Privacy Policy for 1 eecom Pakistan Players

Who We Are

1 eecom is an online gaming platform built specifically for Pakistani players. We operate the website 1eecom.biz, which offers slots, live casino, sports betting, crash games, card games and live cricket scores, all accessible in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, 1 eecom is the data controller — meaning we determine how and why your personal data is processed. When you use third-party game providers or payment processors through our Platform, those parties may also act as data controllers or data processors for their own specific functions, in which case their own privacy practices also apply. We only work with partners who meet appropriate data protection standards.

Our contact details for all privacy-related matters are:

Personal Data We Collect

1 eecom collects different categories of personal data depending on your relationship with the Platform. The table below gives a clear breakdown of what we collect and why each category is needed.

How We Collect Your Data

1 eecom collects your personal data through several routes — some direct, some automatic:

• Registration form: When you create your 1 eecom account, you provide your name, date of birth, mobile number and email address directly.
• Identity verification: When you submit your CNIC, passport or other documentation as part of KYC (Know Your Customer) verification before processing a withdrawal or at any point we request verification.
• Payment transactions: When you make a deposit or request a withdrawal, financial data is captured through our payment processing integrations (Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer, card payments).
• Gameplay activity: Your betting history, game sessions, win/loss data and bonus activity are recorded automatically as you use the Platform.
• Cookies and tracking technologies: We use cookies and similar technologies to collect technical and usage data automatically when you browse the Platform. See Section 10 for full details.
• Customer support interactions: Any communication you initiate with the 1 eecom support team — whether via live chat or email — is recorded for quality and compliance purposes.
• Third-party sources: In some cases we may receive data from payment processors or identity verification services to confirm information you have provided to us, particularly for fraud prevention and AML compliance.

How and Why We Use Your Data

Every piece of data collected by 1 eecom is used for a specific, legitimate purpose. We do not collect data speculatively or hold data beyond the period it is needed. Here is a plain-language explanation of how we use your information:

• To operate your account: Your identity and contact data is used to create and maintain your 1 eecom account, process your login, and manage your preferences and responsible gaming settings.
• To process deposits and withdrawals: Financial data is used to initiate and confirm PKR transactions via Easypaisa, JazzCash and other supported methods. Without this data, we cannot send you your winnings.
• To verify your identity: Identity documentation is used to confirm you are who you say you are, that you are at least 18, and that our obligations under anti-money laundering (AML) regulations are met.
• To deliver customer support: Contact data and communication logs enable our support team to resolve your queries efficiently and accurately.
• To prevent fraud and protect security: Technical data including IP addresses and device information is used to detect and block suspicious activity, unauthorised account access attempts, and multi-accounting.
• To manage bonuses and promotions: Transaction and gameplay data is used to track wagering progress, apply bonus credits correctly, and ensure promotion terms are being met.
• To improve the Platform: Anonymised usage data helps us understand how players navigate 1 eecom so we can make improvements that benefit all Pakistani players.
• To communicate with you: We use your contact details to send account notifications (deposit confirmations, withdrawal updates), important policy changes, and where you have opted in, promotional communications about 1 eecom offers.
• To support responsible gaming: Responsible gaming data is used to enforce limits you set, monitor for signs of problematic play, and reach out proactively if our systems flag unusual activity patterns.

Legal Basis for Processing

1 eecom processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing your data is necessary to provide the gaming services described in our Terms and Conditions — this covers account management, payments, game delivery and support.
• Legal obligation: We are required to verify player identities, retain transaction records and conduct AML screening under applicable regulatory obligations. We cannot waive these requirements.
• Legitimate interests: Fraud prevention, platform security, and improving our services are legitimate interests that allow us to process certain categories of technical and usage data, provided those interests do not override your fundamental rights.
• Consent: Where we send you optional marketing communications or place non-essential cookies on your device, we rely on your consent, which you can withdraw at any time.

Sharing Your Personal Data

1 eecom does not sell your personal data to any third party. Full stop. We do, however, share limited categories of data with trusted parties in the following circumstances — always for a specific, necessary reason:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank networks, and card payment processors receive the financial and identity data necessary to complete your transactions.
• Game providers: When you play a game from Pragmatic Play, NetEnt, Big Time Gaming or another studio, that provider's game client processes data such as your bet amounts and session activity. This is governed by their own privacy practices and the contractual arrangements between them and 1 eecom.
• Identity verification services: Third-party KYC service providers may receive copies of your identity documents to perform automated or manual verification checks on our behalf.
• Technology service providers: Companies that provide infrastructure services to 1 eecom — such as hosting, security monitoring, and analytics — may process limited technical data as our processors. They are contractually bound to only process data on our instructions.
• Regulatory and legal authorities: Where we are legally required to do so — for example in response to a lawful regulatory request, court order, or as part of AML reporting obligations — we may disclose player data to the relevant authority.

Data Retention

We retain personal data only for as long as it is needed for the purpose it was collected, or as long as we are legally required to keep it. The general retention periods for different data categories at 1 eecom are:

• Active account data: Retained for the lifetime of your account plus a period of up to five years after closure, primarily to satisfy AML and regulatory record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction. This is a regulatory requirement for AML compliance.
• Identity verification documents: Retained for five years from account closure. Copies of CNIC or passport submitted for KYC are deleted after this period unless a regulatory hold requires longer retention.
• Customer support communications: Retained for three years from the date of the communication, primarily for dispute resolution purposes.
• Technical and usage data: Typically anonymised or aggregated after 12 months for analytics purposes. Raw identifiable technical data is not retained beyond what is needed for security monitoring.
• Marketing preferences and consent records: Retained for as long as your account is active plus two years, so we can demonstrate compliance with opt-in requirements.

When data is no longer required and no legal obligation mandates its retention, it is securely deleted or permanently anonymised. You can request deletion of your data earlier — see Section 9 for your rights.

Security Measures

Protecting your personal and financial data is a fundamental priority for 1 eecom. We implement technical and organisational security measures that are appropriate to the nature and sensitivity of the data we hold. These measures include:

• SSL encryption: All data transmitted between your device and 1 eecom's servers is encrypted using SSL (Secure Socket Layer) technology, the same standard used by banks and other financial services.
• Encrypted data storage: Sensitive data including identity documents and financial information is stored in encrypted form. Encryption keys are managed separately from the data they protect.
• Access controls: Only authorised 1 eecom staff with a legitimate need — such as your customer support agent handling your query — can access your personal account data. Access is logged and audited.
• Two-factor authentication (2FA): Available on all player accounts. We strongly recommend enabling 2FA in your account settings to add a second layer of protection against unauthorised access.
• Fraud and anomaly detection: Automated systems monitor account activity for patterns that may indicate unauthorised access or fraudulent behaviour, triggering security reviews where anomalies are detected.
• Penetration testing: 1 eecom's technical infrastructure undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

Your Data Rights

As a 1 eecom player, you have rights over the personal data we hold about you. Here is a plain summary of each right and how to exercise it:

To exercise any of these rights, send your request to support@1eecom.biz with the subject line "Data Rights Request". We will acknowledge your request within five working days and aim to fulfil it within 30 days. If a request is complex or we receive a high volume, we may extend this by a further 30 days, in which case we will notify you.

Cookies and Tracking Technologies

1 eecom uses cookies — small text files stored on your device — and similar tracking technologies to make the Platform work properly, improve your experience, and understand how players use the site. Here is a breakdown of the types we use:

You can manage your cookie preferences through your browser settings. Most browsers allow you to view, delete and block cookies. Disabling non-essential cookies may affect some features of the Platform. Note that deleting session cookies will log you out of your account.

Third-Party Services

1 eecom integrates third-party services to deliver the full Platform experience. Each third party involved processes data only for the specific purpose of their integration and under contractual obligations that bind them to appropriate data protection standards.

The main categories of third-party services used by 1 eecom and their data processing roles are:

• Payment gateways (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks, card processors): Receive payment-specific data to execute deposit and withdrawal transactions. Each has its own privacy policy governing their handling of your financial data.
• Game providers (Pragmatic Play, NetEnt, Big Time Gaming, Playtech, Red Tiger, Microgaming etc.): Receive session data — including bet amounts and game-round results — when you play their games. They do not receive your identity documents or full financial details.
• KYC/identity verification providers: Receive copies of identity documents (CNIC, passport) to perform automated or manual verification. Data is processed solely for verification and is not retained by these providers after the verification is complete.
• Cloud hosting and infrastructure providers: Provide the servers and infrastructure on which 1 eecom operates. These providers access data only as necessary to maintain and secure the infrastructure and operate under strict data processing agreements.

1 eecom does not embed social media buttons, advertising trackers from social networks, or any third-party marketing pixels that would share your data with advertisers without your knowledge.

Children's Privacy

1 eecom is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If it comes to our attention that a person under 18 has created an account or provided us with personal data, we will take the following steps immediately:

• Suspend the account.
• Freeze all funds pending review.
• Delete all personal data associated with the account, subject to any legal obligations that require short-term retention.
• Void any bonuses or winnings accrued during the period of underage access.

If you are a parent or guardian and believe your child may have created a 1 eecom account, please contact us immediately at support@1eecom.biz. We will investigate and act without delay.

Updates to This Privacy Policy

1 eecom may update this Privacy Policy from time to time — for example in response to changes in data protection law, new features launched on the Platform, or changes to our third-party service providers. The "Last updated" date at the top of this page will always reflect when the most recent revision was made.

When we make significant changes — changes that materially affect your rights or how your data is processed — we will notify you in advance via email to your registered address and/or through an in-Platform notification. We will give you at least 14 days' notice before material changes take effect. Continued use of the Platform after the effective date of an update constitutes your acceptance of the revised policy.

We recommend reviewing this Privacy Policy periodically so you are always informed about how 1 eecom handles your personal information. If you have questions about any update, contact us before the change takes effect.

Contact & Complaints

If you have any question about this Privacy Policy, want to exercise a data right, or wish to raise a complaint about how 1 eecom has handled your personal data, please contact us through one of the following channels:

We aim to acknowledge privacy queries within five working days and to resolve them within 30 days. If we cannot resolve your complaint to your satisfaction, you have the right to escalate the matter to the relevant data protection authority. Details of the applicable authority will be provided upon request.

We take privacy complaints seriously. If something has gone wrong in how we have handled your data, we want to know about it so we can put it right and prevent it happening again.