EF77 Privacy Policy – How We Protect Your Personal Data

1. Introduction

This Privacy Policy applies to all services operated by EF77 at ef77.click, including sports betting, online casino, Teen Patti, Ludo Games, jackpot slots, the VIP Club, and the Refer a Friend programme. When we say "EF77", "we", "us", or "our" in this document, we mean the entity that operates ef77.click and processes your personal data as described below.

By creating an account on EF77 or by using any part of the EF77 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how EF77 handles your personal data, you should not use the platform and should contact us to close your account and request data deletion.

This Policy works alongside EF77's Terms and Conditions and Responsible Gaming Policy. Where those documents involve personal data handling – for example, identity verification or self-exclusion records – this Privacy Policy explains the data dimension of those processes.

2. Data Controller

EF77 acts as the data controller for all personal data collected through the ef77.click platform and its related services. As the data controller, EF77 determines the purposes for which your personal data is collected and the ways in which it is processed.

If you have any questions or concerns about how EF77 handles your data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you can contact EF77's data team at support@ef77.click. We aim to respond to all data-related queries within 5 working days.

3. What Personal Data EF77 Collects

EF77 collects the minimum data necessary to provide a safe, legal, and properly functioning gaming service. The categories of personal data we collect are described below.

3.1 Registration Data

When you create an EF77 account, we collect: your full legal name, Pakistani mobile number, date of birth, a password (stored in hashed form only – we never see your actual password), and in some cases your email address. This data is mandatory to create an account.

3.2 Identity Verification Data (KYC)

EF77 may request identity verification documents at any point, particularly before processing large withdrawals or when required by our fraud prevention processes. KYC data may include a copy of your CNIC (Computerised National Identity Card), a selfie photograph, proof of address, and proof of payment method ownership. This data is processed and stored with heightened security measures.

3.3 Financial Transaction Data

EF77 records all deposits, withdrawals, and in-platform wagers associated with your account. This includes transaction amounts in PKR, timestamps, payment method identifiers (such as Easypaisa or JazzCash account references), and transaction status records. EF77 does not store full payment card numbers – card processing is handled by PCI-DSS compliant third-party processors who store card data on our behalf.

3.4 Gaming Activity Data

EF77 records your gaming activity on the platform, including bets placed, games played, tournament participation, session durations, and outcomes. This data is used for account management, dispute resolution, responsible gaming monitoring, and product improvement.

3.5 Technical and Device Data

EF77 automatically collects certain technical data when you access the platform, including: IP address, device type, operating system, browser type and version, mobile network operator, and session timestamps. This data helps us detect fraud, ensure platform security, and optimise the EF77 experience for Pakistani mobile users.

3.6 Communications Data

If you contact EF77 support via live chat, email, or any other channel, we retain records of those communications. This allows us to provide consistent, accountable support and to resolve disputes with reference to prior communications.

4. How EF77 Collects Your Data

EF77 collects your personal data through three main channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion on EF77.
• Automatically: When you use the EF77 platform, technical data such as your IP address, device information, and session activity is collected automatically via cookies, server logs, and similar technologies as described in Section 10.
• From third parties: EF77 may receive data about you from payment processors (transaction confirmation data), identity verification providers (KYC results), fraud prevention services (risk signals), and, where applicable, from partners operating EF77's affiliate or referral programmes.

5. Why EF77 Uses Your Personal Data

EF77 uses your personal data only for the purposes listed below. We do not use your data for purposes incompatible with those listed here without first obtaining your consent.

6. Legal Basis for Processing

EF77 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to create and manage your EF77 account and to deliver the services you've requested – including processing transactions and resolving disputes.
• Legal obligation: Processing necessary to comply with applicable law, including anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations, and cooperation with law enforcement agencies.
• Legitimate interests: Processing necessary for EF77's legitimate business interests where those interests are not overridden by your data protection rights – including fraud prevention, platform security, responsible gaming monitoring, and service improvement.
• Consent: For marketing communications and for certain cookie usage. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

7. Who EF77 Shares Your Data With

EF77 does not sell your personal data to third parties. EF77 does not share your personal data for third-party marketing purposes. Data is shared with third parties only in the following circumstances and only to the extent necessary:

7.1 Payment Processors

EF77 shares transaction data with payment service providers including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank partners, and card processing networks (Visa/Mastercard) to execute deposits and withdrawals. These providers process your data under their own privacy policies and are contractually required by EF77 to maintain appropriate security measures.

7.2 Identity Verification Providers

When KYC verification is required, EF77 shares relevant personal data (such as CNIC details and selfie images) with our identity verification partner to conduct automated and manual document checks. Verification providers are contractually bound to process this data solely for the purpose of providing verification services to EF77.

7.3 Fraud and Security Services

EF77 uses third-party fraud prevention and cybersecurity services that may receive technical data such as IP addresses, device fingerprints, and behavioural data to identify and prevent fraudulent activity. These services act as data processors under EF77's instruction.

7.4 Legal and Regulatory Authorities

EF77 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to lawful requests, legal proceedings, or legal obligations. EF77 will notify affected players of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of EF77's business, player data may be transferred to the acquiring entity as part of that transaction. EF77 will notify affected players before their data is transferred and becomes subject to a different privacy policy.

8. How Long EF77 Retains Your Data

EF77 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account data: Retained for the duration of your EF77 account and for 5 years after account closure, to comply with AML recordkeeping requirements.
• KYC and identity documents: Retained for 5 years from the date of verification, in line with standard financial services compliance requirements.
• Financial transaction records: Retained for 7 years from the date of each transaction, in line with financial recordkeeping best practices.
• Gaming activity logs: Retained for 5 years to support dispute resolution, responsible gaming analysis, and fraud investigations.
• Support communications: Retained for 3 years from the date of the last interaction.
• Technical and device data: Retained for 2 years, after which it is anonymised or deleted.
• Self-exclusion records: Retained indefinitely to ensure re-registration restrictions are properly enforced.

When the relevant retention period expires, EF77 securely deletes or anonymises your personal data. Anonymised data (from which you cannot be identified) may be retained for statistical and analytical purposes without time limit.

9. How EF77 Protects Your Data

EF77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to:

• Encryption in transit: All data transmitted between your device and EF77's servers is encrypted using TLS (Transport Layer Security) 1.2 or higher. The padlock icon in your browser confirms this encryption is active.
• Encryption at rest: Sensitive data stored on EF77's servers – including KYC documents and financial records – is encrypted using AES-256 encryption.
• Password hashing: EF77 never stores your password in plain text. Passwords are hashed using a strong one-way hashing algorithm before storage. Even EF77 staff cannot see your password.
• Access controls: Access to personal data within EF77 is restricted to staff members who require it to perform their job functions. Access is logged and audited regularly.
• Two-factor authentication: EF77 supports optional two-factor authentication (2FA) for player accounts. We strongly encourage all Pakistani players to enable 2FA in their account security settings.
• Regular security audits: EF77's infrastructure and applications undergo regular independent security audits and penetration testing.
• Breach response procedures: EF77 maintains a data breach response plan. In the event of a breach affecting player data, EF77 will notify affected players within 72 hours of becoming aware of the breach and will take immediate steps to contain and remediate it.

10. Cookies & Tracking Technologies

EF77 uses cookies and similar tracking technologies to make the platform function properly, to improve your experience, and to understand how Pakistani players use EF77. A cookie is a small text file placed on your device when you visit a website. EF77 uses the following categories of cookies:

10.1 Strictly Necessary Cookies

These cookies are essential for EF77 to function. They handle your login session, security tokens, and platform functionality. These cookies cannot be disabled without breaking the EF77 service. No consent is required for strictly necessary cookies.

10.2 Performance & Analytics Cookies

EF77 uses analytics cookies to understand how players navigate and use the platform. This data is aggregated and anonymised and is used solely to improve EF77's product and performance. Analytics cookies are set only with your consent.

10.3 Fraud Prevention Cookies

Certain cookies support EF77's fraud detection systems by maintaining a device fingerprint that helps identify unusual access patterns. These cookies are part of EF77's security infrastructure.

10.4 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect your ability to use EF77 properly. If you clear your browser cookies, your preferences will be reset and you may need to log in again.

11. Your Data Rights

As an EF77 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact EF77 at support@ef77.click. EF77 will respond within 5 working days and will complete the requested action within 30 days.

EF77 will never discriminate against you for exercising any of these rights. Exercising your rights will not affect the quality of service you receive from EF77.

12. Marketing Communications

EF77 will only send you marketing communications (such as promotional offers, bonus notifications, and new game announcements) if you have given your consent during registration or subsequently opted in through your account settings.

You can withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your EF77 account settings
• Clicking the unsubscribe link in any EF77 marketing email
• Contacting EF77 support via live chat or at support@ef77.click and requesting removal from marketing lists

Opting out of marketing communications will not affect service notifications – EF77 will still send you transaction confirmations, security alerts, and other essential account communications regardless of your marketing preferences.

13. Minors

EF77 is a real-money gaming platform. The platform is strictly for individuals aged 18 and above. EF77 does not knowingly collect personal data from anyone under the age of 18.

If EF77 discovers or has reasonable grounds to believe that personal data has been collected from a player under the age of 18, the relevant account will be immediately suspended, all data collected will be deleted (subject only to legal obligations that require retention), and deposited funds will be returned to the originating payment method.

If you are a parent or guardian and believe that your child has registered an account on EF77, please contact us immediately at support@ef77.click. EF77 will investigate and respond within 24 hours.

14. Changes to This Privacy Policy

EF77 may update this Privacy Policy from time to time as our services, legal obligations, or data processing practices change. When material changes are made, EF77 will notify registered players via their registered email address or via a prominent notice on the EF77 platform, giving at least 7 days' notice before the updated Policy takes effect.

Minor changes – such as clarifications or formatting corrections – may be made without prior notice. The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how EF77 protects your personal data.

Continuing to use EF77 after an update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you should stop using EF77 and contact us to close your account and request data deletion.

15. Contact EF77 About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or how EF77 handles your personal data, please contact us through any of the following channels. All privacy-related requests are handled by EF77's dedicated data team.

For full details of your rights as a player, see our Terms and Conditions. For responsible gaming support, visit our Responsible Gaming page. Common questions are answered on our FAQ page.