eh777 Privacy Policy

1. Introduction

eh777 operates the online gaming platform accessible at eh777.net ("the Platform") and is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy ("Policy") describes in detail how eh777 collects, uses, processes, stores, shares, and protects personal information in connection with the operation of the Platform.

This Policy applies to all registered players, prospective players who submit registration data, and visitors to the Platform regardless of the device or connection used. By registering on the Platform or continuing to use it after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the eh777 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of applicable data protection laws, eh777 ("the Operator") is the data controller in respect of all personal data processed in connection with the Platform. All data protection enquiries, subject access requests, and consent withdrawal requests should be directed to: [email protected].

3. Data We Collect

eh777 collects personal data from you in three primary ways: information you provide directly during registration and account use; information we collect automatically through your use of the Platform; and information received from third parties in connection with KYC, payment processing, and fraud prevention.

Information you provide directly:

• Full legal name, date of birth, and gender as appearing on your government-issued identity document.
• Pakistani residential address including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad) and postal code.
• Valid email address and Pakistani mobile telephone number.
• CNIC (Computerised National Identity Card) number and a copy of the document for KYC verification.
• Payment method information including JazzCash or Easypaisa wallet identifiers, bank account details (HBL, Meezan Bank, UBL, Bank Alfalah), or USDT TRC20 wallet addresses where applicable.
• Communications submitted to our support team via live chat or email.
• Responsible gaming preferences such as deposit limits, loss limits, and self-exclusion elections.

Information collected automatically:

• IP address, geolocation data derived from IP, and device identifiers.
• Browser type, version, operating system, and device model.
• Session timestamps, pages visited, game sessions played, and navigation patterns within the Platform.
• Betting and gaming history, wager amounts, game outcomes, and transaction records.
• Cookie identifiers and similar tracking technologies as described in Section 8.

Information from third parties:

• Identity and address verification data from licensed KYC and identity verification service providers.
• Transaction confirmation data from payment processors.
• Fraud risk scores from fraud prevention partners.
• Self-exclusion status from responsible gaming registers where applicable.

4. Legal Basis for Processing

eh777 processes personal data only where a lawful basis exists under applicable data protection legislation. The primary legal bases we rely upon are:

• Contractual necessity: Processing necessary to perform our contract with you, including account creation, authentication, game operation, deposit and withdrawal processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable anti-money laundering, counter-terrorism financing, and responsible gaming regulatory obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement where our interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications where you have given explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. How We Use Your Data

eh777 uses the personal data we collect for the following specific purposes:

• To create, maintain, and administer your eh777 account and authenticate your identity at login.
• To process deposits and withdrawals via PKR payment channels and USDT TRC20.
• To conduct KYC identity verification and ongoing AML transaction monitoring as required by applicable regulations.
• To provide customer support through our live chat and email channels.
• To detect, investigate, and prevent fraud, collusion, and prohibited activities as defined in the Terms & Conditions.
• To operate responsible gaming tools including deposit limit enforcement, session time reminders, cooling-off periods, and self-exclusion.
• To personalise your experience on the Platform, including game recommendations and promotional targeting relevant to your play history, subject to your marketing preferences.
• To analyse Platform usage in aggregate form to improve product performance, user experience, and game offering.
• To communicate important account notices, policy updates, and regulatory disclosures.
• To send optional marketing communications where you have consented to receive them.

eh777 does not sell, rent, or otherwise transfer personal data to unaffiliated third parties for their own marketing purposes.

6. Payment Data

Payment transactions on eh777 are processed by licensed third-party payment service providers. Full payment card numbers and bank account credentials are transmitted directly to and stored by these processors – eh777 stores only tokenised or masked representations sufficient to facilitate refunds and dispute resolution. JazzCash and Easypaisa wallet identifiers and USDT TRC20 wallet addresses are stored in association with your account record for AML compliance and to enable withdrawal to your registered payment method.

All payment data transmissions between your device and the Platform are encrypted using TLS. eh777 does not store complete card numbers or full banking credentials on its own servers.

7. KYC & Anti-Money Laundering

eh777 operates a Know Your Customer programme as part of its anti-money laundering and counter-terrorism financing compliance obligations. Personal data collected during the KYC process – including CNIC copies, proof of address, and payment method verification documents – is processed by the Operator and, where necessary, shared with licensed identity verification service providers.

KYC data is retained for a minimum period as required by applicable AML regulations from the date of account closure. This retention is mandatory and may not be shortened by a data subject deletion request where retention is required by law.

Where eh777's AML monitoring identifies suspicious transaction patterns, the Operator may be legally obligated to file a report with relevant financial intelligence authorities. Such reports are filed in strict confidence and eh777 is legally prohibited in many jurisdictions from disclosing to the subject that a report has been made.

8. Cookies and Tracking Technologies

The eh777 Platform uses the following categories of cookies and similar technologies:

• Essential cookies: Required for basic Platform functionality including session management, authentication, and security. These cannot be disabled without impairing your ability to use the Platform.
• Performance and analytics cookies: Collect aggregated, anonymised data about how visitors use the Platform to help us improve performance and user experience. You may disable these via your browser settings without affecting core functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.

eh777 does not use third-party advertising or social media tracking cookies. No cross-site behavioural advertising profiles are built from eh777 session data.

You may control cookie behaviour through your browser settings. Disabling essential cookies will prevent login and Platform use. Disabling performance cookies will not affect your ability to play or transact.

9. Data Sharing and Disclosure

eh777 shares personal data only in the following limited circumstances:

• Payment processors: Transaction data is shared with licensed payment service providers (JazzCash, Easypaisa, HBL, and others) strictly as necessary to process deposits and withdrawals.
• KYC and identity verification providers: Identity documents and verification data are shared with licensed third-party KYC providers to fulfil our regulatory obligations.
• Fraud prevention partners: Relevant transaction and behavioural data may be shared with fraud detection services to identify and prevent money laundering and account takeover.
• Regulatory and law enforcement authorities: eh777 will disclose personal data to competent authorities when required to do so by law, court order, or regulatory directive.
• Responsible gaming schemes: Self-exclusion status may be shared with cross-operator responsible gaming registers where applicable.
• Corporate transactions: In the event of a merger, acquisition, or asset sale, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom eh777 shares data are contractually bound to handle that data only for the specified purpose and to maintain adequate security standards.

10. International Data Transfers

The eh777 Platform is operated globally and data may be processed in countries outside of Pakistan, including jurisdictions in which our technology infrastructure, KYC providers, or payment processors are based. Where personal data is transferred internationally, eh777 takes reasonable steps to ensure that adequate safeguards are in place, including contractual data processing agreements with recipient entities that impose data protection standards equivalent to those described in this Policy.

11. Data Retention

eh777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. In general:

• Active account data is retained for the duration of your registration on the Platform.
• KYC and AML records are retained for a minimum of five years following account closure, in line with standard AML regulatory requirements.
• Transaction records are retained for a minimum of five years to support dispute resolution, audit, and regulatory reporting.
• Marketing consent records are retained for the duration of your account plus a reasonable additional period for compliance documentation.
• Support communications are retained for a minimum of two years.

Where retention is no longer necessary or lawful, eh777 will securely delete or anonymise personal data.

12. Your Data Rights

Subject to applicable law and regulatory exceptions, you have the following rights in respect of personal data held by eh777:

• Right of access: Request a copy of the personal data eh777 holds about you.
• Right of rectification: Request correction of inaccurate or incomplete personal data.
• Right of erasure: Request deletion of personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires retention.
• Right to restrict processing: Request that eh777 temporarily restrict processing of your data pending resolution of a dispute about accuracy or lawfulness.
• Right to data portability: Receive a copy of data you provided to eh777 in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact eh777 at [email protected]. We will respond within 30 calendar days. In some cases we may need to verify your identity before processing a request. Note that certain rights are subject to limitations where eh777's legal obligations (particularly AML and regulatory record-keeping requirements) require continued data retention.

13. Children and Minors

The eh777 Platform is strictly restricted to individuals aged 18 years and above. eh777 does not knowingly collect, process, or store personal data of persons under 18. If we become aware that an account is held by or data has been collected from a person under 18, we will close the account and delete associated data (subject to AML retention obligations) promptly. If you believe a minor has registered on eh777, please notify us immediately at [email protected].

14. Data Security

eh777 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for sensitive data stored at rest.
• Role-based access controls ensuring that only authorised personnel with a legitimate need access personal data.
• Regular security vulnerability assessments and penetration testing.
• Multi-factor authentication for administrative access to production systems.

Despite these measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, eh777 will notify affected individuals without undue delay in accordance with applicable notification obligations.

15. Changes to This Policy

eh777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes will be communicated to registered players by email at least 7 days before the amended Policy takes effect. The current Policy version and effective date are displayed at the top of this page. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

16. Contact and Complaints

For any privacy-related enquiries, data subject access requests, consent withdrawal notifications, or complaints regarding how eh777 handles your personal data, please contact our Data Protection team at: [email protected]. Please include your full name, registered email address, and a clear description of your request or concern. We will acknowledge your contact within 5 business days and provide a substantive response within 30 calendar days.