jj1 Privacy Policy

1. About This Privacy Policy

This Privacy Policy describes how jj1 — operating the online gaming and sports betting platform at jj1.im — collects, processes, stores, and protects the personal data of registered users and visitors. It applies to all jj1 services, including cricket betting, live dealer casino games, slot games, fishing arcade games, and the jj1 account and payment system.

This policy is incorporated by reference into the jj1 Terms & Conditions. By registering a jj1 Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have any questions about how jj1 handles your personal data before or after reading this policy in full, please contact the jj1 support team. Details are in Section 15 of this document.

2. Data Controller

For the purposes of this Privacy Policy, jj1 is the data controller — meaning jj1 determines the purposes and means by which your personal data is processed. jj1 operates under an internationally recognised gaming license and maintains its data processing infrastructure in accordance with the obligations imposed by that license.

Where jj1 engages third-party service providers who process personal data on jj1's behalf (for example, KYC verification services, payment processors, or cloud hosting providers), those providers act as data processors under contracts that impose equivalent data protection obligations on them. jj1 retains responsibility for your data throughout.

3. Personal Data We Collect

jj1 collects personal data in the following categories. Not all categories apply to every user — the data collected depends on the features of jj1 you use and the level of account activity you engage in.

4. How We Collect Your Data

jj1 collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide when completing jj1's registration form, submitting KYC documents, contacting support, or entering payment details for a deposit or withdrawal.
• Automated collection: Data collected automatically when you visit jj1.im, including IP address, device identifiers, browser fingerprint, and session behaviour tracked via server logs and first-party cookies.
• Transaction processing: Financial data received from payment processors (such as JazzCash, EasyPaisa, and bank transfer systems) when you initiate a deposit or withdrawal on jj1.
• KYC providers: Identity verification results and age confirmation data received from jj1's licensed third-party KYC verification service providers, who verify the documents you submit.
• Game providers: Gaming session data generated by the third-party game providers (slot studios, live casino studios, fishing arcade providers) whose games are hosted on jj1's platform, and relayed to jj1 for account and compliance purposes.
• Fraud and AML screening: Risk scores and flagging data generated by jj1's anti-money-laundering and fraud detection tools when your account activity is assessed against risk parameters.

5. Purposes for Which We Use Your Data

jj1 processes your personal data for the following specific purposes:

1. Account creation and management: To register your jj1 account, verify your identity and age (21+ requirement), manage your account settings, and maintain your account history.
2. Service delivery: To make jj1's gaming products — including cricket betting, live casino, slots, and fishing games — available and functional for your registered account.
3. Payment processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20, and to process withdrawal requests to your verified payment method.
4. Regulatory compliance: To fulfil jj1's obligations under its international gaming license, including anti-money-laundering (AML) checks, responsible gaming monitoring, and record-keeping requirements.
5. Fraud prevention and security: To detect and prevent fraudulent account activity, duplicate registrations, bonus abuse, money laundering, and use of automated tools or bots on jj1.
6. Customer support: To respond to your queries, process complaints, manage disputes, and provide multilingual support (including Urdu support during peak hours).
7. Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling, enforce deposit limits or self-exclusion periods you have set, and send responsible gaming communications where required.
8. Platform improvement: To analyse aggregated, anonymised usage patterns across jj1 to improve the platform's design, game selection, loading speed, and overall user experience for Pakistani players.
9. Legal obligations: To respond to lawful requests from regulatory authorities, courts, or law enforcement agencies with jurisdiction over jj1 or its users.

6. Legal Bases for Processing

jj1 processes your personal data on the following legal bases, as applicable under the data protection framework of jj1's licensing jurisdiction:

• Contractual necessity: Processing required to fulfil jj1's obligations under the Terms & Conditions — including account management, payment processing, and service delivery — is carried out because it is necessary to perform the contract between you and jj1.
• Legal obligation: Processing required to comply with jj1's regulatory obligations under its gaming license — including AML screening, KYC verification, and responsible gaming monitoring — is carried out because it is required by law or regulatory requirement.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics is carried out based on jj1's legitimate interests in operating a secure and commercially sustainable gaming platform, balanced against your privacy interests.
• Consent: Where jj1 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time by contacting jj1 support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7. Sharing Your Personal Data

jj1 does not sell your personal data. Data is shared only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with the relevant payment service provider (e.g., JazzCash, EasyPaisa, HBL) to the extent necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Your identity documents and biometric data (where submitted) are shared with jj1's licensed KYC provider solely for the purpose of verifying your identity and age for account compliance.
• Game technology providers: Your account identifier and session data is shared with the licensed third-party studios whose games are hosted on jj1, to the extent required to deliver and record your gaming sessions.
• Fraud and AML screening services: Relevant account and transaction data is shared with jj1's anti-fraud and AML compliance tools for risk assessment purposes.
• Cloud and hosting infrastructure: Your data is stored on servers managed by jj1's cloud infrastructure provider, under a data processing agreement that prohibits that provider from accessing or using your data for any purpose other than hosting.
• Legal and regulatory authorities: jj1 will disclose personal data to courts, regulators, or law enforcement agencies where required to do so by a valid legal order, court judgment, or regulatory direction applicable to jj1's licensed operations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of jj1's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. You will be notified of any such transfer.

8. Cookies & Tracking Technologies

jj1.im uses first-party cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device by your browser when you visit jj1.im. jj1 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session authentication tokens that keep you logged in to your jj1 account, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences on jj1.im, such as your preferred language, display settings, and last-used deposit method. These improve your experience but are not essential.
• Analytics cookies: First-party analytics cookies that help jj1 understand how users navigate jj1.im — which pages are visited most, where users drop off, and how the Platform performs on different devices. Data collected is aggregated and anonymised before analysis.
• Security cookies: Used by jj1's fraud detection system to identify unusual access patterns — such as a login from a new device or an IP address inconsistent with your usual location — so that jj1 can protect your account.

jj1 does not use third-party advertising cookies or tracking pixels for retargeting purposes. You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your ability to use some features of jj1.im correctly.

9. Data Retention

jj1 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by jj1's gaming license and applicable regulatory obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of 5 years from the date of account closure, as required under jj1's anti-money-laundering compliance obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, to support financial audit and regulatory inspection requirements.
• Gaming session logs: Retained for a minimum of 3 years from the date of each session, for dispute resolution and regulatory compliance purposes.
• Customer support records: Retained for 2 years from the date of the most recent interaction, unless a longer retention period is required in connection with an unresolved dispute or regulatory inquiry.
• Self-exclusion records: Retained indefinitely, to ensure that self-exclusion decisions are honoured and not overridden by a future registration attempt using different contact details.
• Marketing consent records: Retained for the duration of your jj1 account and for 2 years after account closure, as evidence of the lawful basis for any marketing communications sent.

When data is no longer required for any active purpose and its retention period has expired, it is securely deleted or irreversibly anonymised by jj1's data management systems on a scheduled cycle.

10. Security Measures

jj1 takes the security of your personal data seriously and implements a layered set of technical and organisational security measures to protect it from unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and jj1's servers is encrypted using TLS 1.2 or higher. jj1.im enforces HTTPS on all pages and API endpoints.
• Encryption at rest: Sensitive personal data stored in jj1's databases — including identity documents, financial records, and CNIC data — is encrypted using AES-256 at rest.
• Access controls: Internal access to user personal data is restricted to jj1 staff members who require it to perform their specific job functions. Access is controlled via role-based permissions, multi-factor authentication, and access logging.
• Security audits: jj1's platform and data infrastructure undergo periodic security assessments, including vulnerability scanning and penetration testing, conducted by qualified third-party security professionals.
• Incident response: In the event of a data breach that is likely to result in risk to users' rights or interests, jj1 will notify affected users within 72 hours of becoming aware of the breach, and will notify relevant regulatory authorities as required.

11. Your Privacy Rights

jj1 respects your rights over your personal data. The following rights are available to jj1 users. To exercise any of these rights, submit a written request to jj1 support at the contact details in Section 15. jj1 will acknowledge your request within 5 business days and will fulfil it within 30 calendar days, subject to the exceptions noted below.

Please note that certain rights — particularly the right to erasure — may be limited where jj1 is legally required to retain data. For example, jj1 cannot delete transaction records required to be kept for 5 years under AML regulations, even upon request. jj1 will explain any limitations that apply when responding to your rights request.

12. Minors & Age Verification

jj1 is strictly an adult platform. No person under the age of 21 may register a jj1 account or use any jj1 gaming service. jj1 does not knowingly collect or process personal data from individuals under 21 years of age.

As part of jj1's commitment to preventing underage gambling, all accounts are subject to age verification before withdrawal privileges are activated. Age verification uses CNIC document review and, where required, liveness detection technology to confirm that the document holder matches the account applicant.

If you are a parent or guardian and believe your child may have registered a jj1 account, please contact jj1 support immediately at [email protected] so that jj1 can investigate and take appropriate action without delay.

13. International Data Transfers

jj1 operates under an international gaming license and its data infrastructure may involve storage or processing of personal data in jurisdictions outside Pakistan. This may include jj1's cloud hosting environment, third-party KYC provider infrastructure, or game server locations.

Where personal data is transferred outside Pakistan to a jurisdiction that does not provide an equivalent level of data protection, jj1 ensures that appropriate safeguards are in place. These safeguards may include:

• Standard contractual clauses or equivalent data transfer mechanisms with the receiving entity;
• Processing only by entities subject to binding corporate rules or equivalent data protection commitments;
• Transfers to jurisdictions that jj1's licensing authority has assessed as providing adequate data protection.

By registering a jj1 account, you acknowledge that your personal data may be transferred internationally as described in this section, subject to the safeguards described above.

14. Changes to This Privacy Policy

jj1 may update this Privacy Policy from time to time to reflect changes in the Platform's data processing practices, regulatory requirements, or the introduction of new features. When material changes are made, jj1 will notify registered users via their jj1 account dashboard notification and/or via the mobile number registered to their account, at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of jj1 following the effective date of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you must discontinue use of jj1 and request account closure.

Previous versions of this Privacy Policy are available on request from jj1 support. If a change to this policy significantly alters jj1's data processing in a way that affects your rights, jj1 will seek fresh consent where required by the applicable legal framework.

15. Contact & Privacy Complaints

If you have any questions, concerns, or complaints regarding jj1's processing of your personal data, or if you wish to exercise any of the rights described in Section 11, please contact jj1's privacy team using the following details. All privacy-related requests are handled by dedicated staff and treated with strict confidentiality.

• Email (privacy requests): [email protected] — include "Privacy Request" in your subject line for faster routing
• Live Chat: Available 24/7 within the jj1 Platform after login — reference "privacy" to be connected to the appropriate support team member
• Response commitment: Acknowledgement within 5 business days; full response within 30 calendar days of receipt of a valid, verifiable request

If you are not satisfied with jj1's response to a privacy complaint, you have the right to escalate your complaint to the supervisory authority or dispute resolution body associated with jj1's gaming license jurisdiction. Details of the applicable supervisory authority are available on request from jj1 support.