ep77 Privacy Policy

1. Who We Are

ep77 is an internationally licensed online gaming operator providing casino games and sports betting services to players across Pakistan. The ep77 platform is accessible at ep77.bio and is operated by ep77's licensed entity in accordance with the terms of its international gaming license.

For the purposes of this Privacy Policy, ep77 acts as the data controller in respect of the personal data of registered players and visitors to the ep77 platform. This means that ep77 determines the purposes for which and the manner in which your personal data is processed.

If you have any questions about this Privacy Policy or about how ep77 handles your personal data, you may contact our support team at any time. Contact details are provided in Section 14 of this Policy.

2. Data We Collect

ep77 collects personal data that is necessary for the operation of a licensed online gaming platform. The categories of personal data we collect are described below.

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including city and province
• Email address (used as your primary account identifier and communication channel)
• Mobile number (used for two-factor authentication and account security notifications)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (CNIC, passport, or driving licence)
• Proof of residential address (utility bill or bank statement dated within three months)
• Payment method verification documents (JazzCash account screenshot, EasyPaisa account details, or bank statement confirming account ownership)
• Source-of-funds documentation where required by our compliance team for large transactions

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in PKR, timestamps, and payment method references
• Account balance history
• Bonus and promotional credit records
• Wagering history across all game types and sports betting markets

2.4 Technical & Device Data

• IP address at the time of login and during active sessions
• Device type, operating system, and browser information
• Session duration and platform navigation data
• Geolocation data derived from IP address (country and city level only)

2.5 Communications Data

• Records of your communications with ep77 support via live chat, email, or any other channel
• Survey responses and feedback submissions where voluntarily provided
• Responsible gaming tool requests and self-exclusion records

3. How We Collect Your Data

ep77 collects your personal data through the following channels:

• Directly from you — when you register for an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion
• Automatically — when you access and use the ep77 platform, through cookies, server logs, and session tracking technologies as described in Section 9
• From third-party service providers — including KYC verification providers who process your identity documents on our behalf, payment processors who handle your deposit and withdrawal transactions, and fraud detection services
• From publicly available sources — where permitted by applicable law and necessary for compliance purposes, such as sanctions screening databases

4. Legal Basis for Processing

ep77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

5. How We Use Your Data

ep77 uses your personal data for the following purposes:

• To create, verify, and maintain your ep77 account and ensure that it operates correctly
• To verify your identity and age in accordance with our international gaming license obligations, confirming that you are at least 21 years of age
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods in PKR
• To detect, prevent, and investigate fraud, money laundering, bonus abuse, multi-accounting, and other forms of prohibited activity on the platform
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling, and to apply responsible gaming tools at your request or at ep77's discretion
• To communicate with you about your account, transactions, and any queries or complaints you have raised
• To send you promotional communications about bonuses, new games, and ep77 offers where you have opted in to receive such communications
• To improve the ep77 platform through analysis of aggregated usage data and player behaviour patterns
• To comply with the requirements of ep77's international gaming license, applicable anti-money laundering regulations, and any lawful request from a regulatory or law enforcement authority

6. Data Sharing & Disclosure

ep77 does not sell or rent your personal data to any third party. We may share your data in the following circumstances only:

6.1 Service Providers

ep77 works with a limited number of carefully selected third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include our KYC verification partner, payment processing partners (including the operators of JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations), fraud detection services, and our cloud hosting provider. Each service provider is permitted to use your data only for the specific purpose for which it was shared and is required to handle it in accordance with applicable data protection standards.

6.2 Regulatory & Legal Authorities

ep77 may be required to disclose your personal data to its gaming license regulator, financial intelligence units, law enforcement agencies, tax authorities, or courts of competent jurisdiction where required to do so by law, by the terms of our gaming license, or pursuant to a valid legal order. ep77 will comply with all such lawful disclosure requirements.

6.3 Business Transfers

In the event that ep77 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Privacy Policy via the email address associated with your account.

6.4 With Your Consent

ep77 may share your personal data with third parties in any other circumstance where you have given your explicit, informed consent to such sharing.

7. International Data Transfers

As an internationally licensed gaming operator, ep77 may transfer and store your personal data on servers located outside of Pakistan. Where your data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in your home jurisdiction, ep77 will implement appropriate safeguards to ensure that your data remains protected to the standard required by our gaming license and applicable data protection principles.

Such safeguards include the use of standard contractual data protection clauses in agreements with third-party processors, the selection of processors operating under recognised international data security certifications, and regular audits of data processing arrangements.

8. Data Retention

ep77 retains your personal data for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law. The key retention periods applied by ep77 are as follows:

• Active account data: Retained for the duration of your account relationship with ep77, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming license record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the account relationship, in accordance with applicable financial crime prevention obligations.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction.
• Support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute or regulatory matter.
• Technical and device data: Retained for twelve (12) months from the date of collection unless required for longer in connection with a specific investigation or legal matter.

Upon expiry of the applicable retention period, ep77 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9. Cookies & Tracking Technologies

ep77 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device when you visit the ep77 platform. They allow the platform to recognise your device across sessions and to provide a functional, personalised experience.

9.1 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the ep77 platform to function. They manage your login session, maintain your account state, and support security features including fraud detection. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how players use the platform — such as which pages are visited most frequently and whether error messages are encountered. This information helps ep77 improve the platform experience. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies remember your preferences, such as your selected language or display settings, to provide a more personalised experience on return visits.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ep77 platform. Instructions for managing cookies in the most common browsers are available on the respective browser's support pages. ep77 does not use third-party advertising or cross-site tracking cookies.

10. Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by ep77. To exercise any of these rights, please contact our support team using the details in Section 14.

• Right of access: You have the right to request a copy of the personal data that ep77 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that ep77 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ep77's legal and regulatory retention obligations.
• Right to restrict processing: You have the right to request that ep77 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to ep77 in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on ep77's legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

ep77 will respond to all data rights requests within thirty (30) days of receipt. In some cases, ep77 may need to verify your identity before processing your request. Where a request is particularly complex or numerous, ep77 may extend this period by a further thirty (30) days, of which you will be notified.

11. Security Measures

ep77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the ep77 platform
• Encryption of sensitive data fields, including passwords and payment method references, at rest
• Role-based access controls limiting access to personal data to authorised ep77 personnel on a need-to-know basis
• Regular security audits and penetration testing of the ep77 platform infrastructure
• Two-factor authentication options available to all registered players to protect account access
• Anomaly detection systems monitoring for unusual login activity, suspicious transaction patterns, and potential account takeover attempts
• Secure disposal procedures for personal data that has reached the end of its applicable retention period

Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. ep77 cannot guarantee the absolute security of your personal data, but we are committed to reviewing and improving our security practices on an ongoing basis in line with industry standards.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ep77 will notify you without undue delay via the email address associated with your account, and will take all reasonable steps to contain and remediate the breach.

12. Children's Privacy

ep77 is strictly a 21+ platform. We do not knowingly collect, store, or process personal data from any individual under the age of 21. The platform is not directed at or intended for use by minors.

Age verification is a mandatory step of the account registration process. Where ep77 identifies or reasonably suspects that an account is operated by a person under the age of 21, the account will be immediately suspended, all balances will be forfeited, and all personal data associated with that account will be reviewed and handled in accordance with applicable law.

13. Changes to This Privacy Policy

ep77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable law. The date of the most recent revision is displayed at the top of this page.

Where changes to this Policy are material, ep77 will notify registered players via the email address associated with their account and will display a prominent notice on the platform. Your continued use of the ep77 platform after the effective date of any update to this Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how ep77 is protecting your personal data. If you have any concerns about any update to this Policy, please contact our support team before continuing to use the platform.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by ep77, please contact our support team using the details below. All contact details are provided as plain text and are not clickable links.