EK77 Privacy Policy — How We Protect Every Pakistani Player's Data

EK77 is an online gaming platform operating at ek77.life and serving players in Pakistan. For the purposes of this Privacy Policy, EK77 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is processed when you use the EK77 platform.

This Privacy Policy applies to all personal data collected through your use of EK77, including when you register an account, make a PKR deposit or withdrawal, play games, contact support, respond to promotions, or simply browse the EK77 platform. It applies regardless of the device you use to access EK77.

By creating an account or using EK77 in any capacity, you acknowledge that you have read and understood this Privacy Policy. This policy is incorporated by reference into EK77's Terms and Conditions.

EK77 collects personal data in several ways — some provided directly by you, some collected automatically as you use the platform, and some received from payment processors. Here is a full account of what we collect and when:

Information You Provide Directly

• Registration data: Your full name, mobile number, date of birth, and chosen username and password when you create your EK77 account.
• Identity verification documents: Copies of your CNIC or other verification documents when requested as part of EK77's account verification process.
• Payment information: Your Easypaisa or JazzCash number, bank account details, or card information provided when making deposits or requesting withdrawals in PKR.
• Support communications: Any messages, complaints, or queries you send to EK77's player support team via email or in-platform chat.
• Responsible gaming submissions: Information you provide when setting deposit limits, requesting self-exclusion, or engaging with EK77's responsible gaming tools.

Information Collected Automatically

• Device and technical data: Device type, operating system version, browser type, screen resolution, and unique device identifiers.
• Session and activity data: Login times, session durations, pages visited, games played, bet sizes and outcomes, and navigation patterns within the EK77 platform.
• IP address and location data: Your IP address and approximate geographic location derived from it, used for fraud prevention, responsible gaming monitoring, and platform security.
• Cookie and tracking data: Data collected through cookies and similar technologies as described in Section 7 of this policy.

EK77 uses your personal data only for specific, legitimate purposes connected to operating the platform and protecting both you and the integrity of EK77. Here is a clear account of every purpose for which your data is used:

EK77 does not use your data for purposes not listed in this table without first informing you and — where required — obtaining your consent. If EK77 intends to use your data in a new way, this policy will be updated and you will be notified.

Every instance of personal data processing at EK77 rests on a specific legal justification. The four bases EK77 relies on are:

• Contract performance: Processing that is necessary to provide the EK77 service you signed up for — including account management, processing PKR transactions, and delivering game results.
• Legal obligation: Processing required by applicable law — including anti-money laundering obligations, age verification requirements, and responsible gaming compliance.
• Legitimate interest: Processing that serves EK77's genuine operational interests and does not override your privacy rights — including fraud prevention, platform security, and improving the EK77 player experience using anonymised analytics.
• Consent: Processing for optional activities — primarily marketing communications — that you have explicitly opted into and can withdraw at any time.

If you want to know the specific legal basis for any particular processing activity at EK77, contact support@ek77.life with your question and we will respond clearly.

EK77 shares your personal data with third parties only in the limited circumstances described below. We do not sell your data, and we do not share it with advertisers or data brokers under any circumstances.

Payment Processors

To process your PKR deposits and withdrawals, EK77 shares necessary payment data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, banking institutions for IBFT transfers, and Visa/Mastercard networks. These processors receive only the data required to complete your specific transaction and are contractually prohibited from using it for any other purpose.

Identity Verification Services

Where EK77 uses a third-party identity verification service to confirm player identity documents such as CNIC, that service processes your documents under a data processing agreement with EK77. Verified results are shared back to EK77; document images are not retained by EK77 beyond the verification period unless legally required.

Platform Technology Partners

EK77 uses third-party technology partners for services including game provision, fraud detection, and player analytics. These partners process data only on EK77's behalf, under strict contractual terms, and may not use your data for their own commercial purposes.

Legal and Regulatory Disclosure

EK77 may disclose personal data to regulators, law enforcement agencies, or other authorities where required by applicable law or a valid legal order. EK77 will notify you of such disclosures wherever legally permitted to do so.

Because EK77 operates exclusively in Pakistani Rupees, all financial data processed on the platform relates to PKR transactions through local payment methods. EK77 applies the following specific practices to financial data:

• Easypaisa and JazzCash account numbers are stored in encrypted form and used exclusively for processing the transactions you initiate.
• Bank account details provided for IBFT withdrawals are used only for the specific withdrawal requested and are not retained beyond the transaction completion period.
• Full credit or debit card numbers are never stored on EK77 servers. Card transactions are tokenised by the payment processor before any data reaches EK77's systems.
• Transaction histories are retained for the period required by applicable financial regulations for audit and anti-money laundering compliance.
• EK77 monitors deposit and withdrawal patterns as part of its anti-money laundering obligations. Unusual patterns may trigger a review, during which EK77 may request additional information about the source of funds.

Your complete transaction history is accessible from within your EK77 account at any time. If you believe any transaction record is incorrect, contact EK77 support immediately.

EK77 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by a website. EK77 uses the following categories of cookies:

EK77 does not use advertising or targeting cookies. No cookie data from EK77 is shared with advertisers. You can manage your cookie preferences through your EK77 account settings or through your browser's privacy controls. Disabling essential cookies will prevent the platform from functioning correctly.

EK77 implements a range of technical and organisational measures to protect the personal data of all players. These measures are reviewed regularly and updated in response to emerging security developments. Key security measures include:

• Transit encryption: All data transmitted between your device and EK77 servers uses 256-bit SSL/TLS encryption. No data is transmitted in plain text.
• Storage encryption: Sensitive data fields stored in EK77 databases — including payment account references, identity document data, and authentication credentials — are encrypted at rest.
• Access controls: Access to player data within EK77's systems is restricted on a strict need-to-know basis. Staff who handle player data are trained in data protection responsibilities and are bound by confidentiality obligations.
• Fraud and intrusion monitoring: EK77's systems are continuously monitored for unusual access patterns, attempted intrusions, and anomalous data access behaviour.
• Incident response: EK77 maintains a documented data breach response procedure. In the event of a breach affecting player data, affected players will be notified promptly with clear information about what was affected and what steps EK77 is taking.

EK77 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for as long as your EK77 account remains active and for a period following account closure as required by legal and regulatory obligations.
• Transaction and financial records: Retained for a minimum of five years following each transaction to satisfy anti-money laundering and financial reporting obligations.
• Identity verification documents: Retained for the period required by applicable regulations following account closure, then securely deleted.
• Support communications: Retained for two years from the date of the communication, or longer if the communication relates to an unresolved dispute.
• Anonymised analytics data: Retained indefinitely in anonymised form for platform improvement purposes. Anonymised data cannot be linked back to individual players.
• Self-exclusion records: Retained permanently to prevent re-registration by excluded players. This is a responsible gaming protection, not a punitive measure.

When data is no longer required, EK77 deletes it securely using methods that prevent recovery. You may request deletion of your data before the end of any retention period — EK77 will action such requests where legally possible, and will explain clearly where legal obligations prevent immediate deletion.

As an EK77 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact support@ek77.life with your request:

EK77 aims to respond to all data rights requests within 30 calendar days. Where a request is complex or you have submitted multiple requests, this period may be extended by a further 60 days — in which case EK77 will notify you of the extension and the reason within the initial 30-day period.

EK77 does not knowingly collect personal data from anyone under the age of 18. The EK77 platform is strictly for adults, and all registration processes include age verification steps. If EK77 discovers that personal data of a minor has been collected — through fraudulent registration or any other means — that account will be immediately suspended, the data will be deleted, and any deposited funds will be returned to the originating payment method where possible.

If you are a parent or guardian and believe your child has created an EK77 account, please contact support@ek77.life immediately. EK77 will prioritise these reports and act without delay. The protection of minors is an absolute commitment at EK77, not a compliance checkbox.

EK77 uses gaming behaviour data — including session frequency, session duration, deposit patterns, and bet size changes — as part of its responsible gaming monitoring programme. This monitoring is designed to identify players who may be showing signs of problem gambling behaviour so that EK77 can offer support at the right time.

This data is used exclusively for player protection purposes. It is not used to:

• Target vulnerable players with promotional messages or bonus offers.
• influence game design or marketing in ways that exploit identified vulnerabilities.
• Build commercial profiles for sale or sharing with third parties.

Information you provide directly through EK77's responsible gaming tools — such as deposit limits, self-exclusion requests, and cooling-off periods — is treated with the highest level of sensitivity and is accessible only by authorised EK77 team members directly responsible for player welfare.

For full information about EK77's responsible gaming programme and the tools available to you, please visit our Responsible Gaming page.

EK77 may update this Privacy Policy from time to time. When changes are made, the "Last updated" date at the top of this page will be revised. For material changes — those that meaningfully affect how your data is used or your privacy rights — EK77 will notify registered players by email or through an in-platform notification before the changes take effect.

Continued use of EK77 after a revised Privacy Policy has been published and notified constitutes your acknowledgement of the updated terms. If you disagree with any update to this policy, you have the right to request account closure and data deletion as described in Section 10.

For any question, concern, or request related to this Privacy Policy or the handling of your personal data at EK77, please contact us using the details below:

• Email: support@ek77.life
• Subject line for data requests: "Privacy / Data Rights Request"
• Support hours: 24 hours a day, 7 days a week
• Response time: EK77 aims to acknowledge all privacy-related messages within 24 hours and provide a substantive response within 30 days.

EK77 takes privacy seriously. Every query sent to the address above is read by a real person. If you send us a privacy concern, you will receive a genuine response — not an automated acknowledgement followed by silence.