Privacy Policy

This Privacy Policy (hereinafter "Policy") is published by 1eec (hereinafter "1eec", "we", "us" or "our"), the operator of the online gaming and sports betting information platform accessible at https://1eec.cam (the "Platform"). This Policy describes how we collect, receive, use, store, share, transfer and process personal data relating to users of the Platform (hereinafter "you", "User" or "Data Subject").

This Policy is an integral part of the 1eec Terms and Conditions. By registering an Account, accessing the Platform or submitting any personal data to us, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform and must not submit any personal data to us.

We are committed to protecting the privacy and security of your personal data and to operating in accordance with applicable data protection legislation in the jurisdiction in which 1eec holds its operating licence. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, email address, phone number, government identification number, IP address and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure or deletion.
• "Data Controller" means 1eec, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of 1eec pursuant to a data-processing agreement.
• "Data Subject" means any identified or identifiable natural person whose Personal Data is processed by 1eec — in the context of this Policy, primarily a registered User of the Platform.
• "KYC Data" means identity and age verification documents submitted by a User, including but not limited to CNIC, passport, proof of address and liveness/selfie checks.
• "Sensitive Data" means categories of Personal Data that warrant heightened protection, including government-issued identification numbers, financial data and biometric data where applicable under applicable law.
• "Cookie" means a small text file placed on a User's device by the Platform for the purposes described in Section 10 of this Policy.

We collect and process the following categories of Personal Data in connection with your use of the 1eec Platform:

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data or sexual orientation) except where expressly required by applicable law or where you have provided explicit consent for a specific purpose.

We collect Personal Data through the following channels:

• Direct submission by you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated collection: Through cookies, web server logs, and analytics tools that record your interactions with the Platform, including pages visited, session duration, device characteristics and IP address.
• Third-party sources: From identity verification service providers and payment processors engaged by 1eec under data-processing agreements, where such data is required to complete KYC or to process a financial transaction.
• Publicly available sources: Where necessary for fraud prevention or AML compliance, from publicly accessible government registers or sanction lists.

We process your Personal Data on one or more of the following lawful bases, depending on the nature and purpose of the processing activity:

1. Performance of a Contract: Processing is necessary to perform our obligations to you under the Terms and Conditions — including Account management, transaction processing, game provision, and dispute resolution.
2. Legal Obligation: Processing is necessary to comply with applicable legal requirements, including KYC/AML obligations under anti-money-laundering legislation applicable in our licensing jurisdiction, and any court orders or regulatory instructions we are required to comply with.
3. Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, service analytics and responsible-gambling monitoring.
4. Consent: Where we rely on your consent as the legal basis for processing — for example, in relation to optional marketing communications — you have the right to withdraw that consent at any time by contacting our support team or updating your Account notification preferences.

The Personal Data we collect is used for the following purposes:

• To create, maintain and manage your Account;
• To verify your identity and age in compliance with KYC obligations;
• To process deposits, withdrawals and any associated payment reconciliation;
• To provide access to sports betting markets — including PSL, ICC and T20I cricket, football, UFC and other events — and casino gaming products;
• To detect and prevent fraud, money laundering, collusion, bonus abuse and other prohibited activities;
• To enforce our Terms and Conditions and respond to disputes or complaints;
• To monitor betting and gaming patterns in connection with our responsible-gambling obligations;
• To communicate with you regarding your Account, including transaction confirmations, security alerts and support responses;
• To send promotional communications where you have consented to receive them;
• To analyse Platform usage for service optimisation, security improvements and quality assurance;
• To comply with applicable legal, regulatory and tax obligations in our licensing jurisdiction.

We will not use your Personal Data for purposes that are incompatible with those listed above without first obtaining your consent or establishing an additional lawful basis for processing.

1eec does not sell, rent or trade your Personal Data to any third party. We may disclose Personal Data to the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment Processors: Financial service providers and payment gateway operators engaged to process your deposit or withdrawal transactions. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this context are to familiar Pakistani payment infrastructure. No disclosure implies endorsement of gambling services by these providers.
• KYC / Identity Verification Partners: Third-party service providers engaged to verify identity documents and perform liveness checks, operating under contractual data-processing agreements.
• Game Studio Technology Providers: Game server operators who may receive technical session data (e.g., User ID, game round results) necessary to deliver and settle gaming transactions.
• Legal and Regulatory Authorities: Government authorities, courts, regulators or law-enforcement bodies where disclosure is required by applicable law, court order or lawful regulatory demand.
• Professional Advisers: Legal counsel, auditors and accountants, subject to obligations of confidentiality.
• Business Successors: In the event of a corporate restructuring, merger, acquisition or asset sale involving 1eec, Personal Data may be transferred to the successor entity subject to equivalent data-protection obligations.

All third-party Data Processors engaged by 1eec are required to process Personal Data only on our documented instructions and to implement appropriate technical and organisational security measures.

We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to perform our contractual obligations to you, and to comply with applicable legal and regulatory retention requirements.

The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account and for a defined period following Account closure, in accordance with applicable legal obligations including AML record-keeping requirements.
• KYC / Identity Documents: Retained for the period required by applicable anti-money-laundering legislation in the Platform's licensing jurisdiction. This is typically five (5) years from the date of the last transaction or Account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum period required by applicable financial regulation and tax law.
• Communication Logs: Support chat transcripts and email correspondence are retained for the period necessary to resolve disputes and for quality assurance purposes.
• Technical Logs: Server and access logs are retained for security and fraud-investigation purposes for a defined period not exceeding operational necessity.

When Personal Data is no longer required and no legal obligation exists to retain it, we will delete or anonymise it in a secure manner.

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption.
• Password Security: Account passwords are stored in hashed, salted form. We do not store your password in plain text under any circumstances.
• Access Controls: Access to Personal Data within 1eec is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• KYC Document Controls: Identity documents are processed through a dedicated secure portal with strict access logging and are not accessible to general customer-service staff.
• Fraud Monitoring: Automated systems monitor account activity for patterns indicative of unauthorised access, fraud or account-takeover attempts.
• Incident Response: We maintain an internal data-breach response procedure. Where a breach presents a risk to Data Subjects, we will notify the relevant supervisory authority and, where appropriate, affected users in accordance with applicable law.

The 1eec Platform uses cookies and similar tracking technologies to support Platform functionality, remember your preferences and analyse usage patterns. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a browsing session. These cannot be disabled without impairing Platform functionality.
• Functional / Preference Cookies: Used to remember your settings and preferences, such as language selection, odds format and display preferences.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — pages visited, session duration, device type and geographic region (country level). This data is used to improve Platform performance and content.
• Security Cookies: Used to detect and prevent fraudulent activity, including account-takeover attempts and bot traffic.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the Platform. Strictly necessary cookies cannot be disabled without preventing you from using the Platform.

Subject to the applicable data protection legislation in our licensing jurisdiction, you have the following rights in relation to your Personal Data held by 1eec:

To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to verified requests within the timeframe required by applicable law — typically within one calendar month. We may request additional information to verify your identity before processing a data subject request.

The 1eec Platform is strictly for adults aged 18 years and over, or the higher minimum age required by the operator's license jurisdiction or by the laws applicable in your country or territory of residence. We do not knowingly collect or process Personal Data from persons below the applicable minimum age.

If we become aware, or have reasonable grounds to believe, that a person below the minimum age has submitted Personal Data to us, we will promptly suspend the relevant Account, delete or securely dispose of the associated Personal Data, and return any funds deposited through appropriate channels.

If you believe that a person under the applicable minimum age has registered an Account or submitted data to us, please contact our support team immediately using the details in Section 15.

In operating the Platform and providing our services, your Personal Data may be transferred to and processed in countries other than your country of residence. Such transfers may include transfers to the jurisdiction in which 1eec holds its operating licence, and to jurisdictions where our third-party Data Processors — including KYC verification partners and payment technology providers — are located.

Where we transfer Personal Data internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection law. These safeguards may include standard contractual clauses, binding corporate rules, adequacy decisions or other recognised transfer mechanisms as appropriate.

You may request information about the specific safeguards applicable to international transfers of your Personal Data by contacting us using the details in Section 15.

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or operational requirements. Where changes are material, we will endeavour to provide reasonable notice by posting the updated Policy on this page with a revised "Last Updated" date.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the updated terms. Where any amendment materially affects your rights and we are required by applicable law to obtain consent for the revised processing, we will seek your explicit consent before the changes take effect.

If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of your rights as a Data Subject as described in Section 11, please contact us through the following channels:

• Support Email: [email protected]  (plain text — not a clickable link)
• Live Chat: Available 24/7 via the in-Platform chat interface (operator-stated availability). Accessible after logging in to your Account.
• Language: We can handle data subject requests submitted in English. Urdu support is also available from our team.

When submitting a data subject request, please include sufficient information to allow us to verify your identity — your registered email address and Account username are typically sufficient for this purpose. We aim to acknowledge all data subject requests within five (5) business days and to respond substantively within the timeframe required by applicable law.