1 Who We Are
This Privacy Policy applies to EK 77, operating at ek77.info. EK 77 is an online betting and gaming platform built for Pakistani players, offering cricket betting, PSL betting, live casino games, Teen Patti, Roulette, card games and related services. All transactions on the platform are conducted in Pakistani Rupees (PKR).
For the purposes of data protection, EK 77 is the data controller — meaning we determine what data is collected from you, why it is collected, and how it is processed. This policy applies to all registered account holders and visitors to the ek77.info website. By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.
Questions about this policy can be directed to our support team at the contact details provided in Section 13.
2 What Data We Collect
EK 77 collects data in two main categories: data you provide directly when registering or using your account, and data that is collected automatically as a result of your use of the platform.
2.1 Data You Provide Directly
| Data Type | When Collected | Purpose |
|---|---|---|
| Pakistani mobile number | Registration | Account identification, OTP authentication, transaction SMS |
| Full name | Registration / KYC | Identity verification, withdrawal matching |
| Date of birth | Registration | Age verification (18+ requirement) |
| CNIC number | KYC verification | Identity verification before high-value withdrawals |
| Payment method details | Deposit / withdrawal | Processing PKR transactions, withdrawal validation |
| Support communications | When you contact support | Resolving account issues, quality assurance |
2.2 Data Collected Automatically
- Device information: Device type, operating system version, screen resolution and browser type collected when you access EK 77 from any device.
- IP address: Your IP address at the time of login and during active sessions, used for fraud detection and geographic eligibility verification.
- Session data: Login timestamps, session duration, pages visited within the platform, and features interacted with during each session.
- Betting and gaming history: A full record of bets placed, games played, stakes, outcomes and transaction amounts across your entire account history.
- Cookie data: Information stored by cookies and similar tracking technologies — described in detail in Section 6.
3 How We Collect Your Data
EK 77 collects data through the following channels:
- Account registration form: When you sign up at ek77.info using your mobile number and personal details.
- Login and session activity: Every time you log in to your EK 77 account, session data is recorded automatically.
- Deposit and withdrawal transactions: Payment data is collected when you initiate any financial transaction on the platform, including deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card.
- KYC verification process: When EK 77 requests identity verification — typically before a large withdrawal or following a manual review — you provide documents including CNIC images, which are processed by our verification team.
- Platform activity tracking: Automated systems log your interactions with the betting interface, live casino lobby, and account settings pages.
- Support interactions: Messages sent via live chat or email to support@ek77.info are recorded and stored as part of your account record.
4 Why We Use Your Data
Every piece of data EK 77 collects has a specific operational or legal purpose. We do not collect data "just in case" — the following table maps each category of data use to its justification:
Account Operation
Your mobile number, name and account history are used to operate your EK 77 account — logging you in securely, displaying your balance, processing your bets, and showing your transaction history. Without this data, the platform simply cannot function for your account.
Payment Processing
Your payment method details — Easypaisa wallet number, JazzCash number, IBFT bank account, or card information — are used exclusively to process deposits you initiate and withdrawals you request. EK 77 does not charge your payment method without your explicit instruction to deposit.
Identity Verification
EK 77 is required to verify the identity of account holders to comply with applicable regulations around financial transactions and to meet the age verification obligation. CNIC data collected during KYC is used for identity matching only and is stored with enhanced encryption separate from general account data.
Fraud Detection and Platform Security
IP addresses, device fingerprints, session patterns and betting history are analysed by EK 77's security systems to detect unusual activity patterns that may indicate fraud, multi-accounting, bonus abuse or other conduct prohibited under the Terms and Conditions. This analysis is automated and does not result in any action against your account unless a manual review by the EK 77 security team confirms a violation.
Platform Improvement
Anonymised and aggregated session and usage data helps the EK 77 product team understand which features are used most, which pages load slowly, and where the platform experience can be improved. This analysis does not involve identifying individual players — it works at the level of aggregated patterns across the full user base.
Responsible Gaming Monitoring
Betting history and session data are used by EK 77's responsible gaming systems to identify players who may be showing indicators of problem gambling — such as significantly increased bet frequency, extended unbroken session durations, or patterns consistent with chasing losses. If these indicators are detected, EK 77 may proactively reach out to the player. This monitoring exists to protect players, not to restrict their account.
EK 77 does not use your personal data for any form of automated decision-making that has a legal or significantly material effect on your account without human review. Account restrictions resulting from fraud detection are always reviewed by a member of the EK 77 security team before any action is taken.
5 Payment Data & PKR Transactions
Because EK 77 operates entirely in Pakistani Rupees and uses local payment methods, understanding how payment data is handled is particularly relevant for Pakistani players.
5.1 What Payment Data EK 77 Stores
EK 77 stores the following payment-related data: the payment method type used (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card), the wallet number or masked card number associated with each transaction, transaction reference numbers, transaction amounts in PKR, and timestamps. Full card numbers and CVV codes are never stored by EK 77 — card transactions are processed through a PCI-DSS compliant payment gateway and EK 77 receives only tokenised references.
5.2 Withdrawal Verification
Before processing a withdrawal, EK 77 verifies that the withdrawal destination (wallet number, bank account, or card) is registered in the same name as the EK 77 account. This verification step requires comparing the name on your payment account with the name registered on your EK 77 account. This name comparison data is processed at the time of withdrawal and is not retained beyond what is needed for the transaction record.
5.3 Third-Party Payment Processors
Deposits and withdrawals are processed via the APIs of third-party payment providers — Easypaisa, JazzCash, NayaPay, SadaPay, and the card processing gateway. These providers receive the minimum data necessary to execute the transaction: the destination wallet or account identifier, the PKR amount, and a transaction reference. EK 77 does not share your full account profile with payment processors — they receive only the transaction-specific data they require.
All payment data transmitted between your device, EK 77's servers, and payment processors is encrypted using TLS 1.2 or higher. Payment pages at EK 77 never load over an unencrypted HTTP connection.
6 Cookies & Device Data
EK 77 uses cookies and similar browser-based storage mechanisms to keep your session active while you are logged in, remember your display preferences, and support the referral tracking system that attributes new registrations to the correct referrer link.
6.1 Types of Cookies EK 77 Uses
- Session cookies: Temporary cookies that keep you logged in while you are using the platform. These expire automatically when you close your browser.
- Preference cookies: Store your in-platform display preferences (such as language or lobby view settings) so you do not need to re-select them on every visit.
- Security cookies: Used to detect and prevent unauthorised access attempts, including CSRF (cross-site request forgery) protection tokens.
- Referral tracking cookies: When you arrive at EK 77 via a referral link, a cookie is stored that records which referral link brought you to the platform. This is used to attribute successful referrals correctly under the Refer a Friend programme. These cookies have a 30-day lifespan.
6.2 Managing Cookies
You can manage or delete cookies through your browser settings at any time. However, be aware that disabling session cookies will prevent you from staying logged in to your EK 77 account, and disabling security cookies may affect the platform's ability to protect your account from unauthorised access.
7 Data Sharing
EK 77 does not sell your personal data. We do not share your data with advertisers, data brokers, or any commercial third party for marketing purposes. The circumstances under which EK 77 may share data with third parties are limited and specific:
7.1 Payment Processors
As described in Section 5.3, transaction-specific data is shared with payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks and card processing gateways) to execute deposits and withdrawals. This sharing is necessary for the financial operation of your account.
7.2 Identity Verification Service Providers
When EK 77 conducts KYC verification, your CNIC data and identity documents may be processed by a third-party identity verification service provider. These providers are contractually bound to process your data only for the purpose of identity verification and are not permitted to use it for any other purpose or retain it beyond the verification transaction.
7.3 Legal and Regulatory Requirements
EK 77 may disclose account data, transaction records, or identity information to government authorities, regulators, or law enforcement agencies when required to do so by applicable law — for example, in response to a lawful court order or regulatory investigation. EK 77 will notify affected account holders of such disclosures where legally permitted to do so.
7.4 Fraud Prevention and Security
Where confirmed fraudulent activity is identified on an EK 77 account — including confirmed multi-accounting, bonus fraud, or money laundering — relevant information may be shared with payment processors to prevent further fraudulent transactions. This sharing is limited to the minimum data necessary to prevent the specific fraudulent activity identified.
7.5 No International Data Transfers Without Safeguards
EK 77 stores primary account data on servers accessible from Pakistan. If any data processing requires transfer to systems outside Pakistan, EK 77 ensures that appropriate contractual safeguards are in place with the receiving party to ensure your data receives an equivalent level of protection to that described in this policy.
8 Data Retention
EK 77 retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods for different data categories are as follows:
- Account registration data (name, mobile number, date of birth): Retained for the lifetime of your account and for five years after account closure, to meet regulatory and legal record-keeping requirements.
- Transaction records (all PKR deposits, withdrawals, bets and game results): Retained for seven years from the date of the transaction, in accordance with financial record-keeping obligations.
- KYC documents (CNIC images, identity verification records): Retained for five years after the verification is completed or after account closure, whichever is later.
- Support communications: Retained for three years from the date of the communication, or for the duration of any unresolved dispute arising from that communication.
- Session and activity logs: Retained for 12 months from the date of the session, then anonymised for aggregate analysis or deleted.
- Cookie data: Session cookies are deleted when you close your browser. Referral cookies expire after 30 days. Preference cookies are retained until you clear your browser storage.
When the applicable retention period expires, data is securely deleted from EK 77's systems in a manner that makes recovery of the deleted data infeasible.
9 Your Rights as an EK 77 Account Holder
As a player at EK 77, you have the following rights with respect to your personal data. You can exercise any of these rights by contacting support at the details in Section 13.
Right to Access
You can request a copy of all personal data EK 77 holds about your account. We will provide this within 14 days of receiving your verified request, in a readable format.
Right to Correct
If any data EK 77 holds about you is inaccurate — for example, a name spelling error or an outdated mobile number — you have the right to request a correction. Contact support with the correct details and supporting documentation if required.
Right to Deletion
You can request deletion of your EK 77 account and associated personal data. Note that data subject to legal retention obligations (transaction records, KYC documents) must be retained for the periods described in Section 8 regardless of a deletion request.
Right to Object
You can object to EK 77 processing your data for purposes beyond the direct operation of your account — for example, if you do not wish your activity data to be used in aggregate platform improvement analysis.
Right to Portability
You can request your account data in a structured, machine-readable format (such as JSON or CSV) for the purpose of transferring it to another service. This applies to data you have provided directly — not to inferred or derived data.
Right to Restrict Processing
While a dispute about the accuracy of your data or the lawfulness of its processing is being resolved, you can request that EK 77 restrict processing of the affected data — meaning it is stored but not actively used until the dispute is settled.
10 Data Security
EK 77 applies the following technical and organisational security measures to protect your personal data:
- TLS encryption in transit: All data transmitted between your device and EK 77's servers — including login credentials, deposit instructions and personal data — is encrypted using TLS 1.2 or higher. The platform does not load over unencrypted HTTP connections.
- Encryption at rest: Personal data stored in EK 77's databases is encrypted at rest. KYC documents and payment data are stored with enhanced field-level encryption.
- Access controls: Internal access to personal data is restricted to staff with a documented need to access it for their role. All internal access is logged and subject to periodic audit.
- Two-factor authentication: EK 77 supports OTP-based authentication on your account. Enabling this adds a layer of protection even if your password is compromised.
- Penetration testing: EK 77's platform infrastructure undergoes regular penetration testing to identify and remediate security vulnerabilities before they can be exploited.
- Incident response: In the event of a data breach that affects player personal data, EK 77 will notify affected account holders via their registered mobile number within a reasonable period of confirming the breach, and will describe the nature of the data affected and the steps taken to contain it.
No online platform can guarantee absolute security against all possible threats. While EK 77 applies robust technical measures, you also play a role in protecting your account by keeping your password confidential, not sharing your OTP codes with anyone, and using a secure and private internet connection when accessing your account.
11 Children's Privacy
EK 77 is strictly for users aged 18 and above. The platform does not knowingly collect personal data from individuals under 18. If EK 77 becomes aware that an account has been registered by a person under 18, that account will be closed immediately and all associated data will be deleted, with the exception of records required to be retained for legal and regulatory purposes.
If you are a parent or guardian and believe a minor has registered an account at EK 77, please contact support immediately at support@ek77.info with details of the account so we can investigate and take appropriate action.
12 Changes to This Privacy Policy
EK 77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we provide. When material changes are made, we will notify registered account holders via SMS to their registered Pakistani mobile number and will display a prominent notice on the platform when they next log in.
The updated policy will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of your EK 77 account after a notified policy change constitutes acceptance of the updated Privacy Policy. If you do not agree with a material change, you should contact support to close your account before the change takes effect.
13 Contact Us About Privacy
For any question, request or concern related to this Privacy Policy or the data EK 77 holds about your account, contact our support team:
Email: support@ek77.info
Response time: Within 2 business days for data rights requests
Languages: English and Urdu
When submitting a data access or deletion request, please include your registered Pakistani mobile number and the nature of your request so our team can locate your account and process the request efficiently. You may be asked to verify your identity before we action a data request — this is to protect your account from third-party interference.
For concerns about how EK 77 handles your personal data that are not resolved through direct contact with our support team, you may raise a complaint with the relevant regulatory authority in your jurisdiction.