jjcom Privacy Policy

This Privacy Policy ("Policy") sets out how jjcom ("jjcom", "we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "Player", "User") of the jjcom website at jjcom.app, its associated sub-domains, and any related mobile applications or platforms (collectively, the "jjcom Platform").

jjcom is committed to handling your personal data with the highest standards of transparency, security, and respect. We comply with applicable international data protection frameworks and the licensing obligations imposed by jjcom's gaming regulatory authority.

This Policy is incorporated by reference into jjcom's Terms & Conditions, which govern your use of the jjcom Platform. By registering a jjcom account, using the jjcom Login page, or continuing to access jjcom services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, jjcom is the data controller responsible for your personal information collected through the jjcom Platform. jjcom operates under an international gaming licence and maintains a dedicated data protection function to oversee compliance with this Policy.

Any questions, requests, or complaints regarding your personal data should be directed to jjcom's data protection team. Contact details are provided in Section 14 of this Policy. jjcom will respond to all data-related enquiries within 30 calendar days of receipt.

jjcom collects personal data through several channels: directly from you when you register or use the Platform, automatically through your device and browser, and from trusted third-party verification and payment providers. The categories of personal data we collect are set out below.

jjcom does not collect sensitive special-category personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by our responsible gaming obligations — for example, where a player provides medical documentation in support of a self-exclusion request. Such data is handled with the highest level of care and access controls.

jjcom processes your personal data for the following specific purposes:

• Account Registration & Verification: To create and manage your jjcom account, verify your identity through CNIC and document checks, and confirm you meet the minimum age requirement of 21 years.
• Payment Processing: To facilitate PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, and to maintain accurate transaction records.
• Platform Delivery: To provide you with access to cricket betting, live casino, slots, Jackpot Fishing, Pool Rummy, and all other jjcom services.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, match-fixing, multi-accounting, and other prohibited activities. jjcom employs automated monitoring and human review for this purpose.
• Legal & Regulatory Compliance: To comply with our gaming licence obligations, anti-money laundering (AML) requirements, know-your-customer (KYC) rules, and any lawful requests from regulatory or law enforcement authorities.
• Responsible Gaming: To monitor your gaming patterns and proactively enforce the responsible gaming tools you have activated, including deposit limits, self-exclusion, and session controls. jjcom may use your gaming activity data to identify signs of problem gambling and reach out with support information.
• Customer Support: To handle your queries, complaints, and disputes efficiently, and to maintain records of support interactions for quality assurance.
• Marketing Communications: To send you information about jjcom promotions, PSL season offers, Eid bonuses, and other relevant updates — but only where you have opted in to receive such communications. You may opt out at any time from your account settings.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the jjcom Platform's functionality, performance, and user experience for Pakistani players.

jjcom processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the jjcom Terms & Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with KYC, AML, gaming licence conditions, and applicable law — including mandatory reporting to financial intelligence authorities where required.
• Legitimate Interests: Processing necessary for jjcom's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

jjcom shares your personal data only where strictly necessary and with recipients who are contractually bound to protect your data to standards equivalent to those in this Policy. The categories of recipients are:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive the minimum data necessary to process your PKR transactions. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification Providers: Third-party KYC and AML service providers who assist jjcom in verifying CNIC documents and confirming player identity.
• Fraud Prevention Services: Specialist fraud detection platforms that analyse transaction and behavioural data to protect jjcom and its players from financial crime.
• Gaming Software Providers: Game studios and platform technology providers who deliver casino, slot, and sports betting products on the jjcom Platform. These providers may receive anonymised session data required to deliver game functionality.
• Regulatory & Law Enforcement Authorities: jjcom will disclose personal data to competent authorities where required by applicable law, court order, or its gaming licence obligations — including financial intelligence units where suspicious activity must be reported.
• Professional Advisers: Legal, accounting, and compliance advisers engaged by jjcom, subject to professional confidentiality obligations.

jjcom does not transfer your personal data to any unaffiliated commercial third party for their own independent marketing or business purposes. All third-party data processors engaged by jjcom are bound by data processing agreements requiring them to implement appropriate technical and organisational security measures.

jjcom retains your personal data for as long as necessary to fulfil the purposes set out in this Policy, to comply with legal and regulatory obligations, and to resolve any disputes or enforce jjcom's agreements. Retention periods vary by data category:

When data is no longer required and its retention period has expired, jjcom securely deletes or anonymises it so that it can no longer be associated with any individual player.

jjcom implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and jjcom's servers is encrypted using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar when accessing jjcom.app.
• Encryption at Rest: Sensitive personal data — including CNIC information, financial data, and authentication credentials — is encrypted at rest in jjcom's databases using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. jjcom staff are granted only the minimum permissions required for their role. All privileged access is logged and audited.
• Two-Factor Authentication: jjcom strongly recommends that all Pakistani players enable SMS OTP two-factor authentication on their accounts, particularly given the risks of SIM-swap fraud on networks including Jazz, Telenor, Zong, and Ufone.
• Segregated Player Funds: Your PKR balance is held in accounts completely segregated from jjcom's operational funds, protecting your money regardless of jjcom's financial position.
• Regular Security Audits: jjcom's platform and data infrastructure undergo regular independent security assessments and penetration testing.
• Incident Response: jjcom maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, jjcom will notify you directly without undue delay.

jjcom uses cookies and similar tracking technologies to operate and improve the jjcom Platform. A cookie is a small text file placed on your device when you visit jjcom.app. Cookies allow jjcom to recognise your device across sessions, remember your preferences, and analyse Platform performance.

jjcom uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the jjcom Platform — including maintaining your login session after using jjcom Login, preserving your account settings, and enabling secure transactions. These cookies cannot be disabled without preventing you from using core jjcom functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations. Disabling these cookies may reduce your user experience but will not prevent access to jjcom.
• Analytics Cookies: Collect anonymised, aggregated data about how players use the jjcom Platform — including which pages are most visited and where players encounter difficulties — to help jjcom improve its service. Individual players are not identifiable from analytics data.
• Security Cookies: Support jjcom's fraud detection and security systems by tracking anomalous session behaviour and IP address patterns.

You can control cookie behaviour through your browser settings. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging into your jjcom account and using Platform services. jjcom does not use third-party advertising or retargeting cookies.

As a jjcom player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact jjcom's data protection team at [email protected] with the subject line "Data Rights Request". jjcom will respond within 30 calendar days.

Please note that certain rights are subject to limitations where jjcom is required to retain data under AML/KYC regulations, gaming licence conditions, or to defend against legal claims. jjcom will explain any such limitation clearly when responding to your request.

The jjcom Platform is strictly intended for persons aged 21 years and over. jjcom does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the jjcom registration and KYC process, and CNIC verification is used to confirm that every player meets the minimum age requirement.

If jjcom discovers or has reasonable grounds to believe that a player is under the age of 21, jjcom will immediately suspend the account, void all gaming activity conducted by the underage player, and securely delete all personal data associated with the account to the extent permitted by law. Any deposits made by an underage player will be returned to the source payment method.

Parents and guardians in Pakistani households are strongly advised to use parental control software to restrict minors' access to the jjcom Platform and other online gaming websites. If you believe a minor has accessed or registered on jjcom, please contact us immediately at [email protected].

As an internationally licensed gaming platform serving Pakistani players, jjcom may process or store your personal data on servers located outside Pakistan. Where such international transfers occur, jjcom ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by this Policy.

Safeguards used for international transfers include:

• Standard contractual clauses requiring recipient organisations to apply equivalent data protection standards.
• Transfers only to countries or organisations that provide an adequate level of data protection as assessed by jjcom's compliance team.
• Technical measures ensuring data is encrypted during transit across international networks.

Your payment data processed through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast remains within Pakistan's domestic payment infrastructure and is governed by the respective providers' own data protection frameworks and State Bank of Pakistan regulations.

jjcom reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or gaming licence requirements. When material changes are made, jjcom will notify you by email to your registered address and/or by a prominent notice on the jjcom Platform, no less than 14 days before the changes take effect where practicable.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the jjcom Platform after an updated Policy takes effect constitutes your acceptance of the revised terms.

If you do not accept a material change to this Privacy Policy, you should stop using the jjcom Platform and contact our support team to close your account. All data held at the time of account closure will be retained for the statutory periods set out in Section 7.

If you have any questions, concerns, or requests relating to this Privacy Policy or jjcom's data practices, please contact our data protection team. We are available 24/7 in English and Urdu.

If you are not satisfied with jjcom's response to your privacy concern, you have the right to escalate your complaint to the relevant regulatory authority or the independent dispute resolution body designated by jjcom's licensing authority. Details of the applicable mechanism are available from our support team upon request.