jjwincom Privacy Policy — How We Protect Your Personal Data

jjwincom is an online casino and sports betting platform operating at jjwincom.org, providing real-money gaming and betting services to eligible Pakistani players aged 21 and above. jjwincom operates under an international gaming licence which imposes specific data protection, KYC, and anti-money laundering obligations that shape how we collect and retain personal data.

For the purposes of this Privacy Policy, jjwincom is the data controller in respect of all personal data collected from players through the jjwincom.org platform, its mobile-optimised interfaces, and any associated customer support channels. "We", "us", and "our" throughout this document refer to jjwincom. "You", "your", and "player" refer to any individual who accesses, registers on, or uses the jjwincom platform in any capacity.

jjwincom collects personal data across several categories depending on your level of engagement with the platform. The table below provides a structured overview of the data categories we process:

jjwincom collects personal data through the following channels and mechanisms:

• When you complete the jjwincom account registration form, providing your name, email, date of birth, and mobile number.
• When you submit KYC documents in response to a verification request from jjwincom's compliance team.
• When you initiate a deposit or withdrawal and provide payment method details for processing.
• When you contact jjwincom's support team via live chat or email, the content of those communications is recorded.
• When you activate or modify responsible gaming tools such as deposit limits, session reminders, or self-exclusion settings.

• Device and technical data is collected automatically when you access jjwincom.org through standard server log mechanisms and session cookies.
• Gaming and betting activity data is automatically recorded within jjwincom's gaming platform infrastructure as you interact with games and betting markets.
• Fraud detection systems continuously analyse login patterns, transaction behaviours, and device fingerprints in an automated manner to identify suspicious activity.

• Payment processors such as JazzCash and EasyPaisa may pass transaction confirmation references and status data to jjwincom to reconcile deposits and withdrawals.
• Identity verification service providers engaged by jjwincom to cross-reference CNIC data may return verification status results to our compliance systems.
• jjwincom does not purchase personal data lists from data brokers or third-party marketing organisations at any point.

jjwincom processes personal data only where a valid lawful basis exists. The primary lawful bases on which jjwincom relies are as follows:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming activity data is necessary for the performance of the contract between you and jjwincom — namely, the provision of online casino and sports betting services as described in the Terms & Conditions.
• Legal Obligation: Processing KYC document data, transaction records, and responsible gaming records is required for jjwincom to comply with its international gaming licence obligations, including anti-money laundering (AML) requirements and age verification mandates.
• Legitimate Interests: Processing device and technical data for fraud prevention and platform security is carried out under jjwincom's legitimate interest in protecting the platform and its players from fraudulent or criminal activity.
• Consent: Where jjwincom sends optional promotional communications (such as bonus notifications or game recommendations via email or SMS), this is done on the basis of your consent, which you may withdraw at any time through your account settings or by contacting support.

jjwincom uses the personal data it collects for the following specific and defined purposes:

• Account Management: To create, maintain, and manage your jjwincom player account, including authentication, account recovery, and account settings management.
• Identity Verification & KYC: To verify your identity in accordance with our licensing obligations, confirm your age as 21 or above, and prevent fraudulent or duplicate registrations.
• Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20, and to execute withdrawal requests to your verified payment method.
• Game & Betting Service Delivery: To provide access to casino games, live dealer tables, PSL cricket betting markets, slots, fishing games, and all other jjwincom platform products.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorised account access.
• Responsible Gaming: To monitor gaming behaviour against responsible gaming thresholds, enforce self-exclusion and deposit limits set by players, and provide intervention alerts where problematic patterns are detected.
• Customer Support: To respond to your support queries, resolve account disputes, and provide both English and Urdu assistance through live chat and email channels.
• Legal Compliance: To fulfil obligations under jjwincom's international gaming licence, including reporting suspicious transactions to relevant regulatory bodies where required.
• Communications: To send you account-related notifications (mandatory) and, where you have given consent, promotional offers including bonus notifications, new game announcements, and PSL season special promotions.

jjwincom does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

To process deposits and withdrawals, jjwincom must share your payment reference details and transaction amounts with the relevant payment processor (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20 network infrastructure). Each processor operates under its own privacy policy and security framework.

jjwincom may engage third-party identity verification providers to cross-check CNIC data against authoritative databases. These providers are contractually bound to process your data solely for the purpose of verification and may not retain or use it for any other purpose.

Third-party game providers whose titles appear on the jjwincom platform may receive anonymised or pseudonymised session data for the purpose of delivering game functionality. These providers do not receive your full identity or contact details unless required for their own regulatory obligations.

jjwincom is required by its international gaming licence and applicable AML frameworks to report certain suspicious transaction patterns or player activity to relevant regulatory or law enforcement authorities. In such cases, disclosure of personal data is mandatory and cannot be withheld at the player's request.

jjwincom's legal advisers, auditors, and compliance consultants may access personal data on a strictly confidential and need-to-know basis for the purpose of providing professional services to jjwincom.

jjwincom uses cookies and similar tracking technologies on the jjwincom.org platform. Cookies are small data files stored on your device that help us deliver a functional, secure, and personalised experience. The categories of cookies we use are as follows:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, store your preferred language and display settings, and enable core security functions. These cookies cannot be disabled without impairing your ability to use the platform.
• Fraud Prevention Cookies: These cookies assist jjwincom's fraud detection systems by generating a device fingerprint used to identify unusual login patterns, multi-account activity, or bot-driven behaviour. They operate in the background and are not used for marketing purposes.
• Analytics Cookies: With your consent, jjwincom may use first-party analytics tools to understand aggregated player behaviour on the platform — including which games are most popular among players in Karachi, Lahore, and Faisalabad — so we can improve our product offering. These analytics are not shared with third-party advertising platforms.
• Preference Cookies: These store your account preferences such as deposit method defaults, responsible gaming settings, and notification preferences to provide a smoother experience on return visits.

You may manage cookie preferences through your browser settings. Blocking essential cookies will affect your ability to access jjwincom's platform services. Disabling analytics cookies does not impair your gaming experience in any way.

jjwincom retains personal data for the periods set out below. Retention periods are determined by the nature of the data, the purpose for which it was collected, and the obligations imposed by jjwincom's international gaming licence and applicable AML regulations:

Upon expiry of the relevant retention period, jjwincom will securely delete or anonymise your personal data such that it can no longer be associated with your identity. Data that has been anonymised may be retained indefinitely for aggregate statistical analysis without constituting personal data processing.

jjwincom employs a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• TLS 1.3 Encryption: All data transmitted between your device and jjwincom's servers is protected by industry-standard TLS 1.3 encryption, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at Rest: KYC documents, CNIC images, and financial records stored in jjwincom's secure data infrastructure are encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to player personal data within jjwincom's internal systems is restricted on a strict need-to-know basis. Staff members with access to sensitive data are subject to confidentiality agreements and regular security training.
• Fraud Detection Systems: Automated fraud detection monitors login behaviour, transaction patterns, and device data in real time to identify and block suspicious activity before it can affect player accounts.
• Penetration Testing: jjwincom's security team conducts regular penetration testing and vulnerability assessments on platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response: In the event of a data security incident that poses a material risk to players, jjwincom will notify affected players within a reasonable timeframe and take all necessary steps to contain and remediate the incident.

Subject to the retention obligations imposed by jjwincom's international gaming licence, you hold the following rights over your personal data held by jjwincom:

• Right of Access: You may request a copy of all personal data jjwincom holds about you. jjwincom will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any personal data jjwincom holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity data may require re-submission of KYC documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jjwincom's licence retention obligations. Data held under AML or gaming licence requirements cannot be erased before the mandatory retention period expires.
• Right to Restrict Processing: In certain circumstances you may request that jjwincom restricts processing of your personal data — for example, while a correction request is being verified.
• Right to Data Portability: You may request that jjwincom provide your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service where technically feasible.
• Right to Object: You may object to processing of your personal data where jjwincom relies on legitimate interests as its lawful basis, or where processing is for direct marketing purposes. Marketing opt-out requests are actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time through your account settings or by contacting support. Withdrawal does not affect past processing.

To exercise any of the above rights, please contact jjwincom's support team via live chat on the platform or by emailing support@jjwincom.org. Identity verification may be required before your request is processed to prevent unauthorised access to another player's data.

jjwincom's platform is strictly intended for individuals aged 21 years and above. jjwincom does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth fields and is backed by KYC age verification to enforce this requirement.

If you are a parent or guardian and believe that your child has registered an account on jjwincom, please contact our support team immediately via live chat or email at support@jjwincom.org. We will investigate and act promptly. jjwincom takes its underage gambling prevention responsibilities extremely seriously, and our KYC process is designed with this as a primary control.

jjwincom's platform infrastructure and data processing systems may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside. Where such transfers occur, jjwincom takes the following measures to ensure your data remains protected:

• Contractual Safeguards: Where personal data is transferred to third-party processors in other jurisdictions, jjwincom enters into data processing agreements that impose binding data protection obligations equivalent to the standards described in this Privacy Policy.
• Licence-Mandated Standards: All data transfers and processing operations are conducted in compliance with the data protection standards mandated by jjwincom's international gaming licence, which imposes minimum security and confidentiality requirements on all data processors engaged by jjwincom.
• Encryption in Transit: All personal data transferred across borders is encrypted using TLS 1.3 protocols, ensuring protection during the transmission process regardless of jurisdiction.

By registering and using the jjwincom platform, you acknowledge that your personal data may be transferred internationally as described above. If you have concerns about international data transfers, you may contact jjwincom's support team for further information about the specific safeguards applied to your data.

jjwincom reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to our licensing obligations, or amendments to applicable data protection frameworks. The effective date at the top of this document will be updated to reflect the most recent revision.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — jjwincom will notify active players through one or more of the following channels prior to the changes taking effect:

• A prominent notice displayed on the jjwincom.org platform upon login.
• An email notification sent to the address registered on your jjwincom account.
• An in-platform notification through the jjwincom messaging system.

Your continued use of the jjwincom platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material changes to this policy, you should discontinue use of the platform and may request account closure by contacting our support team.

For any privacy-related enquiries, data subject rights requests, or concerns about how jjwincom processes your personal data, please contact our support team through the following channels:

• Live Chat: Available directly on the jjwincom.org platform, 24 hours a day, 7 days a week, in both English and Urdu.
• Email: support@jjwincom.org — please include "Privacy Request" in the subject line along with your registered username and the nature of your request.

jjwincom aims to acknowledge all privacy requests within 5 business days and to resolve them fully within 30 calendar days. Complex requests involving large volumes of data or requiring legal review may take longer, in which case jjwincom will inform you of the extended timeline within the initial acknowledgement.

Identity verification is required before jjwincom can process any data access, rectification, erasure, or portability request. This is to ensure that no third party can obtain or modify another player's personal data by impersonating them. Verification is typically completed via your registered email address or a KYC re-confirmation step.