EP77 Privacy Policy — How We Handle Your Data in Pakistan

This Privacy Policy describes how EP77 ("EP77", "we", "us", "our") collects, processes, stores, and protects the personal information of users ("you", "Player") who access and use the ep77.biz platform — including all sports betting, gaming, and account services provided on that platform.

EP77 takes data privacy seriously. Every Pakistani player on ep77 deserves to know exactly what happens to their personal information, and this document is written to answer that question as clearly as possible. There is no legal jargon for the sake of it here — just a straightforward explanation of how ep77 handles your data.

This Privacy Policy forms part of the overall agreement between you and ep77, alongside the Terms and Conditions and the Responsible Gaming Policy. By registering on ep77 or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy.

EP77 operates the platform available at ep77.biz and is the data controller for all personal information collected from Pakistani players. As data controller, ep77 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and securely.

EP77 is operated for and directed at players resident in or physically present in Pakistan. All data processing activities described in this policy relate to ep77's operations as an online betting and gaming platform serving Pakistani users.

EP77's primary contact for all privacy-related matters is: support@ep77.biz. This address is monitored 24 hours a day, 7 days a week, and all privacy queries receive a personal response — never an automated template reply.

EP77 collects personal data in three main ways: data you provide directly when registering or using the platform, data that is generated automatically by your use of ep77, and data received from third parties such as payment processors for KYC verification purposes.

EP77 does not collect sensitive personal data such as religious beliefs, political views, health information, or biometric data unless legally required. EP77 does not collect data from social media profiles or public sources without your direct consent.

EP77 only processes your personal data where there is a lawful basis for doing so. The lawful bases ep77 relies on are: performance of your contract with ep77 (running your account), compliance with legal obligations (KYC, anti-money laundering), EP77's legitimate business interests (fraud prevention, platform security), and your direct consent (marketing communications).

4.1 Account Management

EP77 uses your identity and contact data to create and manage your ep77 account, verify your eligibility to use the platform, authenticate your login sessions, and communicate with you about your account status, bets, and transactions. This processing is necessary for the performance of your contract with ep77.

4.2 Payment Processing

EP77 uses your financial data to process your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions — both deposits into and withdrawals from your ep77 wallet. Financial data is shared with the relevant payment service provider only for the purpose of completing the specific transaction you have requested. EP77 does not store full card numbers — only tokenised references are retained.

4.3 Legal and Regulatory Compliance

EP77 is required by applicable law to verify the identity and age of all players who withdraw above Rs 50,000 (KYC), to maintain records of all financial transactions, to cooperate with regulatory and law enforcement authorities where legally required, and to implement anti-money laundering checks on high-value transactions. This processing is mandatory and ep77 has no discretion to opt out of it.

4.4 Fraud Prevention and Platform Security

EP77 uses technical and usage data to detect and prevent fraudulent activity including multi-accounting, bonus abuse, unauthorised account access, and suspicious financial patterns. This processing is in ep77's legitimate interest and the interests of its honest player community. Players who are detected engaging in fraud will have their accounts suspended and their data retained for investigation purposes.

4.5 Platform Improvement

EP77 uses aggregated and anonymised usage data to understand how Pakistani players use the platform, which features are most valued, where friction occurs, and how the betting and gaming experience can be improved. This data is always analysed in aggregate — it is never used to make automated decisions about individual players without human oversight.

4.6 Marketing Communications

With your explicit consent at registration, ep77 may send you promotional information about new games, offers, tournaments, and PSL betting opportunities via SMS, email, or push notification. You can withdraw this consent at any time through your ep77 account settings or by emailing support@ep77.biz. Withdrawal of marketing consent has no effect on your ability to use ep77.

EP77 does not sell, rent, or trade your personal data. Data is shared only in the specific circumstances below, all of which are necessary for ep77 to operate the platform lawfully and effectively:

• Payment Service Providers: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive only the minimum financial data required to process your specific transaction. These providers have their own privacy policies and are bound by contractual data processing agreements with ep77.
• KYC and Identity Verification Partners: When you submit KYC documents, they are processed by ep77's verification partner who confirms identity and age. Verification partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than verification.
• Legal and Regulatory Authorities: EP77 will disclose player data to government, regulatory, or law enforcement authorities where required to do so by applicable Pakistani law or a valid court order. EP77 will notify you of such disclosure where legally permitted to do so.
• Technology Service Providers: EP77 uses third-party cloud hosting, analytics, and security service providers to operate the platform. These providers act as data processors under contractual obligation and may only process data as instructed by ep77 — they have no independent right to use it.
• Business Transfers: In the event of a sale, merger, or restructuring of EP77, player data may be transferred to a new entity. Players will be notified of any such transfer and given the option to close their account before it takes effect if they object to the transfer.

EP77 stores player data on secured servers. Primary data storage for Pakistani player accounts is maintained within the region to minimise latency and ensure data is subject to applicable legal protections. All storage facilities used by ep77 maintain industry-standard physical and digital security controls including access logging, encryption at rest, and redundant backup systems.

Where ep77 uses third-party service providers who process data outside Pakistan (for example, internationally hosted cloud infrastructure), ep77 ensures that appropriate contractual safeguards are in place to protect your data to the same standard that would apply if it were processed in Pakistan. EP77 will not transfer your data internationally to jurisdictions that do not provide adequate data protection without your consent or a valid legal basis.

EP77 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The security measures in place include:

• 256-bit TLS/SSL Encryption: All data in transit between your browser or app and ep77's servers is encrypted. This prevents interception of your login credentials, financial data, and personal information during transmission.
• Encryption at Rest: Sensitive stored data including financial records, KYC documents, and account credentials is encrypted in ep77's database using AES-256 encryption. Raw data is never stored in plain text.
• Access Controls: Access to player data within ep77's systems is restricted on a strict need-to-know basis. Employees who do not require access to your personal data to perform their role cannot see it. All internal data access is logged and monitored.
• Two-Factor Authentication: EP77 offers 2FA for all player accounts and enforces it for all internal staff accounts with access to player data.
• Regular Security Testing: EP77 conducts regular vulnerability assessments and penetration tests on its platform infrastructure to identify and address security weaknesses before they can be exploited.
• Incident Response Plan: EP77 maintains a documented data breach response plan. In the event of a data breach affecting Pakistani players, ep77 will notify affected players and relevant authorities within the timeframe required by applicable law.

No digital platform can guarantee absolute security against all possible threats. EP77 is transparent about this and encourages players to do their part by using a strong unique password on their ep77 account and enabling two-factor authentication.

EP77 keeps your personal data only for as long as it is needed for the purpose for which it was collected or as required by applicable law. The retention periods that apply to different categories of data are:

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to any individual player. EP77 does not retain data beyond the periods set out above without a specific legal justification.

EP77 uses cookies and similar tracking technologies on ep77.biz to make the platform work properly, improve your experience, and understand how Pakistani players use the platform. A cookie is a small text file stored on your device by your browser when you visit ep77.

Types of Cookies EP77 Uses

• Strictly Necessary Cookies: These are essential for ep77 to work. They manage your login session, keep your account secure between pages, and remember your language and currency preferences. You cannot opt out of these — without them, ep77 cannot function.
• Analytics Cookies: EP77 uses anonymised analytics cookies to understand which pages Pakistani players visit most, how long they stay, and where they encounter difficulties. This data is always aggregated — no individual player is identified through analytics.
• Functional Cookies: These remember your preferences on ep77 — for example, your preferred game view, notification settings, and last-used payment method — so you do not have to set them on every visit.
• Security Cookies: These help ep77 detect and prevent fraudulent activity including automated bot access, session hijacking, and brute force login attempts.

You can manage or delete cookies through your browser settings at any time. Deleting strictly necessary cookies will log you out of your ep77 session. EP77 does not use advertising or retargeting cookies that track you across other websites.

As a Pakistani player on ep77, you have the following rights in relation to your personal data. All of these rights can be exercised by contacting ep77 at support@ep77.biz:

To exercise any of these rights, email support@ep77.biz with the subject line "Data Rights Request" and a description of your request. EP77 will acknowledge receipt within 48 hours and respond in full within 30 days. There is no fee for data rights requests.

EP77 is strictly intended for adults aged 18 and above. EP77 does not knowingly collect personal data from anyone under the age of 18. Age verification checks are applied at registration, and KYC verification is triggered for accounts where age cannot be confirmed through standard checks.

If EP77 discovers that a player account belongs to a person under 18, the account will be immediately closed, all transactions will be reversed where possible, and the minor's data will be deleted within 30 days except where retention is required for legal or fraud investigation purposes.

If you are a parent or guardian who believes a minor has registered on ep77 without your knowledge, please contact support@ep77.biz immediately. EP77 will act on such reports as a priority.

EP77 may update this Privacy Policy from time to time to reflect changes in how the platform operates, new legal requirements, or improvements in privacy practice. When material changes are made, ep77 will:

• Update the "Last Updated" date at the top of this policy.
• Publish a notice on the ep77 homepage for a minimum of 14 days before material changes take effect.
• Send an email notification to your registered email address if the changes materially affect your rights or how ep77 uses your data.

Your continued use of ep77 after the effective date of any changes to this policy constitutes your acceptance of the updated Privacy Policy. If you have any concerns about changes to this policy, you are welcome to contact ep77 at support@ep77.biz before they take effect — or to close your account and request return of your real money balance if you object to the changes.

If you have any question, concern, or complaint about how EP77 processes your personal data — or if you wish to exercise any of the rights described in Section 10 — please get in touch with the ep77 privacy team:

• Email: support@ep77.biz (subject: "Privacy Policy Query" or "Data Rights Request")
• Live Chat: Available 24/7 from the ep77 account dashboard — ask for the privacy team
• Language: Urdu and English both supported
• Response Time: Privacy queries acknowledged within 48 hours; full response within 30 days

EP77 is committed to resolving all privacy concerns raised in good faith. If you are not satisfied with ep77's response to a privacy complaint, you have the right to escalate to the relevant data protection authority under applicable Pakistani law.

For information about your rights as an ep77 player more broadly, see the Terms and Conditions. For information on responsible gaming tools available on the platform, visit the Responsible Gaming page.