Privacy Policy — ec999

This Privacy Policy ("Policy") is published by ec999 ("we", "us", "our", "the Platform"), operated at ec999.cam. It describes how we collect, use, store, share and protect personal information about individuals ("you", "User", "Player") who access or use the ec999 platform, including its website, mobile applications, live casino services, sports betting products and any associated features or communications.

By accessing ec999.cam, creating an Account or otherwise using any part of the Platform, you acknowledge that you have read this Policy and understand how your personal data will be processed. If you do not agree with the practices described in this Policy, you must not use the ec999 platform.

This Policy should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and ec999. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

For the purposes of this Policy:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure and deletion.
• "Data Controller" — ec999, as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of ec999 under a contractual data processing agreement.
• "KYC Data" — identity and verification documentation submitted by Players as part of the Know Your Customer process, including government-issued ID and proof of address.
• "Cookies" — small data files placed on your device by the Platform for functional, analytical or preference purposes.
• "Sensitive Personal Data" — data revealing racial or ethnic origin, political opinions, religious beliefs, health information, biometric data or financial account details.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data.

ec999 collects personal data in the following categories, limited to what is necessary for the purposes described in Section 5:

3.1 Registration & Account Data

• Full legal name, date of birth and gender.
• Email address, contact telephone number and residential address.
• Username and securely hashed account password.
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar).

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., CNIC, passport).
• Proof of address documentation (e.g., utility bill, bank statement).
• Source of funds documentation where enhanced due diligence is required.
• Selfie or liveness verification image where required by the verification process.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, amounts and timestamps.
• Payment method identifiers (e.g., masked account numbers, wallet identifiers for services referenced for contextual familiarity such as Easypaisa, JazzCash or Raast — subject to availability).
• Account balance history and bonus transaction records.

3.4 Gameplay & Betting Data

• Game session records, bet amounts, game selections and outcomes.
• Sports betting market selections, stakes and settlement records.
• Platform interaction logs and feature usage patterns.

3.5 Technical & Device Data

• IP address, device type, operating system and browser type.
• Session timestamps, page visit history and click-path data.
• Geolocation data (country/region level) derived from IP address.

3.6 Communications Data

• Records of support chat conversations, email correspondence and feedback submissions.
• Marketing communication preferences and opt-in/opt-out records.

We collect personal data through the following mechanisms:

ec999 processes your personal data for the following defined purposes:

• Account Management: Creating, maintaining and securing your Player account, including password management and session authentication.
• Service Delivery: Enabling access to casino games, sports betting markets, live dealer tables, bonus programmes and all other Platform features.
• Identity Verification (KYC/AML): Verifying your identity and age, conducting anti-money laundering checks and complying with applicable financial crime prevention obligations.
• Payment Processing: Processing deposits, handling withdrawal requests and maintaining transaction records.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, unauthorised account access and Terms breaches.
• Responsible Gambling: Monitoring gameplay patterns to identify risk indicators, enforcing player-set limits and processing self-exclusion requests.
• Customer Support: Handling queries, complaints and support requests through live chat, email and other communication channels.
• Legal & Regulatory Compliance: Meeting record-keeping, reporting and disclosure obligations under applicable law and regulatory requirements.
• Platform Improvement: Aggregated and anonymised analytics to improve platform performance, fix bugs and enhance the user experience.
• Marketing Communications: Sending promotional emails and notifications where you have given explicit consent to receive them, with clear opt-out mechanisms provided in every communication.

All processing of personal data by ec999 is grounded in one or more of the following recognised lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and ec999 — including account creation, payment processing, service delivery and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws — including KYC/AML verification, financial record retention, suspicious activity reporting and age verification.
• Legitimate Interests: Processing where ec999 has a legitimate interest that is not overridden by your interests or fundamental rights — including fraud prevention, platform security, responsible gambling monitoring and aggregated analytics.
• Consent: Processing where you have given clear, specific and informed consent — including marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ec999 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication and security tokens. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Store your preferences — such as language settings, remembered login details (if enabled) and responsible gambling limit display settings.
• Analytics Cookies: Collect aggregated and anonymised data about how users interact with the Platform — including page visit frequency, session duration and feature usage patterns. This data is used solely to improve the Platform and is not linked to individual player identities.
• Marketing Cookies: Used only where you have given explicit consent, to personalise promotional content displayed to you. You may withdraw consent for marketing cookies at any time via your account preferences.

You may manage cookie preferences via your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Disabling analytics or marketing cookies will not affect your ability to use core Platform features.

ec999 does not sell personal data to third parties. We share personal data only in the following defined circumstances:

• Service Providers & Data Processors: Third-party vendors engaged to provide services on our behalf — including identity verification providers, payment processors, cloud infrastructure operators and customer support platforms. All such parties are bound by data processing agreements requiring equivalent data protection standards.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or legitimate regulatory request — including anti-money laundering (AML) reporting obligations and fraud investigations.
• Fraud Prevention Networks: Shared with industry fraud prevention services to identify and prevent fraudulent activity, bonus abuse and money laundering.
• Corporate Transactions: In the event of a merger, acquisition or sale of ec999's business assets, personal data may be transferred to the relevant successor entity, subject to the same data protection commitments set out in this Policy.

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to personal data that ec999 processes about you:

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected] (plain text only — not a clickable link). We will respond to verified requests within 30 calendar days. Identity verification will be required before processing data access or deletion requests.

ec999 will not charge a fee for exercising data rights except in cases of manifestly unfounded or excessive requests, where a reasonable administrative fee may apply.

ec999 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the duration of your account registration plus an additional period to satisfy legal obligations following account closure.
• KYC & Financial Transaction Records: Retained for a minimum of five (5) years following the end of the business relationship, in compliance with anti-money laundering record-keeping requirements. Longer retention may apply where required by specific regulatory obligations.
• Support Correspondence: Retained for a period of up to three (3) years following the resolution of the relevant query or complaint.
• Marketing Consent Records: Retained for a minimum of three (3) years following the date of consent or withdrawal of consent, as evidence of lawful marketing activity.
• Anonymised Analytics Data: May be retained indefinitely, as it no longer constitutes personal data once all identifying information has been removed.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Players wishing to request early deletion should refer to Section 9 of this Policy.

ec999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of personal data at rest using industry-standard algorithms.
• Role-based access controls ensuring that staff can only access personal data necessary for their specific role.
• Multi-factor authentication requirements for internal system access.
• Regular penetration testing and vulnerability assessments by qualified security professionals.
• Automated intrusion detection and threat monitoring systems.
• Incident response procedures with defined notification timelines in the event of a data breach.

ec999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the applicable operator licence jurisdiction.

Age verification is conducted as part of the KYC process, and access to the Platform will be restricted or denied where a user cannot confirm eligibility. Where ec999 discovers that personal data has been collected from a minor, all such data will be permanently deleted and the associated account permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered on ec999, please contact our support team immediately at [email protected] (plain text only — not a clickable link).

ec999 operates globally and may transfer personal data to third-party service providers and Data Processors located in countries outside Pakistan or the Platform's primary operating jurisdiction.

Where such international transfers occur, ec999 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules where applicable to intra-group transfers.
• Transfers to countries or territories recognised as providing an adequate level of data protection.

You may request further information about the specific safeguards applied to any international transfer by contacting our support team.

ec999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, applicable law or regulatory requirements.

Material changes to this Policy will be communicated to registered Players via email or a prominent notice on the Platform prior to the changes taking effect, where reasonably practicable. The "Last reviewed" date displayed at the top of this page reflects the most recent revision.

Your continued use of the ec999 platform following the effective date of any material amendment constitutes your acknowledgement of the updated Policy. If you object to any changes, you should cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the ec999 data protection team:

When submitting a data rights request, please include your registered email address and a clear description of the right you wish to exercise. Identity verification will be required before any data is disclosed or deleted.