jjwin Privacy Policy —
How We Handle Your Data

1.1 Who We Are. jjwin is operated by a licensed international gaming entity (referred to herein as "the Operator") holding a valid gaming licence from a recognised offshore gaming jurisdiction. jjwin operates the online platform accessible at jjwin.one, which provides Pakistani players with online casino games, sports betting, live dealer gaming, and related financial wallet services denominated in Pakistani Rupees (PKR).

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected through or in connection with: (a) the jjwin website and mobile browser platform; (b) the jjwin account registration and verification process; (c) deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, NayaPay, VISA, Mastercard, and cryptocurrency; (d) all gaming activity including slots, live dealer tables, cricket betting, and other sportsbook markets; (e) customer support interactions via live chat, email, and any other communication channel operated by jjwin.

1.3 Relationship to Terms & Conditions. This Privacy Policy is incorporated into and forms part of the jjwin Terms & Conditions. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise stated herein.

2.1 Categories of Personal Data. jjwin collects personal data falling into the following categories:

2.2 Sensitive Data. jjwin treats CNIC images and national identification numbers as sensitive personal data subject to enhanced security controls. This data is processed only for the purpose of fulfilling our Know Your Customer (KYC) obligations and is accessible only to authorised jjwin personnel and contracted KYC verification service providers.

2.3 Data You Choose Not to Provide. Certain personal data is required to operate your jjwin account. If you decline to provide mandatory data — in particular, CNIC information for identity verification — jjwin will be unable to process withdrawals or maintain an active account on your behalf. Optional data that you choose not to provide will simply not be held by jjwin.

3.1 Directly From You. The majority of personal data jjwin holds is provided directly by you during: (a) account registration on the jjwin platform; (b) KYC identity verification processes; (c) deposit and withdrawal transactions; (d) contact with jjwin's customer support team; (e) responses to promotional communications and surveys.

3.2 Automatically During Platform Use. When you access jjwin through your browser — whether on your mobile in Karachi, Lahore, Faisalabad, or anywhere else in Pakistan — we automatically collect certain technical data including your IP address, device identifiers, browser type, and the pages or games you interact with. This data is collected through server logs, cookies, and similar tracking technologies described further in Section 7.

3.3 From Third Parties. jjwin may receive personal data about you from the following third-party sources:

• Payment processors (JazzCash, EasyPaisa, partner banks) — transaction confirmations and payment identifiers necessary to reconcile your jjwin wallet.
• KYC verification service providers — identity verification outcomes and document authenticity assessments based on your CNIC data.
• Fraud detection and AML screening services — risk signals and watchlist screening results used to protect the integrity of the jjwin platform.
• Analytics providers — aggregated, anonymised platform usage data used to improve jjwin's services (no individual-level personal data is received from analytics providers).

4.1 Purposes. jjwin processes your personal data for the following purposes, each supported by a specific legal basis:

Processing is necessary for the performance of the contract between you and jjwin (your account agreement). This includes registering your account, authenticating your login, maintaining your PKR wallet, processing deposits and withdrawals, and delivering the gaming services you have subscribed to.

Processing is necessary for compliance with legal obligations under our international gaming licence, which mandates Know Your Customer and Anti-Money Laundering procedures. CNIC verification, age confirmation (21+), and source-of-funds checks fall under this category.

Processing is based on jjwin's legitimate interests in protecting the Platform and its players from fraud, money laundering, account takeover, and game integrity violations. Device fingerprinting, IP monitoring, and login pattern analysis serve this purpose.

Processing of gameplay activity data is necessary to fulfil jjwin's responsible gaming obligations under its gaming licence. This includes monitoring for problem gambling indicators, enforcing deposit limits, and processing self-exclusion requests.

Communications data is processed on the basis of contractual necessity and legitimate interests, to resolve your queries, process complaints, and improve service quality. Support interactions may be reviewed by jjwin's quality assurance team.

Where you have explicitly consented to receive promotional communications from jjwin, we may use your contact data to send information about bonuses, new games, and promotions. You may withdraw marketing consent at any time by contacting jjwin support or using the unsubscribe mechanism in any communication.

5.1 Principle of Minimum Sharing. jjwin operates on a strict data minimisation principle when sharing personal data with third parties. We share only the minimum data necessary to fulfil the specific purpose for which sharing is required. We do not sell, rent, or provide personal data to any party for that party's own marketing, advertising, or commercial purposes.

5.2 Categories of Recipient. jjwin may share your personal data with the following categories of third parties:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, NayaPay, VISA/Mastercard network processors, and cryptocurrency exchange partners. Data shared: name, account identifiers, transaction amounts, and wallet reference numbers as required to process your financial transactions.
• KYC and identity verification partners — third-party services that verify the authenticity of CNIC documents and confirm player identity and age. Data shared: CNIC number, images, and personal details necessary for verification.
• Fraud detection and AML service providers — automated systems and human review services that screen player activity against fraud indicators and watchlists. Data shared: transaction patterns, IP addresses, and device identifiers.
• Game software providers — third-party studios whose games are hosted on the jjwin platform (e.g., for live dealer games and slot titles). Data shared: limited session identifiers necessary for game delivery; personally identifiable data is not shared with game studios except where required for jackpot validation.
• Regulatory authorities and law enforcement — jjwin will share personal data with gaming regulators, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory directive. jjwin will, where legally permitted, notify affected players of such disclosures.
• Professional advisors — legal counsel, accountants, and auditors who provide professional services to jjwin, subject to strict confidentiality obligations.

5.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of jjwin's business, personal data held by jjwin may be transferred to the successor entity. jjwin will notify affected players of any such transfer and the successor entity will be bound by this Privacy Policy or a materially equivalent policy.

6.1 Transfer Context. jjwin is operated by an international gaming entity and may process and store personal data on servers located outside of Pakistan. Your personal data — including CNIC verification records, wallet transaction history, and gameplay logs — may be transferred to, processed in, or stored in jurisdictions other than Pakistan where data protection laws may differ from those applicable in Pakistan.

6.2 Transfer Safeguards. Where personal data is transferred internationally, jjwin ensures that appropriate safeguards are in place, including: contractual data protection clauses with service providers, processing only in jurisdictions with adequate data protection frameworks as recognised by jjwin's licensing authority, and technical security measures including encryption during transit and at rest.

6.3 By Using jjwin. By creating a jjwin account and using the Platform, you acknowledge and consent to the international transfer of your personal data as described in this Section, subject always to the security and minimisation standards described in this Privacy Policy.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. jjwin uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences, and analyse usage patterns to improve the jjwin experience.

7.2 Types of Cookies Used by jjwin.

• Strictly Necessary Cookies: Essential to the operation of the jjwin Platform. These maintain your login session, prevent session hijacking, and enable core wallet and gaming functions. These cannot be disabled without disabling jjwin itself.
• Functional Cookies: Remember your preferences such as preferred game categories, responsible gaming settings, and notification preferences. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to understand how players navigate jjwin — which games are most visited, where players encounter difficulties, and how the platform can be improved. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Support jjwin's fraud detection and account security features, including device fingerprinting used to identify unusual login attempts.

7.3 Cookie Management. You may manage cookie preferences through your browser settings. Blocking all cookies will impair or prevent your ability to use jjwin, as session management cookies are strictly necessary. Analytics and functional cookies may be disabled without affecting core Platform functionality.

8.1 Technical Measures. jjwin implements the following technical security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and jjwin's servers — the same standard used by major Pakistani financial institutions including HBL and Meezan Bank.
• Encryption at rest for sensitive data categories including CNIC details, financial account numbers, and authentication credentials stored in jjwin's databases.
• Two-factor authentication (2FA) available on all jjwin accounts, using OTP delivery to your registered Pakistani mobile number.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with comprehensive access audit logging.
• Intrusion detection and monitoring systems that alert jjwin's security team to unusual access patterns or potential breaches in real time.
• Regular security assessments including penetration testing and vulnerability scanning of jjwin's platform infrastructure.

8.2 Organisational Measures. Beyond technical controls, jjwin maintains organisational data security measures including: mandatory data protection training for all personnel with access to personal data; contractual confidentiality obligations for all third-party service providers; a documented data breach response procedure; and a designated data protection function responsible for overseeing compliance with this Privacy Policy.

8.3 No Absolute Guarantee. While jjwin takes all reasonable technical and organisational precautions to protect your personal data, no transmission over the internet or electronic storage system is completely secure. jjwin cannot absolutely guarantee the security of data transmitted to the Platform. You play a role in your own security — in particular by using a strong, unique password and enabling 2FA on your jjwin account.

9.1 Retention Principles. jjwin retains personal data only for as long as is necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by the obligations of our international gaming licence, AML regulations, or applicable law.

9.2 Retention Periods. The following standard retention periods apply to jjwin player data:

9.3 Deletion Requests. Players may request deletion of personal data not subject to mandatory retention obligations by contacting jjwin support. jjwin will respond to deletion requests within 30 calendar days and will confirm what data has been deleted and what data must be retained and why. Data that jjwin is legally required to retain cannot be deleted regardless of the player's request; however, such data will be held in restricted access storage with access limited to compliance functions only.

10.1 Rights Available to jjwin Players. All jjwin players — including Pakistani players whose primary access to jjwin is through mobile browsers — have the following rights with respect to their personal data held by jjwin:

• Right of Access: You may request a copy of the personal data jjwin holds about you. jjwin will provide this within 30 calendar days of a verified request, free of charge for reasonable requests.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected. Account holders may update certain information (such as email address) directly through their account settings; other corrections require a support request.
• Right to Deletion ("Right to Be Forgotten"): You may request deletion of personal data where it is no longer necessary for the purpose for which it was collected and is not subject to mandatory retention obligations. See Section 9.3 for the applicable process and limitations.
• Right to Restriction: In certain circumstances, you may request that jjwin restrict its processing of your personal data — for example, while a dispute regarding accuracy is being resolved.
• Right to Object: You may object to jjwin's processing of your personal data where that processing is based on legitimate interests. jjwin will consider your objection and cease processing if it cannot demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where jjwin's processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10.2 How to Exercise Your Rights. All data rights requests should be submitted to jjwin's support team via live chat or email at support jjwin.one. jjwin may require you to verify your identity before processing data rights requests to ensure we do not disclose your data to an unauthorised party. jjwin will respond within 30 calendar days and will provide reasons if a request cannot be fulfilled.

11.1 Age Restriction. 21+ jjwin's services are strictly restricted to individuals aged 21 and above. jjwin does not knowingly collect personal data from any person under the age of 21. The jjwin registration process includes mandatory CNIC-based age verification that prevents under-21 individuals from completing account creation.

11.2 Discovery of Minor's Data. If jjwin becomes aware that personal data has been collected from an individual who is under 21 years of age — regardless of whether that individual misrepresented their age during registration — jjwin will: (a) immediately suspend the affected account; (b) permanently delete all personal data associated with the account to the extent not required to be retained under AML or licence obligations; (c) refund any deposited funds that have not been used in gaming to the payment method used for deposit; (d) report the incident to relevant authorities where required under applicable law.

11.3 Reporting Underage Access. If you have reason to believe that a person under 21 is accessing or has accessed jjwin, please report this to jjwin support immediately. We take underage gambling prevention extremely seriously as both a regulatory obligation and an ethical commitment.

12.1 Scope Limitation. This Privacy Policy applies exclusively to the jjwin Platform operated at jjwin.one. The jjwin Platform may reference or link to third-party content providers, game studios, or regulatory information. jjwin does not control the content or privacy practices of any third-party website or service and is not responsible for their data handling.

12.2 No Endorsement. The inclusion of any reference to a third-party service within jjwin does not constitute an endorsement of that service's privacy practices. Players accessing any third-party service do so under their own responsibility and should review the applicable third-party privacy policy independently.

13.1 Right to Update. jjwin reserves the right to modify or update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our service offerings. The "Last Updated" date shown at the top of this document will be revised whenever material changes are made.

13.2 Notification of Changes. Where changes to this Privacy Policy are material — meaning they affect the purposes for which your data is processed, the third parties with whom it is shared, or your data rights — jjwin will notify you via your registered mobile number or email address at least 14 days before the changes take effect. For minor updates (such as clarifications or formatting changes), notification on the Platform is sufficient.

13.3 Continued Use. Your continued use of jjwin following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept material changes to this Privacy Policy, you should cease using jjwin and may close your account; your Real Money Balance will be returned subject to applicable verification procedures.

14.1 Data Queries. For questions, concerns, or requests related to this Privacy Policy or jjwin's handling of your personal data, please contact jjwin's data protection function through the following channel:

jjwin Data Protection Contact
Email: support jjwin.one
Please include "Privacy Request" or "Data Rights" in the subject line of your message. jjwin will acknowledge your contact within 48 hours and provide a substantive response within 30 calendar days.

14.2 Complaints. If you are dissatisfied with jjwin's response to a data-related complaint, you have the right to escalate the matter to the independent dispute resolution body designated by jjwin's licensing authority, whose contact details are available from jjwin upon request. This escalation right is separate from and in addition to any rights you may have under applicable Pakistani privacy or consumer protection law.

14.3 Support Channels. For general support queries not related to data rights, please use jjwin's live chat service available 24/7 through the Platform. Our support team includes Urdu-speaking agents for players who prefer to communicate in Urdu on sensitive matters including data and responsible gaming.