ep567 Privacy Policy

ep567 is a crypto-first online betting and casino platform operating under the domain ep567.bet, designed primarily to serve English-speaking Pakistani players who seek a modern, privacy-respecting gambling experience. In the context of this Privacy Policy, references to "ep567", "we", "us", or "our" refer to the operator of the ep567 Platform and all service entities associated with it.

ep567 acts as the data controller in respect of any personal data collected through the Platform. This means ep567 determines the purposes for which your personal data is collected and the manner in which it is processed. Where ep567 engages third-party service providers to process data on its behalf — for example, KYC verification partners or payment processors — those third parties act as data processors under binding data processing agreements with ep567.

If you have any questions about who controls your data or how to exercise your privacy rights, please contact the ep567 Data Support team using the details provided in Section 14 of this Policy.

ep567 collects personal data across several categories depending on how you interact with the Platform. The following table summarises the categories of data collected and why each category is necessary:

ep567 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond facial comparison during KYC), or health data unless specifically required by a regulatory authority and disclosed to you at the time of collection.

ep567 collects personal data through the following channels and mechanisms:

• Direct provision by you: Data you enter during Account registration, KYC submission, deposit or withdrawal requests, support conversations, and any form of written communication with ep567.
• Automated technical collection: When you browse or use the Platform, ep567 automatically collects technical data including your IP address, device identifiers, browser type, operating system, and session activity logs via server-side logging and standard web analytics.
• Cookies and similar technologies: ep567 uses cookies, local storage, and similar browser-based technologies to maintain session state, detect returning users, and measure Platform performance. See Section 8 for full details.
• Payment processors: When you initiate a deposit or withdrawal through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or a supported crypto network, relevant transaction confirmation data is shared with ep567 by the payment processor or blockchain network as part of the transaction completion process.
• KYC and identity verification partners: Where a licensed third-party KYC service is used to verify your identity, that provider will share a verification result and relevant document metadata with ep567. The underlying identity document is processed by the KYC provider under its own data processing obligations.
• Fraud and risk screening tools: ep567 uses automated risk scoring systems that may collect and analyse certain behavioural and technical signals to detect unusual account activity, multi-accounting attempts, or patterns consistent with prohibited conduct.

ep567 uses your personal data for the following purposes. Each purpose is linked to a lawful basis described in Section 5:

• Account management: To create, maintain, and administer your ep567 Account, including processing deposits, withdrawals, and balance adjustments.
• Identity and age verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years. This is a non-negotiable regulatory obligation.
• Transaction processing: To process PKR payments through JazzCash, EasyPaisa, and bank transfers, and to facilitate crypto transactions on the Bitcoin, USDT, and Ethereum networks.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised access, fraudulent activity, multi-accounting, money laundering, and other forms of prohibited conduct.
• Regulatory compliance: To meet anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations under applicable international gaming regulations.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion periods, apply deposit limits, and provide responsible gaming interventions where appropriate.
• Customer support: To respond to your queries, resolve disputes, and maintain a record of communications for quality assurance purposes.
• Platform improvement: To analyse usage patterns, game performance, and player journeys in order to improve the ep567 Platform for all users.
• Marketing communications (opt-in only): To send promotional emails, bonus offers, and Platform updates where you have explicitly opted in to receive such communications. You may withdraw this consent at any time via your Account settings.

ep567 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review — except where automated fraud detection systems flag an Account for immediate suspension pending investigation, in which case you retain the right to request human review of the decision.

ep567 processes your personal data under one or more of the following legal bases, in line with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and ep567 — specifically, to operate your Account, process transactions, and deliver the betting and gaming services you have registered for.
• Legal obligation: Processing required to comply with applicable laws, regulations, and regulatory directives — including KYC identity verification, AML transaction monitoring, and the retention of financial records for the mandatory statutory period.
• Legitimate interests: Processing carried out for ep567's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring, Platform performance analysis, and responsible gaming oversight.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing or your ability to continue using ep567.

ep567 does not sell your personal data. We may share your data with carefully selected third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• KYC and identity verification providers: Licensed third-party services engaged to verify your identity documents and confirm age eligibility. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and blockchain network operators receive the transaction data necessary to complete your deposit or withdrawal. ep567 does not share more information than is required for the specific transaction.
• Fraud and risk intelligence platforms: Specialised services that analyse behavioural and technical signals to detect fraudulent activity. Data shared with these services is pseudonymised where possible.
• Cloud infrastructure and hosting providers: ep567's Platform is hosted on secured cloud infrastructure. Hosting providers act as data processors under binding agreements and have no independent rights to your data.
• Regulatory authorities and law enforcement: Where ep567 is legally compelled to disclose data by a court order, regulatory directive, or law enforcement request, we will comply. Where legally permitted, ep567 will notify the affected user of such a disclosure request.
• Live casino studio providers: Where you participate in live casino games provided by third-party studios, those studios may process technical session data necessary to operate the game. They do not receive your full Account or personal details.

All third-party data processors engaged by ep567 are required to maintain confidentiality, implement appropriate technical and organisational security measures, and process data only in accordance with ep567's documented instructions.

Given that a significant proportion of ep567's Pakistani user base transacts in Bitcoin, USDT (TRC20), and Ethereum, this section addresses cryptocurrency-specific privacy considerations in detail.

• Wallet address confidentiality: Your Bitcoin, USDT, and ETH wallet addresses, as provided during deposit or withdrawal requests, are treated as personally identifiable financial data. They are stored with the same encryption and access controls applied to bank account details.
• Blockchain transparency vs. account privacy: While blockchain transactions are publicly visible on-chain by their nature, ep567 does not publish, share, or cross-reference your wallet addresses with external parties beyond what is necessary for transaction processing and AML screening.
• AML screening of crypto transactions: All incoming and outgoing crypto transactions on ep567 are subject to automated blockchain analytics screening to detect funds associated with sanctioned addresses, known fraud, or illegal activity. This is a regulatory requirement and is not negotiable.
• No off-platform crypto tracking: ep567 does not track your on-chain activity beyond the wallet addresses directly associated with your ep567 Account transactions. We do not attempt to de-anonymise your broader blockchain activity.
• PKR payment method data: JazzCash and EasyPaisa account references are treated as sensitive financial data. They are stored in encrypted form and are never visible to ep567 staff beyond the minimum necessary to resolve a support query or dispute.

ep567 uses cookies and similar browser-based technologies to provide a functional, secure, and personalised experience on the Platform. The following types of cookies are in use:

• Essential cookies: Required for core Platform functionality, including user session management, login state persistence, security token validation, and fraud detection signals. These cookies cannot be disabled without impairing core functionality.
• Performance cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including page load times, error rates, and navigation paths — to improve Platform stability and user experience.
• Functional cookies: Store your preferences such as language settings, game lobby filters, and display preferences so that your personalised settings persist across sessions.
• Analytics cookies: ep567 uses first-party analytics tools to understand how the Platform is used at an aggregate level. No personally identifiable information is shared with external analytics vendors through these cookies.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core ep567 Platform, though some personalisation features may be affected. A cookie preference centre is available through the Platform settings.

ep567 does not use third-party advertising cookies or permit advertising networks to place tracking pixels on the Platform. ep567's cookie usage is limited to the functional categories described above.

ep567 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

• Account data and KYC records: Retained for a minimum of five (5) years from the date of Account closure or the date of the last transaction, whichever is later. This period reflects standard AML record-keeping obligations under international gaming regulations.
• Transaction and financial records: Retained for a minimum of five (5) years in line with financial record-keeping requirements. Crypto transaction records including wallet addresses and transaction hashes are included in this category.
• Support communications: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance purposes.
• Usage and session data: Retained in identifiable form for thirteen (13) months, after which it is either deleted or fully anonymised for long-term aggregate analysis.
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years after the last opt-in or communication, to provide evidence of consent in the event of a complaint.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus a minimum of five (5) years to prevent re-registration during a mandatory exclusion period.

Upon expiry of the applicable retention period, ep567 will securely delete or anonymise your personal data. Anonymised data (from which you can no longer be identified) may be retained indefinitely for statistical and analytical purposes.

ep567 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, loss, or destruction. Key security measures include:

• Encryption in transit: All data transmitted between your browser and the ep567 Platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across all pages and API endpoints.
• Encryption at rest: Sensitive personal data — including KYC documents, financial records, and crypto wallet addresses — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Personal data is accessible only to ep567 staff and authorised processors who have a legitimate operational need. Role-based access controls and audit logging are enforced across all internal systems.
• Two-factor authentication: ep567 accounts support and encourage two-factor authentication (2FA) to reduce the risk of unauthorised Account access.
• Penetration testing and vulnerability management: ep567 conducts regular security assessments of its Platform and infrastructure. Identified vulnerabilities are remediated in accordance with a risk-based prioritisation framework.
• Incident response: ep567 maintains a documented data breach response procedure. In the event of a personal data breach that poses a high risk to affected users, ep567 will notify affected individuals without undue delay.

As an ep567 user, you hold the following rights in respect of the personal data we hold about you. These rights can be exercised by contacting the ep567 support team using the details in Section 14. ep567 will respond to all valid requests within 30 calendar days.

Please note that certain rights are subject to limitations. For example, ep567 cannot delete data that it is legally required to retain under AML or KYC regulations, even if you submit a valid erasure request. In such cases, ep567 will explain the specific legal obligation that prevents full compliance with the request and retain only the minimum data required.

The ep567 Platform is strictly intended for users who are 21 years of age or older. ep567 does not knowingly collect, process, or retain personal data from individuals below this age threshold.

• ep567's registration process includes a mandatory date-of-birth declaration and subsequent KYC age verification to ensure that no user below the age of 21 can open or operate a funded Account.
• If ep567 discovers or is notified that an Account has been opened by, or on behalf of, a person under 21 years of age, that Account will be immediately suspended, any funds held will be handled in accordance with applicable regulatory guidance, and all personal data associated with the Account will be securely deleted as soon as the regulatory minimum retention period allows.
• Parents and guardians who believe a minor may have accessed the ep567 Platform using false details are encouraged to contact ep567 support immediately so that the matter can be investigated and the Account closed without delay.
• ep567 does not direct any marketing, promotional, or communications activities toward individuals who appear to be under 21 based on Account profile data or behavioural signals.

ep567 takes its age restriction obligations seriously. If you are under 21, please do not attempt to register on the Platform. If you are a parent or guardian concerned about underage gambling in Pakistan, resources and guidance are available on our Responsible Gaming page.

ep567 reserves the right to update this Privacy Policy at any time. When we do so, the revised Policy will be published at ep567.bet/privacy-policy with an updated effective date shown in the hero section at the top of this page.

• Minor updates — such as clarifications of existing language, corrections to formatting, or updates to contact details — will be published without direct notification but will be reflected in the effective date.
• Material updates — such as changes to the categories of data collected, new third-party data sharing arrangements, or changes to retention periods — will be communicated to registered users via email to the address held on Account at least seven (7) days before the revised Policy takes effect.
• If you do not agree with any updated Privacy Policy, you may close your Account before the changes take effect. Continued use of the ep567 Platform after the revised Policy's effective date constitutes your acceptance of the updated terms.

ep567 recommends that all users review this Privacy Policy periodically. The document was last reviewed and updated on 1 January 2026.

For any privacy-related queries, data subject access requests, complaints, or questions about this Privacy Policy, please use the following contact details. Note that the email address below is provided as plain text and is not a clickable link.

• Support Email: [email protected] (plain text — not a link)
• Request Subject Line: Use "Privacy Rights Request — [Your Account ID]" for formal data subject requests, or "Privacy Query — [Your Account ID]" for general privacy questions.
• Response Time: ep567 acknowledges all privacy-related requests within 48 hours and aims to provide a substantive response within 30 calendar days. Complex requests may take up to 60 days, in which case ep567 will notify you of the extended timeline.
• Identity Verification: To protect your data, ep567 will ask you to verify your identity before actioning any data subject rights request. This is a security measure, not an attempt to obstruct your rights.
• Support Hours: 24 hours a day, 7 days a week, with peak coverage aligned to Pakistan Standard Time (PST, UTC+5).