EV777 Privacy Policy – How We Protect Your Personal Data

EV777 collects personal data in two ways: information you provide directly when registering and using the platform, and information collected automatically as you use EV777's services. Below is a complete breakdown of every category of data we collect.

Data you provide directly:

• Identity data: Full legal name, date of birth, gender, and copies of identity documents such as your CNIC (Computerised National Identity Card) when required for account verification.
• Contact data: Email address, phone number and residential address.
• Financial data: Payment method details submitted during deposits or withdrawals, including mobile wallet numbers (JazzCash, Easypaisa, NayaPay, SadaPay), bank account details for IBFT transfers, and bank card details for Visa/Mastercard transactions. Full card numbers are never stored on EV777 servers — they are handled entirely by our certified payment processors.
• Account credentials: Your chosen username and encrypted password. EV777 never stores passwords in plain text.
• Communications data: Any messages you send to EV777 support via live chat, email or other contact channels, including the content of those messages and metadata such as timestamps.

Data collected automatically:

• Technical data: IP address, device type, operating system, browser type and version, and screen resolution. This data is used for security monitoring and to optimise the EV777 experience on your specific device.
• Usage data: Pages visited on EV777, games played, bets placed and settled, session duration, features used and navigation paths within the platform.
• Transaction data: Full history of deposits, withdrawals, bonuses claimed, and gaming results associated with your account.
• Location data: General geographic location derived from your IP address. EV777 does not collect precise GPS location data.
• Cookie and tracking data: As described in Section 6 of this policy.

EV777 uses your personal data only for the purposes listed below. We do not use your data for any other purpose without updating this policy and informing you first.

Where EV777 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental privacy rights. You have the right to object to processing based on legitimate interests — see Section 7 for how to do this.

EV777 does not sell your personal data to any third party. We share your data only with the categories of organisations listed below, and only to the extent necessary to fulfil the stated purpose:

• Payment processors: JazzCash, Easypaisa, NayaPay, SadaPay, IBFT partner banks, and Visa/Mastercard processing networks. These processors receive only the payment data necessary to execute your requested transaction. They are bound by their own regulatory obligations and by contractual data protection requirements imposed by EV777.
• Identity verification providers: Third-party services used to verify CNIC authenticity and conduct age verification checks during account registration or withdrawal requests. These providers receive only the specific documents or data required to complete the verification.
• Fraud prevention and security services: Automated and manual fraud detection systems that analyse transaction patterns and account behaviour. Data shared with these services is used exclusively to protect EV777 members and the platform from fraudulent activity.
• Regulatory and law enforcement authorities: Where required by applicable law, EV777 may disclose account information or transaction records to regulatory bodies or law enforcement agencies. EV777 will notify you of such disclosures where legally permitted to do so.
• Technology and hosting providers: Cloud infrastructure and software service providers that support the operation of EV777's platform. These providers are contractually bound to process data only on EV777's instructions and to apply equivalent security standards.

All third parties with whom EV777 shares personal data are required to maintain the confidentiality and security of that data and to use it only for the specified purpose. EV777 conducts due diligence on all data processing partners before engagement.

EV777 stores all personal data on secure servers protected by multiple layers of technical and organisational security measures. These include:

• TLS (Transport Layer Security) encryption for all data in transit between your device and EV777's servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Hashed password storage using industry-standard cryptographic algorithms. Passwords are never stored in plain text or in reversibly encrypted form.
• Access controls: EV777 staff access to personal data is restricted on a need-to-know basis. All staff with data access undergo background checks and data protection training.
• Intrusion detection systems that monitor server environments for unauthorised access attempts around the clock.
• Regular security audits conducted by independent third-party security professionals.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If EV777 becomes aware of a security breach that puts your personal data at risk, we will notify you within 72 hours of discovery and provide clear information about what data was affected and what steps we are taking to address it.

EV777 retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable legal and regulatory obligations. The table below sets out our standard retention periods by data category:

When the applicable retention period expires, EV777 deletes or anonymises the relevant data so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregated analytics purposes.

EV777 uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how members use the site. Below is a breakdown of the cookie types used:

• Strictly necessary cookies: These are required for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens and load-balancing cookies. No personal data is collected by these cookies beyond what is technically necessary.
• Functional cookies: These remember your preferences — such as your chosen language, last-visited games and notification settings — so that you do not need to re-enter them on each visit. These cookies can be disabled, but doing so will affect your EV777 experience.
• Analytics cookies: EV777 uses anonymised analytics to understand which pages and features are most used, where players encounter difficulty, and how navigation flows can be improved. Analytics data is aggregated and does not identify individual members. You can opt out of analytics cookies through your browser settings.
• No third-party advertising cookies: EV777 does not use third-party advertising cookies or tracking pixels that would follow you across other websites. We do not retarget EV777 members on external platforms using personal data collected on this site.

You can manage cookie preferences through your browser's settings at any time. Blocking strictly necessary cookies will prevent you from logging in to EV777. Blocking other cookie types will not affect core account functionality but may reduce the quality of your experience.

As an EV777 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact EV777 support via email at support@ev777.biz or through the live chat feature. We will respond within 30 days of receiving a verifiable request.

• Right of access: You can request a copy of all personal data EV777 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected. Most account details can be updated directly from your EV777 account settings without needing to contact support.
• Right to erasure: You can request deletion of your personal data. Note that this right is subject to limitations — EV777 is required to retain certain data for legal and regulatory compliance purposes even after an account is closed. Where erasure is not possible for all data, we will explain exactly what data must be retained and why.
• Right to restriction of processing: You can request that we restrict the processing of your data in certain circumstances — for example, while a dispute is being investigated.
• Right to data portability: You can request your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to object: You can object to EV777 processing your data based on legitimate interests, including profiling for responsible gaming purposes. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

EV777 sends marketing communications — including information about new games, bonuses, promotions and platform updates — only to members who have given their explicit consent to receive them. Consent is obtained during the registration process and can be adjusted at any time.

Marketing communications are sent via:

• Email to the address registered on your EV777 account.
• SMS to the phone number registered on your EV777 account.
• Push notifications, if you have enabled them for the EV777 platform on your device.

To opt out of marketing communications at any time:

• Click the unsubscribe link included in any EV777 marketing email.
• Adjust your communication preferences in your EV777 account settings.
• Contact EV777 support via live chat or email and request opt-out.

Opting out of marketing communications does not affect transactional communications — you will continue to receive messages related to your account security, deposits, withdrawals, bonus terms and any responsible gaming notices, as these are necessary for the operation of your account.

Members who have applied for self-exclusion through EV777's responsible gaming tools are automatically removed from all marketing communications lists for the duration of their exclusion period and are not contacted with promotional material.

The EV777 platform may contain links to third-party websites or services in connection with payment processing, game providers or verification services. This Privacy Policy applies only to data collected and processed by EV777 directly. It does not apply to data practices of any third-party website or service that you access via a link from EV777.

EV777 has no control over and accepts no responsibility for the content, privacy policies or practices of any third-party website or service. Before submitting personal data to any external website, you should review that website's privacy policy independently.

The payment processors used by EV777 — including JazzCash, Easypaisa, NayaPay, SadaPay and banking partners — are independent organisations with their own privacy policies. EV777 has contractual data protection agreements with all payment processors but cannot be held responsible for how those processors handle data beyond the scope of those agreements.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to make a complaint about how EV777 has handled your personal data, please contact us using the details below:

• Email: support@ev777.biz
• Live Chat: Available 24/7 on every page of the EV777 platform

When contacting us about a data rights request, please include:

• Your full name as registered on your EV777 account.
• The email address associated with your account.
• A clear description of the right you wish to exercise or the nature of your complaint.
• Any supporting information that would help us locate your data or investigate your concern.

EV777 will acknowledge all data rights requests within 3 business days and provide a full response within 30 calendar days. For complex requests, the response period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

This Privacy Policy was last reviewed and updated in July 2025. We review this policy at least annually and whenever there is a material change to our data processing activities. The current version is always available at ev777.biz/privacy-policy. Registered members are notified by email when a material change is made to this policy.