ep666 Privacy Policy

1.1 ep666 is an online casino and sports betting platform accessible at ep666.club, offering services including cricket betting, live casino games, jackpot slots, fishing games, and instant PKR withdrawals to players located in Pakistan and other permitted jurisdictions.

1.2 For the purposes of this Privacy Policy, ep666 acts as the data controller in respect of the personal information collected from players who register for and use the Platform. As data controller, ep666 determines the purposes and means of processing your personal data.

1.3 If you have any questions or concerns about how ep666 handles your personal data, you can contact our Data Support team directly at [email protected]. We aim to respond to all data-related enquiries within five (5) business days.

2.1 ep666 collects personal data in three primary ways: information you provide directly during registration and account use, information collected automatically through your interaction with the Platform, and information received from trusted third-party service providers such as payment processors and identity verification agencies.

2.2 Information You Provide Directly:

• Full legal name as it appears on your Pakistani government-issued CNIC or NICOP;
• Date of birth (used for 21+ age verification);
• Residential address in Pakistan;
• Email address and mobile phone number;
• Login credentials (username; password is stored only in hashed, non-reversible form);
• Payment account details including JazzCash wallet number, EasyPaisa account, or bank account details for HBL, UBL, Meezan Bank, Raast, or 1LINK;
• Identity verification documents uploaded during KYC (scanned CNIC, NICOP, or proof of address);
• Any communications you send to our support team via live chat or email.

2.3 Information Collected Automatically:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, login history, and session duration;
• Pages visited, games played, bets placed, and betting patterns;
• Deposit and withdrawal transaction history;
• Cookie identifiers and similar tracking technologies (see Section 5).

2.4 Information from Third Parties:

• Identity and age verification results from KYC service providers;
• Payment transaction confirmations from JazzCash, EasyPaisa, and banking partners;
• Fraud screening and anti-money laundering (AML) risk scores from compliance partners;
• Where applicable, responsible gaming self-exclusion status from third-party exclusion registries.

3.1 ep666 uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create and maintain your ep666 player account, verify your identity and age (21+ requirement), and manage your account preferences and security settings.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK. Financial data is shared with payment processors strictly for transaction processing purposes only.
• Legal and Regulatory Compliance: To meet our obligations under anti-money laundering (AML) regulations, responsible gaming frameworks, and the conditions of our international online gaming licence — including KYC verification, transaction monitoring, and record-keeping.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multiple-account abuse, bonus exploitation, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, enforce self-exclusion requests, apply deposit limits and session restrictions, and comply with responsible gaming obligations.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance via our 24/7 support channels.
• Platform Improvement: To analyse aggregated, anonymised usage patterns and improve the games, features, and overall player experience on the ep666 platform.
• Promotions and Bonuses: To administer the bonuses, promotions, free bets, and VIP rewards you have opted into, and to verify compliance with applicable wagering requirements.
• Marketing Communications: Where you have provided explicit consent, to send you promotional emails and notifications about relevant ep666 offers. You may withdraw consent at any time by contacting support or using the unsubscribe link in marketing emails.

3.2 ep666 does not use personal data to make solely automated decisions that produce legal or similarly significant effects on you without human review, except where required by law or with your explicit consent.

4.1 ep666 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing is required to perform our contract with you — i.e., to operate your ep666 account, process your bets, and deliver the gaming services you have registered for.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements including AML regulations, KYC obligations, and responsible gaming licence conditions.
• Legitimate Interests: Processing is necessary for ep666's legitimate business interests, including fraud detection, platform security, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5.1 ep666 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device when you visit ep666.club.

5.2 ep666 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These enable core features such as session management, login authentication, and security checks. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and deposit method selections to provide a more personalised experience.
• Analytics Cookies: Allow ep666 to understand how players interact with the Platform — which games are most popular, which pages see the most traffic, and where technical issues arise. Data is aggregated and anonymised.
• Security Cookies: Assist in fraud detection by identifying unusual access patterns, multiple account indicators, and suspicious session behaviour.

5.3 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional or analytics cookies may affect your experience on the ep666 platform.

5.4 ep666 does not use third-party advertising or retargeting cookies to serve ads on other websites based on your ep666 activity.

6.1 ep666 does not sell or rent your personal data to any third party. We share data only where necessary for the operation of the Platform, legal compliance, or with your explicit consent. Categories of recipients include:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive only the transactional and financial data required to process your deposits and withdrawals in PKR.
• Identity Verification (KYC) Providers: Third-party KYC and AML service providers receive identity documents and personal details solely for the purpose of verifying your identity and age.
• Fraud and Security Providers: Specialised fraud detection and cybersecurity providers may receive technical data (IP addresses, device fingerprints, transaction patterns) to assist in protecting the Platform and its players.
• Game Software Providers: Where games are provided by third-party software studios, those providers may receive anonymised session data necessary to operate the game. They do not receive your identity or payment data.
• Regulatory and Law Enforcement Authorities: ep666 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, a court order, or to prevent financial crime.
• Professional Advisers: Legal advisers, auditors, and compliance consultants acting for ep666 may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.

6.2 All third-party service providers who process data on ep666's behalf are subject to contractual data processing agreements that require them to maintain appropriate security measures and to process data only on ep666's instructions.

6.3 ep666 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards such as contractual data transfer clauses.

7.1 ep666 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your ep666 account and for a minimum period of five (5) years following account closure, in compliance with AML record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of account closure or the last relevant transaction, in line with anti-money laundering regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the relevant interaction, unless longer retention is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for as long as your consent remains active, and for a reasonable period thereafter as evidence of consent.
• Technical and Usage Data: Generally retained for thirteen (13) months for analytics purposes, after which it is aggregated and anonymised.

7.2 Where data is no longer required for any legitimate purpose, ep666 will securely delete or permanently anonymise it. Secure deletion procedures are applied to all storage media containing personal data that is no longer required.

8.1 ep666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and ep666 servers;
• Encryption at rest for sensitive stored data including KYC documents and payment details;
• Hashed storage of passwords — ep666 staff cannot view your password in plain text;
• Multi-factor authentication options for player account access;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Intrusion detection systems and 24/7 platform security monitoring;
• Formal data breach response procedures.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ep666 will notify you without undue delay, providing details of the nature of the breach, the categories of data affected, and the steps we are taking to address it.

8.3 While ep666 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring your devices are protected with appropriate security software.

9.1 As an ep666 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered account details and a description of your request.

9.2 ep666 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two (2) months, in which case we will notify you of the extension and the reason for it.

9.3 ep666 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, with written explanation.

10.1 The ep666 platform is strictly intended for adults aged 21 years and above. ep666 does not knowingly collect personal data from individuals under the age of 21. All new accounts are subject to age verification checks at the point of registration and during KYC review.

10.2 If ep666 becomes aware or reasonably suspects that a registered account belongs to an individual under 21, that account will be immediately suspended pending investigation. If the suspicion is confirmed, the account will be permanently closed, all balances will be refunded to the verified payment method, and the personal data of the minor will be securely deleted except where retention is required by law.

10.3 If you are a parent or guardian and believe your child may have accessed or registered on the ep666 platform, please contact us immediately at [email protected]. We take such reports very seriously and will act promptly.

11.1 ep666 uses player data as an integral part of its responsible gaming framework. Behavioural and transactional data is monitored to identify patterns that may indicate problem gambling — such as rapidly increasing bet sizes, chasing losses, or unusually long uninterrupted gaming sessions.

11.2 Where such patterns are identified, ep666 may use your contact data to proactively reach out with responsible gaming resources, suggest the use of available player tools (deposit limits, session timers, cooling-off periods), or in serious cases, initiate a welfare check.

11.3 Self-Exclusion Data: Where a player requests self-exclusion, ep666 retains a record of that self-exclusion in order to enforce it. Self-exclusion data is not deleted upon account closure. Re-registration attempts during an active self-exclusion period are detected using retained identifiers including name, date of birth, and payment method details.

11.4 ep666 may share self-exclusion status data with third-party responsible gaming exclusion registries or multi-operator exclusion schemes where we are required to do so under our gaming licence conditions. This is done in your interest, to ensure your self-exclusion is respected across participating platforms.

11.5 For further information on responsible gaming tools available to ep666 players, please visit our dedicated Responsible Gaming page. Remember: Must be 21 or older to play.

12.1 ep666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The effective date and version number at the top of this page will always reflect the current version.

12.2 Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — ep666 will notify registered players via their registered email address or through a prominent notice on the Platform, with a minimum of seven (7) days' advance notice before the changes take effect.

12.3 Your continued use of the ep666 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact our support team to discuss account closure.

12.4 All previous versions of this Privacy Policy are archived and available from the ep666 support team upon written request.

13.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data ep666 holds about you, please use one of the following contact methods:

13.2 When submitting a data rights request, please include your registered email address, your ep666 username, and a clear description of your request. We may need to verify your identity before processing the request to protect against fraudulent data access attempts.

13.3 ep666 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.