Privacy Policy

1Introduction

This Privacy Policy (the "Policy") describes how EP77 (the "Platform", "we", "us" or "our"), operating the website at https://ep77.cam, collects, uses, stores, shares and protects personal data relating to individuals who access or use the EP77 Services (the "Services").

EP77 is an English-language online gaming platform and information site built for Pakistani users, offering cricket and sports betting, live casino tables, slots and related educational content. In the course of providing these Services, EP77 processes personal data and is committed to doing so in a responsible, transparent and legally compliant manner.

By registering an Account or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

2Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, contact details, identity documents, financial data and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means EP77, the entity responsible for determining the purposes and means of processing Personal Data under this Policy.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in most cases, the registered User.
• "Third Party" means any natural or legal person other than EP77 and the Data Subject.
• "KYC" means Know Your Customer — identity, age and source-of-funds verification procedures.
• "AML" means Anti-Money Laundering — regulatory obligations requiring verification and monitoring of financial transactions.
• "Cookie" means a small text file placed on a user's device by a website to collect information about browsing behaviour and preferences.

3Data We Collect

EP77 collects Personal Data across several categories depending on your level of interaction with the Platform:

3.1 Registration Data

When you create an Account, we collect: full legal name, date of birth, country and city of residence, email address, phone number and chosen username.

3.2 Identity Verification (KYC) Data

To comply with age verification, identity verification and AML obligations, we may collect: a copy of your valid CNIC (Computerised National Identity Card) or passport, proof of residential address (such as a utility bill or bank statement), a selfie or liveness verification image, and source-of-funds documentation where required.

3.3 Financial Data

When you make deposits or withdrawals, we collect: transaction amounts, payment method references (such as mobile wallet account identifiers for Easypaisa or JazzCash, Raast-linked IBAN details, or bank account information for HBL, UBL, Meezan Bank or Bank Alfalah transfers), and transaction timestamps. Full payment card numbers are not stored on EP77's systems. Payment provider names are referenced as contextual information only and do not imply any endorsement of gambling services by those providers.

3.4 Usage Data

We automatically collect technical and behavioural data when you use the Platform, including: IP address, device type and operating system, browser type and version, session duration, pages and game types accessed, bet history, deposit and withdrawal history, and in-play betting activity.

3.5 Communications Data

When you contact EP77 support — whether through Live Chat, email or the Help Center — we retain records of those communications, including the content of messages and timestamps.

4How We Collect Data

EP77 collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC, make a deposit or withdrawal, contact support or participate in a promotion;
• Automatically — through cookies, server logs and similar technologies as you navigate the Platform;
• From third-party verification providers — identity verification services that assist with KYC and AML compliance;
• From payment processors — confirmation of transaction status provided by integrated payment service providers;
• From fraud prevention services — risk signals shared by fraud detection and prevention partners for the purpose of protecting the Platform and its users.

5Data Processing & Use

EP77 processes your Personal Data for the following purposes:

• Account management — creating, maintaining and administering your Account, including authentication and access control;
• Identity and age verification — confirming that you are who you claim to be and that you meet the minimum age requirement of 18+ (or higher as required by your jurisdiction);
• Transaction processing — facilitating deposits, withdrawals and adjustments to your Account balance;
• Bonus and promotion administration — verifying eligibility and tracking wagering requirements associated with active promotions;
• Fraud prevention and security — detecting, investigating and preventing fraudulent transactions, unauthorised account access and other malicious activity;
• AML and compliance obligations — monitoring transactions and maintaining records as required by applicable anti-money laundering and counter-terrorism financing regulations;
• Responsible gambling — operating deposit limits, loss limits, session time controls and self-exclusion tools; identifying patterns of play that may indicate gambling harm;
• Customer support — responding to enquiries, resolving complaints and managing disputes;
• Platform improvement — analysing usage data in aggregate to improve the performance, functionality and user experience of the Platform;
• Legal obligations — complying with applicable laws, court orders, regulatory directions and other legal processes.

6Legal Basis for Processing

EP77 processes Personal Data on one or more of the following legal bases:

• Contractual necessity — processing is necessary to perform the contract with you (i.e., to provide the Services you have registered to use);
• Legal obligation — processing is required to comply with applicable law, including KYC, AML, age verification and record-keeping obligations;
• Legitimate interests — processing is necessary for EP77's legitimate interests, including fraud prevention, Platform security and improving the Services, provided those interests are not overridden by your rights and freedoms;
• Consent — where required by applicable law, we will seek your explicit consent before processing certain categories of data or using your data for certain purposes (such as direct marketing). You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7Sharing of Personal Data

EP77 does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. We may share your Personal Data with the following categories of recipients in the circumstances described:

7.1 Service Providers

We engage third-party service providers who process Personal Data on our behalf, including KYC and identity verification providers, payment processors, fraud prevention services, cloud hosting providers, analytics platforms and customer support technology providers. These providers are contractually bound to process data only on EP77's instructions and to maintain appropriate security standards.

7.2 Regulatory and Legal Authorities

EP77 may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required or permitted by applicable law, including in connection with AML reporting obligations, fraud investigations or court orders.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving EP77, Personal Data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

7.4 With Your Consent

We will share your Personal Data with third parties for purposes beyond those described in this Policy only with your explicit prior consent.

8International Data Transfers

EP77's servers and some of our third-party service providers may be located in jurisdictions outside Pakistan. When Personal Data is transferred internationally, EP77 takes steps to ensure that an adequate level of protection is applied to that data, including through contractual safeguards with the receiving parties.

By using the Services, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside your country of residence, including countries whose data protection laws may differ from those applicable in Pakistan.

9Data Retention

EP77 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention considerations include:

• Active Account data — retained for the duration of your Account's existence and for a reasonable period thereafter to address any post-closure queries or disputes;
• KYC documentation — retained for a minimum period required by applicable AML and record-keeping law, which typically extends to five (5) years from the date of account closure;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction, in accordance with standard AML record-keeping requirements;
• Support communications — retained for a reasonable period to support dispute resolution and service quality review;
• Usage and analytics data — retained in aggregate or anonymised form for platform improvement purposes, with no identifiable personal data retained beyond the periods stated above.

When Personal Data is no longer required, EP77 will delete or anonymise it in a secure manner.

10Data Security

EP77 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include:

• 128-bit SSL/TLS encryption for all data in transit between your device and EP77's servers;
• Access controls limiting Personal Data access to authorised personnel with a legitimate operational need;
• Secure handling procedures for KYC documentation submitted via the Platform's verification portal;
• Regular security assessments of Platform systems and third-party service providers;
• Incident response procedures to address data security breaches promptly and in accordance with applicable law.

11Cookies & Tracking Technologies

11.1 What We Use

EP77 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform, remember your preferences, maintain your session, analyse usage patterns and detect fraudulent activity.

11.2 Types of Cookies

• Strictly necessary cookies — essential for the Platform to function. These cannot be disabled without affecting core functionality such as session management and account authentication.
• Functional cookies — remember your preferences (such as language or display settings) to improve your experience across sessions.
• Analytics cookies — collect aggregated, anonymised data about how users interact with the Platform to help us improve performance and usability.
• Security cookies — assist in fraud detection and prevention by identifying unusual patterns of access or behaviour.

11.3 Managing Cookies

You may adjust your browser settings to refuse or delete cookies at any time. However, disabling strictly necessary cookies may impair your ability to use key Platform features, including Account login and transaction processing. EP77 does not use third-party advertising cookies or behavioural advertising trackers.

12User Rights

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you hold the following rights in relation to your Personal Data:

To exercise any of the above rights, please contact EP77 support at the contact details set out in Section 16. We will respond within a reasonable period and in accordance with applicable legal requirements. We may need to verify your identity before processing a rights request.

13Minors & Age Verification

EP77 is strictly an adults-only platform. The Services are not directed at, and must not be used by, any person under the age of 18 years — or the higher minimum age required by the laws of their jurisdiction.

EP77 does not knowingly collect Personal Data from persons under the age of 18. Where we have reasonable grounds to suspect that a User is under the minimum age, the Account will be suspended immediately and KYC verification will be required prior to reinstatement. If we determine that we have inadvertently collected Personal Data from a minor, we will take steps to delete that data without delay.

14Third-Party Services

The EP77 Platform may include references to third-party payment providers and services. EP77 does not control the privacy practices of third-party providers and is not responsible for their privacy policies or data handling practices.

Payment provider names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are included as contextual references to familiar Pakistani payment rails. This does not constitute a representation that these providers endorse, affiliate with or support EP77 or online gambling. Each provider's own privacy policy and terms of service govern how they handle data shared with them in the course of payment processing.

EP77 is not responsible for the content, privacy practices or security of any third-party website or service that may be referenced on the Platform.

15Policy Amendments

EP77 reserves the right to update or amend this Privacy Policy at any time. Revised versions will be published on this page with an updated "Last Updated" date. Where changes are material, EP77 will endeavour to notify registered users through in-platform notifications or email in advance of the changes taking effect.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must discontinue use of the Services and may request Account closure in accordance with the Terms and Conditions.

16Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact EP77 through the following channel:

For KYC document submissions, always use the Platform's secure HTTPS verification portal. Do not send CNIC scans, passport copies or financial documents via email or any unsecured channel.