jjiwn Privacy Policy

1. Introduction

jjiwn is Pakistan's premier online casino and sports betting destination, built around the values of transparency, security, and responsible gaming. We understand that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy sets out our commitment to handling your data with integrity, in compliance with applicable data protection legislation and the requirements of our international gaming regulatory oversight.

This Policy applies to all personal data collected through jjiwn.net, including data collected via account registration, deposits and withdrawals, customer support interactions, promotional participation, and general site browsing. It applies to all registered players, prospective players, and visitors to the Platform regardless of their location within Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, and all other regions.

References in this Policy to "personal data" mean any information that identifies you or could reasonably be used to identify you, either alone or in combination with other information we hold.

2. Data Controller

For the purposes of applicable data protection law, jjiwn is the data controller responsible for the personal data collected through jjiwn.net. This means we determine the purposes and means by which your personal data is processed. Where jjiwn engages third-party service providers to process data on its behalf, those providers act as data processors under written contractual arrangements that require them to handle your data strictly in accordance with jjiwn's instructions and this Policy.

All queries, requests, and complaints regarding the processing of your personal data should be directed to our dedicated Privacy team. Contact details are provided in Section 15 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create a jjiwn account, we collect the following information:

• Full legal name;
• Date of birth (to verify the mandatory 21+ age requirement);
• Email address;
• Residential address;
• National Identity Card (CNIC) number or equivalent government-issued identification;
• Mobile number;
• Username and encrypted password.

3.2 Financial Data

To process deposits and withdrawals in PKR, jjiwn collects payment-related information including:

• JazzCash or EasyPaisa account numbers;
• Bank account details for HBL, UBL, or Meezan Bank transfers;
• Cryptocurrency wallet addresses where applicable;
• Transaction history, including deposit amounts, withdrawal requests, and timestamps.

jjiwn does not store full payment card numbers on its own servers. Financial data is processed through PCI-DSS compliant third-party payment processors.

3.3 Identity Verification Data

As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, jjiwn may request and retain copies of:

• Government-issued identity documents (e.g., CNIC, passport);
• Proof of address documents (e.g., utility bills, bank statements);
• Source of funds documentation where required by regulatory thresholds.

3.4 Activity and Technical Data

jjiwn automatically collects certain technical data when you access or interact with the Platform:

• IP address and geolocation data;
• Device type, operating system, and browser information;
• Session duration and navigation patterns;
• Game history, bet amounts, and wagering activity;
• Login timestamps and access logs;
• Communications with customer support.

3.5 Data You Voluntarily Provide

jjiwn may also collect information you choose to provide, including preferences set within your account dashboard, responsible gaming tool configurations, and any feedback or survey responses submitted to jjiwn.

4. How We Use Your Data

jjiwn processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your jjiwn player account.
Payment Processing	Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Crypto.
Identity Verification	Confirming your identity, age (21+), and eligibility to use the Platform in compliance with KYC requirements.
Regulatory Compliance	Meeting AML obligations, responding to regulatory enquiries, and retaining records as required by law.
Fraud Prevention	Detecting, investigating, and preventing fraudulent activity, bonus abuse, and multi-accounting.
Responsible Gaming	Operating self-exclusion, deposit limit, and session control tools as part of our responsible gaming obligations.
Customer Support	Responding to your queries, complaints, and account-related requests.
Platform Improvement	Analysing aggregated usage data to improve site performance, game selection, and user experience.
Marketing	Sending promotional communications where you have provided consent (see Section 12).

5. Legal Basis for Processing

jjiwn processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with applicable AML regulations, KYC obligations, and instructions from regulatory authorities;
• Legitimate interests: Processing carried out to pursue jjiwn's legitimate business interests, such as fraud prevention, platform security, and responsible gaming enforcement, where such interests do not override your fundamental privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time.

6. Data Sharing with Third Parties

6.1 Service Providers

jjiwn engages a limited number of carefully selected third-party service providers who process personal data on our behalf. These include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — to facilitate secure PKR and crypto transactions;
• Identity verification providers: Third-party KYC services that assist with document verification and age confirmation;
• IT and hosting providers: Cloud infrastructure and data centre operators who store Platform data under contractual data protection obligations;
• Customer support platforms: Live chat and ticketing software providers used to manage player communications;
• Analytics providers: Anonymised or aggregated analytics services used to monitor and improve Platform performance.

All third-party processors are required to handle your data strictly in accordance with jjiwn's instructions and applicable data protection standards. jjiwn does not permit its service providers to use your personal data for their own independent marketing purposes.

6.2 Regulatory and Legal Disclosures

jjiwn may disclose your personal data to governmental authorities, regulatory bodies, financial intelligence units, or law enforcement agencies where required or permitted by applicable law. Such disclosures are made only to the minimum extent necessary to fulfil our legal obligations and will be conducted in compliance with applicable data protection requirements.

6.3 Business Transfers

In the event that jjiwn undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any material changes to how your data is processed as a result.

7. International Data Transfers

jjiwn operates under international gaming regulatory oversight and may use service providers whose infrastructure is located outside Pakistan. Where your personal data is transferred internationally, jjiwn takes appropriate measures to ensure that such transfers are conducted in a manner that provides an adequate level of data protection, including through the use of contractual safeguards such as standard contractual clauses or equivalent data transfer mechanisms recognised by relevant authorities.

By using jjiwn, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this Section, where necessary for the provision of our services.

8. Data Retention

jjiwn retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The principal retention periods applicable to your data are:

• Account data: Retained for the duration of your active account relationship with jjiwn, plus a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years in accordance with financial regulation requirements;
• KYC and identity documents: Retained for the period required by applicable AML legislation, typically five (5) years from the end of the business relationship;
• Customer support records: Retained for three (3) years from the date of the relevant interaction;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, jjiwn will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9. Security of Your Personal Data

jjiwn implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jjiwn.net;
• Encryption of sensitive personal data fields at rest within our database systems;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and independent security audits of Platform infrastructure;
• Multi-factor authentication for administrative access to Platform systems;
• Incident response procedures for the detection, investigation, and notification of personal data breaches.

Whilst jjiwn takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should notify jjiwn immediately at [email protected] if you suspect any unauthorised access to your account.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. jjiwn uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how players interact with our site.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and responsible gaming preference cookies. These cannot be disabled without impairing core functionality;
• Functional cookies: Used to remember your language preferences, display settings, and last login details to provide a personalised experience;
• Analytics cookies: Used in aggregated, anonymised form to understand page traffic, game popularity, and navigation patterns, enabling us to improve the Platform. These are optional;
• Marketing cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of jjiwn.net and your ability to access some features of the Platform. Instructions for managing cookies are available in the help documentation of all major browsers.

11. Your Privacy Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data jjiwn holds about you:

• Right of access: You may request a copy of the personal data jjiwn holds about you, along with information about how it is used;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (e.g., regulatory retention requirements);
• Right to restriction: You may request that jjiwn restricts the processing of your data in certain circumstances, for example while a rectification request is being assessed;
• Right to data portability: Where processing is based on consent or contract, you may request your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". jjiwn will acknowledge your request within 48 hours and endeavour to respond fully within 30 calendar days. In complex cases, jjiwn may extend this period by a further 60 days, with notification provided within the initial 30-day window.

Please note that certain rights may be limited or restricted where compliance with your request would prevent jjiwn from meeting its regulatory or legal obligations, particularly in relation to AML record-keeping requirements.

12. Marketing Communications

With your consent, jjiwn may send you promotional communications about bonuses, new games, cricket betting markets, PSL promotions, slot tournaments, and VIP offers via email or SMS. You will only receive marketing communications if you have opted in during registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your communication preferences within your jjiwn account settings;
• Contacting our support team at [email protected].

Opting out of marketing communications will not affect the delivery of transactional or service-related communications, such as deposit confirmations, withdrawal notifications, or security alerts, which are necessary for the operation of your account.

13. Minors and Age Restriction

jjiwn is strictly an adults-only platform. No person under the age of 21 years is permitted to register an account, access the Platform, or provide personal data to jjiwn. jjiwn does not knowingly collect personal data from individuals under the age of 21.

If jjiwn becomes aware that personal data has been collected from an individual under 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on jjiwn, please notify us immediately at [email protected].

14. Changes to This Privacy Policy

jjiwn reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be posted on this page with a revised effective date. Where changes are material, jjiwn will notify registered players via email or a prominent on-Platform notice prior to the changes taking effect.

Your continued use of jjiwn following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jjiwn processes your personal data, please contact our Privacy team through the following channels:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 directly on jjiwn.net

Our support team is available around the clock and aims to respond to all privacy-related enquiries within 48 hours. Formal data subject access requests and rights exercises will be processed within 30 calendar days in accordance with Section 11 above.