jjpk Privacy Policy

1.1 Data Controller. jjpk operates as the data controller for all personal information collected through the jjpk platform at jjpk.org. As the data controller, jjpk determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you may contact our data protection team directly at [email protected].

1.2 Platform Scope. jjpk is Pakistan's premier online casino and sports betting platform, serving registered players across Karachi, Lahore, Faisalabad, Islamabad, and beyond. jjpk operates under an international gaming licence, and our data processing practices are carried out in full compliance with the data protection obligations imposed by that licence. All services are provided exclusively in English to players who meet the minimum age requirement of 21 years.

1.3 Questions and Contact. For any privacy-related queries, data subject requests, or concerns about the way jjpk processes your personal information, please contact us at [email protected]. We aim to respond to all data-related enquiries within five (5) business days.

2.1 Registration Data. When you create a jjpk account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, Pakistani CNIC number or passport number, residential address, email address, and mobile phone number registered in Pakistan.

2.2 Identity Verification (KYC) Data. To comply with our international gaming licence obligations and to prevent fraud and money laundering, jjpk conducts Know Your Customer (KYC) checks. During KYC verification, we may collect scanned copies or photographs of your government-issued photo identification (CNIC or passport), proof of residential address (such as a recent utility bill or bank statement), and documentation confirming ownership of your payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK account).

2.3 Financial Transaction Data. We collect records of all financial transactions processed through your jjpk account, including deposit amounts, withdrawal requests, payment method details (masked account numbers, wallet IDs), transaction timestamps, and transaction reference numbers. Full payment card or bank account numbers are never stored on jjpk servers.

2.4 Gaming Activity Data. jjpk records all gameplay activity associated with your account, including bets placed, games played, outcomes, wagering history, bonus usage, jackpot participations, and sports betting selections including cricket and PSL markets. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical and Device Data. When you access jjpk, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and geolocation data (country and city level). This data is used for fraud detection, security monitoring, and platform optimisation.

2.6 Communications Data. If you contact jjpk's customer support team via email, live chat, or any other channel, we retain records of those communications including the content of messages, timestamps, and any attachments, for quality assurance and dispute resolution purposes.

2.7 Responsible Gaming Data. If you use jjpk's responsible gaming tools — including deposit limits, loss limits, session timers, cooling-off periods, or self-exclusion — we record the details of those settings and requests. This data is treated with the highest level of confidentiality and is processed solely to protect your welfare and comply with our licence obligations.

jjpk uses the personal data we collect for the following specific purposes:

jjpk will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

jjpk processes your personal data under the following legal grounds, consistent with the data protection standards required by our international gaming licence:

• Contractual Necessity: Processing is necessary to perform the contract between you and jjpk — namely, providing you with a registered player account, processing your bets, and managing your PKR balance.
• Legal Obligation: Processing is required to comply with the obligations imposed by our international gaming licence, including KYC verification, age checks (21+), anti-money laundering monitoring, and responsible gaming enforcement.
• Legitimate Interests: Processing is carried out in jjpk's legitimate interests for fraud detection, security monitoring, platform analytics, and business operations, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent — particularly for marketing communications and certain cookie placements — you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5.1 We Do Not Sell Your Data. jjpk does not sell, rent, lease, or otherwise commercially transfer your personal information to third parties for their own marketing or commercial purposes.

5.2 Service Providers. jjpk works with a limited number of carefully vetted third-party service providers who assist in the operation of the platform. These may include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK), identity verification providers, game content providers, cloud hosting partners, fraud detection specialists, and customer support technology providers. All such partners are contractually bound to process your data only on jjpk's instructions and to the standard required by our international gaming licence.

5.3 Regulatory and Legal Disclosure. jjpk may disclose your personal data to regulatory authorities, law enforcement agencies, or gaming licence supervisory bodies where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity. jjpk will notify you of any such disclosure where permitted by applicable law.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial part of jjpk's business assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.

5.5 Aggregated Data. jjpk may share anonymised, aggregated statistical data about platform usage (such as the number of players in Karachi vs. Lahore, or popular game categories) with industry partners or for publication. This data cannot be used to identify any individual player.

6.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. jjpk uses cookies and similar tracking technologies (including web beacons and local storage objects) to make our platform function correctly, to improve your experience, and to gather analytics data.

6.2 Types of Cookies jjpk Uses.

• Strictly Necessary Cookies: Essential for the jjpk website to function. These enable login sessions, secure account access, and payment processing. They cannot be disabled without breaking core jjpk functionality.
• Performance and Analytics Cookies: Collect anonymised data about how players use jjpk — which pages are visited most, which games are popular, and where errors occur. This helps us improve the platform for Pakistani players.
• Functionality Cookies: Remember your preferences such as language, display settings, and recently played games to provide a more personalised experience on jjpk.
• Marketing and Targeting Cookies: Used only with your consent to deliver relevant promotional offers and to measure the effectiveness of jjpk's marketing campaigns. You may opt out at any time via your account settings.

6.3 Managing Cookies. You can control cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from accessing your jjpk account. For non-essential cookies, you may withdraw consent at any time by updating your preferences in the jjpk cookie settings panel.

7.1 Retention Periods. jjpk retains your personal data for as long as your account remains active and for a period thereafter as required by our international gaming licence and applicable anti-money laundering obligations. Typically, account and transaction records are retained for a minimum of five (5) years following account closure.

7.2 Self-Exclusion Records. Where a player has self-excluded from jjpk, we retain the data necessary to enforce that self-exclusion — including the player's name, email address, and phone number — for the full duration of the exclusion period and for a reasonable period afterwards to prevent re-registration.

7.3 KYC Documentation. Identity verification documents submitted during KYC are retained in accordance with the document retention requirements of our gaming licence, typically for a period of five (5) years following the end of the business relationship.

7.4 Deletion Requests. You may request deletion of your personal data at any time by contacting [email protected]. Please note that jjpk may be legally required to retain certain data even after an account is closed, in which case we will inform you of the specific categories of data we are obliged to retain and the legal basis for doing so.

8.1 Technical Safeguards. jjpk implements industry-standard technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption across all jjpk web and mobile interfaces
• Encrypted storage of all sensitive personal and financial data at rest
• Multi-factor authentication (MFA) available for all jjpk player accounts via SMS to your registered Pakistani mobile number
• Regular independent security audits and penetration testing of the jjpk platform
• Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis
• Real-time fraud monitoring and anomaly detection systems

8.2 Organisational Measures. All jjpk staff and contracted service providers who handle personal data are bound by confidentiality obligations and receive regular data protection training. Access to production systems containing player data is logged, audited, and reviewed on a regular basis.

8.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jjpk will notify the affected players and relevant regulatory authorities as required under our international gaming licence obligations, without undue delay.

As a jjpk player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our data protection team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data jjpk holds about you, free of charge, within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly from your jjpk account dashboard.
• Right to Erasure: You may request that jjpk delete your personal data, subject to our legal and regulatory obligations to retain certain data as described in Section 7.
• Right to Restrict Processing: In certain circumstances you may request that jjpk restrict the processing of your data — for example, if you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to jjpk's processing of your personal data for direct marketing purposes at any time, with no conditions attached. You may also object to processing based on legitimate interests.
• Right to Withdraw Consent: Where jjpk relies on consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

10.1 Strict 21+ Policy. jjpk is strictly an adults-only platform. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. The registration process requires users to confirm their age and to submit identity documents confirming they are 21 or older. Any account found to belong to an individual under 21 will be immediately closed and all associated data will be handled in accordance with our legal obligations.

10.2 Parental Controls. If you are a parent or guardian and you believe that a minor under the age of 21 has registered on jjpk, please contact us immediately at [email protected] with relevant details. jjpk will investigate the matter promptly and take appropriate action. We also encourage parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms.

10.3 No Marketing to Minors. jjpk does not direct any marketing communications towards individuals who are, or appear to be, under the age of 21. Our marketing practices are designed to target only adults who have opted in to receive jjpk promotional content.

11.1 Cross-Border Processing. As jjpk operates under an international gaming licence, some of your personal data may be processed or stored on servers located outside of Pakistan. Where this occurs, jjpk ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by our gaming licence obligations.

11.2 Safeguards. International data transfers conducted by jjpk or its third-party service providers are governed by contractual data protection clauses that require the receiving party to maintain equivalent data protection standards. jjpk does not transfer personal data to jurisdictions that do not provide adequate data protection unless appropriate contractual safeguards are in place.

11.3 Payment Processors. Pakistani payment processors — including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK — process your transaction data primarily within Pakistan and are subject to applicable Pakistani data protection and financial regulations.

12.1 Policy Updates. jjpk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations under our gaming licence, or applicable law. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

12.2 Notification of Material Changes. Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — jjpk will notify registered players by email to their registered address or via an on-platform notification at least fourteen (14) days before the changes take effect.

12.3 Continued Use. Your continued use of jjpk's platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue use of jjpk's services and may request account closure at [email protected].

13.1 Data Protection Contact. For any questions, concerns, or requests relating to this Privacy Policy or jjpk's data processing practices, please contact our data protection team at [email protected]. We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a full response within five (5) business days.

13.2 Complaints. If you are not satisfied with jjpk's response to a privacy concern, you have the right to escalate your complaint to the supervisory authority responsible for data protection under the jurisdiction of jjpk's international gaming licence. Details of the relevant authority will be provided upon request.

13.3 Dispute Resolution. jjpk is committed to resolving all privacy-related disputes fairly and promptly. Before escalating a complaint to an external authority, we encourage you to contact us directly so that we have the opportunity to address your concern. Our internal complaints process is free of charge and aims to resolve all issues within fourteen (14) days.