epivin Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the data protection practices of epivin ("epivin", "we", "us", "our"), operator of the online gaming and sports betting platform accessible at epivin.net. It describes how epivin collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who visit, register on, or transact with the epivin platform.

epivin takes its obligations regarding personal data seriously. We apply data minimisation principles — collecting only the information genuinely required to provide our services — and we maintain appropriate technical and organisational security measures to protect the data we hold against unauthorised access, loss, or misuse.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. By registering an epivin account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of applicable data protection law, e pivin is the data controller responsible for your personal information. epivin operates under an international gaming license and processes personal data in accordance with the data protection standards required by that licensing jurisdiction.

All data protection queries, subject access requests, and complaints should be directed to the epivin Data Protection contact detailed in Section 16 of this Policy. epivin is committed to responding to all legitimate data-related requests within a reasonable timeframe, and in any event within thirty (30) calendar days of receipt.

3 Data We Collect

epivin collects the following categories of personal data, depending on the nature of your interaction with the platform:

epivin does not intentionally collect sensitive personal data such as health information, racial or ethnic origin, religious beliefs, or political opinions, except where required by responsible gaming obligations (for example, where a player discloses a gambling-related health concern to our support team).

4 How We Collect Data

epivin collects personal data through the following means:

• Direct interactions: Information you provide when completing the epivin registration form, submitting KYC documents, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated technologies: As you navigate the epivin platform, our servers automatically collect technical and usage data including IP addresses, session logs, clickstream data, and device identifiers. This collection is facilitated through cookies, web beacons, and similar tracking technologies (see Section 10).
• Third-party payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, or USDT TRC20, epivin receives transaction confirmation data and, where required for AML compliance, identity data from those payment processors.
• Identity verification agencies: epivin may use third-party KYC and fraud-prevention services to verify the authenticity of identity documents submitted by players. These services may return verification scores, risk flags, and document authentication results to epivin.
• Publicly available sources: In certain compliance-related circumstances, epivin may cross-reference publicly available information, including sanctions lists, politically exposed person (PEP) databases, and adverse media, to fulfil our AML obligations.

5 How We Use Your Data

epivin processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your epivin account; processing login requests; resetting credentials; and managing account preferences.
• Service delivery: Enabling access to casino games including slots, live tables, and sports betting markets (PSL, international cricket, and other events); processing PKR deposits and withdrawals; and administering bonuses and promotions.
• Identity verification & KYC: Verifying that you meet the 21+ age requirement and confirming your identity to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Fraud prevention & security: Detecting and preventing fraudulent transactions, unauthorised account access, bonus abuse, multi-accounting, and other prohibited activities outlined in our Terms & Conditions.
• Regulatory compliance: Meeting obligations under epivin's international gaming license, including transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and, where required, applying deposit limits, loss limits, self-exclusion measures, or proactive outreach as described in our Responsible Gaming Policy.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and improving service quality based on support interaction data.
• Marketing: Sending promotional emails, SMS notifications, and in-platform messages about epivin bonuses, new game releases, and special offers, where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time (see Section 14).
• Platform improvement: Analysing aggregated and anonymised usage data to improve the epivin platform, optimise game performance, and enhance user experience.

6 Legal Basis for Processing

epivin relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and epivin — including account registration, KYC, gaming, and payment processing — is necessary for the delivery of the epivin service you have requested.
• Legal obligation: Certain processing activities, particularly those relating to AML, CTF, responsible gaming monitoring, and regulatory record-keeping, are required by the laws and licensing conditions to which epivin is subject.
• Legitimate interests: epivin processes some data — including fraud detection, security monitoring, and platform analytics — on the basis of legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where epivin relies on consent — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

epivin does not sell your personal data to third parties for their independent commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 network operators receive transaction data required to process deposits and withdrawals.
• KYC and identity verification providers: Third-party verification agencies receive identity document data to perform authentication checks on behalf of epivin.
• Game software providers: Casino game providers whose titles appear in the epivin lobby may receive anonymised player session data for game performance and fairness monitoring purposes.
• Fraud and AML service providers: Specialist compliance technology providers assist epivin in transaction monitoring, sanctions screening, and suspicious activity detection.
• Regulatory and law enforcement authorities: Where required by our gaming license, applicable law, or a valid court or regulatory order, epivin will disclose personal data to the relevant authority. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of epivin's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8 Data Retention

epivin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your epivin account being open and active.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements under international gaming regulations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, consistent with AML compliance obligations.
• Customer support communications: Retained for three (3) years following the closure of a support case, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for as long as the consent remains valid and for a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required, epivin will securely delete or anonymise it in a manner that prevents recovery or reconstruction of the original data.

9 Data Security

epivin implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the epivin platform;
• Encryption of sensitive data at rest, including financial data and identity document files;
• Role-based access controls ensuring that only authorised epivin personnel with a legitimate business need can access personal data;
• Regular security assessments, vulnerability scanning, and penetration testing of the epivin platform;
• Multi-factor authentication (MFA) requirements for internal epivin systems that handle personal data;
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable requirements.

While epivin takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your epivin account credentials and must notify us immediately if you suspect any unauthorised use of your account.

10 Cookies & Tracking Technologies

epivin uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognise returning users, maintain session state, and analyse platform usage.

The categories of cookies epivin uses are as follows:

• Strictly necessary cookies: Required for the epivin platform to function. These include session authentication cookies that keep you logged in during your gaming session. These cookies cannot be disabled.
• Analytical cookies: Help epivin understand how players navigate and use the platform, which games are most popular, and where technical issues arise. This data is aggregated and used solely for internal platform improvement.
• Preference cookies: Remember your platform settings and preferences, such as language, display options, and notification settings, so you do not need to re-configure them on every visit.
• Security cookies: Support fraud detection and account security functions, including identifying suspicious login patterns and bot traffic.

You can manage cookie preferences through your browser settings. Disabling certain non-essential cookies may affect the functionality of some epivin platform features. epivin does not use cookies to serve third-party advertising or share browsing data with advertising networks.

11 Your Data Rights

Subject to applicable data protection law and epivin's regulatory obligations, you have the following rights regarding your personal data held by epivin:

• Right of access: You may request a copy of the personal data epivin holds about you (commonly known as a Subject Access Request or SAR).
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For certain data types, you can update your information directly through your epivin account dashboard.
• Right to erasure: In certain circumstances you may request deletion of your personal data. Please note that epivin may be required by law or licensing conditions to retain certain data (particularly KYC and financial records) even following an erasure request.
• Right to restriction: You may request that epivin restricts the processing of your personal data in defined circumstances, such as while a complaint or accuracy dispute is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that epivin provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. epivin will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact epivin's support team via the live chat facility on your account dashboard or via the support email address listed in Section 16. epivin will respond to all verified requests within thirty (30) calendar days. We may need to verify your identity before processing a request to protect against unauthorised disclosures.

12 Minors & Age Policy

epivin is strictly a 21+ platform. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the epivin KYC process and is enforced before any withdrawal is permitted.

If you are a parent or guardian and believe that a person under 21 has accessed or registered on the epivin platform, please contact our support team immediately via live chat or the email address in Section 16. We will investigate and take appropriate action promptly.

13 International Data Transfers

As an internationally licensed gaming operator, epivin may transfer personal data to third-party service providers located outside Pakistan, including KYC verification agencies, game software providers, and cloud infrastructure providers. Where such transfers occur, epivin ensures that adequate safeguards are in place to protect your data, including contractual data transfer agreements that impose data protection obligations equivalent to those applied by epivin.

By using the epivin platform and consenting to this Privacy Policy, you acknowledge and agree that your personal data may be transferred to and processed in jurisdictions outside Pakistan in the manner described in this Policy.

14 Marketing Communications

With your consent, epivin may send you promotional communications about new games, special bonuses, PKR deposit match offers, PSL betting promotions, and other epivin campaigns. These communications may be delivered by email, SMS, or in-platform notification.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any epivin marketing email;
• Replying STOP to any epivin marketing SMS;
• Updating your communication preferences in the notifications section of your epivin account dashboard; or
• Contacting epivin support via live chat or the support email in Section 16.

Opting out of marketing communications does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — these are sent as part of the core epivin service and cannot be disabled while your account is active.

15 Policy Changes

epivin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, epivin will provide advance notice through a prominent banner on the epivin website and, where reasonably practicable, by email to your registered address.

The updated Policy will always display the effective date at the top of this page. Your continued use of the epivin platform following the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed about how epivin protects your data.

16 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or epivin's data processing practices, or if you wish to exercise any of the rights described in Section 11, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly from your epivin account dashboard — the fastest route to our support and compliance team.
• Support Email: [email protected] — for formal written data protection queries, Subject Access Requests, and privacy complaints. Please mark your email with the subject line "Data Protection Request" to ensure it is routed to the correct team. Allow up to thirty (30) calendar days for a full written response.

If you are not satisfied with epivin's response to a privacy complaint, you have the right to escalate your complaint to the data protection authority or regulator in the jurisdiction relevant to your matter, or to the supervisory body associated with epivin's gaming license.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available on request from the epivin compliance team.