ec999 Privacy Policy
Your Data, Handled with Care

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "ec999" / "we" / "us" / "our" refers to the ec999 online casino and sports betting platform, accessible at ec999.vip, including all associated services, mobile interfaces, and support channels.
• "Player" / "you" / "your" refers to any individual who accesses, browses, registers on, or otherwise uses the ec999 platform in any capacity.
• "Personal Data" refers to any information that identifies or could reasonably be used to identify you as an individual, including your name, CNIC number, date of birth, mobile number, email address, financial details, and device identifiers.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" means Know Your Customer — the identity and age verification process that ec999 is required to carry out in accordance with internationally recognised gaming and anti-money laundering standards.
• "AML" means Anti-Money Laundering — the regulatory framework under which ec999 monitors financial transactions to detect and prevent money laundering and related financial crimes.
• "Cookie" refers to a small text file placed on your device by the ec999 platform to enable session management, preference storage, and usage analytics.
• "PKR" refers to Pakistani Rupees, the sole transaction currency used on the ec999 platform.

ec999 collects Personal Data from you in two ways: information you provide directly, and information generated automatically through your use of the platform.

Information you provide directly:

• Full legal name as it appears on your Pakistani CNIC or passport.
• Date of birth (used for mandatory 21+ age verification).
• Residential address in Pakistan.
• Pakistani mobile number registered to your JazzCash or EasyPaisa account, or your HBL, UBL, or Meezan Bank account details.
• Email address, where provided.
• CNIC number or passport number, submitted during KYC verification.
• A selfie or photograph, where requested for identity verification purposes.
• Any information provided voluntarily through correspondence with ec999 support via email or live chat.

Information collected automatically:

ec999 uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed here without your prior consent.

• Account Creation and Management: To register your ec999 account, maintain your player profile, and administer all gaming, betting, and financial activity on the platform.
• Identity and Age Verification (KYC): To verify that you are who you say you are and that you are at least 21 years of age, in compliance with ec999's gaming standards and responsible gaming obligations.
• Payment Processing: To process PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to verify that payment instruments belong to you.
• Fraud Prevention and AML Compliance: To monitor transactions for suspicious activity, identify potentially fraudulent patterns, and comply with internationally recognised anti-money laundering obligations.
• Responsible Gaming: To monitor gameplay for signs of problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off requests submitted by players.
• Customer Support: To respond to your queries, complaints, and requests submitted via [email protected] or live chat, and to maintain records of such correspondence.
• Platform Improvement: To analyse aggregated usage patterns and improve the ec999 platform's performance, user experience, and game selection for Pakistani players.
• Marketing Communications: To send you promotional offers, bonus notifications, and PSL season updates where you have given explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: To comply with any applicable legal obligation, court order, or regulatory requirement to which ec999 is subject under internationally recognised gaming standards.

ec999 processes your Personal Data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing is necessary to fulfil ec999's obligations to you under the Terms & Conditions you agreed to at registration — including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with KYC, AML, and responsible gaming obligations under the internationally recognised gaming standards under which ec999 operates.
• Legitimate Interests: Processing is necessary for ec999's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on consent — such as sending marketing emails or processing optional profile data — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

ec999 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the payment information necessary to process your PKR deposits and withdrawals. These institutions are subject to their own data protection and financial regulatory obligations.
• KYC Verification Partners: Authorised third-party identity verification services may process your CNIC, passport, or selfie data solely for the purpose of completing your ec999 account verification.
• Game and Technology Providers: Software and game content providers who power ec999's casino and sports betting products may receive anonymised or pseudonymised session data for technical and auditing purposes. They do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: ec999 will disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or in connection with AML investigations.
• Business Transfers: In the event that ec999 undergoes a merger, acquisition, or asset sale, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that arise as a result.

ec999 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for as long as required by applicable gaming standards and legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your ec999 account's existence. This includes your profile information, KYC documents, and transaction history.
• Post-Closure Retention: Following account closure, ec999 retains your Personal Data for a minimum of five (5) years to comply with AML record-keeping requirements, resolve any outstanding disputes, and satisfy any regulatory audit requirements.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier. Withdrawal of marketing consent does not trigger deletion of data held on other legal bases.
• Support Correspondence: Retained for a minimum of three (3) years following the date of the correspondence, for dispute resolution and quality assurance purposes.
• Technical and Log Data: Typically retained for up to twelve (12) months, after which it is anonymised or deleted.

When Personal Data is no longer required to be retained, ec999 will either securely delete it or anonymise it in a manner that makes re-identification impossible.

ec999 takes the security of your Personal Data seriously and implements a comprehensive range of technical and organisational security measures to protect it against unauthorised access, loss, destruction, or disclosure.

• 256-Bit SSL Encryption: All data transmitted between your device and ec999 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This includes all login sessions, payment transactions, and account management activities.
• Secure Server Infrastructure: ec999 operates on secured, access-controlled server infrastructure. Physical and network access to servers storing Personal Data is restricted to authorised personnel only.
• Access Controls: Internal access to player Personal Data is role-based and granted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): ec999 offers 2FA for player accounts as an additional layer of protection. While optional, we strongly encourage all Pakistani players to enable 2FA.
• Regular Security Audits: ec999's systems and processes are subject to periodic security reviews and penetration testing to identify and remediate vulnerabilities.
• Data Breach Response: In the unlikely event of a data breach that poses a risk to your rights, ec999 will notify affected players and relevant authorities in accordance with applicable data breach notification standards, without undue delay.

ec999 uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the platform. This section explains what cookies we use and why.

You can manage or disable non-essential cookies through your browser's settings at any time. Please note that disabling functional cookies may affect your experience on ec999 — for example, your session may not be remembered between visits. Disabling strictly necessary cookies will prevent you from logging in to your account.

You have a number of important rights in relation to the Personal Data that ec999 holds about you. These rights are described below. To exercise any of these rights, please contact ec999 at [email protected] with your request. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data ec999 holds about you, including details of how it is being used and on what legal basis.
• Right to Rectification: If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain account details, you can update these directly in your ec999 account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to ec999's legal obligation to retain certain records for AML and gaming compliance purposes.
• Right to Restrict Processing: You have the right to request that ec999 restrict the processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of the data or the lawfulness of processing.
• Right to Data Portability: You have the right to receive the Personal Data you provided to ec999 in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing carried out on the basis of ec999's legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ec999 is strictly an adults-only platform. Access to and use of ec999 is permitted only for individuals who are 21 years of age or older. ec999 does not knowingly collect Personal Data from any person under the age of 21.

If you are a parent or guardian and you believe that a minor in your care has registered on ec999 or provided Personal Data to the platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

ec999 uses automated and manual age verification tools to screen registrations. Providing a false date of birth or using another person's CNIC to bypass age verification is a serious breach of our Terms & Conditions and may constitute criminal fraud under applicable law.

The ec999 platform may, from time to time, contain references to third-party services such as payment processors or game content providers. This Privacy Policy applies solely to Personal Data collected and processed by ec999 directly.

Where you interact with a third-party service — such as completing a JazzCash or EasyPaisa transaction — that third party's own privacy policy and data practices apply. ec999 is not responsible for the privacy practices of third parties and encourages you to review the privacy policies of any third-party services you use in connection with your ec999 account.

ec999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, ec999 will notify registered players by email or by displaying a prominent notice on the platform prior to the changes taking effect.

The "Effective Date" and "Last Reviewed" date at the top of this Privacy Policy will be updated whenever changes are made. Your continued use of the ec999 platform following notification of any changes constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any amendment to this Privacy Policy, you should stop using ec999 and close your account. Any real-money balance in your account at the time of closure will be returned to you via your registered payment method, subject to any outstanding verification requirements.

ec999 maintains an archive of previous versions of this Privacy Policy. You may request a copy of any previous version by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ec999 handles your Personal Data, please contact our support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team.
• Response Time: ec999 aims to acknowledge all privacy-related contacts within 3 business days and to provide a full response within 30 calendar days.
• Identity Verification: To protect your data, ec999 will verify your identity before processing any data access, correction, or deletion request. You will be asked to confirm your registered name, mobile number, and at least one additional piece of account information.
• Language: All privacy correspondence is handled in English. If you need assistance in Urdu, please indicate this in your email and we will do our best to accommodate your request.