es777 Privacy Policy —
How We Protect Your Personal Data

es777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who interacts with our platform. This Privacy Policy applies to all personal data collected through the es777 website at es777.bio, the mobile-optimised web platform, and any associated communication channels including email, live chat, and support interactions.

This policy covers:

• What categories of personal data es777 collects from players and prospective players;
• The purposes for which that data is collected and processed;
• The legal basis upon which processing is carried out;
• How and with whom data may be shared;
• How long data is retained and the security measures applied;
• The rights you have in relation to your personal data and how to exercise them.

This policy applies to all registered es777 players, regardless of the city or region within Pakistan from which they access the platform — including players from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other locations. By continuing to use es777's services, you confirm your agreement to the practices described in this policy.

For the purposes of data protection law and this Privacy Policy, the data controller responsible for the personal data of es777 players is the licensed entity operating the es777 platform under its international gaming licence.

The data controller is responsible for determining the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out in compliance with applicable data protection obligations under the terms of its international gaming licence and associated regulatory requirements.

For all data protection enquiries, correction requests, deletion requests, and privacy complaints, players should contact es777 through the channels specified in Section 13 of this policy. We will acknowledge all data-related requests within 48 hours and respond substantively within 30 calendar days.

es777 collects personal data through several mechanisms — directly from you when you register, deposit, or contact support; automatically through your use of the platform; and from third-party payment providers as part of transaction processing. The categories of data we collect are as follows:

es777 does not collect sensitive personal data beyond what is required for KYC and AML compliance (CNIC). es777 does not collect biometric data, health information, political affiliations, or religious beliefs. We do not require players to provide a home address unless specifically requested as part of an enhanced due diligence process.

es777 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed below without obtaining fresh consent where required:

Your identity and contact data are used to create and manage your es777 account, authenticate your identity at login, process deposits and withdrawals, apply bonuses to your account, and communicate account-related information such as transaction confirmations, security alerts, and balance notifications.

CNIC data and associated KYC documentation are processed exclusively to verify your age (confirming you are 21 or older), confirm your identity as the rightful account holder, and fulfil es777's obligations under anti-money laundering (AML) regulations applicable under its international gaming licence. This processing is mandatory — without it, withdrawal requests cannot be processed.

Technical data including IP addresses, login records, and device fingerprints are used to detect and prevent fraudulent account access, identify suspicious transaction patterns, enforce the one-account-per-player policy, and protect the integrity of the platform against abuse including multi-accounting and bonus fraud.

Gaming data — including bet frequency, session duration, deposit patterns, and responsible gaming tool usage — is analysed to identify potential indicators of problematic gambling behaviour. es777 may use this data to proactively apply responsible gaming measures, including account contact, deposit limit suggestions, and platform-initiated cooling-off periods, in good faith for player welfare.

Where you have opted in to receive marketing communications, es777 may use your contact data (mobile number or email) to send promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time by updating your preferences in account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

Aggregated and anonymised gaming and technical data is analysed to improve the es777 platform — including game load performance, mobile interface optimisation, payment processing efficiency, and customer support quality. This processing uses anonymised data that cannot be used to identify individual players.

es777 processes personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the es777 Terms and Conditions — including account creation, payment processing, and service delivery. Without this processing, es777 cannot provide its services to you.
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, and other legal requirements applicable under es777's gaming licence — including identity verification, transaction monitoring, and record retention obligations.
• Legitimate Interests: Processing carried out to protect the security and integrity of the es777 platform, prevent fraud and abuse, and operate responsible gaming monitoring systems. These legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing of data for marketing communications, non-essential cookies, and analytics. Consent is obtained explicitly and can be withdrawn at any time without affecting other processing activities.

es777 shares personal data with carefully selected third-party service providers who process data on our behalf under data processing agreements that impose equivalent data protection obligations. These providers include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency payment processors — who receive the minimum necessary payment data to process your deposit and withdrawal transactions;
• KYC verification providers: Third-party identity verification services that assist in processing CNIC documentation and age verification;
• Game software providers: Certified gaming studios (including Pragmatic Play, NetEnt, and others) who may receive technical data necessary to deliver game functionality — but not personal identity data;
• Customer support software providers: Live chat and ticketing platform providers who facilitate support interactions.

es777 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by law, court order, or our gaming licence conditions — including for AML investigation, fraud reporting, or responses to lawful regulatory enquiries. We will notify affected players of such disclosures where legally permitted to do so.

es777 does not sell, rent, trade, or otherwise transfer personal data to third parties for their own marketing or commercial purposes. This is an absolute prohibition — not subject to exceptions or commercial arrangements.

es777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and — where you have consented — analyse platform usage. The categories of cookies used by es777 are as follows:

You can manage cookie preferences through your browser's settings at any time. Disabling essential cookies will impair your ability to use the es777 platform. For guidance on managing cookies in specific browsers, consult your browser's help documentation.

es777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, or resolve disputes. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained for legal reasons beyond the standard retention period (e.g., in connection with an ongoing investigation or legal dispute), it will be retained until the conclusion of that matter and then deleted promptly.

As an es777 player, you have the following rights in relation to your personal data. These rights are enforceable — you do not need a lawyer to exercise them, and there is no fee for standard requests. Submit any request to the contact channels in Section 13.

To exercise any of these rights, contact es777 via live chat or email (see Section 13). We will verify your identity before processing any request to ensure we do not disclose or delete data in response to fraudulent requests. We will respond within 30 calendar days of receiving a verified request.

es777 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. The specific measures in place include:

• Encryption in transit: All data transmitted between your device and es777's servers is protected by TLS 1.3 (256-bit SSL encryption). This applies to all platform interactions, payment flows, and support communications.
• Encryption at rest: Stored personal data, including KYC documents and payment records, is encrypted at rest using AES-256 encryption on secure servers.
• Access controls: Access to personal data within es777 is strictly limited on a need-to-know basis. Staff with access to personal data undergo background checks and are bound by confidentiality obligations.
• Two-factor authentication: Available to all players for account login; mandatory for internal administrative access to player data systems.
• Security monitoring: Continuous monitoring of login activity, transaction patterns, and system access logs for anomalies and potential security incidents.
• Incident response: In the event of a data breach affecting personal data, es777 will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with applicable obligations.

Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own login credentials and devices, as described in the es777 Terms and Conditions.

The es777 platform is strictly for individuals aged 21 years or older. es777 does not knowingly collect personal data from anyone under the age of 21. Age is verified at the point of registration through self-declaration, and CNIC-based identity verification confirms age before any withdrawal is processed.

If es777 becomes aware that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The account will be suspended and closed;
• Any deposited funds will be returned via the original payment method;
• All personal data associated with the underage account will be deleted;
• No winnings will be paid in respect of the underage account.

If you are a parent or guardian and believe that your child has registered an account with es777, please contact our support team immediately via live chat or email so that appropriate action can be taken without delay.

es777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform services. When material changes are made — changes that materially affect the nature or scope of personal data processing or player rights — we will notify registered players by email to the address on file and/or through a prominent notice displayed on the platform upon next login.

Non-material changes — including clarifications, corrections of typographical errors, or restructuring for readability without changing substance — may be made without individual notification. The "Last Updated" date at the top of this policy reflects the date of the most recent revision.

Your continued use of the es777 platform following notification of a material policy change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should discontinue use of the platform and close your account. Please review this page periodically to stay informed of how es777 is handling your personal data.

For all privacy-related enquiries — including data access requests, correction requests, deletion requests, marketing opt-outs, cookie preference queries, and formal privacy complaints — please contact es777 through the following channels:

• Live Chat (Fastest): 24/7 via your es777 account dashboard. Our support team handles English and Urdu queries. For data requests, specify "Data Request" at the start of your message for routing to the appropriate team.
• Email: [email protected] — plain text, not a clickable link. Use the subject line "Privacy Request" for data-related matters.
• Response Times: Acknowledgement within 48 hours; substantive response within 30 calendar days for formal data rights requests.

When submitting a data-related request, please include your registered mobile number or account identifier, a description of your request, and any relevant dates or specific data categories to enable us to process your request efficiently and accurately.