01. Introduction
ec99 ("we", "our", "us") is Pakistan's leading online casino and sports betting platform. We take the privacy of our players seriously and are committed to protecting personal data in a transparent, lawful, and responsible manner.
This Privacy Policy describes the types of personal information that ec99 collects from players and visitors to the ec99 platform, the purposes for which that information is used, the circumstances under which it may be shared with third parties, and the rights available to individuals regarding their personal data.
This Privacy Policy applies to all users of the ec99 platform — whether you are a registered account holder, a prospective player browsing the site, or a visitor accessing any ec99 web page. By using the ec99 platform, you acknowledge that you have read, understood, and agree to the data practices described in this policy.
This Privacy Policy should be read in conjunction with the ec99 Terms & Conditions, which are incorporated by reference and form part of the overall agreement between you and ec99. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.
02. Data Controller
For the purposes of applicable data protection legislation, ec99 acts as the data controller in respect of the personal data of its players and platform visitors. As data controller, ec99 determines the purposes and means of processing personal data collected through the ec99 platform.
ec99 may engage third-party data processors — including KYC verification providers, payment processing companies, customer support platforms, and analytics service providers — who process personal data on behalf of ec99 and under ec99's documented instructions. All such processors are contractually required to handle personal data in accordance with applicable data protection standards and ec99's data protection requirements.
If you have any questions about ec99's role as data controller, or about the identity of specific data processors engaged by ec99, please contact the ec99 Data Protection team via the contact details provided in Section 14 of this policy.
03. Data We Collect
ec99 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and from authorised third parties as part of identity verification and fraud prevention processes. The categories of data we collect include the following:
3.1 Account Registration Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used to verify that you meet the 21+ age requirement)
- Residential address — including city (e.g., Karachi, Lahore, Islamabad, Faisalabad), province, and postal code
- Email address and mobile phone number
- Login credentials (username; your password is stored in hashed form and is never accessible to ec99 staff)
3.2 Identity Verification (KYC) Data
- Scanned or photographed copies of your Pakistani CNIC, passport, or driving licence
- Proof of residential address (e.g., a recent utility bill or bank statement)
- Proof of ownership of the payment method used for deposits (e.g., a screenshot of your JazzCash or EasyPaisa account)
- Source-of-funds documentation where required under anti-money laundering (AML) procedures
3.3 Transactional & Gaming Data
- Deposit and withdrawal history, including amounts in PKR, transaction dates, and payment methods used
- Betting and gaming history, including game types, wager amounts, outcomes, and session durations
- Bonus and promotional activity, including bonuses claimed, wagering progress, and bonus expiry
- Account wallet balance and transaction records
3.4 Technical & Usage Data
- IP address and approximate geolocation derived from IP address
- Device type, operating system, and browser version
- Pages visited on the ec99 platform, clickstream data, and session timestamps
- Cookie identifiers and similar tracking technology data (see Section 7)
3.5 Communications Data
- Records of communications between you and ec99 support staff, including live chat transcripts, email correspondence, and support ticket history
- Feedback, complaints, and dispute communications submitted through any ec99 channel
Sensitive Data: ec99 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification. If you believe that ec99 has inadvertently collected sensitive data not required for the above purposes, please contact support immediately.
04. How We Use Your Data
ec99 uses the personal data it collects for the following purposes:
| Purpose |
Description |
| Account Management |
Creating, maintaining, and managing your ec99 account, including processing login requests, updating account details, and responding to account-related support enquiries. |
| Identity Verification |
Verifying your identity and age (21+) through KYC procedures to comply with regulatory obligations and to prevent underage gambling and fraud. |
| Transaction Processing |
Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved methods, and processing withdrawal requests to verified payment accounts. |
| AML & Fraud Prevention |
Monitoring transactions and account activity to detect, investigate, and prevent money laundering, fraud, match-fixing, and other prohibited conduct as required by applicable regulations. |
| Platform Improvement |
Analysing usage data and player behaviour patterns (in anonymised or aggregated form where possible) to improve platform performance, game selection, and user experience. |
| Responsible Gaming |
Identifying players who may be displaying signs of problem gambling behaviour and proactively offering responsible gaming tools or support resources. |
| Marketing & Promotions |
Sending promotional communications — including Eid, Ramadan, and PSL seasonal offers — to players who have consented to receive such communications. See Section 11. |
| Legal Compliance |
Complying with applicable legal obligations, regulatory requirements, court orders, and law enforcement requests, including mandatory data retention obligations. |
05. Legal Basis for Processing
ec99 processes personal data on one or more of the following legal bases, depending on the specific purpose of processing:
- Contractual Necessity: Processing is necessary for the performance of the contract between you and ec99 — specifically, the provision of online gaming and betting services as described in the ec99 Terms & Conditions. This covers account creation, transaction processing, game delivery, and customer support.
- Legal Obligation: Processing is required to comply with legal or regulatory obligations applicable to ec99, including KYC verification, AML monitoring, tax reporting requirements, and data retention mandates.
- Legitimate Interests: Processing is carried out based on ec99's legitimate business interests, provided that those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics.
- Consent: Where ec99 relies on your consent as the legal basis for processing — such as for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
06. Data Sharing & Third Parties
ec99 does not sell, rent, or otherwise commercialise your personal data to third-party marketing companies or data brokers. Personal data may be shared with the following categories of third parties only where necessary and with appropriate safeguards in place:
- KYC & Identity Verification Providers: Third-party services engaged to verify the identity and age of ec99 players as part of mandatory KYC and AML compliance procedures. These providers process identity documents and biographic data under strict data processing agreements.
- Payment Processors: Including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing services. These entities receive the minimum data necessary to process your deposit or withdrawal transaction securely.
- Customer Support Platforms: Third-party live chat and ticketing systems used to deliver ec99's 24/7 player support service. Support staff access account data only to the extent necessary to resolve your query.
- Game Providers: Software providers such as Evolution Gaming, Pragmatic Play, Play'n GO, NetEnt, and Ezugi receive limited technical identifiers to deliver game content and record game outcomes accurately. These providers do not receive your full name, CNIC, or financial account details.
- Regulatory & Law Enforcement Authorities: ec99 will disclose personal data to competent authorities where required to do so by applicable law, valid legal process, court order, or legitimate regulatory direction. ec99 will, where legally permissible, notify affected players of such disclosures.
- Fraud Prevention & AML Services: Specialised third-party services used to screen transactions and account activity for indicators of money laundering, fraud, and other prohibited conduct.
All third parties with whom ec99 shares personal data are required to implement appropriate technical and organisational security measures, and are prohibited from using ec99 player data for any purpose other than the specific purpose for which it was shared.
07. Cookies & Tracking Technologies
ec99 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the platform, remember your preferences, and analyse how players interact with the site.
Types of Cookies Used
- Strictly Necessary Cookies: Required for the ec99 platform to function correctly. These cookies enable session management, login authentication, and security features. They cannot be disabled without impairing the functionality of the platform.
- Performance & Analytics Cookies: Used to collect anonymised data about how players navigate the ec99 platform — which pages are visited most frequently, where users drop off, and how quickly pages load. This data is used solely to improve the platform.
- Functional Cookies: Allow ec99 to remember your preferences — such as language settings or preferred payment method — to personalise your experience on subsequent visits.
- Marketing Cookies: Used only where you have provided explicit consent to receive targeted promotional content. These cookies track your activity on ec99 to help deliver more relevant promotional offers.
You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the ec99 platform.
08. Data Retention
ec99 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including compliance with legal, regulatory, and contractual obligations. The following general retention principles apply:
- Active Accounts: Personal data associated with an active ec99 account is retained for the duration of the account lifecycle and for a period thereafter as required by applicable AML, tax, and regulatory retention obligations.
- Closed Accounts: Following account closure, ec99 typically retains account records — including identity verification documents, transaction history, and gaming records — for a minimum period prescribed by applicable law, commonly five to seven years, to satisfy regulatory and audit requirements.
- Incomplete Registrations: Data associated with incomplete registration attempts is retained for a shorter period sufficient to complete the registration or confirm abandonment, after which it is securely deleted.
- Support Records: Customer support communications are retained for a period sufficient to resolve any disputes or complaints that may arise in connection with the subject matter of the communication.
Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with ec99's data disposal procedures.
09. Data Security
ec99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the ec99 platform
- Encrypted storage of sensitive data, including identity documents and financial records, at rest
- Role-based access controls ensuring that ec99 staff access only the minimum personal data necessary for their specific function
- Two-factor authentication (2FA) options available to all ec99 account holders to protect against unauthorised account access
- Continuous monitoring of platform systems and networks for security incidents, anomalies, and potential breaches
- Regular security assessments and penetration testing conducted by qualified information security professionals
While ec99 employs rigorous security measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a significant risk to affected players, ec99 will notify impacted individuals and relevant authorities as required by applicable law and within the prescribed timeframes.
10. Your Data Rights
Subject to applicable law, ec99 recognises and respects the following data rights of its players:
- Right of Access: You have the right to request a copy of the personal data that ec99 holds about you, along with information about how it is processed.
- Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held by ec99 about you. Corrections to KYC data may require the submission of updated documentation.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to ec99's legal obligations, which may require retention of certain data beyond the date of your request.
- Right to Restriction: You have the right to request that ec99 restrict the processing of your personal data in certain circumstances — for example, where the accuracy of the data is contested or where processing is unlawful but you prefer restriction to erasure.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive personal data you have provided to ec99 in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where ec99 relies on legitimate interests as the legal basis for processing. ec99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where ec99 processes your data based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
To exercise any of these rights, please contact ec99's Data Protection team using the contact details in Section 14. ec99 will respond to valid requests within 30 days, subject to identity verification requirements.
11. Marketing Communications
ec99 may send promotional communications — including bonus offers, new game announcements, and seasonal campaigns (such as Eid-ul-Fitr, Eid-ul-Adha, Ramadan, and PSL season promotions) — to players who have opted in to receive such communications during registration or through their account settings.
- Marketing emails and SMS messages will be sent only to players who have explicitly consented to receive them. ec99 will never send unsolicited commercial communications to players who have not opted in.
- All ec99 marketing communications will include a clear and accessible mechanism to opt out of future communications, such as an unsubscribe link in emails or an opt-out instruction in SMS messages.
- Players may manage their marketing preferences at any time through the notifications section of their ec99 account settings, or by contacting ec99 support directly.
- ec99 is committed to responsible marketing practices. During Ramadan and other significant religious occasions, ec99 will ensure that all promotional content is culturally respectful, tasteful, and appropriate. ec99 does not engage in aggressive or high-pressure promotional campaigns during religious periods.
12. Protection of Minors
The ec99 platform is strictly intended for adults aged 21 years and above. ec99 does not knowingly collect personal data from individuals under the age of 21, and any account found to be operated by a person under 21 will be immediately closed and any associated funds dealt with in accordance with ec99's underage gambling policy.
If you are a parent or guardian and believe that a minor may have accessed or registered on ec99 using false information, please contact ec99 support immediately. ec99 will investigate and take appropriate action, including the permanent closure of the relevant account and the implementation of additional protective measures.
13. Changes to This Privacy Policy
ec99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or ec99's data processing practices. The "Last Updated" date at the top of this policy will be revised whenever a material change is made.
- Where changes are material — meaning they significantly affect how ec99 collects, uses, or shares your personal data — ec99 will notify registered players by email and/or through a prominent notice on the ec99 platform prior to the changes taking effect.
- Continued use of the ec99 platform following notification of a material policy change will constitute acceptance of the updated Privacy Policy.
- If you do not agree with a proposed change to this Privacy Policy, you have the right to close your ec99 account and request deletion of your personal data, subject to ec99's legal retention obligations.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of the data rights described in Section 10, please contact the ec99 Data Protection team through the following channels:
- Email: [email protected] — please include "Privacy Request" in the subject line for data rights requests
- Live Chat: Available 24/7 through your ec99 account dashboard — for urgent privacy matters, live chat provides the fastest response
- Response Time: ec99 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days
When submitting a data rights request, ec99 may be required to verify your identity before acting on the request. This is to ensure that personal data is not disclosed to, or deleted at the request of, an unauthorised party. You will be asked to provide sufficient information to confirm your identity as the account holder.