ep77 Privacy Policy

ep77 ("ep77", "we", "us", "our") operates the online casino and sportsbook platform accessible at ep77.vip. As a platform serving players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, and beyond — we are committed to maintaining the highest standards of data privacy and information security.

This Privacy Policy describes the types of personal information we collect from registered players and platform visitors, the purposes for which we use that information, the limited circumstances under which we may share it, and the rights available to you as a data subject. This Policy applies to all data collected through the ep77 website, mobile browser experience, and any associated platform services.

ep77 acts as the data controller in respect of personal data collected through the platform. All data processing activities are carried out in accordance with the obligations imposed by ep77's international gaming licence and applicable data protection frameworks.

If you have any questions about how ep77 handles your personal data, you may contact us at any time via the Support page or by emailing [email protected].

ep77 collects personal data through the following channels: account registration, identity verification (KYC), payment processing, platform usage, and direct communications with our Support team. The categories of data we collect are set out below.

ep77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless specifically required for responsible gaming assessments and only with your explicit consent.

ep77 uses personal data only for specified, legitimate purposes directly related to the operation of the platform and the fulfilment of our legal and regulatory obligations. The primary purposes for which we process your data are:

• Account management: Creating, maintaining, and securing your ep77 player account, including authentication and password recovery.
• Identity verification: Conducting KYC checks to confirm your identity, age (21+), and eligibility to use the platform.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast in a secure and accurate manner.
• Regulatory compliance: Fulfilling our anti-money laundering (AML), counter-terrorism financing (CTF), and gaming licence obligations, including mandatory record retention and reporting requirements.
• Fraud prevention: Detecting, investigating, and preventing fraudulent activity, multiple account creation, bonus abuse, and unauthorised platform access.
• Responsible gaming: Monitoring play patterns to identify at-risk behaviour, enforcing self-exclusion and deposit limit elections, and fulfilling our duty-of-care obligations.
• Customer support: Responding to queries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game offerings, platform performance, and the overall player experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You may withdraw marketing consent at any time.

ep77 does not use your personal data for automated decision-making or profiling in a manner that produces legal effects concerning you, except where required by AML and responsible gaming regulations.

ep77 processes personal data on the following legal bases, depending on the nature and purpose of each processing activity:

• Contractual necessity: Processing required to perform the contract between you and ep77 — including operating your account, processing payments, and delivering platform services — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification mandates, gaming licence conditions, and mandatory data retention requirements.
• Legitimate interests: Processing carried out in pursuit of ep77's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security monitoring, and internal analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — principally in the context of direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

ep77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Financial data is shared with authorised payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast — exclusively for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: KYC and age verification data may be shared with third-party identity verification services engaged by ep77 to fulfil our regulatory obligations.
• Game software providers: Technical session data may be shared with licensed game suppliers to facilitate the delivery and fair operation of casino games and sportsbook markets.
• Regulatory and legal authorities: ep77 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or as a condition of our gaming licence — including mandatory reporting of suspicious transactions under AML legislation.
• Fraud prevention agencies: Data may be shared with fraud prevention organisations and credit reference agencies where necessary to prevent financial crime.
• Corporate transactions: In the event of a merger, acquisition, or sale of ep77's business assets, player data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections.

All third parties with whom ep77 shares personal data are contractually required to maintain appropriate data security standards and are prohibited from using the shared data for any purpose beyond the specific service they provide to ep77.

ep77 uses cookies and similar technologies on the ep77.vip platform to ensure the site functions correctly, maintain session security, and gather anonymised performance analytics. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to operate. These cookies manage your login session, maintain your authentication state, and enable core security features. They cannot be disabled without affecting platform functionality.
• Performance cookies: Collect anonymised data about how players navigate and use the platform, such as pages visited, time on site, and error occurrences. This data is used in aggregate form only to improve platform performance.
• Functional cookies: Remember your platform preferences — such as language settings and responsible gaming tool configurations — to provide a personalised and consistent experience across sessions.

ep77 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies on ep77.vip. You may control cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

ep77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to mandatory minimum retention periods imposed by our regulatory and legal obligations. The following retention guidelines apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following permanent account closure, in accordance with AML record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by anti-money laundering legislation applicable to licensed gaming operators.
• KYC documents: Retained for the period of account activity plus the regulatory minimum retention period specified in ep77's licence conditions, typically five (5) years post-closure.
• Support communications: Retained for three (3) years from the date of the communication for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your marketing opt-in and for one (1) year following withdrawal of consent, as evidence of the consent history.
• Technical and usage data: Anonymised after thirteen (13) months and retained in aggregated, non-identifiable form for platform analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. ep77 conducts periodic data audits to ensure retention schedules are adhered to.

ep77 implements a comprehensive, layered information security framework to protect personal and financial data against unauthorised access, loss, disclosure, or destruction. Our security measures include:

• TLS 1.3 encryption in transit: All data exchanged between your device and ep77 servers is encrypted using Transport Layer Security 1.3, the current industry standard for secure web communications.
• AES-256 encryption at rest: Personal data, financial records, and KYC documents stored on ep77 infrastructure are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised ep77 staff on a strict need-to-know basis. All staff with data access are subject to background checks and confidentiality obligations.
• Multi-factor authentication: Internal systems holding personal data require multi-factor authentication for all staff access, reducing the risk of credential-based breaches.
• Intrusion detection and monitoring: ep77 operates continuous network monitoring and intrusion detection systems. Anomalous activity triggers automated alerts and manual review.
• Regular security audits: ep77's technical infrastructure is subject to periodic penetration testing and security audits by independent third-party specialists.
• Data breach response: ep77 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes prescribed by applicable regulations.

While ep77 employs robust security measures, no online platform can guarantee absolute security. You play an important role in protecting your account by maintaining the confidentiality of your ep77 Login credentials and enabling all available security features on your account.

As a data subject, you have the following rights in relation to your personal data held by ep77. Requests may be submitted via the Support page or by email to [email protected]. ep77 will respond within 14 business days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data ep77 holds about you, together with information about how it is being used.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held on your account. You may update many details directly through your account profile settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. Note that regulatory KYC and AML retention requirements may prevent immediate deletion of certain records.
• Right to restrict processing: You may request that ep77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller where technically feasible.
• Right to object: You have the right to object to processing based on legitimate interests, and to withdraw consent for marketing communications at any time. Withdrawal of marketing consent does not affect the lawfulness of prior marketing processing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. To opt out of marketing emails, use the unsubscribe link in any ep77 marketing communication or contact Support directly.

ep77 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. The ep77 registration process includes mandatory age verification, and all accounts are subject to KYC checks that confirm the player meets the minimum age requirement.

If ep77 becomes aware that personal data has been collected from an individual who was under 21 at the time of registration, the account will be immediately suspended, all personal data associated with the account will be securely deleted (subject to any mandatory regulatory retention obligations), and any deposited funds will be returned to the originating payment method after deducting net gambling losses incurred during the underage period.

Parents or guardians who believe that a minor has registered an account on ep77 should contact Support immediately via the Support page so that appropriate action can be taken without delay.

The ep77 platform may contain links to third-party websites or services — for example, payment provider portals accessed during deposit or withdrawal flows. ep77 has no control over the content, privacy practices, or data handling of third-party websites and is not responsible for their privacy policies.

When you leave ep77.vip and visit a third-party site, you do so at your own risk. ep77 recommends reviewing the privacy policy of any third-party site before submitting personal information. This Privacy Policy applies solely to data collected by ep77 through ep77.vip and associated platform services.

ep77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform services. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision.

Material changes to this Privacy Policy — for example, changes affecting the purposes for which we process your data or the third parties with whom we share it — will be communicated to registered players by email to the address on file, and/or through a prominent notice on the platform prior to the changes taking effect.

Continued use of the ep77 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and request voluntary account closure via the Support page.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ep77 handles your personal data, please contact us through any of the following channels:

• Support page: /support — Live chat available 24/7
• Email: [email protected]

ep77 aims to acknowledge all privacy-related inquiries within 2 business days and to provide a substantive response within 14 business days. For data rights requests requiring identity verification, the 14-day response period begins upon successful verification of your identity.