ep567 Privacy Policy —
How We Protect Your Personal Data

ep567 is Pakistan's premier online gaming platform, offering cricket betting, live casino, slots, lottery, and a wide range of other gaming products — all denominated in Pakistani Rupees (PKR) and accessible via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. We operate under an international gaming licence and are fully committed to handling the personal data of our Pakistani players with the highest degree of care, transparency, and respect.

This Policy applies to all personal data collected through the ep567 website at ep567.club, any mobile-optimised version of the site, our customer support channels, promotional communications, and any other touchpoint through which you interact with ep567. It does not apply to third-party websites or services that may be linked from our platform — those sites operate under their own privacy policies, and ep567 bears no responsibility for their data practices.

For the purposes of applicable data protection law, ep567 is the Data Controller responsible for your personal information. Any questions, requests, or concerns regarding this Policy should be directed to our support team at [email protected].

ep567 collects personal data through several means. The categories of data we collect are set out below:

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC (Computerised National Identity Card) or passport;
• Date of birth (used for mandatory 21+ age verification);
• CNIC number or equivalent national identity document number;
• Residential address (city, province, postal code — e.g., Karachi, Lahore, Islamabad, Faisalabad);
• Email address and mobile phone number;
• Username and encrypted password hash.

2.2 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references;
• JazzCash or EasyPaisa mobile wallet account identifiers (tokenised — full wallet credentials are never stored by ep567);
• Bank account details for HBL, UBL, or Meezan Bank transfers (stored in encrypted form);
• Bonus balances, wagering history, and account transaction logs;
• Source-of-funds documentation submitted in connection with large withdrawals.

2.3 Gaming & Behavioural Data

• Bets placed, games played, stakes, and winnings/losses across all ep567 products;
• Session duration, login timestamps, and frequency of platform use;
• Responsible gaming tool usage — including deposit limits set, self-exclusion requests, and reality-check settings;
• Game preferences and interaction patterns used to personalise the platform experience.

2.4 Technical & Device Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, browser type and version;
• Device fingerprint (used for fraud prevention and multi-account detection);
• Referral source (how you arrived at ep567 — e.g., direct, search, affiliate).

2.5 Communications Data

• Records of live chat conversations with ep567 support agents;
• Email correspondence sent to or received from ep567;
• Records of any complaints, dispute submissions, or feedback you provide.

ep567 uses the personal data we collect for the following purposes:

ep567 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where such processing is necessary for fraud prevention or regulatory compliance — in which case you have the right to request human review of any automated decision that affects your account.

ep567 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to open and manage your ep567 account, process your bets, handle deposits and withdrawals, and deliver the gaming services you have contracted with us for;
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, gaming licence conditions, age verification requirements, and any applicable Pakistani or international law;
• Legitimate interests: Processing undertaken for fraud prevention, platform security, responsible gaming monitoring, and improving the overall ep567 experience — where such processing does not override your fundamental privacy rights;
• Consent: Processing for optional purposes such as promotional email communications and personalised marketing — where consent can be withdrawn at any time by contacting [email protected] or updating your account communication preferences.

ep567 may share your personal data with the following categories of recipients:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely to process your deposits and withdrawals. Each payment provider operates under its own privacy and data security policies;
• Identity verification providers: Third-party KYC (Know Your Customer) service providers used to verify CNIC documents and confirm age eligibility (21+);
• Fraud prevention services: Specialist anti-fraud and anti-money-laundering platforms that assist ep567 in detecting and preventing fraudulent activity and financial crime;
• Game software providers: Licensed third-party game studios and live casino operators whose games are available on the ep567 platform — limited to the minimum data required to operate the game and record results;
• Regulatory authorities: Gaming licence authorities, financial intelligence units, or law enforcement agencies — where disclosure is required by law, court order, or our gaming licence conditions;
• Professional advisors: Lawyers, auditors, and accountants acting in a professional capacity in connection with ep567's legal and financial obligations, subject to strict confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of ep567's assets, player data may be transferred to the successor entity — you will be notified via email before any such transfer takes effect.

All third parties with whom ep567 shares personal data are contractually required to handle that data in accordance with applicable data protection law and to use it solely for the specific purposes for which it was shared.

ep567 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform, personalise your experience, and help us understand how players use our site. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function — including session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without breaking platform functionality;
• Functional cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences;
• Analytical cookies: Used internally by ep567 to understand player behaviour patterns, identify popular games and features, and improve platform performance. These are first-party analytics only — ep567 does not use Google Analytics or any third-party analytics service that transmits your data to external servers;
• Security cookies: Device fingerprinting and session integrity tokens used to detect fraudulent login attempts, multi-accounting, and bot activity.

By continuing to use ep567 after accepting our cookie notice, you consent to the use of non-essential cookies as described above. You may withdraw this consent at any time by clearing your browser cookies and adjusting your browser's cookie settings. Note that disabling certain cookies may affect the functionality of your ep567 account.

ep567 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data (which cannot identify any individual player) may be retained indefinitely for statistical and business-improvement purposes.

ep567 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• AES-256 encryption for all personal and financial data stored at rest in our databases;
• TLS 1.3 encryption for all data transmitted between your device and the ep567 platform;
• Tokenisation of payment credentials — full payment account details are never stored on ep567's servers;
• Two-factor authentication (2FA) available and strongly recommended for all player accounts;
• Role-based access controls ensuring that ep567 staff can only access personal data necessary for their specific job function;
• Regular third-party security audits and penetration testing of the ep567 platform;
• 24/7 automated monitoring for suspicious login activity, unusual transaction patterns, and potential data breaches.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ep567 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. ep567 will also report any qualifying breach to the relevant regulatory authority as required by applicable law.

As a data subject, you have the following rights with respect to your personal data held by ep567:

• Right of access: You may request a copy of all personal data ep567 holds about you, along with information about how it is processed — commonly known as a Subject Access Request (SAR);
• Right to rectification: You may request that ep567 correct any inaccurate or incomplete personal data held about you;
• Right to erasure: In certain circumstances (for example, where data is no longer necessary for the purpose it was collected), you may request that ep567 delete your personal data. Note that this right is subject to legal retention obligations — we may be required to retain certain data regardless of your request;
• Right to restriction: You may request that ep567 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested;
• Right to data portability: Where processing is based on your consent or on a contract, you may request that ep567 provide your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to the processing of your personal data where ep567 relies on legitimate interests as its legal basis, including profiling for personalisation purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time — this does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact ep567 at [email protected] with the subject line "Data Rights Request". ep567 will respond to all verified data rights requests within 30 calendar days. We may need to verify your identity before processing your request.

ep567 enforces mandatory CNIC-based age verification at the point of registration. Any account where our verification processes or other evidence suggests the account holder may be under 21 will be immediately suspended pending further investigation.

If ep567 discovers that personal data has been collected from a person under the age of 21, we will immediately:

• Suspend and permanently close the account;
• Reverse any deposits made to the account to the extent possible;
• Securely delete all personal data associated with the underage account;
• Report the matter to relevant regulatory or safeguarding authorities where required by law.

If you are a parent or guardian and believe that your child under 21 may have registered with ep567, please contact us immediately at [email protected] so that we can take prompt action.

ep567 is operated under an international gaming licence and some of the third-party service providers we work with — including game software providers, fraud prevention services, and cloud infrastructure providers — may be based outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, ep567 ensures that appropriate safeguards are in place to protect your personal data, including:

• Standard contractual data protection clauses incorporated into our agreements with all international service providers;
• Verification that the recipient jurisdiction maintains an adequate level of data protection as assessed by recognised international standards;
• Technical safeguards including end-to-end encryption for all cross-border data transfers.

By registering with and using ep567, you acknowledge and consent to the transfer of your personal data to the countries and service providers described in this Policy, subject to the safeguards outlined above.

ep567 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our gaming licence obligations. When material changes are made to this Policy, ep567 will update the "Last Updated" date at the top of this document and, where the changes are significant, will notify registered players via email or a prominent on-site notification.

We encourage you to review this Privacy Policy periodically to stay informed about how ep567 protects your personal data. Your continued use of ep567 following the posting of a revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, please stop using ep567 and contact us to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the ep567 Data Protection team through the following channels:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request – [Your Username]"
• Live Chat: Available on the ep567 platform, 8:00 AM – 2:00 AM PKT (Daily)
• Response Time: ep567 aims to respond to all privacy-related enquiries within 5 business days and to complete formal data rights requests within 30 calendar days

If you believe that ep567 has not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.