ed777 Privacy Policy

1 Introduction & Data Controller

This Privacy Policy ("Policy") is issued by ed777 ("ed777", "we", "us", "our"), the internationally licensed online gaming operator accessible at ed777.bio. This Policy describes how ed777 collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use our platform, whether via the ed777.bio website or any associated mobile application.

ed777 acts as the data controller in respect of personal data collected from players registered on the platform. As data controller, ed777 is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection principles and our international gaming licence obligations.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and ed777.

2 Categories of Personal Data We Collect

ed777 collects personal data across the following categories, consistent with the data minimisation principle — meaning we collect only what is genuinely necessary for the stated purposes:

• Identity Data: Full legal name, date of birth, CNIC or passport number, nationality, and identity document photographs where required for KYC verification.
• Contact Data: Pakistani mobile number, email address, and city or region of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi).
• Financial Data: Deposit and withdrawal amounts, transaction timestamps, payment method identifiers (such as your JazzCash or EasyPaisa mobile number, or the last four digits of a linked bank account), and aggregate balance history.
• Gaming Activity Data: Sports bets placed (including cricket, PSL, E-Sports markets), casino game sessions, slot game history, win and loss records, session durations, and responsible gaming tool settings.
• Technical Data: IP address, device type, operating system, browser type and version, device identifiers, session tokens, and geolocation data (city-level only, used for compliance purposes).
• Usage Data: Pages and features accessed within the ed777 platform, time spent on each section, navigation paths, and feature interaction patterns.
• Communications Data: Content of support tickets, live chat transcripts, and emails you send to the ed777 support team.
• Marketing Preferences: Your consent status for promotional communications, preferred contact channel, and your engagement with promotional messages (open rates, click rates).

ed777 does not knowingly collect or process special category personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) except where explicitly required for responsible gaming assessments, in which case your express consent will be sought in advance.

3 How We Collect Your Data

ed777 collects personal data through the following channels:

• Direct Submission: Data you provide when registering your ed777 account, completing KYC verification, making deposits or withdrawals, contacting support, or filling in any form on the platform.
• Automated Technologies: Data collected automatically when you use the ed777 website or mobile application, including cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Payment Processors: Transaction confirmation data received from payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast when you make a deposit or request a withdrawal.
• KYC & Identity Verification Services: Where we use a third-party identity verification provider to authenticate your CNIC or passport, that provider may return verification status and document validity data to ed777.
• Fraud Prevention Services: Third-party fraud detection tools may provide risk scoring data associated with your account activity, IP address, or device fingerprint.

4 Legal Basis for Processing

ed777 processes your personal data only where a lawful basis exists under applicable data protection law. The legal bases we rely on are:

• Contractual Necessity: Processing required to perform the contract between you and ed777 — i.e., to operate your account, process deposits and withdrawals, settle bets, and provide the gaming services you have signed up for.
• Legal Obligation: Processing required for ed777 to comply with its obligations under applicable gaming licence conditions, anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and financial record-keeping standards.
• Legitimate Interests: Processing necessary for ed777's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided such interests are not overridden by your own data protection rights.
• Consent: Processing activities for which ed777 relies on your freely given, specific, and informed consent — most notably direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Personal Data

ed777 uses collected personal data for the following specific purposes:

• Creating and managing your ed777 account, including verifying your identity and age (21+) during registration.
• Processing deposits and withdrawals via Pakistani payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, USDT TRC20, and Retail Cash.
• Delivering the gaming services you have requested, including sports betting markets, live casino, slot games, and fishing games.
• Detecting and preventing fraud, money laundering, multiple account abuse, underage gambling, and other prohibited conduct as defined in our Terms & Conditions.
• Complying with our AML, KYC, and responsible gaming obligations under our international gaming licence.
• Monitoring your gaming activity to identify indicators of problem gambling and, where appropriate, proactively applying responsible gaming tools in accordance with our Responsible Gaming Policy.
• Responding to support requests, complaints, and data rights exercises.
• Sending you transactional communications (account notifications, deposit confirmations, withdrawal updates) which are necessary for service delivery and cannot be opted out of while your account is active.
• Sending promotional communications — including bonus offers, PSL betting promotions, and new game announcements — only where you have given your prior consent and only until you withdraw that consent.
• Analysing aggregate usage patterns to improve the performance, reliability, and user experience of the ed777 platform.

6 Data Sharing & Disclosure

ed777 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share financial data with your chosen payment provider (e.g., JazzCash, EasyPaisa, HBL) solely to the extent necessary to process your transaction. These providers act as independent data controllers for their own processing activities.
• KYC & Identity Verification Providers: Where a third-party identity verification service is used to authenticate your CNIC or passport, we share necessary identity document data with that provider under a strict data processing agreement.
• Fraud Detection & Security Services: We may share technical data (IP address, device fingerprint) with trusted fraud prevention service providers to protect the platform and our players from fraud and abuse.
• Regulatory & Legal Authorities: ed777 will disclose personal data to relevant gaming regulators, financial intelligence units, law enforcement agencies, or courts where required to do so by law, court order, or binding regulatory directive. ed777 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ed777's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and your data protection rights will be maintained.

All third-party service providers who process personal data on behalf of ed777 are required to enter into data processing agreements confirming that they will process your data only for the purposes specified, maintain appropriate security standards, and not share your data with any further parties without authorisation.

7 Cookies & Tracking Technologies

ed777 uses cookies and similar tracking technologies on the ed777.bio website and mobile application. Cookies are small text files placed on your device that help the platform function correctly and allow us to understand how players use our services.

The categories of cookies used by ed777 are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your ed777 account and security tokens that protect against CSRF attacks. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display, and responsible gaming settings. Disabling these may affect your experience.
• Analytics Cookies: Collect anonymised data about how players navigate and use the platform (pages visited, features used, session duration). This data is used in aggregate to improve the ed777 platform and is never used to identify individual users without their consent.
• Security & Fraud Prevention Cookies: Used to identify unusual or suspicious activity, detect multiple accounts from the same device, and protect the platform from automated abuse. These are necessary for platform integrity.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use the ed777 platform. Analytics and functional cookies can be disabled without affecting core platform functionality.

8 Data Security

ed777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ed777 servers is encrypted using industry-standard 256-bit SSL/TLS protocols — the same encryption standard used by major international financial institutions.
• Encrypted Data Storage: Sensitive personal data fields (including identity document details and payment information) are stored in encrypted form within ed777's secure database infrastructure.
• Access Controls: Access to personal data within ed777 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason to access specific data categories are granted access, and all access is logged and audited.
• Multi-Factor Authentication: Internal system access for ed777 staff handling player data requires multi-factor authentication. We also strongly encourage players to enable any available two-factor authentication on their own ed777 accounts.
• Regular Security Assessments: ed777's security infrastructure is subject to regular internal reviews and periodic external penetration testing to identify and remediate vulnerabilities before they can be exploited.

While ed777 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. If you suspect that your ed777 account has been compromised, contact our support team at [email protected] immediately.

9 Data Retention

ed777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and gaming licence obligations. Our general retention guidelines are as follows:

• Active Account Data: Retained for the full duration of your ed777 account being active and for a period of up to 5 years following account closure, in compliance with standard gaming licence record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction in accordance with standard AML and financial compliance obligations.
• KYC Identity Documents: Retained for the period required under our gaming licence — typically 5 years from account closure — and then securely deleted or destroyed.
• Support Communications: Retained for up to 3 years from the date of the last interaction, for quality assurance and regulatory purposes.
• Marketing Data: Retained until you withdraw your marketing consent, at which point your marketing preferences are updated immediately and promotional communications cease. Aggregate anonymised marketing analytics data may be retained indefinitely.
• Technical & Log Data: Typically retained for 12–24 months for security monitoring and fraud prevention purposes, then deleted or anonymised.

When retention periods expire, ed777 will securely delete, destroy, or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

10 International Data Transfers

ed777 is an internationally licensed online gaming operator and, as such, some of the personal data we collect may be processed or stored on servers located outside of Pakistan. When transferring personal data across international borders, ed777 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.

Safeguards used for international transfers may include:

• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Data processing agreements incorporating internationally recognised standard contractual clauses governing the processing of personal data by recipient parties.
• Binding corporate rules or equivalent measures where data is transferred to affiliated entities within the ed777 group.

If you have questions about international transfers of your personal data, or wish to obtain a copy of the safeguards in place, please contact us at [email protected].

11 Children & Minors

The ed777 platform is strictly for adults aged 21 and above. ed777 does not knowingly collect or process personal data relating to individuals under the age of 21. Our registration process includes mandatory age verification steps designed to prevent underage access.

If ed777 discovers or has reason to believe that a player is under the age of 21, we will immediately suspend the relevant account, conduct a KYC review, and if confirmed, permanently close the account and return any funds deposited in accordance with our Terms & Conditions. All gaming activity conducted during the period of underage access will be voided.

If you are a parent or guardian and believe your child has registered an account on ed777, please contact our support team immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all such reports as a matter of priority.

12 Third-Party Services & Links

The ed777 platform may reference or integrate with third-party services such as payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast) and identity verification providers. These third-party services operate under their own independent privacy policies and data protection practices, for which ed777 is not responsible.

When you interact with a third-party payment provider to make a deposit or withdrawal, your interaction with that provider is governed by the provider's own terms and privacy policy. ed777 recommends that you review the privacy policies of any third-party services you use in connection with your ed777 account.

ed777 does not control and is not responsible for the privacy practices of third-party websites or services that may be referenced in player communications or promotional materials. This Privacy Policy applies solely to data collected and processed by ed777 through the ed777.bio platform.

13 Your Data Rights in Detail

As an ed777 player, you are entitled to exercise the following data rights at any time. All requests should be directed to [email protected] with the subject line "Data Rights Request":

• Right of Access (Subject Access Request): You may request a full copy of all personal data ed777 holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request. We may request identity verification before fulfilling a subject access request to protect your data from unauthorised disclosure.
• Right to Rectification: If any personal data ed777 holds about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as a misspelled city name) can often be handled directly through account settings. Corrections to identity data may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is subject to ed777's legal obligation to retain certain data under gaming licence and AML regulations. Where we cannot fulfil an erasure request in full, we will explain which data must be retained and why.
• Right to Restriction of Processing: You may request that ed777 pause the active processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format (such as JSON or CSV) for the purpose of transferring it to another service provider. This right applies to data processed on the basis of your consent or contractual necessity.
• Right to Object: You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, ed777 will cease all direct marketing communications immediately. You may also object to processing based on legitimate interests, in which case ed777 will assess whether its interests override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal. To withdraw marketing consent, you may update your preferences in your account settings or contact support.

ed777 will not charge a fee for exercising any data right and will not discriminate against players who choose to exercise their rights. We aim to resolve all data rights requests within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

14 Updates to This Privacy Policy

ed777 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, gaming licence requirements, or the services we offer. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to it — ed777 will notify registered players via email to the address on file and/or via a prominent notice on the ed777.bio platform at least 14 days before the changes take effect. Continued use of the ed777 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically. If you have any concerns about changes to our privacy practices, please contact us at [email protected] before the effective date of any revision.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data ed777 holds about you, or how we handle data privacy, please contact our dedicated data protection support team using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Privacy Concerns: "Privacy Policy Enquiry"
• Response Time: ed777 aims to acknowledge all privacy-related enquiries within 5 business days (Monday to Saturday, Pakistan Standard Time) and to resolve them within 30 calendar days.

ed777 is committed to handling all privacy enquiries with transparency, respect, and professionalism. We take every data protection concern seriously and will keep you informed throughout the resolution process.