e2bet Privacy Policy — How We Protect Your Personal Data

e2bet operates the online sports betting and casino gaming platform available at e2bet-play.net. For the purposes of this Privacy Policy, e2bet is the data controller — meaning we are the entity that determines why and how your personal data is processed.

If you have any questions, concerns, or requests relating to your personal data at e2bet, you can reach us through the following channels:

• Email: support@e2bet-play.net — mark your subject line "Data Privacy Request" for fastest routing.
• Live Chat: Available 24/7 from within your e2bet account dashboard. Ideal for quick queries about your data or account settings.

We aim to respond to all data-related requests within 5 business days and to complete all valid requests within 30 calendar days. For complex requests we will acknowledge receipt promptly and keep you updated on progress.

e2bet collects personal data in the following categories. We only collect what is genuinely necessary for the purpose stated alongside each category.

Registration and Account Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (used for age verification)
• Gender (optional, used only for account personalisation)
• Mobile phone number (used for OTP verification and account communications)
• Email address (used for account notifications and, with consent, marketing)
• Username chosen during registration

Identity Verification (KYC) Data

• Copy of government-issued photo ID — CNIC or valid passport
• Selfie photograph for identity matching
• Proof of address document (requested in specific circumstances, e.g. large withdrawal reviews)
• Source of funds information (requested for regulatory compliance in high-value cases)

Financial and Transaction Data

• Payment method details — Easypaisa/JazzCash account number, bank account number (IBFT), card number last four digits
• Deposit amounts, dates, and transaction reference numbers
• Withdrawal requests, amounts, dates, and processing status
• Bonus credit and wagering records

Gaming and Betting Activity Data

• All bets placed — sport, event, selection, stake, odds, and settlement outcome
• Casino game sessions — game title, session duration, bets placed, wins, and losses
• Game preferences and favourite titles
• Promotions claimed and bonus wagering progress

Technical and Device Data

• IP address at the time of each login and transaction
• Device type, operating system version, and browser type
• Session duration and login timestamps
• Pages visited and features used within the platform

Communication Data

• Records of live chat conversations with the support team
• Email correspondence with e2bet
• Complaints submitted and their resolution outcomes

e2bet collects personal data through three main routes:

Directly from you: Most of your data comes directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet or play a game, contact our support team, or respond to a survey or promotion.

Automatically through platform use: When you visit and use the e2bet platform, certain technical data is collected automatically — including your IP address, device details, session timestamps, and behavioural data about which features you use. This data is collected through cookies, server logs, and similar tracking technologies. See Section 7 (Cookies) for full details.

From third-party verification services: When you undergo KYC verification, e2bet uses third-party identity verification services to check the authenticity of documents you submit. These services return a verification outcome to e2bet but do not retain copies of your documents on our behalf beyond their own stated retention policies.

e2bet uses your personal data for the following specific purposes. For each purpose, we have identified the relevant legal basis under applicable data protection law in Section 5.

We do not use your personal data for automated decision-making that produces significant legal effects on your account, except in cases of fraud detection where a flagged account may be temporarily suspended pending a human review. You may request a human review of any automated action affecting your account.

e2bet processes your personal data under the following legal grounds depending on the specific activity:

• Contractual necessity: Processing required to fulfil the agreement with you when you open an e2bet account and use the platform — including operating your account, processing payments, and providing gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations — including age verification, anti-money laundering checks, responsible gaming obligations, and record-keeping requirements.
• Legitimate interests: Processing for purposes that represent a fair balance between e2bet's operational interests and your privacy rights — such as fraud detection, platform security, and service improvement through aggregated analytics. We conduct a legitimate interests assessment for each use case under this basis.
• Consent: Processing that requires your active opt-in — primarily marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting any other aspect of your account.

e2bet does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment networks receive the minimum data necessary to process your transactions — typically your account identifier and transaction amount. These providers have their own privacy policies and data security obligations.
• Identity verification providers: Third-party KYC services receive your identity documents and selfie solely for the purpose of verifying your identity. They are contractually bound to use this data only for verification and to maintain appropriate security standards.
• Game software providers: Casino and sports data providers receive anonymised session and gameplay data to deliver game content and settle bets. Your name and contact details are never shared with game content providers.
• Fraud prevention and security services: Specialist fraud detection services may receive technical data — such as IP addresses and device fingerprints — to help identify and prevent fraudulent activity on the platform.
• Regulatory and law enforcement authorities: e2bet will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or regulatory directive. We will notify you of such disclosures wherever legally permitted to do so.

e2bet uses cookies and similar tracking technologies to make the platform function correctly, to understand how it is being used, and — with your consent — to deliver relevant content and offers. When you first visit the e2bet platform, you are presented with a cookie consent banner that allows you to accept or decline non-essential cookies.

You can update your cookie preferences at any time through your browser settings or by contacting support. Note that disabling essential cookies will prevent the e2bet platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to place bets, play games, or process payments.

e2bet retains your personal data only for as long as is necessary for the purpose it was collected, or for as long as is required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data (registration, contact details): Retained for the duration of your account plus 5 years after account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for 5 years after account closure or the date of the last transaction, as required by applicable financial regulations.
• Transaction records (deposits, withdrawals, bet history): Retained for 7 years to comply with financial record-keeping obligations.
• Support communications: Retained for 3 years from the date of the last communication, or for the duration of any ongoing dispute.
• Technical and device data (IP logs, session data): Retained for 12 months from collection for fraud detection and security purposes.
• Marketing consent records: Retained for as long as you are subscribed to marketing communications, and for 2 years after unsubscription to evidence the consent history.

When your data is no longer required and no legal obligation mandates its continued retention, it is securely deleted or irreversibly anonymised. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical analysis and platform improvement.

As a registered player at e2bet, you have the following rights over your personal data. To exercise any of these rights, contact us at support@e2bet-play.net with "Data Rights Request" in the subject line, or use our 24/7 live chat.

e2bet takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.3): All data exchanged between your browser or app and the e2bet platform is encrypted in transit using TLS 1.3, the most current and secure transport encryption standard.
• Encryption at rest: Personal and financial data stored in e2bet databases is encrypted using AES-256. Encryption keys are managed separately from the encrypted data and rotated regularly.
• Access controls: Access to personal data within e2bet is restricted on a strict need-to-know basis. Staff access to player data is logged, monitored, and subject to regular review. No single team member has unrestricted access to all player data categories.
• Penetration testing: The e2bet platform undergoes regular penetration testing by independent security professionals to identify and address vulnerabilities before they can be exploited.
• Incident response: e2bet has a documented security incident response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected players without undue delay.
• Two-factor authentication: All e2bet accounts support two-factor authentication via SMS OTP. We strongly recommend enabling this feature from your account security settings.

While e2bet takes all reasonable steps to protect your data, no online system is completely immune to all threats. You also play a role in your account security — keep your password strong and private, and contact us immediately if you suspect any unauthorised access to your account.

The e2bet platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If during account review or KYC verification we determine that a player is under 18, the account will be immediately closed, all balances forfeited, and the personal data deleted except where retention is required to evidence the violation.

If you are a parent or guardian and believe a minor has registered an e2bet account or submitted personal data to our platform, please contact us immediately at support@e2bet-play.net. We will investigate and take appropriate action promptly.

e2bet reviews this Privacy Policy at least annually and updates it whenever our data practices change in a material way. When we make significant changes, we will notify registered players via the email address or mobile number associated with their account before the changes take effect.

We will also update the "Last updated" date at the top of this page whenever any change — however minor — is made. The version of the Privacy Policy current at the time you use the platform is the version that applies to your data. We recommend bookmarking this page and checking it periodically. Continued use of the e2bet platform after a policy update constitutes your acknowledgement of the revised Privacy Policy.

Whether you have a straightforward question, want to exercise one of your data rights, or have a concern about how e2bet has handled your personal information, we want to hear from you. Here is how to get in touch:

• Email: support@e2bet-play.net — use the subject line "Privacy / Data Request" and include your registered mobile number so we can locate your account quickly.
• Live Chat: Available around the clock from the chat icon within your e2bet account. For quick questions about data settings, live chat is usually the fastest route.
• Response time: We acknowledge all privacy requests within 2 business days and aim to resolve them fully within 30 calendar days. For requests requiring significant work — such as a full data export — we may take up to 60 days and will notify you if this is the case.

If you are not satisfied with e2bet's response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction. Our team will always provide details of the relevant authority upon request.