Privacy Policy — ehub25

1. Information We Collect

ehub25 collects personal data from you in order to create and manage your account, process your BDT ৳ deposits and withdrawals, verify your identity, deliver a safe and personalised gaming experience, and comply with applicable legal and regulatory obligations. Below we describe the categories of personal data we collect, and the context in which each category is gathered.

1.1 Information You Provide Directly

When you register an ehub25 account or interact with the platform, you voluntarily provide us with certain personal data, which may include:

• Identity data: Your full legal name as it appears on your National Identity Card (NID), passport, or birth certificate;
• Contact data: Your email address and Bangladesh mobile phone number;
• Date of birth: Used exclusively to verify that you are 18 years of age or older at the time of registration;
• Account credentials: Your chosen username and an encrypted hash of your password — we never store your password in plain text;
• KYC documents: Copies of identity documents submitted for Know Your Customer verification, including NID, passport, driver's licence, or other government-issued identification;
• Payment data: Your registered bKash number, Nagad number, Rocket (DBBL) number, Upay number, or Visa/Mastercard details as entered during deposit or withdrawal processes;
• Communication data: Messages, queries, and attachments you send to our support team via live chat or email at [email protected].

1.2 Information Collected Automatically

When you access and use the ehub25 platform, certain technical and behavioural data is collected automatically through the platform's logging and analytics systems:

• Device data: Your device type, operating system, browser type and version, screen resolution, and device language settings;
• Network data: Your IP address and approximate geographic location derived from IP (country and city level);
• Usage data: Pages visited on ehub25.net, time spent on each page, click patterns, game sessions started and completed, bet amounts, and navigation paths;
• Transaction data: A full log of all deposit and withdrawal transactions, bonus claims, and wagering activity associated with your account;
• Session data: Login timestamps, session duration, and logout events.

1.3 Information from Third Parties

We may receive supplemental personal data about you from trusted third-party sources in limited circumstances, including:

• Identity verification providers who assist with NID and document validation during KYC;
• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status and amounts;
• Fraud detection and anti-money laundering service providers who flag suspicious account or payment activity.

2. How We Use Your Data

ehub25 processes personal data for clearly defined, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises the primary purposes for which we process your personal data and the category of data used in each case.

2.1 Marketing Communications

ehub25 may send you promotional communications about bonuses, new games, cricket betting markets, seasonal tournaments (BPL, IPL, T20 World Cup), and platform features via email or in-platform notifications. These communications are sent only where you have opted in to receive them during account registration or via your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings panel or by contacting support.

3. Legal Basis for Processing

ehub25 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to enter into and perform the agreement between you and ehub25 — including account creation, deposit and withdrawal processing, and delivery of gaming services. Without this processing, we cannot provide you with the platform's services;
• Legal obligation: Processing required to comply with applicable legal obligations, including Know Your Customer (KYC) identity verification, anti-money laundering (AML) record-keeping, and age verification under applicable law;
• Legitimate interests: Processing necessary for the legitimate interests of ehub25, provided those interests are not overridden by your rights and interests. Legitimate interests include fraud prevention, platform security, responsible gaming monitoring, aggregated analytics, and improving the quality of our services;
• Consent: Where we rely on your freely given, specific, informed, and unambiguous consent for processing activities not covered by the above bases — most notably, optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing & Third Parties

ehub25 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under binding contractual agreements that require them to protect your data and prohibit them from using it for any purpose other than providing services to ehub25. These providers include:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and Visa/Mastercard network processors — to facilitate BDT ৳ deposit and withdrawal transactions;
• Identity verification providers: Third-party KYC and document verification services used to validate your National ID, passport, or other identity documents;
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi — who receive session identifiers and wager data necessary to deliver game content and calculate outcomes;
• Fraud and AML screening services: Providers who analyse transaction patterns to detect and prevent fraudulent activity and money laundering;
• Platform infrastructure providers: Cloud hosting, CDN, and database services that store and deliver platform content and player account data.

4.2 Legal and Regulatory Disclosures

ehub25 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are required to do so by law, court order, or in response to a valid legal process. We will endeavour to notify you of any such disclosure where we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ehub25's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the applicable privacy terms of the acquiring entity prior to your data being subject to a materially different privacy policy.

5. Cookies & Tracking Technologies

ehub25 uses cookies and similar tracking technologies (such as web storage and session tokens) on the ehub25.net website and platform interface. This section explains what cookies are, which types we use, and how you can manage your cookie preferences.

5.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device across pages within the same session, or across multiple sessions if a persistent cookie is used. Cookies do not contain executable code and cannot access other files on your device.

5.2 Types of Cookies Used by ehub25

5.3 Managing Your Cookie Preferences

You may manage or restrict cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, clear cookies when the browser is closed, or prompt you before accepting each cookie. Please note that disabling strictly necessary cookies will prevent you from logging into your ehub25 account and using core platform features. Disabling functional cookies may result in a reduced or inconsistent user experience. Disabling analytics cookies does not impair your ability to use the platform.

6. Data Retention

ehub25 retains your personal data for as long as your account remains active and for a defined period after account closure, to meet our legal obligations and to resolve any post-closure disputes or claims. We do not retain personal data beyond the periods set out below unless required by law or for the pursuit or defence of legal claims.

• Active account data (identity, contact, payment data): Retained for the full duration of your active ehub25 account;
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations;
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of 5 years following the date of each transaction;
• Support and communication records: Retained for 3 years following the resolution of each support interaction;
• Marketing consent records: Retained for 2 years following consent withdrawal or account closure, whichever is later;
• Anonymised analytics data: May be retained indefinitely, as it cannot be used to identify any individual player.

When the applicable retention period expires, your personal data will be securely deleted or irreversibly anonymised using industry-standard data destruction methods. Anonymised data derived from your account activity may be retained in aggregated form for statistical and platform improvement purposes without further limitation.

7. Your Rights & Choices

As a player on ehub25, you hold the following rights in relation to the personal data we hold about you. You may exercise any of these rights at any time by contacting us via live chat or by emailing [email protected] (plain text — not a clickable link), providing sufficient detail to allow us to identify your account and process your request.

• Right of access: You have the right to request a copy of the personal data ehub25 holds about you, along with information about how it is being used. We will respond to verified access requests within 30 calendar days;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay;
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that this right is subject to our legal obligation to retain certain data (e.g., KYC records and transaction logs) for the minimum retention periods described in Section 6;
• Right to restriction of processing: You may request that ehub25 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified;
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal;
• Right to object to processing: You may object to processing carried out on the basis of legitimate interests where you believe your rights and freedoms override those interests. You also have an absolute right to object to processing your data for direct marketing purposes.

8. Data Security

ehub25 takes data security seriously and has implemented a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no system can guarantee absolute security, we maintain industry-standard safeguards appropriate to the sensitivity of the data we process.

8.1 Technical Measures

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and ehub25.net is encrypted in transit using TLS 1.2 or higher;
• Password hashing: Account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms with salting to store password credentials securely;
• Secure data storage: Personal data at rest is stored in access-controlled, encrypted database environments hosted on reputable cloud infrastructure providers;
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum access privileges necessary to perform their specific role;
• Intrusion detection: Our infrastructure is monitored continuously for suspicious activity, attempted breaches, and anomalous access patterns.

8.2 Organisational Measures

• All personnel with access to personal data are subject to confidentiality obligations;
• Data protection awareness is incorporated into staff onboarding and ongoing training;
• Third-party service providers are assessed for security standards before being engaged and are bound by data processing agreements;
• Regular internal reviews of data handling practices and access logs are conducted.

8.3 Your Responsibility

You are responsible for keeping your ehub25 account credentials confidential. Do not share your username or password with any other person. Do not access your ehub25 account from shared, public, or unsecured devices or networks. If you believe your account has been compromised, contact ehub25 support immediately via live chat or at [email protected] (plain text — not a clickable link) so that we can suspend access and assist you in securing your account.

9. Children's Privacy

The ehub25 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data from any individual under the age of 18. Age verification is a mandatory step in our account registration process, and we require documentary confirmation of age during KYC verification.

If ehub25 becomes aware — through our own verification processes, a report from a third party, or any other means — that personal data has been collected from a person under the age of 18, we will take immediate steps to:

• Suspend and close the relevant account;
• Reverse any deposits made to the account in accordance with our responsible gaming and account closure procedures;
• Permanently delete all personal data associated with the underage account from our active systems, subject to any overriding legal obligation to retain specific records.

10. Changes to This Policy

ehub25 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, the introduction of new platform features or payment methods, changes in applicable law, or recommendations from data protection authorities.

When we make material changes to this Privacy Policy, we will notify you by one or more of the following methods:

• A prominent notice displayed on the ehub25 platform upon your next login;
• An email notification sent to your registered email address;
• An updated effective date displayed at the top of this page.

Minor amendments — such as clarifications of existing language that do not alter the substance of our data practices, corrections of typographical errors, or updates to contact details — may be made without specific individual notification, though the effective date on this page will always reflect the most recent revision.

11. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ehub25 handles your personal data, please contact our support team using one of the methods below. All privacy-related enquiries are treated with strict confidentiality and handled by trained personnel.

11.1 Complaints Process

If you are dissatisfied with ehub25's response to a privacy concern or data rights request, you may escalate your complaint through the following process:

1. First-level review: Contact ehub25 support with a clear description of your concern. We will acknowledge receipt within 2 business days and aim to resolve the matter within 10 business days;
2. Escalation to senior team: If unsatisfied with the initial response, request escalation to the ehub25 Senior Data & Compliance team by clearly stating "Privacy Escalation" in your correspondence;
3. Independent resolution: If the matter remains unresolved after exhausting internal channels, you may seek independent resolution through applicable legal mechanisms in your jurisdiction.

ehub25 is committed to resolving all privacy concerns fairly, transparently, and within a reasonable timeframe. We treat every data rights request as a priority and maintain detailed records of all requests and their outcomes.