jjjpk Privacy Policy —
Your Data, Your Rights

This Privacy Policy ("Policy") is published by jjjpk ("jjjpk", "we", "us", "our"), the operator of the online gaming platform accessible at jjjpk.bio and all associated sub-domains, mobile interfaces, and services (collectively, "the Platform"). This Policy applies to all individuals who visit, register on, deposit funds into, or otherwise interact with the jjjpk Platform, wherever in the world they are located.

This Policy explains what personal data jjjpk collects from users ("you", "Member", "Player"), the purposes for which that data is used, the parties with whom it may be shared, the security measures in place to protect it, and the rights you have in relation to your personal data. This Policy is incorporated by reference into jjjpk's Terms & Conditions and forms part of the overall agreement between you and jjjpk.

By registering an account on jjjpk or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease use of the Platform immediately.

jjjpk collects the following categories of personal data from Platform users:

2.1 Registration & Identity Data

• Full legal name as it appears on your national identity document;
• Pakistani mobile number (in 03XX format);
• Date of birth (used for age verification — minimum 21 years);
• Username and encrypted password;
• Preferred language and currency (PKR).

2.2 Identity Verification (KYC) Data

• Copy of CNIC (Computerised National Identity Card) or other government-issued identity document;
• Proof of residential address (utility bill, bank statement);
• Proof of payment method ownership (screenshot of JazzCash / EasyPaisa account, bank account confirmation);
• Source of funds documentation where required for large transactions.

2.3 Financial Transaction Data

• Deposit amounts, dates, and payment method references;
• Withdrawal requests, amounts, processing status, and destination account references;
• Transaction history in PKR across all jjjpk payment channels (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank);
• Bonus credits, wagering progress, and cashback calculations.

2.4 Gaming Activity Data

• Full betting and gaming history across all jjjpk product categories (cricket sportsbook, live casino, slots, arcade games);
• Wager amounts, outcomes, game sessions, and session durations;
• Responsible gaming tool settings (deposit limits, self-exclusion status, session timers).

2.5 Technical & Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Mobile network operator (e.g., Jazz, Telenor, Zong, Ufone);
• Login timestamps, session duration, and Platform interaction logs.

2.6 Communications Data

• Correspondence with jjjpk customer support (email, live chat transcripts);
• Survey responses, feedback submissions, and complaint records;
• Consent records for marketing communications.

jjjpk collects personal data through the following channels:

• Direct submission: Information you voluntarily provide during registration, KYC verification, deposit, withdrawal, or support interactions;
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies and server logs (see Section 7);
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate deposits or withdrawals;
• Third-party verification providers: Identity verification status data from KYC service providers used to confirm the validity of identity documents;
• Game providers: Aggregated session and outcome data from jjjpk's licensed game technology partners, used to resolve disputes and audit game fairness.

jjjpk processes your personal data for the following defined purposes:

jjjpk processes your personal data on the following lawful bases, consistent with applicable data protection frameworks:

• Contractual necessity: Processing required to perform the contract between you and jjjpk — including account registration, payment processing, and game access;
• Legal obligation: Processing required to comply with jjjpk's licensing conditions, KYC regulations, AML obligations, and any applicable government or regulatory directives;
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — where jjjpk's legitimate interests are not overridden by your rights;
• Consent: Processing for optional marketing communications, where you have given explicit and freely withdrawable consent. You may withdraw marketing consent at any time by contacting [email protected].

jjjpk does not sell your personal data. We share personal data with third parties only in the following circumstances and with the following categories of recipients:

6.1 Payment Service Providers

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to process your deposits and withdrawals. These providers operate under their own privacy and data security frameworks as regulated financial institutions in Pakistan.

6.2 Identity Verification (KYC) Partners

Where identity verification is required, jjjpk shares relevant identity data with licensed KYC technology providers to verify the authenticity of documents submitted. These providers are contractually bound to process data only for the stated verification purpose and to maintain appropriate security standards.

6.3 Game Technology Providers

jjjpk's licensed game providers may receive limited session data to resolve technical disputes, audit game outcomes, or maintain the integrity of their certified RNG systems. No financial payment data is shared with game providers.

6.4 Regulatory Authorities

jjjpk may be required to disclose personal data to the licensing authority under which it operates, government agencies, law enforcement bodies, or financial intelligence units where required by law, court order, or regulatory instruction. jjjpk will notify you of such disclosure where legally permitted to do so.

6.5 Professional Advisors

Legal counsel, auditors, and accountants engaged by jjjpk may access limited personal data on a confidential, need-to-know basis for the purposes of legal advice, audit, or compliance review.

jjjpk uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The following categories of cookies may be set when you access jjjpk:

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. jjjpk does not use third-party advertising cookies or cross-site tracking cookies.

Depending on your location and applicable data protection law, you may have the following rights in relation to the personal data jjjpk holds about you. To exercise any right, contact jjjpk at [email protected] with a clear description of your request. jjjpk will respond within 30 days.

jjjpk retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligations:

• Account registration & KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money laundering regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for two (2) years from the date of last interaction;
• Marketing consent records: Retained for the duration of the marketing relationship, plus two (2) years after consent is withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is archived with access controls preventing its use for operational purposes.

jjjpk's Platform is strictly intended for adults aged 21 years and older. jjjpk does not knowingly collect or process personal data from individuals under the age of 21. The age verification procedures implemented at registration are designed to prevent minors from accessing the Platform.

If jjjpk discovers or is informed that personal data belonging to a person under 21 has been collected — whether through a registration error, falsified identity documentation, or any other means — jjjpk will:

• Immediately suspend and permanently close the affected account;
• Delete all personal data associated with the account as soon as permissible under applicable law;
• Void and forfeit all deposits, wagering activity, and balances associated with the underage account;
• Report the matter to appropriate authorities where legally required.

jjjpk employs a multi-layered security framework to protect the personal data of its Pakistani members. The following technical and organisational measures are in place:

• SSL/TLS Encryption: All data transmitted between your device and jjjpk's servers is encrypted using current SSL/TLS protocols. This protects login credentials, payment information, and all personal data in transit;
• Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard cryptographic algorithms before storage;
• Two-Factor Authentication (2FA): Optional OTP-based two-factor authentication is available for all jjjpk accounts, adding a second verification layer via your registered Pakistani mobile number;
• Access Controls: Internal jjjpk staff access to personal data is restricted on a strict need-to-know basis with role-based permissions and audit logging;
• Regular Security Audits: jjjpk's Platform and data security infrastructure is subject to periodic independent security assessments;
• Incident Response: jjjpk maintains a documented data breach response procedure. In the event of a breach affecting your personal data, jjjpk will notify you and relevant authorities as required by applicable law.

While jjjpk takes all reasonable steps to protect your data, no online system can guarantee absolute security. You are encouraged to use a strong, unique password for your jjjpk account and to enable two-factor authentication to maximise your own account security.

As an internationally licensed gaming operator, jjjpk may transfer your personal data to and process it in countries other than Pakistan, including the jurisdiction in which jjjpk holds its gaming license and countries where its technology partners, KYC providers, and game suppliers are based.

Where personal data is transferred internationally, jjjpk ensures that appropriate safeguards are in place to protect the data, including:

• Transfers to countries with data protection frameworks recognised as providing adequate protection;
• Contractual data protection clauses in agreements with international third-party processors;
• Binding data processing agreements with all third-party vendors who process jjjpk member data outside Pakistan.

jjjpk reserves the right to update this Privacy Policy at any time. Changes will be published on the jjjpk Platform with the "Last Updated" date revised accordingly. Where changes are material — meaning they substantially affect how your data is processed or your rights as a data subject — jjjpk will notify registered members via SMS or email at least fourteen (14) days before the changes take effect.

Your continued use of the jjjpk Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must contact [email protected] to request account closure prior to the effective date.

If you have questions about this Privacy Policy, wish to exercise any of the data rights described in Section 8, or wish to raise a complaint about how jjjpk handles your personal data, please contact jjjpk's Data Protection team using the details below:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Complaint"
• Availability: 24 hours a day, 7 days a week
• Response Commitment: jjjpk acknowledges all privacy-related enquiries within 48 hours and provides a substantive response within 30 calendar days

If you are not satisfied with jjjpk's response to a data complaint, you may escalate the matter to the data protection supervisory authority in your jurisdiction or to the regulatory body that oversees jjjpk's gaming license. Details of the relevant authority can be provided upon request through the contact address above.

For matters relating to responsible gaming — including self-exclusion, deposit limits, or gaming harm support — please visit our dedicated Responsible Gaming page, where separate support resources are available specifically for Pakistani players experiencing gambling-related difficulties.