ecc777 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") is issued by ecc777 ("ecc777", "we", "us", "our") and applies to all individuals who visit, register with, or use the ecc777 online gaming platform accessible at ecc777.net ("Platform"). This Policy sets out how ecc777 collects, uses, stores, shares, and protects personal data in connection with the provision of online gaming services, sports betting, live casino entertainment, and related services to players primarily located in Pakistan.

By creating a registered account on ecc777 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the ecc777 Platform and contact our support team to arrange closure of your account.

This Policy should be read in conjunction with ecc777's Terms & Conditions, which also form part of the agreement between you and ecc777 governing your use of the Platform.

For the purposes of applicable data protection principles, ecc777 acts as the data controller in respect of personal data collected through the Platform. As data controller, ecc777 is responsible for determining the purposes and means of processing personal data provided by registered players and Platform visitors.

ecc777 processes personal data in accordance with its obligations under applicable international gaming licensing standards and data protection frameworks relevant to the jurisdictions it serves. Where ecc777 engages third-party processors to carry out data processing activities on its behalf (such as KYC verification partners or payment processors), those processors are required to handle data strictly in accordance with ecc777's instructions and applicable data protection requirements.

ecc777 collects the following categories of personal data from players and Platform users. Data is collected only to the extent necessary for the purposes described in Section 5 of this Policy:

ecc777 collects personal data through the following methods:

• Direct Submission — Data you provide when registering an ecc777 account, completing KYC verification, making deposits or withdrawal requests, contacting ecc777 support, or responding to promotional surveys.
• Automated Technical Collection — Technical and usage data collected automatically when you access and navigate the ecc777 Platform, including through cookies and server-side logging as described in Section 9.
• Payment Processing Partners — Transaction confirmation data and payment method identifiers shared by ecc777's approved payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT TRC20 processors) in the course of processing your deposit and withdrawal instructions.
• KYC Verification Partners — Verification outcome data (pass/fail status and risk classification) provided by third-party identity verification service providers engaged by ecc777 to conduct document and identity checks.
• Fraud Detection Systems — Signals generated by ecc777's internal and third-party fraud detection and responsible gaming monitoring tools based on observed Platform behaviour patterns.

ecc777 processes personal data only where a legitimate purpose and legal basis for doing so exists. The table below summarises ecc777's primary data processing purposes and the corresponding legal basis applicable to each:

ecc777 does not sell, rent, or trade personal data to third-party marketers or unaffiliated commercial entities. Personal data may be disclosed to the following categories of recipients strictly to the extent necessary for the purposes described in this Policy:

• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processing partners receive the minimum necessary transaction and identity data required to execute approved deposit and withdrawal instructions.
• KYC Verification Providers — Identity documents submitted during verification are processed by ecc777's contracted KYC partners to confirm player eligibility and satisfy regulatory age and identity verification requirements.
• Technology Service Providers — Platform hosting, security monitoring, customer support tooling, and analytics infrastructure providers may process technical and usage data as data processors acting on ecc777's behalf under appropriate data processing agreements.
• Regulatory & Law Enforcement Authorities — ecc777 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or in connection with the investigation of suspected financial crime.
• Business Successors — In the event of a merger, acquisition, or sale of all or substantially all of ecc777's assets, player data may be transferred to the successor entity, subject to equivalent data protection commitments.

ecc777 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption — All data in transit between player devices and ecc777 servers is encrypted using industry-standard TLS protocols. Sensitive stored data including payment identifiers is encrypted at rest.
• Access Controls — Access to player personal data within ecc777's internal systems is restricted to personnel with a documented operational need. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication — ecc777 supports and actively encourages players to enable SMS OTP-based two-factor authentication to protect their account credentials.
• Intrusion Detection & Monitoring — ecc777 operates continuous security monitoring and intrusion detection systems across its Platform infrastructure.
• Incident Response — ecc777 maintains a documented data security incident response procedure. In the event of a confirmed breach affecting player data, ecc777 will notify affected players and relevant authorities in accordance with applicable requirements.

ecc777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Active Account Data — Personal data associated with an active ecc777 account is retained throughout the active life of the account.
• KYC & Identity Documents — Identity verification documents are retained for a minimum of five (5) years following account closure, as required under applicable anti-money laundering and gaming regulatory frameworks.
• Financial Transaction Records — Deposit, withdrawal, and wagering transaction records denominated in PKR are retained for a minimum of five (5) years following the transaction date.
• Support Communications — Records of customer support interactions are retained for a period of two (2) years following the closure of the relevant support ticket.
• Technical Logs — Server access logs and session data are retained for a rolling period of ninety (90) days, after which they are automatically purged unless required in connection with an ongoing security investigation.
• Closed Account Data — Following account closure at a player's request and in the absence of any regulatory retention obligation, personal data not subject to a mandatory retention period will be deleted or anonymised within ninety (90) days of the closure date.

The ecc777 Platform uses cookies and similar local storage technologies to support Platform functionality and to collect anonymised usage analytics. ecc777 does not use cross-site tracking cookies, third-party advertising cookies, or any technologies designed to track player behaviour across other websites or applications outside of the ecc777 Platform.

9.1 Cookie Categories Used by ecc777

• Strictly Necessary Cookies — Required for core Platform functionality including maintaining logged-in sessions, storing language preferences, and enabling the ecc777 secure payment flow. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies — Used to collect anonymised data about how players navigate and interact with the ecc777 Platform, enabling ecc777 to identify performance issues and improve the user experience. No personally identifiable information is stored in these cookies.
• Functional Cookies — Used to remember player preferences such as interface language and notification settings between ecc777 login sessions.

9.2 Managing Cookies

Players may manage cookie preferences through their device browser settings. Most browsers provide options to block or delete cookies, though doing so may affect the functionality of the ecc777 Platform, including the ability to maintain a login session. ecc777 does not currently support an in-Platform cookie management panel, and all cookie management should be conducted through the player's browser.

Subject to applicable legal and regulatory limitations, ecc777 recognises the following rights in respect of personal data held about registered players:

All data rights requests will be acknowledged within five (5) business days and fulfilled within thirty (30) calendar days of receipt, subject to identity verification and any applicable legal limitations on the right being exercised. ecc777 reserves the right to decline requests where fulfilment would conflict with a regulatory retention obligation or an ongoing fraud or legal investigation.

The ecc777 Platform is strictly intended for use by adults aged 21 years and above. ecc777 does not knowingly collect, process, or retain personal data from any individual under the age of 21. All registration attempts are subject to age verification, and KYC processes are designed to identify and prevent underage access.

Where ecc777 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a registration that bypassed age controls or through subsequent information coming to light — ecc777 will immediately suspend the relevant account, permanently delete all associated personal data, and where applicable, return any real-money balance to the payment method used for deposit.

ecc777 may send promotional communications — including information about bonuses, new game launches, PSL cricket betting promotions, and platform updates — to players who have provided express opt-in consent to receive such communications at the time of registration or through subsequent account settings.

ecc777 does not send unsolicited marketing communications to players who have not provided consent. Players who have previously consented may withdraw that consent at any time by:

• Clicking the unsubscribe link included in any ecc777 marketing message;
• Updating marketing preferences in their ecc777 account settings; or
• Contacting the ecc777 support team via live chat or email to request removal from marketing lists.

Withdrawal of marketing consent does not affect the delivery of transactional communications that are necessary to operate your ecc777 account — such as deposit confirmations, withdrawal notifications, KYC verification updates, and account security alerts. These service communications will continue to be sent regardless of marketing opt-out status.

ecc777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. When material changes are made — meaning changes that meaningfully affect how your personal data is collected, used, or shared — ecc777 will notify registered players via the Platform notification system or via the registered contact details on their account, providing at least seven (7) calendar days' advance notice before the amended Policy takes effect.

The "Last Updated" date displayed at the top of this Policy will be revised with each amendment. Continued use of the ecc777 Platform following the effective date of an amended Privacy Policy constitutes acceptance of the revised terms. Players who do not accept the revised Policy should discontinue Platform use and contact ecc777 support to arrange account closure and return of any eligible balance.

ecc777 encourages players to review this Privacy Policy periodically to remain informed about how their personal data is being handled. Previous versions of this Policy are available on request from the ecc777 support team.

For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data ecc777 holds about you, please contact the ecc777 support team through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the ecc777 Platform. Average response time under 3 minutes. Support available in both English and Urdu.
• Support Email: [email protected] — please mark the subject line as "Privacy Enquiry — [Nature of Request]" to ensure your message is routed to the appropriate team. Responses to privacy enquiries are provided within five (5) business days.