Who We Are
This Privacy Policy explains how ep777 ("ep777", "we", "us", "our"), the operator of the online gaming platform at ep777.im, collects, uses, stores, and protects the personal data of players and visitors based in Pakistan and elsewhere.
ep777 is the data controller for all personal information collected through the platform and its related services. This means we decide how and why your data is processed. Where we engage third-party service providers — payment processors, identity verification services, analytics platforms — those parties act as data processors operating under our instructions.
This policy applies to all personal data collected through ep777.im, our mobile browser interface, any promotional communications we send, and any other interaction you have with ep777. It should be read alongside the Terms and Conditions, which govern your use of the platform.
Plain language commitment: Privacy policies are often written to satisfy lawyers rather than inform real people. We have written this one to be readable. If you have a question that is not answered here, email us at support@ep777.im and we will respond directly.
What Data We Collect
ep777 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the site, and in limited cases from third parties such as identity verification providers and payment processors.
Data You Provide Directly
- Registration data: Name, date of birth, mobile number, email address, and account password.
- Identity verification: National Identity Card (CNIC) number or passport number, selfie or photograph, proof of address where required for higher transaction limits.
- Payment data: The mobile number linked to your Easypaisa or JazzCash wallet, NayaPay or SadaPay account identifier, bank account details for IBFT, or tokenised card reference for Visa/Mastercard transactions. Raw card numbers are not stored — see Section 6.
- Communications: The content of messages you send to our support team via live chat or email, including complaint or dispute details.
- Responsible gaming preferences: Deposit limits, loss limits, session timer settings, and any self-exclusion request you submit.
Data Collected Automatically
- Device and browser data: IP address, device type, operating system, browser version, and screen resolution.
- Usage data: Pages visited on ep777, time spent on each page, features used, games played, bets placed, and navigation paths.
- Transaction logs: Full records of all deposits, withdrawals, bets, game rounds, and account balance changes, with timestamps.
- Cookie data: Session identifiers and preference data stored in browser cookies — see Section 10 for full details.
Data From Third Parties
- Identity verification providers: Confirmation of identity document validity and age verification results.
- Payment processors: Transaction status, fraud screening results, and payment method confirmation signals.
- Fraud prevention services: Device fingerprint data and risk signals used to detect unusual account activity.
Why We Use Your Data
Every piece of data ep777 collects serves a specific purpose. We do not collect data speculatively or "just in case". Here is what each category of data is actually used for:
- Account operation: Registration data is used to create and manage your account, verify your identity at login, and allow you to access the platform.
- Payment processing: Payment data is used to process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard.
- Legal compliance (KYC/AML): Identity and document data is used to meet Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable regulations. This is not optional — we are required to verify player identities.
- Security and fraud prevention: Device data, IP addresses, and usage patterns are analysed to detect and prevent fraudulent account activity, unauthorised access, and money laundering.
- Customer support: Your support communications are used to resolve your enquiry and, where appropriate, improve training for the support team.
- Responsible gaming tools: Your preference settings for deposit limits, session timers, and self-exclusion are stored and enforced to protect your wellbeing.
- Platform improvement: Aggregated usage data (not linked to your identity) is used to understand how players navigate ep777 and where we can improve the experience.
- Marketing communications: Where you have given consent, we may send you promotional emails or SMS about bonuses, new games, and PSL betting offers. This is always opt-in and you can withdraw consent at any time.
Legal Basis for Processing
ep777 processes your personal data on the following legal grounds, depending on the purpose of the processing:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract — necessary to perform our agreement with you |
| Processing PKR deposits and withdrawals | Contract — necessary to fulfil payment services |
| KYC / AML identity verification | Legal Obligation — required under gaming and financial regulations |
| Fraud detection and account security | Legitimate Interest — protecting players and the platform from fraud |
| Responsible gaming tool enforcement | Legal Obligation + Legitimate Interest |
| Customer support communications | Contract — necessary to resolve your enquiry |
| Marketing emails / SMS | Consent — only where you have explicitly opted in |
| Platform analytics and improvement | Legitimate Interest — improving the player experience |
Payment Data — Special Protections
Because payment data is particularly sensitive, ep777 applies additional protections beyond standard personal data handling:
- Tokenisation: When you add a Visa or Mastercard to your account, the raw card number is immediately converted to a secure token by our payment processor. The actual card number is never stored on ep777 servers — only the token, which cannot be used by anyone outside the payment processor network.
- Mobile wallet references: For Easypaisa, JazzCash, NayaPay, and SadaPay, we store your mobile number and wallet identifier as provided. These are protected with the same security controls as all other personal data.
- Bank account details: IBFT bank account numbers submitted for withdrawal are stored in encrypted form and accessed only for the purpose of processing your withdrawal request.
- No sharing for marketing: Your payment method details are never shared with third parties for any purpose other than processing the transaction you initiated.
- Withdrawal verification: Before processing a withdrawal to a payment method, ep777 verifies that the method is registered and verified on your account. This protects you from unauthorised fund redirection.
All payment data transmissions between your device and ep777, and between ep777 and payment processors, use TLS 1.3 encryption. Payment processing systems are subjected to regular security audits.
How Long We Keep Your Data
ep777 retains personal data for as long as it is needed for the purpose it was collected, or as long as required by law. Here is a breakdown by data type:
Bar length is proportional within the 7-year regulatory maximum. Anonymised analytics data contains no personally identifiable information.
Retention periods are set based on regulatory requirements (primarily anti-money laundering legislation which requires financial records to be kept for seven years), our legitimate business interests in resolving disputes, and the duration of any ongoing regulatory investigation where relevant.
When the retention period expires, data is securely deleted or anonymised so it can no longer be linked back to you as an individual. You cannot accelerate deletion of data that we are legally required to retain, but you can request deletion of data that is no longer within a mandatory retention period — see Section 9.
Security Measures
Protecting your data is not a compliance checkbox for ep777 — it is a core part of how the platform is built. The following technical and organisational measures are in place:
- Transport encryption: All data transmitted between your browser and ep777 is encrypted using TLS 1.3, the current strongest standard. Unencrypted connections are rejected.
- Data at rest: Sensitive data fields — including identity document numbers, payment references, and contact details — are encrypted at rest in the database using AES-256.
- Access controls: ep777 staff access to personal data is role-limited and logged. Support agents see only the information necessary for their function. Raw payment data is inaccessible to any internal staff.
- Two-factor authentication: Available for your ep777 account and enabled by default for all internal administrative access. We strongly recommend enabling 2FA on your account from the security settings menu.
- Fraud monitoring: Real-time monitoring of login patterns, transaction behaviour, and device changes flags anomalous activity for investigation before it can cause harm.
- Security testing: ep777's platform undergoes periodic penetration testing and vulnerability assessments by qualified third-party security firms.
Data breach response: In the unlikely event of a data breach affecting your personal data, ep777 will notify affected players directly within 72 hours of becoming aware of the breach, describing what happened, what data was affected, and what steps are being taken. We will simultaneously notify the relevant regulatory authority as required by law.
Your Data Rights
As an ep777 player, you have the following rights over your personal data. To exercise any of these rights, email support@ep777.im with your account username and the specific request. We aim to respond within 30 days.
Right of Access
You can request a copy of all personal data ep777 holds about you, including your account details, transaction history, and any communications we have on file.
Right to Rectification
If any personal data we hold is inaccurate or out of date, you have the right to request that we correct it. Contact support with the correct information and we will update the record.
Right to Erasure
You may request deletion of your personal data where we no longer have a lawful basis to retain it. Data subject to regulatory retention requirements (see Section 7) cannot be deleted before the retention period expires.
Right to Restrict Processing
In certain circumstances — for example, while a data accuracy dispute is resolved — you can ask us to pause processing of your data other than storage.
Right to Data Portability
You can request a machine-readable export of the personal data you provided to ep777 — for example, your account registration details and transaction history in CSV format.
Right to Object
You can object to processing based on legitimate interests — including the use of your data for platform analytics. You can also withdraw marketing consent at any time with immediate effect.
Cookies and Tracking Technologies
ep777 uses cookies — small text files stored on your device — and similar technologies to operate the platform, remember your preferences, and understand how the platform is used. Here is a clear breakdown of what we use:
| Cookie Type | Purpose | Consent Required | Duration |
|---|---|---|---|
| Keeps you logged in, maintains your session, enables basic platform functions | No (essential) | Session / 30 days | |
| Remembers your preferences (language, display settings, last game played) | Optional | 1 year | |
| Aggregated, anonymised data on how players navigate ep777, used to improve UX | Optional | 2 years | |
| Tracks which promotional offers you have seen, for frequency capping | Optional | 90 days |
When you first visit ep777, a cookie consent notice allows you to accept all cookies or configure your preferences. You can update your cookie preferences at any time through the Cookie Settings option in the site footer. Withdrawing consent for optional cookies does not affect the operation of your account — only analytical and marketing functions are reduced.
ep777 does not use third-party advertising networks that track you across other websites. The marketing cookies described above are limited to the ep777 platform itself.
Marketing Communications
ep777 will only send you promotional emails or SMS messages if you have explicitly opted in during registration or subsequently through your account settings. We do not send unsolicited marketing to players who have not consented.
When you opt in to marketing, you may receive communications about:
- Welcome bonuses and deposit match offers
- PSL season betting promotions and special odds
- New game launches — Teen Patti variants, crash games, poker tournaments
- Cashback and reload offers for existing players
- Responsible gaming reminders and account activity summaries
You can withdraw your marketing consent at any time by:
- Clicking "Unsubscribe" in any marketing email
- Replying STOP to any marketing SMS
- Updating your communication preferences in your ep777 account settings
- Emailing support@ep777.im with "Marketing Opt-Out" in the subject line
Note: Withdrawing marketing consent does not affect transactional messages — you will still receive emails about your account activity, deposit confirmations, withdrawal notifications, and security alerts. These are necessary for operating your account and cannot be opted out of while your account is active.
Under-18s and Child Protection
ep777 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. Age verification is conducted during the registration process, and we reserve the right to request additional documentation confirming age at any point.
If we become aware that we have inadvertently collected personal data from a person under 18, we will immediately close the account, void any transactions, return any deposited funds, and delete the personal data associated with the account, subject to any legal retention obligation that applies.
If you believe a person under 18 has registered on ep777, please contact us immediately at support@ep777.im with as much detail as you can provide. We will investigate and act promptly.
Changes to This Privacy Policy
ep777 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data practices. The "Last Updated" date at the top of this page will always reflect the current version.
For material changes — those that significantly affect your rights or how your data is used — we will notify registered players by email at least 14 days before the changes take effect. For minor updates such as clarifications or corrections, we will update the page without individual notification.
Your continued use of ep777 after a revised Privacy Policy takes effect constitutes acceptance of the updated policy. If you disagree with any change, you may close your account and request deletion of your data before the change takes effect, subject to mandatory retention requirements.
Contact Us About Privacy
For any question, concern, or request related to your personal data, contact the ep777 privacy team directly:
When submitting a data rights request, include your ep777 account username, the type of request (access, deletion, correction, etc.), and any relevant details. We may ask you to verify your identity before processing the request — this protects you from someone else submitting requests in your name.
Related policies: This Privacy Policy works alongside ep777's Terms and Conditions and Responsible Gaming Policy. If you have questions about how your data relates to any other ep777 policy, include that in your enquiry and we will address it together.