ek77 Privacy Policy
Your Data. Protected. Always.

This Privacy Policy ("Policy") is issued by ek77 ("ek77," "we," "us," "our") and applies to all personal data collected, processed, stored, and shared in connection with your use of the ek77 website at ek77.today and all associated services, games, and features (collectively, the "Platform").

ek77 is committed to protecting the privacy and security of every user on its Platform. This Policy explains in clear terms what personal data we collect from Pakistani players and other users, the purposes for which that data is processed, how it is protected, and the rights that users hold in relation to their personal information.

This Policy should be read alongside ek77's Terms & Conditions, which govern the overall relationship between ek77 and its users. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

For the purposes of this Privacy Policy, ek77 acts as the data controller in respect of all personal data collected directly through the Platform. As data controller, ek77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

Where ek77 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or customer support platform operators — those parties act as data processors under ek77's instruction and are bound by data processing agreements that require them to handle your data only as directed by ek77 and in compliance with applicable data protection standards.

ek77 collects personal data across several categories depending on how you interact with the Platform. The following table summarises the categories of data we collect and the purpose of each:

ek77 does not collect sensitive personal data such as biometric data, health information, or political opinions unless specifically required for regulatory compliance and only with your explicit consent where required by applicable law.

ek77 collects personal data through the following mechanisms:

4.1 Direct Collection

Data you provide directly when: registering an account on the ek77 Platform; completing KYC verification; making a deposit or requesting a withdrawal; contacting customer support via live chat or email; completing any surveys, promotions, or competitions; or updating your account profile settings.

4.2 Automated Collection

Technical and usage data collected automatically through your interaction with the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, pages visited, and session duration. Please refer to Section 10 (Cookies) for full details of our cookie practices.

4.3 Third-Party Sources

ek77 may receive data about you from third-party sources including: identity verification service providers used for KYC compliance; payment processors confirming transaction status; fraud prevention and sanctions screening services; and, where applicable, responsible gaming databases such as self-exclusion registers.

ek77 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your ek77 account, including verifying your identity and eligibility to use the Platform.
• Payment Processing: Processing deposits and withdrawals through your chosen payment method — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — and maintaining an accurate transaction history.
• Regulatory Compliance: Fulfilling obligations under our international gaming licence, including KYC verification, AML screening, sanctions checking, and responsible gaming monitoring.
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance through our 24/7 support channels in English and Urdu.
• Platform Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, collusion, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gaming: Monitoring player behaviour for indicators of problem gambling, enforcing deposit limits and self-exclusion requests, and fulfilling responsible gaming obligations under our licence.
• Service Improvement: Analysing usage patterns to improve Platform features, game selection, user experience, and performance — primarily using aggregated, anonymised data.
• Communications: Sending transactional messages (account verification, payment confirmations, security alerts) and, where you have consented, promotional communications about bonuses and new features.

ek77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contract with you — i.e., to operate your ek77 account, process your bets and transactions, and deliver the gaming services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations under our gaming licence, and the retention of financial records as required by law.
• Legitimate Interests: Processing carried out for ek77's legitimate business interests where those interests are not overridden by your rights — such as fraud detection, Platform security, service improvement, and responsible gaming monitoring.
• Consent: Processing carried out with your explicit consent where required — such as sending marketing communications about promotions and bonuses. You may withdraw such consent at any time by updating your communication preferences in your account settings.

ek77 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances and only to the extent necessary for each specific purpose:

7.1 Service Providers (Data Processors)

ek77 engages trusted third-party service providers who process data on our behalf, including: payment processing partners (JazzCash, EasyPaisa, and bank partners); identity verification and KYC service providers; fraud prevention and AML screening providers; cloud hosting and infrastructure providers; and customer support platform operators. All such providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service to ek77.

7.2 Regulatory and Law Enforcement Authorities

ek77 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or in connection with our obligations under our gaming licence.

7.3 Responsible Gaming Databases

Where required under our responsible gaming obligations, ek77 may share data with third-party self-exclusion registers or problem gambling support organisations for the purpose of protecting at-risk players.

ek77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation.

In general, ek77 applies the following retention periods:

• Active Account Data: Retained for the duration of your account relationship with ek77 and for a period of five (5) years following permanent account closure, unless a longer period is required by applicable AML or gaming regulations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction, consistent with AML regulatory requirements.
• KYC Documents: Identity verification documents are retained for five (5) years from account closure or the completion of the relevant verification process, whichever is later.
• Support Communications: Customer support records are retained for two (2) years from the date of the relevant interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Technical Logs: Server logs and security-related technical data are retained for up to twelve (12) months unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ek77's data destruction procedures.

ek77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ek77 Platform.
• Encryption of sensitive data fields at rest within ek77's database infrastructure.
• Role-based access controls limiting employee access to personal data to only those with a legitimate operational need.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security professionals.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with applicable notification obligations.

While ek77 takes all reasonable steps to protect your data, no digital system can be guaranteed to be completely secure. You are also responsible for maintaining the security of your own account credentials and must notify ek77 immediately if you suspect any unauthorised access to your account.

ek77 uses cookies and similar technologies on the Platform. A cookie is a small text file stored on your device when you visit a website. ek77 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state, security tokens, and cookies that remember your language preferences. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences and settings (such as your preferred game lobby view or responsible gaming limit settings) to provide a more personalised experience.
• Performance and Analytics Cookies: Used to collect aggregated information about how users interact with the Platform, enabling ek77 to identify areas for improvement. Data collected through these cookies is anonymised and not linked to individual user accounts.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection, multi-account identification, and session hijacking prevention.

ek77 does not use third-party advertising or tracking cookies. You may control cookie settings through your browser; however, disabling strictly necessary cookies will affect Platform functionality. For detailed browser-level cookie management instructions, please refer to the help documentation of your specific browser.

Subject to applicable law and regulatory constraints (including AML and gaming licence obligations that may require retention of certain data regardless of user requests), you hold the following rights in relation to your personal data held by ek77:

To exercise any of these rights, please contact ek77 customer support via live chat on the Platform or by emailing [email protected] (displayed as plain text — not a clickable link). ek77 will respond to valid requests within 30 calendar days. We may need to verify your identity before processing a data rights request.

The ek77 Platform is strictly restricted to individuals aged 21 years and above. ek77 does not knowingly collect, process, or store personal data from individuals under the age of 21.

ek77 employs age verification procedures at account registration and may request documentary evidence of age at any time. If ek77 becomes aware that personal data has been collected from a user who does not meet the minimum age requirement, all data associated with that user will be permanently deleted and the account closed immediately, with any balance forfeited in accordance with our Terms & Conditions.

If you believe that ek77 may inadvertently hold data belonging to a minor, please notify us immediately at the contact details provided in Section 14 of this Policy.

ek77 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The "Last Updated" date at the top of this Policy will be revised accordingly whenever material changes are made.

Where changes to this Policy are material in nature — particularly where they expand ek77's processing activities or reduce user rights — ek77 will notify registered users via the contact details held on their account at least 14 days prior to the revised Policy taking effect, except where immediate implementation is required by law or regulatory directive.

Your continued use of the ek77 Platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. We encourage you to review this Policy periodically to remain informed of how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ek77's handling of your personal data, please contact the ek77 data team through any of the following channels:

• Live Chat: Available 24/7 directly on the ek77 Platform in both English and Urdu.
• Email: [email protected] — displayed as plain text only; this is not a clickable link.

ek77 is committed to resolving all privacy-related enquiries promptly and fairly. Where a matter cannot be resolved through our internal process, you retain the right to refer your complaint to the supervisory authority applicable under ek77's international gaming licence or to an independent dispute resolution body as appropriate.