonable timeframe, and take all appropriate steps to contain, investigate, and remediate the incident. We encourage users to report any suspected security vulnerability by contacting support@eonkick immediately.

Section 6

Your Privacy Rights

As a user of eonkick, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at support@eonkick with a clear description of your request. We will respond within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that eonkick holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared. We will provide this information in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain information directly via your account settings dashboard.
• Right to Erasure: In certain circumstances, you have the right to request that we delete the personal data we hold about you. Please note that we may be required to retain certain data — such as KYC documents and transaction records — for a minimum period to comply with our legal obligations. We will inform you of any such constraints when responding to an erasure request.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data while a rectification or objection request is being reviewed.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider of your choice.
• Right to Object to Marketing: You have the right to object at any time to the use of your personal data for direct marketing purposes. Upon receipt of such a request, we will cease all marketing communications to you within 5 business days.
• Right to Human Review: If you believe that an automated decision has materially and unfairly affected your account — for example, an automatic restriction based on responsible gaming monitoring — you have the right to request that the decision be reviewed by a human member of our compliance team.

To submit any privacy rights request, email support@eonkick with the subject line "Privacy Rights Request" and include your registered account email address and a description of your request. We may ask you to verify your identity before processing the request to protect against fraudulent access.

Section 7

Data Retention Policy

eonkick retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Where data must be retained beyond a standard retention period due to an ongoing legal dispute, regulatory investigation, or law enforcement request, we will retain it only for the duration of that specific matter and no longer.

If you request account closure, we will deactivate your account promptly. However, the underlying data records will be retained for the minimum periods set out above before secure deletion. You will be informed of this at the time of your closure request.

Section 8

Policy Updates & Contact

eonkick reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will:

• Update the "Effective" date at the top of this page and in the hero section above.
• Send a notification to your registered email address summarising the key changes.
• Display a prominent notice on the platform for a minimum of 14 days following the update.

Your continued use of eonkick following notification of any changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated terms, you should discontinue use of the platform and contact us to request account closure.

How to Contact Us: If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data eonkick holds about you, please contact our Data Protection team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (BST, UTC+6).

This Privacy Policy is issued in English and governs the processing of personal data by eonkick for all users accessing the platform from Bangladesh. In all matters of interpretation, the English-language version of this document shall prevail over any translated summary.