2jj Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Who We Are

2jj ("we", "us", "our") is an online casino and sports betting platform operating at 2jj.lat. For the purposes of this Privacy Policy, 2jj is the data controller in respect of the personal data it collects from players who register and use the 2jj platform. As data controller, 2jj determines the purposes and means by which your personal data is processed.

2jj operates under an internationally recognised gaming licence. The data protection obligations under that licence framework inform the standards applied in this Privacy Policy. For contact details relating to data protection matters specifically, please refer to Section 14 of this Policy.

2 Data We Collect

2jj collects a range of personal data from players. The specific data collected depends on how you interact with the platform — whether you are browsing without an account, registering as a new player, completing KYC verification, making financial transactions, or contacting support.

2.1 Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — players must be 18 or older)
• Pakistani mobile number (primary contact for account security and notifications)
• Email address
• Residential address in Pakistan
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

• Computerised National Identity Card (CNIC) — front and back images
• Proof of residential address (utility bill, bank statement, or similar document)
• Source of funds documentation where required under AML thresholds
• Selfie or live photo verification where required for enhanced due diligence

2.3 Financial & Transaction Data

• JazzCash or EasyPaisa account number or mobile number used for transactions
• Bank account details (HBL, UBL, Meezan Bank, or other) where bank transfer is used
• Raast ID where applicable
• Full transaction history — deposits, withdrawals, bonuses, and adjustments — with timestamps and PKR amounts

2.4 Gaming & Betting Activity Data

• Full bet and game history including game type, stake, outcome, and timestamp
• Live casino session records including table, dealer, and round identifiers
• Sports bets including market, odds, stake, and settlement records
• Responsible gaming limit settings and any changes made to those settings

2.5 Technical & Device Data

• IP address at each login and bet placement event
• Device type, operating system, and browser version
• Geolocation data (city/region level) derived from IP address
• Session duration, pages visited, and interaction events within the platform
• Cookie and tracking data as described in Section 7

2.6 Communications Data

• Content of emails, live chat transcripts, and support tickets sent to or received from 2jj
• Records of promotional communications sent to you and your response or opt-out status

3 How We Collect Your Data

2jj collects your personal data through several channels, depending on the nature of your interaction with the platform. Understanding these collection methods helps you make informed decisions about the information you share with us.

4 Why We Use Your Data

2jj uses the personal data it collects for a number of defined purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing another lawful basis for that use.

• Account creation and management: To register your 2jj account, verify your identity, and maintain your account in good standing.
• Service delivery: To provide access to live casino games, sports betting markets, slots, and Teen Patti on the 2jj platform.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast.
• Age and identity verification: To confirm that all players are 18 years of age or older and that account information is accurate.
• Legal and regulatory compliance: To meet obligations under 2jj's gaming licence, including AML reporting, KYC requirements, and responsible gaming mandates.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover, collusion, and other prohibited activity.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and to facilitate player-initiated responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: To handle account queries, payment disputes, complaint resolution, and general player assistance.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have not opted out of such communications.
• Platform improvement: To analyse aggregated usage data and improve the 2jj platform's features, performance, and user experience for Pakistani players.

5 Legal Basis for Processing

Every data processing activity carried out by 2jj rests on one or more of the following legal bases. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Sharing Your Data

2jj does not sell your personal data to third parties. We share personal data only in the circumstances described in this section, and only to the minimum extent necessary for the stated purpose.

6.1 Service Providers

2jj shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include KYC and identity verification partners, payment processing infrastructure providers (including those facilitating JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast transactions), fraud detection technology providers, live casino game suppliers, customer support platforms, and cloud hosting and infrastructure providers.

6.2 Regulatory and Legal Authorities

2jj is required by its gaming licence and by applicable AML obligations to disclose certain data to regulatory authorities, financial intelligence units, law enforcement agencies, and courts when lawfully required to do so. Such disclosures are made without prior notice to the player where the law requires confidentiality about the disclosure.

6.3 Fraud Prevention Networks

Where fraud, money laundering, or other financial crime is confirmed or reasonably suspected, 2jj may share relevant account data with industry fraud prevention organisations and partner operators for the purpose of preventing future offences across the industry.

6.4 Business Transfers

In the event that 2jj undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to data processing practices that results from it.

7 Cookies & Tracking Technologies

2jj uses cookies and similar tracking technologies on the 2jj.lat website. Cookies are small text files stored on your device when you visit a website. They allow 2jj to recognise your device, maintain your login session, remember your preferences, and collect aggregated analytics data about platform usage.

You can manage cookie preferences through your browser settings. Disabling strictly necessary or fraud prevention cookies may prevent you from logging into your 2jj account or using core platform features. Disabling analytics cookies will not affect your ability to use the platform.

8 Data Retention

2jj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable law, regulatory obligation, or legitimate business need. The table below sets out the standard retention periods applied by 2jj by data category.

Where personal data is no longer required and no legal obligation requires its retention, 2jj will securely delete or anonymise it. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical and analytical purposes.

9 Data Security

2jj implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect evolving best practices and the sensitivity of the data held.

• All data transmitted between your device and the 2jj platform is encrypted using 256-bit SSL/TLS protocols. The padlock symbol in your browser confirms this encryption is active.
• Personal data stored on 2jj servers is encrypted at rest using AES-256 encryption.
• Access to player personal data within 2jj is controlled through role-based access permissions. No staff member can access data beyond what their role requires.
• All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• 2jj conducts periodic security assessments and penetration testing of its platform infrastructure.
• In the event of a data breach that is likely to result in risk to your rights or freedoms, 2jj will notify affected players without undue delay and will report the breach to the relevant supervisory authority as required by law.

10 Your Rights

As a 2jj player whose personal data is processed by 2jj, you have the following rights in relation to that data. To exercise any of these rights, please contact the 2jj data protection team using the contact details provided in Section 14. We will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of all personal data 2jj holds about you. This is commonly referred to as a Subject Access Request (SAR). 2jj will provide this information in a structured, commonly used format.
• Right to Rectification: If any personal data 2jj holds about you is inaccurate or incomplete, you may request that it be corrected. Certain data — such as your registered name and date of birth — may require documentary evidence before correction is made.
• Right to Erasure ("Right to be Forgotten"): You may request that 2jj delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis), or where you object to processing based on legitimate interests. Note that legal and regulatory retention obligations may prevent full erasure in some cases.
• Right to Restrict Processing: You may request that 2jj restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, pending verification by 2jj.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a machine-readable format for transfer to another service provider.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though 2jj may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

11 Minors & Age Verification

2jj does not knowingly collect personal data from individuals under 18 years of age. The 2jj platform is strictly restricted to adults. Age verification is a mandatory step in the account registration process and may be repeated at any point during a player's account lifecycle.

Where 2jj discovers or has reasonable grounds to suspect that a player is under 18 years of age, the account will be suspended immediately. All associated personal data will be retained only for the minimum period required to complete the investigation and any regulatory reporting obligations, after which it will be securely deleted.

12 International Data Transfers

2jj's infrastructure and some of its third-party service providers may be located outside Pakistan. Where personal data is transferred to jurisdictions that do not provide an equivalent level of data protection to the jurisdiction in which 2jj is licensed, 2jj implements appropriate safeguards to ensure that your data remains protected to a standard consistent with this Privacy Policy.

Such safeguards may include standard contractual clauses approved under applicable data protection frameworks, binding corporate rules where applicable, or transfers to jurisdictions that have received an adequacy determination from the relevant supervisory authority. Details of the safeguards applicable to any specific international transfer are available on request.

13 Changes to This Policy

2jj may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — 2jj will notify you via your registered email address or through a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of 2jj following that notice period constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically. The most current version will always be accessible at 2jj.lat/privacy-policy.

14 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or wish to raise a concern about how 2jj has handled your personal data, please contact the 2jj support and data protection team.

Contact is available via the email address displayed in the footer of this website. Please note that the email address is shown as plain text only and is not a clickable link — copy it manually to your email client. Please include "Privacy" or "Data Request" in the subject line of your message together with your registered 2jj username to help us locate your account and respond promptly.

2jj will acknowledge all privacy-related communications within 5 business days and will aim to resolve data rights requests within 30 calendar days. Where a request is complex or where a large volume of requests has been received, we may extend this period by a further two months — in which case we will notify you of the extension and the reason for it.