evojile Privacy Policy — How We Handle Your Personal Data

1. Data We Collect

evojile collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser when you visit the site, and from third-party identity and payment verification partners. The categories of personal data we collect are set out below.

1.1 Registration & Account Data

When you create an evojile account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you are aged 18 or above)
• Email address
• Mobile phone number registered in Bangladesh
• Residential address
• Chosen username and encrypted password (passwords are never stored in plain text)
• Preferred currency (Bangladeshi Taka ৳ / BDT)

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to protect the integrity of our platform, we may collect:

• Copies of government-issued identity documents: National Identity Card (NID), passport, or driver's licence
• Proof of address: utility bill, bank statement, or official government correspondence dated within 90 days
• Selfie photographs or short video verification for liveness checks in high-risk scenarios
• Source-of-funds documentation for high-value account activity

1.3 Financial & Transaction Data

When you deposit or withdraw funds, evojile records the following transaction-level information:

1.4 Gaming Activity Data

evojile records your gaming behaviour in order to deliver a personalised experience, detect unusual patterns, and enforce responsible gaming tools:

• Games played, bet amounts, wins, losses, and session durations
• Bonus claims, wagering progress, and promotional activity
• Sports betting selections, odds accepted, and settlement outcomes
• Self-imposed limits, time-out activations, and self-exclusion requests

1.5 Technical & Device Data

When you access evojile via browser or any supported application, we automatically collect:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Session timestamps and page interaction logs
• Referral URL and traffic source identifiers
• Cookie and local storage identifiers (see Section 5)

1.6 Communications Data

If you contact our support team by email or live chat, we retain records of those communications including your email address, the content of your message, and any attachments you provide. These records are used to resolve your query, train support staff, and improve our service quality.

2. How We Use Your Data

evojile uses the personal data we collect for specific, defined purposes only. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected.

2.1 Platform Operation

The primary purpose for which we process your data is to operate the evojile platform — enabling you to register an account, fund your balance in Bangladeshi Taka, place wagers on cricket, slots, live casino, and other games, withdraw your winnings, and manage your account preferences.

2.2 Identity Verification & Fraud Prevention

We process identity and KYC data to verify that you meet the 18+ age requirement, that you are who you claim to be, and that your account is not being used for fraudulent or criminal purposes. Automated and manual fraud-detection processes monitor account activity for patterns consistent with bonus abuse, money laundering, collusion, or underage gambling.

2.3 Payment Processing

Financial data is processed to route deposits and withdrawals to the correct payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard) and to maintain accurate account balance records. We retain transaction data for audit and dispute-resolution purposes.

2.4 Responsible Gaming

Gaming activity data — including session length, betting frequency, and loss patterns — is analysed to power the responsible gaming tools available on evojile, such as deposit limits, session reminders, and self-exclusion. This processing is in the direct interest of player welfare. For more information, see our Responsible Gaming page.

2.5 Customer Support

Communications data is used exclusively to respond to your support enquiries and to improve the quality of our English-language support service. Support conversations are reviewed periodically for training and quality assurance purposes.

2.6 Marketing Communications

Where you have given explicit consent, evojile may send you promotional emails or notifications about bonuses, new games, seasonal offers (e.g., Eid promotions, Pohela Boishakh specials, BPL cricket season offers), and platform updates. You may withdraw your marketing consent at any time by clicking "Unsubscribe" in any email or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before its withdrawal.

2.7 Legal & Regulatory Compliance

evojile processes personal data as required to meet anti-money-laundering (AML), counter-terrorism financing (CTF), and platform security obligations. Transaction data may be retained and disclosed to competent authorities where required by law.

3. Legal Basis for Processing

evojile processes your personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

4. Data Sharing & Third Parties

evojile does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data with external parties only in the limited, specific circumstances described below.

4.1 Payment Processors

To process your deposits and withdrawals, evojile shares the minimum necessary financial data with your chosen payment provider. For example, when processing a bKash withdrawal, evojile shares your bKash wallet number and the transaction amount with the bKash payment gateway. Each payment provider is bound by its own privacy policy and operates independently of evojile. Providers we work with include: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard.

4.2 Game Content Providers

evojile hosts games supplied by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and player-identifier data necessary to deliver the game experience. No additional personal data is shared with game studios beyond what is required for game session management.

4.3 Identity Verification Partners

evojile may use third-party KYC verification services to authenticate identity documents and perform liveness checks. These partners process your submitted documents under strict data processing agreements and are not permitted to use your data for any purpose other than the verification service they provide.

4.4 Legal & Regulatory Disclosure

evojile may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or binding regulatory direction. In all such cases, evojile will disclose only the minimum data required and will notify the affected player where legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of evojile's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such change via email and will retain the right to request deletion of their data in accordance with Section 7.

5. Cookies & Tracking Technologies

evojile uses cookies and similar tracking technologies to operate certain essential platform functions, analyse site performance, and — where consent is given — personalise your experience. A cookie is a small text file placed on your device by a website. It does not give evojile access to your device or any data stored on it beyond what the cookie itself contains.

5.1 Essential Cookies

These cookies are strictly necessary for the evojile platform to function. They cannot be disabled without breaking core functionality such as account login, session management, and currency display (৳ BDT). No consent is required to set essential cookies, but we disclose their use here in the interest of full transparency.

5.2 Analytics Cookies

With your consent, evojile uses analytics cookies to measure aggregate traffic patterns, page performance, and user journey data. This information is used to improve the platform experience for all players. Analytics cookies do not identify you personally — they operate on anonymised or pseudonymised identifiers.

5.3 Preference Cookies

Preference cookies remember your platform settings — such as your preferred game category, notification preferences, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.

5.4 Managing Cookies

You may manage your cookie preferences at any time via your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking essential cookies will prevent you from logging in to your evojile account and using core platform features. Guidance on managing cookies is available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.).

6. Data Retention & Storage

evojile retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, and to resolve any disputes or enforce our Terms & Conditions.

6.1 Retention Periods by Data Category

6.2 Data Storage & Security Infrastructure

All evojile player data is stored on secure servers protected by industry-standard encryption at rest (AES-256) and in transit (TLS 1.2 / 1.3). Access to production data is restricted to authorised personnel on a need-to-know basis and is subject to strict internal access controls and audit logging. evojile's infrastructure is hosted in data centres with physical security measures, redundant power supplies, and regular third-party security assessments.

6.3 Data Deletion

Upon the expiry of the applicable retention period, or upon receipt of a validated deletion request (see Section 7), evojile will securely delete or irreversibly anonymise the relevant personal data. Data subject to an ongoing legal hold — for example, data related to an active fraud investigation or regulatory inquiry — will be retained until the hold is lifted before deletion proceeds.

7. Your Privacy Rights

As an evojile player, you hold meaningful rights over your personal data. evojile is committed to honouring these rights promptly and without undue obstacle. To exercise any of the rights below, contact us at [email protected] with the subject line "Privacy Rights Request" and we will respond within 5 business days (Bangladesh Standard Time, UTC+6).

8. Data Security Measures

Protecting your personal data against unauthorised access, loss, or misuse is a core operational priority at evojile. The following technical and organisational security measures are in place across the evojile platform.

8.1 Encryption

All data transmitted between your device and evojile's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). Data stored on evojile's servers — including your personal profile, KYC documents, and financial records — is encrypted at rest using AES-256. Passwords are hashed using a one-way cryptographic algorithm and are never stored or transmitted in plain text. evojile staff cannot retrieve your password — only you can reset it.

8.2 Access Controls

Access to production systems containing player data is restricted to a minimal set of authorised personnel. All staff access is role-based, logged, and reviewed on a regular basis. Remote access to production infrastructure requires multi-factor authentication (MFA). No third party is granted direct database access.

8.3 Vulnerability Management

evojile conducts regular security assessments of its platform infrastructure, including penetration testing and vulnerability scanning. Security patches are applied on an expedited schedule consistent with the severity of the vulnerability. Players who discover a potential security vulnerability are encouraged to disclose it responsibly by emailing [email protected] with the subject line "Security Disclosure".

8.4 Incident Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, evojile will notify affected players without undue delay, describing the nature of the breach, the categories and approximate number of records involved, the likely consequences, and the measures evojile has taken or proposes to take to address the breach and mitigate its potential adverse effects.

8.5 Your Role in Security

evojile's security measures are most effective when players take responsibility for their own account security. You should use a strong, unique password for your evojile account, enable any available two-factor authentication, never share your login credentials, and contact support immediately at [email protected] if you suspect unauthorised access to your account.

9. Policy Updates & Contact

9.1 Right to Update This Policy

evojile reserves the right to update or modify this Privacy Policy at any time. When material changes are made to the way in which we collect, use, or store your personal data, we will notify registered players by email and display a prominent notice on the evojile platform for a minimum of 30 days. The effective date at the top of this page will be updated to reflect the date of the most recent revision. We encourage players to review this Privacy Policy periodically to stay informed about how evojile protects their data.

9.2 Continued Use Constitutes Acceptance

Your continued use of the evojile platform following the notification of a Privacy Policy update constitutes your acknowledgement of the updated policy. If you do not agree with the revised terms, you must discontinue use of the platform and contact support to arrange account closure and data deletion in accordance with your rights under Section 7.

9.3 Contact evojile About Privacy

For all privacy-related enquiries, data rights requests, consent withdrawal requests, or concerns about how your personal data is handled, please contact the evojile Privacy team directly:

• Email: [email protected]
• Subject line: "Privacy Enquiry" or "Privacy Rights Request"
• Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
• Support hours: 24 hours a day, 7 days a week for general queries; formal privacy responses within 5 BST business days