eg777 Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how eg777 (hereinafter "we", "us", "our" or "the Platform") collects, uses, stores, shares and protects personal data relating to individuals who access or register on the eg777 online gaming platform at the domain eg777.cam (hereinafter "the Website").

We recognise that privacy is important to our users — particularly players based in Pakistan who share financial information and identity documents during the account verification process. This Policy is intended to give you a clear, honest account of our data practices so you can make an informed decision about using the platform.

By accessing the Website, creating an account or using any service offered by eg777, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into the eg777 Terms & Conditions.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, CNIC number, contact details, financial information, device identifiers and IP addresses.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, eg777.
• "Data Processor" means any third party that processes personal data on behalf of eg777 under contractual instruction, including KYC verification service providers, payment processors and cloud hosting providers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer or deletion.
• "KYC" means Know-Your-Customer identity verification, as described in the Terms & Conditions.
• "AML" means Anti-Money Laundering obligations applicable to the platform under the laws of its licensing jurisdiction.
• "User" or "Player" means any individual who accesses or registers on the eg777 Website.

eg777 acts as the Data Controller in respect of personal data collected from users of the Website. As Data Controller, eg777 is responsible for determining how and why your personal data is processed and for ensuring that such processing is carried out lawfully and transparently.

Where eg777 engages third-party service providers (Data Processors) to perform functions on its behalf — such as identity verification, payment processing, customer support tooling or cloud infrastructure — those processors are contractually bound to process data only in accordance with eg777's documented instructions and applicable data protection requirements.

For all data-related inquiries, please use the contact details provided in Section 15 of this Policy.

The categories of personal data collected by eg777, and the circumstances in which each category is gathered, are set out in the table below:

eg777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health information, unless you voluntarily provide such information in the context of a responsible gambling self-declaration or similar support process.

eg777 processes personal data only for clearly defined purposes and only where a lawful basis for doing so exists. The primary processing purposes and corresponding legal bases are as follows:

• Account creation and management — necessary for the performance of the contract between you and eg777.
• Identity verification (KYC) and age confirmation — necessary for compliance with legal obligations applicable to the platform under its licensing framework.
• Transaction processing, deposits and withdrawals in PKR — necessary for the performance of the contract.
• Anti-money laundering (AML) monitoring and reporting — necessary for compliance with applicable legal obligations.
• Fraud prevention and account security — necessary for the legitimate interests of eg777 and its users in protecting the integrity of the platform.
• Customer support and complaint resolution — necessary for the performance of the contract and for our legitimate interests in providing quality service.
• Responsible gambling monitoring and intervention — necessary for our legal obligations and the vital interests of users who may be at risk.
• Platform improvement and analytics — based on our legitimate interests in improving the user experience, provided such interests are not overridden by your rights.
• Direct marketing communications — based on your explicit prior consent only; you may withdraw consent at any time.

eg777 does not sell, rent or trade your personal data to third parties for commercial marketing purposes under any circumstances. However, we may share your personal data with the following categories of recipient where necessary and lawful:

• KYC & Identity Verification Providers: Third-party vendors engaged to perform document and identity checks. These providers process data as Data Processors under contractual instruction from eg777.
• Payment Processors & Financial Institutions: Entities involved in processing PKR deposits and withdrawals. Reference to payment channels such as bank transfers (involving institutions such as HBL, UBL, Meezan Bank or Bank Alfalah) or mobile wallets is contextual — none of these institutions are affiliated with or endorse eg777.
• Cloud Infrastructure & Technology Partners: Hosting, database and security service providers operating under data processing agreements with eg777.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, court order or regulatory obligation, eg777 may disclose personal data to relevant authorities without prior notice to the affected user.
• Responsible Gambling Support Providers: Where a user has consented or where required for safeguarding purposes, limited data may be shared with recognised support services.

In all cases where personal data is shared with Data Processors, eg777 requires those processors to maintain appropriate technical and organisational security measures and to process data only for the specified purpose.

Given that eg777 operates an internationally accessible platform and engages third-party service providers located in multiple jurisdictions, personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, eg777 ensures that appropriate safeguards are in place to maintain a level of data protection consistent with the standards described in this Policy, including contractual data protection clauses where required.

By using the eg777 platform, you acknowledge that your personal data may be transferred, stored and processed in jurisdictions outside Pakistan, subject to the safeguards described above.

eg777 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including compliance with legal and regulatory obligations. Specific retention periods are governed by:

• Active Account Data: Retained for the duration of the account's active status plus the minimum post-closure period required by the platform's licensing jurisdiction for AML record-keeping purposes (typically 5–7 years).
• KYC & Identity Documents: Retained for the period required under applicable AML regulations, which may extend beyond account closure.
• Transaction Records: Retained to satisfy applicable financial record-keeping requirements.
• Marketing Consent Records: Retained for as long as necessary to demonstrate consent and to honour opt-out requests.
• Customer Support Communications: Retained for a reasonable period following the resolution of the relevant query or complaint.

Where personal data is no longer required for any lawful purpose, it will be securely deleted or anonymised in a manner that prevents re-identification.

Subject to applicable law and certain legal exemptions, you have the following rights in relation to your personal data held by eg777. To exercise any of these rights, please contact us using the details in Section 15.

eg777 will respond to data rights requests within 30 days of receipt. Where requests are complex or numerous, this period may be extended by up to a further 60 days, with notification provided to the requester. We will ask you to verify your identity before processing any rights request.

eg777 uses cookies and similar client-side technologies on the Website. Cookies are small text files stored on your device that help the platform function correctly and provide a coherent session experience.

The categories of cookies used by eg777 are as follows:

• Strictly Necessary Cookies: Required for the Website to function. These enable login session persistence, security token management and fraud prevention features. They cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible-gambling limit configurations to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Website (pages visited, session duration, error events). This data is used to improve the platform and is not used to identify individual users for marketing purposes.

eg777 does not deploy third-party advertising or cross-site tracking cookies. You can control cookie settings through your browser. Blocking strictly necessary cookies will prevent core platform functions from operating correctly.

eg777 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include:

• HTTPS/SSL encryption for all data in transit between user devices and the platform;
• Encryption at rest for stored sensitive data including identity documents and financial records;
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis;
• Two-factor authentication options for user accounts;
• Session monitoring and anomaly detection systems; and
• Regular review of security practices and infrastructure.

No internet-based system is entirely without risk. eg777 cannot guarantee absolute security but maintains appropriate measures proportionate to the risk and sensitivity of the data processed. In the event of a data breach that poses a risk to users' rights and freedoms, eg777 will follow applicable notification procedures.

You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact us at [email protected] immediately.

The eg777 platform is strictly restricted to adults aged 18 years or older, or the higher minimum age required by the operator's licensing jurisdiction. eg777 does not knowingly collect personal data from individuals under the applicable minimum age.

Age verification is a mandatory component of the KYC process. Where it is determined that personal data has been collected from a minor, eg777 will take immediate steps to delete that data and close the associated account, refunding any balance where applicable and consistent with the platform's obligations.

If you believe a minor has registered on the platform, please contact us immediately using the details in Section 15.

eg777 serves a significant user base across Pakistan, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are aware of the specific legal context applicable to Pakistani users and wish to be transparent about the following:

• Pakistan does not currently have a comprehensive data protection statute equivalent to the GDPR or similar frameworks. eg777 nonetheless applies the data protection principles set out in this Policy to all users regardless of jurisdiction.
• The Prevention of Electronic Crimes Act, 2016 (PECA) and associated regulations may be relevant to the handling of electronic data in Pakistan. eg777's data practices are designed to operate consistently with responsible international standards.
• eg777 does not claim any approval or authorisation from Pakistani government authorities, the PTA, the State Bank of Pakistan or any provincial authority in respect of its data processing activities or gaming operations.
• Where Pakistani law enforcement or regulatory authorities present a lawful request for user data, eg777 will assess that request against applicable legal standards before disclosing any personal data.

eg777 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a significant change to the purposes for which your data is processed, the categories of data shared with third parties, or your rights — eg777 will provide advance notice via your registered email address or through a prominent notice on the Website.

The "Last Updated" date displayed at the top of this Policy reflects the date on which the current version became effective. We recommend that you review this Policy periodically to stay informed of any updates. Continued use of the Website after the effective date of an amended Policy constitutes your acceptance of the changes.

For any questions, concerns or requests relating to this Privacy Policy or to the exercise of your data rights, please contact the eg777 data privacy team through the following channels:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in your subject line to ensure prompt routing to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week on the Website. For formal rights requests, written communication via email is preferred.
• Response Time: We aim to acknowledge all privacy-related inquiries within 3 business days and to provide a substantive response within 30 days.
• Language: Communications are handled in English. Urdu-language assistance is available on request.

If you are dissatisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant supervisory or data protection authority in your jurisdiction. eg777 will cooperate with any such authority in the resolution of complaints.