Privacy Policy —
How eh777 Handles Your Data

This Privacy Policy ("Policy") sets out the basis on which the eh777 platform ("eh777", "we", "us", "our") collects, processes, stores and shares personal data of individuals ("you", "User", "Data Subject") who register for and use the eh777 online casino and sports betting platform, accessible at eh777.cam.

eh777 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection legislation in the jurisdiction in which the platform operator is licensed. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Services.

By creating an account on eh777 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, you must not use the platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, account details and financial data.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, the operator of the eh777 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of eh777 under a contractual arrangement.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transmission, deletion or destruction.
• "KYC" means Know Your Customer — the identity verification process required before withdrawals are processed.
• "Cookies" means small text files stored on your device by the platform to enable session management, analytics and personalisation.
• "Services" means all products, content and features available on the eh777 platform, including casino games, sportsbook, account management and customer support.

The Data Controller responsible for your Personal Data collected through the eh777 platform is the entity operating the platform under its applicable gaming licence. The platform is operated and administered by the licensed operator, whose registered details are set out in the operator's licensing documentation.

For all privacy-related queries, data rights requests and complaints, please contact the Support team using the contact details provided in Section 16 of this Policy.

eh777 collects Personal Data through various interactions with the platform. The categories of data collected are set out below:

4.1 Account Registration Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Username and password (password stored in encrypted form only)
• Country and city of residence

4.2 Identity Verification (KYC) Data

• Government-issued identification (e.g., CNIC, passport, driving licence) — document number, name, date of birth, photograph
• Proof of address documentation
• Source of funds documentation where requested for AML compliance

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, methods)
• Account balance history
• Payment method identifiers (e.g., masked bank account numbers, wallet identifiers)
• Transaction reference numbers and status records

4.4 Gameplay & Platform Usage Data

• Games played, bet amounts, outcomes, session duration
• Sportsbook wagers — markets selected, odds taken, results
• Bonus and promotion usage records
• Responsible gambling tool settings and activation history

4.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser information
• Cookie identifiers and session tokens
• Access timestamps and platform interaction logs

4.6 Communications Data

• Support chat transcripts and email correspondence
• Responses to surveys or feedback requests (where voluntarily provided)
• Complaint and dispute records

eh777 uses the Personal Data we collect for the specific purposes set out in the table below:

eh777 processes Personal Data only where a lawful basis exists. The principal legal bases relied upon are:

• Contract Performance: Processing is necessary to deliver the Services you have agreed to receive — including account operation, payment processing and customer support.
• Legal Obligation: Processing is required to comply with applicable law — including KYC identity verification, AML obligations, responsible gambling requirements and regulatory reporting.
• Legitimate Interest: Processing serves a legitimate business purpose (such as fraud prevention, platform security and analytics) that is not overridden by your fundamental rights and freedoms.
• Consent: Processing is based on your freely given, specific, informed and unambiguous consent — for example, receiving optional marketing communications. You may withdraw consent at any time by contacting Support or updating your Account preferences.

eh777 does not sell your Personal Data. We may share data with carefully selected third parties only where necessary for the following purposes:

• Payment Processing: Transaction data is shared with payment infrastructure providers to execute deposits and withdrawals. Players in Pakistan may see payment method references such as bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah) and mobile wallet rails (Easypaisa, JazzCash, Raast) in the cashier. These providers act as independent entities under their own terms — no gambling endorsement is implied by their mention.
• KYC & Identity Verification Providers: Specialist third-party KYC platforms process identity documents to verify account eligibility in compliance with our regulatory obligations.
• Game Content Providers: Game studios and sports data providers receive anonymised gameplay metadata necessary to operate their services. No identifiable personal data is shared beyond session authentication tokens.
• Analytics Providers: Aggregated, pseudonymised data is shared with analytics platforms to evaluate platform performance and user experience. No individually identifiable data is shared for analytics purposes.
• Legal and Regulatory Authorities: We may disclose Personal Data to competent courts, regulatory bodies or law enforcement authorities where required by applicable law, court order or regulatory direction, without prior notice to you where legally required.

All third-party processors are engaged under data processing agreements that require them to handle your data securely, lawfully and only for the purposes specified.

eh777 uses cookies and similar tracking technologies to operate the platform and improve your experience. The main categories of cookies used are:

• Strictly Necessary Cookies: Essential for core platform functions including login sessions, security tokens and basket/cashier management. Cannot be disabled without impairing Service functionality.
• Functional Cookies: Remember your preferences — such as language settings and account display options — to improve consistency across sessions.
• Analytics Cookies: Collect pseudonymised data about how users navigate the platform. This helps us understand performance, identify issues and improve features. Analytics data does not identify you personally.
• Security Cookies: Assist with fraud detection, session integrity and protection against automated attacks.

8.1 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the platform or logging in to your Account.

eh777 retains Personal Data only for as long as is necessary for the purposes for which it was collected or as required by applicable law.

• Active Account Data: Retained for the duration of the account relationship and as long as necessary thereafter to fulfil legal obligations.
• KYC and AML Records: Retained for the minimum period required by applicable anti-money laundering legislation in the operator's license jurisdiction (typically a minimum of five years from the end of the customer relationship).
• Transaction Records: Retained in accordance with applicable financial record-keeping requirements.
• Support Communications: Retained for up to two years from the date of last contact, unless subject to an open dispute or regulatory review requiring longer retention.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of previous consent status.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

eh777 implements appropriate technical and organisational measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of stored sensitive data, including identity documents and financial records
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures for detection, containment and notification of data breaches
• Secure credential hashing — plaintext passwords are never stored

While we take all reasonable steps to protect your data, no data transmission over the internet is entirely without risk. You are responsible for maintaining the confidentiality of your Account login credentials and notifying us immediately if you suspect any unauthorised access.

10.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, eh777 will notify affected users without undue delay, in accordance with applicable data protection law requirements.

Personal Data collected by eh777 may be transferred to and processed in countries outside your country of residence, including the operator's licensing jurisdiction and the locations of our third-party service providers. Such transfers are carried out in accordance with applicable data protection requirements and under appropriate safeguards, including standard contractual clauses or equivalent mechanisms, where required.

By using the eh777 platform, you acknowledge and consent to such international transfers of your Personal Data for the purposes described in this Policy.

Subject to applicable data protection law in the operator's license jurisdiction, you have the following rights in relation to your Personal Data:

To exercise any of the above rights, please contact the Support team as described in Section 16. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing a data rights request. In some cases, exemptions under applicable law may mean we cannot fulfil a request — we will explain any such limitation in our response.

The eh777 platform is strictly for adults aged 18 or older (or the higher minimum required by the operator's license jurisdiction). We do not knowingly collect Personal Data from children. Age verification is a mandatory part of the account registration and KYC process.

If we become aware that Personal Data has been submitted by or collected from a person under the minimum age, we will immediately close the Account, delete the data in accordance with applicable legal requirements, and — where legally required — report the matter to the appropriate authority.

If you have reason to believe that a minor has registered an account on eh777, please notify us immediately through the Support channels set out in Section 16.

Players accessing eh777 from Pakistan should be aware of the following:

• Pakistan has enacted the Personal Data Protection Bill and related data privacy regulations. The legal framework governing data protection in Pakistan continues to develop. Users are encouraged to stay informed about their rights under applicable Pakistani data protection law.
• eh777's data processing is governed by the law of the operator's license jurisdiction. This Privacy Policy is provided in compliance with those obligations.
• eh777 is not registered with any Pakistani data protection authority and makes no representation that its operations comply with Pakistani data law. Users access the platform at their own risk and must assess their own compliance obligations.
• Payment method references in this Policy (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are listed as familiar Pakistani payment context only. These providers operate under their own privacy policies and terms of service, which govern any data processing they perform independently of eh777.

eh777 reviews and updates this Privacy Policy periodically to reflect changes in our processing activities, applicable law or platform features. Material changes will be communicated to registered users via the platform interface and/or email to your registered address with reasonable advance notice.

The effective date at the top of this Policy indicates when it was last revised. The current version of this Policy is always accessible on this page. Your continued use of the platform following notification of changes constitutes acceptance of the updated Policy.

We encourage you to review this Policy regularly to stay informed about how we protect your data.

For all privacy-related matters, including data rights requests, concerns about how your data has been handled or questions about this Policy, please contact the eh777 team through the following channels:

• Live Chat: Available 24/7 from within the platform. Select the privacy or data rights category when raising your query.
• Help Centre: Accessible from your Account dashboard for common privacy questions and self-service guidance.
• Email (plain text — not a clickable link): [email protected]

Please include your registered account username and a clear description of your request. Identity verification may be required before we can process certain data rights requests. We aim to acknowledge all privacy requests within a reasonable timeframe and respond in full within the period required by applicable law.