Privacy Policy — ep92

Introduction

ep92 ("we", "us", "our") operates the online sports betting and live casino platform available at ep92.cam (the "Platform"). As part of delivering our services to registered users, ep92 collects and processes certain personal data. We take our data protection obligations seriously and are committed to handling your information with care, transparency and in accordance with applicable data protection standards.

This Privacy Policy ("Policy") describes in detail what personal data we collect, the purposes for which we process it, the legal bases we rely upon, how long we retain it, with whom we may share it, and what rights you hold in relation to your data. This Policy applies to all users of the Platform regardless of location.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and ep92.

Definitions

The following terms carry the meanings below throughout this Policy:

Data We Collect

3.1 Registration Data

When you create an account on ep92, we collect the personal information you provide during registration, including: your full legal name, date of birth, residential address, email address, username and chosen password (stored in hashed form — never in plain text).

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering obligations, we collect copies of government-issued identification documents (such as a national identity card or passport), proof of address documentation and, where applicable, proof of payment method ownership. These documents are processed solely for verification purposes.

3.3 Financial & Transaction Data

We collect records of deposits, withdrawals, bonus claims and betting transactions associated with your account. This includes transaction amounts in PKR, payment method references (such as mobile wallet identifiers or bank account references associated with methods familiar to Pakistani users — for example Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah), and transaction timestamps. Payment provider names are referenced for operational context only — ep92 does not claim endorsement or affiliation with any of these providers.

3.4 Technical & Device Data

When you access the Platform, we automatically collect certain technical data including your IP address, device type and model, operating system version, browser type and version, session duration, pages visited and referring URL. This data is used for security monitoring, fraud detection and Platform performance optimisation.

3.5 Behavioural & Responsible Gambling Data

ep92 monitors account activity patterns including betting frequency, session length, deposit behaviour and self-exclusion history. This data is processed specifically to support our responsible gambling obligations and to identify users who may be exhibiting signs of problematic gambling behaviour. Where applicable, we may use this information to apply protective measures to your account.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications — including the content of your messages, timestamps and the resolution outcome — for quality assurance, compliance and dispute resolution purposes.

How We Collect Data

ep92 collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, web beacons, server logs and similar tracking technologies when you access the Platform;
• From third-party verification providers — identity verification and age confirmation services used to fulfil our KYC obligations;
• From payment processors — transaction confirmation data passed by payment processing partners to confirm deposit and withdrawal status;
• From fraud prevention and analytics partners — risk scoring, device fingerprinting and behavioural analytics data used to protect the integrity of the Platform.

Data Processing

We process your Personal Data for the following purposes:

Legal Basis for Processing

ep92 relies on the following legal bases for processing your Personal Data, depending on the specific processing activity:

• Contractual necessity — processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, bet settlement and payment processing;
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering checks and responsible gambling obligations;
• Legitimate interests — processing carried out for fraud prevention, security monitoring, Platform optimisation and responsible gambling monitoring, where our legitimate interests are not overridden by your fundamental rights;
• Consent — for optional marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time by updating your account preferences or contacting support.

Data Sharing

7.1 Third-Party Service Providers

ep92 shares Personal Data with carefully selected third-party Data Processors who assist in delivering our services. These include KYC and identity verification providers, payment processing partners, fraud prevention and risk management vendors, cloud infrastructure and hosting providers, and customer support platform operators. All Data Processors are required to process data only on our instruction and are subject to data processing agreements that impose appropriate security and confidentiality obligations.

7.2 Regulatory and Legal Disclosure

We may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where we are required to do so by applicable law or a valid legal order. ep92 will use reasonable efforts to notify affected users of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of ep92's assets, Personal Data held by ep92 may be transferred to the acquiring entity. Users will be notified of any such transfer and the applicable privacy terms via a prominent notice on the Platform before the transfer takes effect.

7.4 No Sale of Personal Data

ep92 does not sell, rent or trade your Personal Data to third parties for their own independent marketing or commercial purposes. Any data shared with third parties is limited to what is necessary for the specific purpose described above.

Data Retention

ep92 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account and KYC data — retained for the duration of your active account relationship and for a minimum period after account closure as required by applicable anti-money laundering regulations (typically five years from account closure or last transaction, whichever is later);
• Transaction records — retained for a minimum of five years from the date of the transaction for regulatory compliance purposes;
• Support communications — retained for up to three years from the date of resolution unless a longer period is required for ongoing dispute management;
• Technical and device data — typically retained for up to 12 months from collection for security and fraud detection purposes;
• Marketing preferences and consent records — retained for as long as you maintain a registered account or until you withdraw consent, whichever occurs first.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our internal data disposal procedures.

Security Measures

ep92 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and the Platform;
• Hashed storage of account passwords — plain text passwords are never stored or accessible to Platform staff;
• Role-based access controls limiting internal access to Personal Data on a strict need-to-know basis;
• Regular security assessments, penetration testing and vulnerability scanning;
• Two-factor authentication options available to all registered users via account settings;
• Audit logging of access to sensitive data systems by internal personnel.

While ep92 takes reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access.

Cookies & Tracking Technologies

10.1 What We Use

The Platform uses cookies and similar technologies including web beacons and local storage objects to support Platform functionality, maintain your login session, remember your preferences and collect analytical data about how the Platform is used.

10.2 Types of Cookies

10.3 Managing Cookies

You may manage optional cookie preferences via the cookie consent interface displayed when you first access the Platform. You may also configure your browser to block or delete cookies at any time. Note that disabling essential cookies may prevent certain Platform features from functioning correctly and may result in your session being terminated.

User Rights

Subject to applicable law and certain limitations inherent to our regulatory obligations (such as mandatory data retention requirements), you hold the following rights in respect of your Personal Data held by ep92:

• Right of Access — you may request a copy of the Personal Data we hold about you;
• Right to Rectification — you may request correction of inaccurate or incomplete Personal Data;
• Right to Erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies;
• Right to Restriction — you may request that we restrict processing of your data while a rectification or objection request is being assessed;
• Right to Data Portability — where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format;
• Right to Object — you may object to processing carried out on the basis of legitimate interests, including profiling for responsible gambling monitoring purposes, subject to overriding grounds;
• Right to Withdraw Consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact our Data Protection team at [email protected] (plain text — not a clickable link) or via live chat. We will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

Third-Party Services

The Platform may integrate third-party services to support live sports data feeds, game content delivery and payment processing. These third-party providers operate under their own privacy policies and ep92 is not responsible for the data handling practices of third-party systems beyond the scope of our Data Processing agreements with them.

ep92 does not embed third-party social media widgets, advertising networks or cross-site tracking pixels from external commercial advertising platforms within the core Platform. If this position changes, this Policy will be updated accordingly and users will be notified.

Minors

The Platform is strictly for adults aged 18 or older — or the higher minimum age required by the applicable license jurisdiction. ep92 does not knowingly collect Personal Data from persons under the age of 18. If we become aware that Personal Data has been collected from a minor, we will immediately close the relevant account, delete the associated Personal Data and, where required, refer the matter to the appropriate authorities.

If you believe a minor has registered or attempted to register on the Platform, please contact us immediately at [email protected] (plain text only).

Policy Amendments

ep92 reserves the right to update or revise this Privacy Policy at any time. Where material changes are made, we will use reasonable efforts to notify registered users via a notice on the Platform or by email to the registered address prior to the changes taking effect. The effective date displayed at the top of this page will be updated accordingly.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this page periodically to stay informed of any changes.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact ep92 through the following channels:

• Live Chat: Available 24/7 via your account dashboard — recommended for urgent privacy or data access queries.
• Support Email: [email protected] (plain text — not a clickable link). Target response time: within 24 hours for general queries; within 30 days for formal data subject access requests.
• Urdu Support: Available on request via live chat or email for users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.