ec7777 Privacy
Policy & Data Protection

This Privacy Policy ("Policy") is published by the operator of the ec7777 online gaming platform ("ec7777", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "user") who access, register on, or interact with the ec7777 platform accessible at ec7777.one and all associated pages and services.

ec7777 is committed to handling your personal data with integrity, transparency, and the highest standards of security. This Policy is intended to give you a clear and complete picture of our data practices in plain language — not in language deliberately designed to obscure your rights or our obligations.

By creating an ec7777 Account or using our services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. This Policy should be read alongside the ec7777 Terms & Conditions.

For the purposes of applicable data protection law, ec7777 acts as the data controller in respect of all personal data you provide directly to us or that we collect in connection with your use of the ec7777 platform.

As data controller, ec7777 determines the purposes and means by which your personal data is processed. Where ec7777 engages third-party service providers — such as payment processors, KYC verification partners, or gaming content providers — those parties act as data processors operating under contractual obligations to process your data only on ec7777's documented instructions and in accordance with this Policy.

If you wish to contact ec7777 regarding any data protection matter, please use the contact details provided in Section 15 of this Policy.

ec7777 collects and processes the following categories of personal data:

3.1 Registration & Account Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (for age verification — players must be 21 years of age or older)
• Pakistani mobile phone number
• Email address (if provided)
• Account username and encrypted password
• City of residence (Karachi, Lahore, Islamabad, Faisalabad, or other)

3.2 Identity Verification (KYC) Data

• Copy of Pakistani CNIC (front and back) or valid passport
• Selfie image or liveness check (where required by our KYC provider)
• Proof of address documentation (where additional verification is required)
• Source of funds declaration (for accounts exceeding defined transaction thresholds)

3.3 Financial & Transaction Data

• JazzCash or EasyPaisa account reference (masked — not the full credential)
• Bank account name and number for bank transfer withdrawals (encrypted at rest)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Wagering history: game titles played, stake amounts, win/loss amounts, and session durations

3.4 Technical & Device Data

• IP address at time of login and key account events
• Device type, operating system, and browser version
• Session timestamps and duration
• Geolocation data (city/country level, derived from IP — not GPS-precise location)

3.5 Communication Data

• Content of support chat conversations and email correspondence with ec7777
• Marketing preference settings (opt-in/opt-out status for each channel)
• Survey responses and feedback submitted voluntarily

ec7777 collects personal data through the following means:

• Direct provision: Information you submit during registration, KYC verification, withdrawal requests, support interactions, and survey participation.
• Automated technical collection: Log data, IP addresses, session metadata, and device information collected automatically when you access the ec7777 platform.
• Cookies and similar technologies: Information collected via cookies placed on your browser during platform use. See Section 10 for full details of our cookie practices.
• Third-party payment processors: Transaction reference data received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK in connection with deposit and withdrawal processing. These providers share only the minimum data necessary to confirm and reconcile transactions.
• KYC verification partners: Identity verification results and risk scores from our contracted KYC service provider, used to confirm player identity and satisfy AML obligations.
• Fraud detection services: Risk signals from fraud detection tools that monitor login patterns, device fingerprints, and transaction behaviour for anomalies.

ec7777 processes your personal data only for the specific, legitimate purposes set out in the table below. We do not process your data in ways incompatible with the purposes for which it was collected.

ec7777 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ec7777 — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with ec7777's legal obligations under its international gaming licence — including KYC identity verification, AML monitoring, and regulatory reporting.
• Legitimate interests: Processing necessary to pursue ec7777's legitimate business interests — including fraud prevention, platform security, product improvement, and responsible gaming programme operation — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to optional marketing communications. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing undertaken before withdrawal.

ec7777 does not sell your personal data. We share your personal data with third parties only in the following limited and controlled circumstances:

7.1 Payment Processors. Transaction data is shared with our contracted payment processing partners (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK) solely to the extent necessary to execute your deposit or withdrawal request. These providers are bound by their own regulatory frameworks and data protection obligations.

7.2 KYC & Identity Verification Partners. Identity documents submitted for KYC are processed by our contracted third-party identity verification provider. This provider operates under strict contractual obligations to use your data only for verification purposes and to maintain security standards equivalent to or exceeding those required by ec7777's gaming licence.

7.3 Gaming Content Providers. Game studios whose titles are available on ec7777 receive pseudonymised player identifiers and session data necessary to operate game rounds, calculate outcomes, and maintain game history logs. These providers do not receive your name, CNIC, or contact details.

7.4 Fraud & Security Services. Technical data and transaction patterns are shared with fraud detection and cybersecurity service providers engaged by ec7777 to identify and prevent fraudulent activity, account takeover attempts, and bonus abuse.

7.5 Legal and Regulatory Disclosure. ec7777 may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or in good-faith belief that such disclosure is necessary to protect the rights, property, or safety of ec7777, its players, or the public.

ec7777's primary player data is stored on servers located in jurisdictions that provide adequate levels of data protection under the requirements of our international gaming licence. In providing our services, certain data may be transferred to or processed in countries outside Pakistan by our third-party service providers — including KYC verification partners, game studios, and cloud infrastructure providers.

Where such international data transfers occur, ec7777 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements containing data protection obligations equivalent to those described in this Policy.
• Transfers to service providers located in jurisdictions with recognised data protection frameworks.
• Transfer risk assessments conducted prior to engaging new international data processors.

By using the ec7777 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan as described above, subject to the safeguards outlined in this Section.

ec7777 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our regulatory obligations and legitimate business purposes. The following retention standards apply:

After applicable retention periods have elapsed, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

ec7777 uses cookies and similar tracking technologies on the ec7777 platform for the following purposes:

10.1 Strictly Necessary Cookies. These cookies are essential for the operation of the ec7777 platform and cannot be disabled. They include session management cookies that keep you logged in during an active session, security tokens that protect against CSRF attacks, and cookies that store your language or display preferences. No consent is required for strictly necessary cookies as they are required for the service to function.

10.2 Analytical / Performance Cookies. These cookies collect aggregated, anonymised information about how players interact with the ec7777 platform — pages visited, time spent, navigation paths, and error events. This data is used exclusively to improve platform performance and user experience. Individual players cannot be identified from analytical cookie data.

10.3 Fraud Detection Cookies. Technical cookies that assist in detecting and preventing fraudulent login attempts, account takeover, and bonus abuse by establishing a device fingerprint associated with legitimate account access. These cookies operate under our legitimate interests basis and cannot be disabled without impairing account security functionality.

10.4 Marketing Cookies (Opt-in). Where you have opted in to marketing communications, cookies may be used to tailor promotional content displayed within the ec7777 platform to your gaming preferences and activity. You may withdraw consent for marketing cookies at any time via your Account Settings.

ec7777 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and ec7777 servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive personal data held on ec7777 servers — including KYC documents and financial account references — is encrypted at rest using industry-standard encryption algorithms.
• Password security: Player passwords are stored as salted cryptographic hashes using modern key derivation functions. Plaintext passwords are never stored on ec7777 systems and are not accessible to ec7777 staff.
• Access controls: Access to player personal data within ec7777's operational systems is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access controls and audit logging.
• Two-factor authentication: ec7777 offers two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to add an additional security layer to their account access.
• Penetration testing: ec7777's platform undergoes regular security assessments and penetration tests conducted by independent security professionals to identify and remediate vulnerabilities.
• Incident response: ec7777 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in risk to players, ec7777 will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable obligations.

While ec7777 maintains robust security measures, no system connected to the internet is entirely immune from risk. Players are responsible for protecting their own login credentials and are encouraged to use strong, unique passwords and enable 2FA on their ec7777 accounts.

Subject to applicable law and the limitations of our licensing obligations, players whose personal data is held by ec7777 hold the following rights:

The ec7777 platform is strictly restricted to individuals aged 21 years and above. ec7777 does not knowingly collect personal data from individuals below this age threshold. All registration applications are subject to mandatory KYC age verification via CNIC or passport.

If ec7777 becomes aware that personal data has been collected from an individual below the age of 21 — whether through a falsified registration or any other means — the associated Account will be immediately suspended, all funds returned to the originating payment method where technically possible, and the personal data of the underage individual deleted from our systems without undue delay.

ec7777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, licensing obligations, or applicable law. When material changes are made to this Policy, ec7777 will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via the Platform or to the registered email address where the changes materially affect player rights or how personal data is used.
• Where required by applicable law or our licensing authority, obtain fresh consent from affected players before implementing changes to consent-based processing activities.

Your continued use of the ec7777 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically to remain informed of our current data practices.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ec7777 holds about you, please contact the ec7777 Data Protection contact point using the details below:

For general platform support — including account access, payment queries, and responsible gaming requests — you may also contact ec7777 via the live chat function available within your logged-in account on the ec7777 platform.

For concerns about how ec7777 processes your data that are not resolved to your satisfaction through direct contact, you may have the right to lodge a complaint with the relevant supervisory authority under the laws of the jurisdiction in which you reside.