Privacy Policy — How ec99 Handles Your Personal Data

1. Introduction

ec99 is an online gaming platform providing sports betting, live casino, slots, fishing games, and other gaming entertainment services to registered players, including a significant and valued player base across Pakistan — in cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Multan. ec99 takes the protection of personal data seriously and is committed to handling all personal information responsibly, transparently, and in accordance with the data protection principles applicable under our international gaming licence.

This Policy applies to all personal data collected through the ec99 website at ec99.im, any mobile-optimised version of the platform, our customer support channels (including live chat and email), and any other touchpoints through which ec99 collects personal information from players or prospective players.

This Policy should be read alongside ec99's Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between ec99 and registered players.

2. Data Controller

For the purposes of applicable data protection law, ec99 acts as the data controller in respect of personal data collected from players and website visitors. As data controller, ec99 determines the purposes and means by which your personal data is processed.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the ec99 privacy team at [email protected] with the subject line "Privacy — Data Request". ec99 will acknowledge receipt of all privacy-related correspondence within five (5) business days and provide a substantive response within thirty (30) calendar days.

3. Information We Collect

ec99 collects personal data from you in the following categories and through the following means:

3.1 Registration Data. When you create an ec99 account, we collect: your full legal name, date of birth, gender, residential address (including city and postal code), email address, and mobile phone number. This information is mandatory for account creation and cannot be omitted.

3.2 Identity Verification (KYC) Data. To comply with our licensing obligations and anti-money laundering (AML) requirements, ec99 may request copies of government-issued identity documents such as your National Identity Card (CNIC), passport, or driving licence. We may also request proof of residential address (utility bill or bank statement dated within three months) and proof of payment method ownership. KYC documents are processed by ec99 and/or our licensed third-party KYC verification partner.

3.3 Financial Transaction Data. ec99 records all deposit and withdrawal transactions associated with your account, including the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20), transaction amounts in Pakistani Rupees (PKR), transaction timestamps, and reference numbers. ec99 does not store full card numbers or mobile wallet PINs — these remain with the respective payment processors.

3.4 Gaming Activity Data. ec99 records all wagers placed, game sessions initiated, betting markets accessed, outcomes, winnings, bonus activations, and responsible gaming tool usage associated with your account. This data is used for account management, dispute resolution, bonus administration, and regulatory reporting purposes.

3.5 Communications Data. When you contact ec99 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages, timestamps, agent notes, and the resolution status of any query or complaint. These records are maintained for service quality, training, and dispute resolution purposes.

3.6 Technical and Device Data. ec99 automatically collects certain technical data when you access the platform, including: your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and pages visited. This data is collected via server logs and first-party analytics tools and is used for platform security, fraud detection, and service improvement purposes.

3.7 Responsible Gaming Data. If you use any of ec99's responsible gaming tools — including deposit limits, session time reminders, cooling-off periods, or self-exclusion — we record your elections and the dates on which they were applied. This data is treated with particular sensitivity and is used solely to enforce the restrictions you have requested.

4. How We Use Your Data

ec99 uses the personal data we collect for the following specific purposes:

• Account Management: Creating, maintaining, and administering your ec99 account, including processing deposits and withdrawals, managing bonuses, and responding to account-related enquiries.
• Identity Verification: Complying with KYC requirements imposed by our international gaming licence, verifying that players are aged 21 or above, and confirming the legitimacy of payment methods used.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns for suspicious activity, reporting obligations to relevant authorities, and maintaining transaction records as required by our licensing authority.
• Fraud Prevention and Platform Security: Detecting and preventing fraudulent account activity, collusion, bonus abuse, unauthorised account access, and other forms of platform misuse.
• Customer Support: Handling your queries, complaints, and technical issues through our live chat and email support channels.
• Responsible Gaming: Administering the responsible gaming tools you have elected to use, enforcing self-exclusion and deposit limit restrictions, and identifying patterns of play that may indicate potential problem gambling, in accordance with our Responsible Gaming Policy.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, user interface design, and overall service quality.
• Marketing Communications: With your explicit consent, sending you promotional emails or SMS notifications about ec99 bonuses, new game releases, and special offers. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Legal and Regulatory Obligations: Complying with all applicable legal and regulatory requirements, including licence conditions, court orders, and law enforcement requests.

5. Legal Basis for Processing

ec99 processes your personal data only where we have a valid legal basis to do so. The legal bases on which ec99 relies are as follows:

• Performance of a Contract: Processing necessary to deliver the ec99 gaming services you have contracted for, including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, AML obligations, KYC requirements, and any applicable statutory reporting duties.
• Legitimate Interests: Processing carried out in ec99's legitimate interests — specifically, fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, where we rely on your freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

ec99 does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the following limited and necessary circumstances:

6.1 KYC and AML Service Providers. ec99 engages licensed third-party identity verification and AML screening providers to assist with our KYC obligations. These providers process your identity documents and personal details strictly in accordance with our instructions and applicable data protection standards.

6.2 Payment Processors. In order to process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20, ec99 shares necessary transaction data with the relevant payment service provider. Each payment provider operates under its own privacy policy and is independently responsible for data collected directly through its interface.

6.3 Gaming Software Providers. ec99 operates games supplied by third-party gaming software providers. Where required for game functionality, anonymised or pseudonymised session data may be shared with the relevant game provider. These providers do not receive your full identity or payment information.

6.4 Regulatory and Law Enforcement Authorities. ec99 may disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made strictly in accordance with our legal obligations.

6.5 Professional Advisers. ec99 may share personal data with legal counsel, auditors, or other professional advisers in connection with the operation of our business, subject to appropriate confidentiality obligations.

All third parties with whom ec99 shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes specified by ec99.

7. Cookies and Tracking Technologies

ec99 uses cookies and similar tracking technologies on the ec99.im platform. Cookies are small text files placed on your device that help us recognise you between sessions, maintain your login state, and understand how the platform is being used.

7.1 Essential Cookies. These are strictly necessary for the ec99 platform to function. They manage your login session, maintain your language preference, and store your responsible gaming settings. Essential cookies cannot be disabled without impairing core platform functionality.

7.2 Analytics Cookies. With your consent, ec99 uses first-party analytics tools to collect anonymised data about how players navigate the platform — which pages are visited most, where users enter and exit, and how long sessions last. This data is used exclusively to improve platform design and performance. ec99 does not use third-party analytics services that share this data with advertising networks.

7.3 Security Cookies. ec99 uses cookies and device fingerprinting techniques to detect suspicious activity, identify duplicate accounts, and prevent fraud. These security technologies are classified as a legitimate interest processing activity.

You can manage cookie preferences through your browser settings. Blocking all cookies may prevent some features of the ec99 platform from functioning correctly. A cookie consent banner is displayed upon your first visit to ec99.im, through which you can manage your non-essential cookie preferences.

8. Data Retention

ec99 retains personal data for the following periods:

• Active Account Data: Retained for the duration of your account registration and for a minimum period of five (5) years following account closure, as required by our licensing authority for AML compliance purposes.
• KYC Documents: Retained for a minimum of five (5) years from the date of the most recent transaction on your account, or longer if required by applicable law or regulatory direction.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, in compliance with financial record-keeping obligations under our international gaming licence.
• Customer Support Communications: Retained for three (3) years from the date of the relevant communication, or for the duration of any ongoing dispute or complaint, whichever is longer.
• Marketing Consent Records: Retained for three (3) years from the date of consent, or until withdrawn, whichever is earlier.
• Device and Technical Logs: Retained for twelve (12) months on a rolling basis, except where specific logs are preserved in connection with a fraud investigation or legal proceedings.
• Self-Exclusion Records: Retained indefinitely to prevent circumvention of self-exclusion elections through new account registration.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with ec99's internal data lifecycle management procedures.

9. International Data Transfers

ec99 operates under an international gaming licence and may process or store personal data on servers located outside of Pakistan. Where personal data is transferred internationally, ec99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing obligations, including the use of standard contractual clauses or other recognised transfer mechanisms where applicable.

ec99's third-party KYC verification and payment processing partners may also process data in jurisdictions outside Pakistan as part of their own operations. ec99 requires all such partners to maintain data protection standards consistent with this Policy.

10. Your Data Rights

As a registered ec99 player, you hold the following rights with respect to your personal data. Requests to exercise any of these rights should be submitted to [email protected] with the subject line "Privacy — Data Request", along with sufficient information to verify your identity.

11. Children and Minors

The ec99 platform is strictly restricted to individuals aged 21 years and above. ec99 does not knowingly collect personal data from individuals under the age of 21. If ec99 becomes aware that personal data has been collected from an underage individual, that account will be immediately suspended, all data will be securely deleted, and any deposited funds will be returned to the payment source.

If you are aware of an underage individual who has registered or is attempting to register on the ec99 platform, please report this immediately to our support team via live chat or at [email protected]. ec99 takes all underage access reports with the utmost seriousness and will act promptly on all such reports.

ec99 deploys age verification checks at registration, at the point of first withdrawal request, and on a random basis throughout a player's account lifetime. Players who cannot verify their age will have their accounts suspended until verification is completed.

12. Security Measures

ec99 maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our current security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ec99 platform;
• Encryption of sensitive data fields — including identity documents and payment references — at rest in our databases;
• Role-based access controls ensuring that ec99 employees can only access personal data necessary for their specific function;
• Two-factor authentication requirements for all ec99 staff accessing internal systems containing player data;
• Regular penetration testing and vulnerability assessments carried out by independent security specialists;
• Automated fraud detection and anomaly monitoring systems operating across all accounts in real time;
• Documented incident response and data breach notification procedures reviewed on an annual basis.

While ec99 takes all reasonable steps to secure your personal data, no data transmission over the internet can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own ec99 login credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

13. Third-Party Links

The ec99 platform may contain links to third-party websites, payment provider portals, or game provider interfaces. This Privacy Policy applies solely to data collected by ec99 through the ec99.im platform and does not extend to any third-party websites or services. ec99 is not responsible for the privacy practices of third-party operators, and we encourage you to review the privacy policies of any external service you access in connection with your ec99 account.

14. Amendments to This Policy

ec99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, licensing requirements, or applicable law. Where amendments are material, ec99 will provide notice to registered players via the registered email address or an on-platform notification prior to the changes taking effect.

The effective date at the top of this document will be updated to reflect the date of the most recent revision. Continued use of the ec99 platform following notification of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must discontinue use of the platform and contact support to request account closure.

15. Contact and Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to submit a privacy-related complaint, please contact the ec99 privacy team through the following channels:

• Email: [email protected] — subject line "Privacy — Data Request" or "Privacy — Complaint"
• Live Chat: Available on-site 24 hours a day, 7 days a week
• Agent Support Hours: Urdu and English-speaking agents available 8am – 12am PKT daily

ec99 aims to acknowledge all privacy-related correspondence within five (5) business days and to provide a full response within thirty (30) calendar days. If you are not satisfied with ec99's response to your privacy complaint, you may escalate the matter to the relevant dispute resolution body designated by our licensing authority.