1eec Privacy Policy

1. Who We Are

This Privacy Policy applies to the online platform operated under the brand name 1eec, accessible at 1eec.net and all associated sub-domains (collectively, the "Platform"). When this Policy refers to "1eec," "we," "us," or "our," it means the legal entity operating the Platform as data controller.

1eec is a casino and sports betting platform built specifically for Pakistani players, offering PSL cricket betting, live dealer casino, online slots, and lottery-style titles. As a data controller, 1eec determines the purposes and means of processing your personal data, and this Policy explains how we fulfil that responsibility.

If you have questions about how your data is handled, please contact our Data Protection contact at [email protected] (displayed as plain text — not a clickable link).

2. Data We Collect

1eec collects the following categories of personal data in connection with the operation of the Platform:

2.1 Identity Data: Full legal name, date of birth, gender, national identity document number (CNIC), passport number, or driving licence number as provided during account registration or KYC verification.

2.2 Contact Data: Email address, mobile phone number, and residential address including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad) and postal code.

2.3 Financial Data: Payment method identifiers (JazzCash account number, Easypaisa mobile number, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah transfers, Skrill or Neteller account IDs, USDT TRC20 wallet addresses). We do not store full bank card numbers or CVV codes.

2.4 Account & Activity Data: Username, login credentials (stored as a one-way hash — never in plain text), account balance history, deposit and withdrawal transaction records, bet history, game play history, bonus usage history, and session logs.

2.5 Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, pages visited, click paths, referring URLs, and session duration.

2.6 Communications Data: Records of your communications with 1eec support, including live chat transcripts, email correspondence, and any documents you submit in connection with a dispute or complaint.

2.7 Responsible Gaming Data: Self-imposed limit settings, cooling-off requests, self-exclusion records, and any voluntary disclosures made in connection with responsible gaming support.

3. How We Collect Your Data

1eec collects personal data through the following means:

• Direct provision: Data you enter when registering an account, completing KYC, making deposits or withdrawals, placing bets, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via server logs, cookies, and similar tracking technologies described in Section 9.
• Third-party sources: Identity and address verification data from KYC service providers; fraud and AML screening data from compliance screening vendors; payment confirmation data from payment processors including JazzCash, Easypaisa, and banking partners.
• Publicly available sources: Information from sanctions lists, politically exposed persons (PEP) databases, and adverse media sources reviewed as part of our AML compliance obligations.

4. Why We Use Your Data

1eec processes personal data for the following purposes:

• Account management: Creating and maintaining your 1eec account, authenticating logins, and managing account settings and preferences.
• Service delivery: Processing deposits and withdrawals in PKR, settling bets and casino game outcomes, applying bonuses, and providing access to all Platform products.
• Identity verification (KYC): Verifying your identity and age before processing withdrawals and at other points required by our compliance obligations. This applies to all players regardless of city or payment method.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Regulatory compliance: Meeting our obligations under anti-money-laundering (AML) regulations, data protection law, and the requirements of our licensing authority.
• Responsible gaming: Monitoring account activity to identify potential problem gambling indicators, applying player-set limits and exclusions, and fulfilling our duty of care obligations.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of our support interactions.
• Platform improvement: Analysing aggregated and anonymised usage data to improve Platform performance, game offerings, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and Platform news — subject to your communication preferences and applicable law. You may opt out of marketing emails at any time.

5. Legal Basis for Processing

1eec relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to perform the contract formed when you register a 1eec account — including account creation, payment processing, bet settlement, and KYC verification.
• Legal obligation: Processing required to comply with applicable law, including AML obligations, sanctions screening, and record-keeping requirements imposed by our licensing authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where consent is required under applicable law. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

1eec does not sell personal data to third parties. We share data with the following categories of recipients where necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and USDT TRC20 wallet service providers — to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify identity documents and screen against sanctions and PEP databases.
• Game content providers: Licensed third-party casino game and sports data providers who receive minimal technical data necessary to deliver game sessions and odds.
• IT and cloud infrastructure providers: Hosting, security, and technical support service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or the instruction of a competent regulatory authority, including disclosures mandated under AML law.
• Professional advisers: Legal, audit, and compliance advisers bound by professional confidentiality obligations, where necessary for the legitimate operation of the business.

All third-party service providers who process personal data on our behalf are subject to contractual obligations requiring them to handle that data in accordance with applicable data protection standards and solely for the purposes specified by 1eec.

7. International Data Transfers

Some of 1eec's service providers are located outside Pakistan. Where personal data is transferred to a jurisdiction that may not provide an equivalent level of data protection to the applicable standard, 1eec implements appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to ensure your data remains protected in accordance with this Policy.

By registering an account and using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan in connection with the services described in this Policy.

8. Data Retention

1eec retains personal data for as long as necessary to fulfil the purposes for which it was collected, including the duration of your account relationship with 1eec and for a period thereafter as required by law.

• Active accounts: Data is retained throughout the lifetime of your account.
• Closed accounts: Identity, financial, and transaction records are retained for a minimum of 5 years following account closure to meet AML record-keeping obligations. This applies regardless of the reason for closure.
• Self-excluded accounts: Exclusion records are retained indefinitely to prevent re-registration during an active exclusion period and, in the case of permanent self-exclusion, to comply with our duty of care obligations.
• Technical and usage data: Generally retained for up to 24 months from the date of collection, unless longer retention is required for a specific investigation or compliance purpose.

Where data is no longer required and retention is not mandated by law, 1eec will delete or irreversibly anonymise it in a secure manner.

9. Cookies & Tracking Technologies

1eec uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function — including session management, login authentication, and security token handling. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, remembered device status, and display preferences to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform — including pages visited, time spent, and click paths — to help us improve the user experience.
• Marketing cookies: Used where you have provided consent to receive personalised promotional content. These may track your activity across sessions to ensure promotional messages are relevant.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to or using the 1eec Platform.

10. Your Data Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your personal data held by 1eec:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances while a dispute or complaint is being resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of data you have provided to us.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. Identity verification will be required before any data access request is fulfilled.

11. Security Measures

1eec implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 1eec servers.
• One-way hashing of account passwords — 1eec staff cannot view your password in plain text.
• Segregation of player funds from operational accounts.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Anomaly detection systems that flag unusual login patterns and account activity for review.

In the event of a data breach that is likely to result in a high risk to your rights, 1eec will notify affected players without undue delay in accordance with applicable law.

12. Third-Party Links

The 1eec Platform may contain links to third-party websites or services — for example, game provider demonstration pages or payment provider information pages. This Privacy Policy applies solely to data processed by 1eec in connection with the Platform. 1eec is not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any third-party services you access.

13. Children and Minors

The 1eec Platform is strictly intended for individuals aged 18 years or older. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, that account will be closed immediately, associated data will be deleted to the extent not required by law, and any deposits will be returned in accordance with applicable regulations.

If you believe a minor has created a 1eec account, please notify us immediately at [email protected].

14. Changes to This Privacy Policy

1eec may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email notification or a prominent Platform notice not less than 14 days prior to the effective date of the updated Policy.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

15. Contact & Data Enquiries

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact the 1eec data protection team:

• Email: [email protected]
• Response time: Within 30 days for formal data subject requests; typically within 24–48 hours for general enquiries.
• Live support: Available via the 1eec Platform live chat during Pakistan Standard Time operational hours.

All data rights requests must include your registered account username or email address and will require identity verification before we can fulfil the request.