ec7777 Privacy Policy

This Privacy Policy ("Policy") describes how ec7777 ("we", "us", "our", "the Platform", "the Company") collects, processes, stores, shares, and protects personal data relating to you ("Player", "User", "you") when you access or use the ec7777 website at ec7777.bet and all associated services, products, games, and betting markets available thereon.

ec7777 is committed to handling your personal information responsibly and in full compliance with internationally recognised data protection standards, including principles aligned with the General Data Protection Regulation (GDPR). While ec7777 is principally designed to serve Pakistani players, we operate under international licensing standards that require us to maintain a high baseline of data protection across all markets we serve.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with ec7777. In the event of any inconsistency between this Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall take precedence.

For the purposes of applicable data protection law, ec7777 acts as the Data Controller in respect of personal data collected from players who use the ec7777 platform. As Data Controller, ec7777 determines the purposes for which and the means by which your personal data is processed.

ec7777 operates under an international gaming licence and its data processing activities are subject to the data protection obligations imposed by that licensing framework. All data processing activities conducted by ec7777 are documented in a formal Data Processing Register maintained by our Data Protection Officer.

For third-party service providers who process data on ec7777's behalf — such as KYC verification providers, payment processors, and game studios — ec7777 acts as the Data Controller and those providers act as Data Processors under binding Data Processing Agreements that restrict how they may use your data and require them to maintain equivalent security standards.

ec7777 collects personal data across several categories depending on the nature of your interaction with the platform. The table below sets out the categories of personal data we collect and examples of the specific data points within each category:

ec7777 collects personal data through the following methods:

• Direct provision: Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automated technical collection: Data collected automatically as you use the ec7777 platform, including IP addresses, device identifiers, browser fingerprints, session data, and cookies (see Section 11 for full cookie details);
• Third-party verification sources: During KYC checks, ec7777 may receive confirmation data from identity verification providers who cross-reference your submitted documents against official databases. ec7777 receives a verification result and confidence score — we do not receive or store the underlying third-party database records;
• Payment processor data: When you deposit via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the payment processor confirms the transaction result and reference to ec7777. ec7777 does not have direct access to your full financial account at any payment provider;
• Game provider data: Third-party casino game studios may share aggregated game session data with ec7777 for the purpose of reconciling credits, applying bonuses, and identifying unusual patterns relevant to responsible gaming monitoring.

ec7777 uses your personal data for the following specific purposes. Each purpose is linked to a legal basis, which is set out in full in Section 6:

• Account registration and management: To create, verify, and maintain your ec7777 account, including processing your login credentials and maintaining your account history;
• Identity and age verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years. This is a legal obligation ec7777 cannot waive;
• Transaction processing: To process deposits and withdrawals via your chosen PKR payment method, including JazzCash, EasyPaisa, and supported bank transfers;
• Sports betting and casino operations: To accept, record, settle, and pay out bets on cricket, PSL, football, UFC, and all other markets; and to record your casino and slot game sessions, apply RNG outcomes, and credit winnings;
• Bonus and promotion management: To apply welcome bonuses, reload offers, and other promotions to your account and to track wagering requirements accurately;
• Responsible gaming monitoring: To identify patterns of potentially problematic gambling behaviour — such as rapidly increasing stakes, extended uninterrupted sessions, or unusual withdrawal patterns — and to proactively offer responsible gaming tools where appropriate;
• Anti-money laundering (AML) compliance: To monitor transactions for signs of money laundering, terrorism financing, or other financial crime, as required by applicable AML regulations;
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorised account access;
• Customer support: To provide you with assistance through our live chat and email support channels and to maintain records of support interactions for quality and dispute resolution purposes;
• Marketing communications: Where you have given consent, to send you promotional offers, bonus notifications, and product updates via email or SMS (see Section 14 for opt-out options);
• Platform improvement: To analyse aggregated usage data to improve the ec7777 platform's functionality, user experience, and product offering.

ec7777 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely on are as follows:

• Contractual necessity: The majority of ec7777's data processing is necessary to perform the contract between you and ec7777 — i.e., to operate your account, process bets, and pay out winnings. Without this processing, ec7777 cannot provide you with its services;
• Legal obligation: Certain processing activities — particularly identity verification, age verification, AML monitoring, and transaction record-keeping — are required by law or by the conditions of ec7777's international gaming licence. ec7777 cannot waive or reduce these obligations regardless of your preferences;
• Legitimate interests: ec7777 processes some data on the basis of its legitimate interest in preventing fraud, securing the platform, detecting bonus abuse, and improving its services. Where ec7777 relies on legitimate interests, it conducts a balancing test to ensure its interests do not override your fundamental data protection rights;
• Consent: Where ec7777 sends you marketing communications by email or SMS, it does so on the basis of your explicit consent, given during registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

ec7777 does not sell your personal data. We share your data only in the following circumstances and only to the extent strictly necessary for the purpose stated:

• KYC and identity verification providers: To verify your age, identity, and source of funds as required by our licensing conditions. These providers receive your submitted identity documents and return a verification result. They are contractually prohibited from using your data for any other purpose;
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive the transaction data necessary to complete your deposit or withdrawal. ec7777 shares only what each processor requires and does not grant processors access to your full betting history or account profile;
• Casino game studios: Third-party game providers receive a pseudonymised player session reference to operate games within the ec7777 lobby. They do not receive your name, CNIC, or contact details;
• Regulatory and law enforcement authorities: ec7777 will disclose personal data to regulators, law enforcement agencies, or courts where required to do so by law, court order, or the conditions of our gaming licence. ec7777 will, where legally permitted, notify you of any such disclosure;
• Sports integrity organisations: Where ec7777 identifies betting patterns potentially connected to match-fixing or sports integrity violations, it may share relevant account and transaction data with recognised sports integrity bodies in accordance with its licence obligations;
• Group companies: ec7777 may share data within its corporate group for internal administrative purposes. Any intra-group sharing is governed by intra-group data transfer agreements that provide the same level of protection as this Policy.

ec7777 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply:

• Account data (active accounts): Retained for the lifetime of your account plus a minimum of 5 years from account closure, in line with standard AML record-keeping requirements;
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or from account closure, whichever is later, as required by AML legislation;
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction;
• Customer support communications: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction, or longer if connected to an open dispute or regulatory matter;
• Marketing consent records: Records of your marketing consent (or withdrawal thereof) are retained for the lifetime of your account plus 2 years, to demonstrate compliance with consent obligations;
• Technical log data: IP address logs and access logs are retained for 12 months from collection, unless required for longer in connection with a specific security investigation.

Upon expiry of the applicable retention period, ec7777 will securely delete or anonymise your personal data using industry-standard data destruction methods. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

ec7777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Transport Layer Security: All data in transit between your browser or app and ec7777's servers is encrypted using TLS 1.3, the current industry standard for secure data transmission;
• Encryption at rest: Sensitive personal data stored on ec7777's servers — including identity documents, payment account references, and KYC records — is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data within ec7777's systems is restricted to staff who have a documented operational need to access it. All access is logged, monitored, and subject to periodic review;
• Two-factor authentication (2FA): ec7777 offers and recommends 2FA for all player accounts. Internal administrative access to systems containing personal data requires mandatory multi-factor authentication;
• Penetration testing: ec7777's platform and infrastructure undergo regular third-party penetration testing and vulnerability assessments. Critical vulnerabilities are patched within defined SLA timeframes;
• Incident response: ec7777 maintains a documented incident response plan. In the event of a personal data breach, our security team follows a defined escalation and notification procedure to contain the breach, assess its impact, and notify affected players and relevant authorities as required.

Subject to applicable law and certain limited exceptions, you have the following rights in respect of your personal data held by ec7777:

• Right of Access: You may request a copy of all personal data ec7777 holds about you. ec7777 will provide this in a commonly used electronic format within 30 days of your request;
• Right to Rectification: If any personal data ec7777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly through your ec7777 account settings. For identity-verified fields, you will need to contact support;
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. However, ec7777 is not able to delete data that it is legally required to retain — for example, KYC records and transaction data subject to AML retention obligations. Where erasure is not possible in full, ec7777 will explain which data must be retained and why;
• Right to Restrict Processing: You may request that ec7777 restrict its processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified;
• Right to Data Portability: You may request that ec7777 provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) for the purpose of transferring it to another service;
• Right to Object: You may object to ec7777's processing of your data on the basis of legitimate interests. ec7777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where ec7777 processes your data on the basis of consent (e.g., marketing emails), you may withdraw that consent at any time through your account settings or by contacting support.

To exercise any of the above rights, contact ec7777 through the platform's 24/7 live chat or by email at [email protected] with the subject line "Data Rights Request". ec7777 will verify your identity before processing any data rights request and will respond within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case ec7777 will notify you of the extension.

ec7777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse platform usage. The following categories of cookies are used on ec7777:

• Strictly Necessary Cookies: These cookies are essential for the ec7777 platform to function. They include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality;
• Functional Cookies: These cookies remember your preferences — such as your preferred language, odds format, and notification settings — so you do not need to reconfigure them on each visit;
• Analytics Cookies: ec7777 uses analytics cookies to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is aggregated and pseudonymised. You may opt out of analytics cookies through your browser settings;
• Marketing Cookies: Where you have consented, ec7777 may use marketing cookies to deliver relevant promotional content on the platform. These cookies track which promotions you have viewed and interacted with to avoid showing you repetitive content.

You can manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the ec7777 platform. Disabling other cookie categories will not affect your core betting and gaming experience but may reduce personalisation quality.

ec7777 is strictly an adults-only platform. You must be 21 years of age or older to register an account and participate in any real-money betting or gaming activity on ec7777. This age restriction applies to all players regardless of their location or the specific product they are accessing.

ec7777 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. During the registration and KYC process, ec7777 verifies your date of birth against your submitted identity documentation. Any account found to belong to a person under 21 will be immediately suspended, any funds held in the account dealt with in accordance with our Terms & Conditions, and all associated personal data handled in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has registered an ec7777 account using false information, please contact us immediately at [email protected] so that we can take appropriate action without delay.

ec7777 operates internationally and, as a result, your personal data may be processed and stored in countries other than Pakistan. In particular, ec7777's servers, KYC verification partners, and some payment processors may be located in jurisdictions outside Pakistan.

Where ec7777 transfers personal data internationally, it ensures that appropriate safeguards are in place to provide a level of protection equivalent to the standards described in this Privacy Policy. These safeguards include:

• Adequacy determinations: Where the destination country has been recognised as providing an adequate level of data protection by relevant international standards;
• Standard contractual clauses: Where no adequacy determination exists, ec7777 uses approved standard contractual clauses or equivalent binding transfer mechanisms in its agreements with data recipients;
• Data processor agreements: All international data processors are required to maintain security and processing standards that match or exceed the requirements of this Policy.

By using ec7777 and providing your personal data, you acknowledge that your data may be transferred, stored, and processed outside Pakistan as described in this section. ec7777 will at all times ensure that such transfers are subject to appropriate safeguards.

ec7777 may send you promotional emails and SMS messages about bonuses, new sports markets, casino promotions, PSL season offers, and other platform news — but only where you have given your explicit consent to receive such communications, either at registration or subsequently through your account settings.

You may opt out of marketing communications at any time through any of the following methods:

• Clicking the "Unsubscribe" link at the bottom of any ec7777 marketing email;
• Updating your notification preferences in the "My Account" section of the ec7777 platform;
• Contacting ec7777 customer support via live chat or at [email protected] with the subject line "Unsubscribe".

Opt-out requests will be processed within 5 business days. Please note that even after opting out of marketing communications, ec7777 will continue to send you essential transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account and cannot be disabled.

ec7777 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our platform, new data processing activities, changes in applicable law, or adjustments to our licensing obligations. The updated Policy will always be published at ec7777.bet/privacy-policy with a revised effective date.

Where a change to this Policy is material — meaning it significantly affects how we process your personal data or reduces your rights — ec7777 will notify you by email to your registered address and/or by a prominent notice within the platform. For non-material changes (such as clarifications of existing practices), ec7777 will update the Policy without individual notification.

Your continued use of the ec7777 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease using the platform and contact support to discuss your account options.

If you have any questions, concerns, or requests relating to this Privacy Policy or ec7777's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly through the ec7777 platform — the fastest way to raise a data protection query or submit a data rights request;
• Email: [email protected] — for formal written data rights requests, privacy concerns, or DPO correspondence. Please use the subject line "Privacy / Data Rights Request" to ensure your message reaches the correct team;
• Data Protection Officer: For escalated data protection concerns or formal complaints, you may address your correspondence specifically to ec7777's Data Protection Officer using the same email address with the subject line "Data Protection Officer".

ec7777 aims to respond to all data protection queries within 10 business days, and to formal data rights requests within 30 calendar days. If your concern is not resolved to your satisfaction, you retain the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.