JJWin Privacy Policy – How We Protect Your Personal Data

JJWin is an online casino and sports betting platform operating at jjwin.im, serving registered players across Pakistan. For the purposes of this Privacy Policy, JJWin acts as the data controller for all personal information collected through the platform, including information provided at registration, information generated through your use of our services and information collected through technical means such as cookies and server logs.

This Privacy Policy applies to all JJWin users — anyone who visits the website at jjwin.im, registers a JJWin account, makes a deposit, places a bet, plays a casino game or contacts our support team. It applies regardless of the device you use to access JJWin, whether that is a mobile phone, tablet or desktop computer.

By registering a JJWin account or continuing to use the JJWin platform after this policy has been updated, you confirm that you have read and understood how your personal data is processed as described here. If you disagree with any part of this policy, you should not use the JJWin platform and may contact us to close your account.

JJWin collects personal data through several channels: information you provide directly, information generated automatically through your use of the platform and information received from third-party service providers. Below is a detailed breakdown of each category.

JJWin uses the personal data it collects for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was collected. The following table explains each use case and which data it involves.

• Account creation and management: Your identity and contact data are used to create and maintain your JJWin account, verify your identity and communicate account-related information to you.
• Processing deposits and withdrawals: Financial data and transaction records are used to execute your payment requests accurately and to maintain a complete financial record for your account.
• Delivering betting and gaming services: Transaction and usage data enable JJWin to display your bet slip, calculate winnings, settle markets and maintain your game history.
• Security and fraud prevention: Technical data, IP address and transaction patterns are analysed by JJWin's fraud detection systems to identify unusual activity, prevent account compromise and protect the integrity of the platform.
• Regulatory compliance and KYC: Identity data and transaction records are retained as required by anti-money laundering (AML) obligations and responsible gaming regulations. JJWin may be required to report certain activity to financial regulators.
• Customer support: Communications data enables JJWin's support team to handle your queries, resolve disputes and follow up on complaints effectively.
• Responsible gaming monitoring: JJWin uses betting pattern data and session data to identify players who may be showing signs of problem gambling behaviour, in line with our responsible gaming commitments.
• Platform improvement: Aggregated, anonymised usage data is used to understand how players use JJWin so that we can improve the interface, fix bugs and develop new features that serve Pakistani players better.
• Marketing communications (opted-in players only): For players who have opted in, contact data is used to send relevant promotions including PSL betting offers, bonus announcements and Eid specials. You can opt out at any time.

JJWin processes your personal data under one or more of the following legal grounds, depending on the specific processing activity involved.

• Contract performance: Processing your account registration, deposits, withdrawals and bet settlements is necessary to perform the service contract between you and JJWin.
• Legal obligation: Identity verification, AML record-keeping and regulatory reporting are required by law. JJWin cannot provide services without fulfilling these obligations.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and service improvement are based on JJWin's legitimate interest in operating a safe and lawful platform. These interests do not override your privacy rights.
• Consent: Marketing communications and optional analytics are only processed with your explicit consent. You can withdraw this consent at any time without affecting your account or any other processing activities.

JJWin does not sell your personal data. We share it only with the specific categories of third parties listed below, strictly for the purposes described, and only to the extent necessary.

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners): JJWin shares the minimum transaction data required to process your deposits and withdrawals. These providers have their own privacy policies and are bound by data processing agreements with JJWin.
• Identity verification providers: When KYC verification is required, your identity documents and personal details may be processed by a regulated identity verification service. These providers operate under strict data security and confidentiality obligations.
• Game software providers: Live casino games and slots are provided by licensed third-party studios including Evolution Gaming, Playtech and Play'n GO. These providers may receive your player ID and session data for the purpose of delivering the game. They do not receive your full identity details or payment information.
• Regulatory and law enforcement authorities: JJWin may be legally required to disclose account information, transaction records or other data to financial regulators, law enforcement agencies or courts. Such disclosures are made only as required by law and are logged.
• Fraud prevention services: JJWin uses third-party fraud detection tools that may receive technical data (IP address, device fingerprint) to assess risk. These tools do not receive your full identity or payment details.
• IT and cloud infrastructure providers: JJWin's platform runs on secure cloud infrastructure. Hosting providers may technically process data as part of infrastructure services but are bound by strict data processing agreements and cannot access the content of that data.

JJWin uses cookies and similar tracking technologies to make the platform work properly, to remember your preferences and to understand how players navigate the site so we can improve it. Here is what each type of cookie does on the JJWin platform.

• Strictly Necessary Cookies: These cookies are required for the platform to function. They keep you logged in during your session, maintain your bet slip and ensure security tokens work correctly. You cannot opt out of these cookies without breaking core platform functionality.
• Functional Cookies: These remember your preferences such as language settings, display choices and whether you have dismissed certain notices. They are not required for the platform to work but improve your experience.
• Analytics Cookies: JJWin uses anonymised analytics cookies to understand aggregate patterns of platform usage — which pages are most visited, how long sessions last, which features are used most. No individual player is identified in this analysis. You can opt out of analytics cookies via the cookie settings banner.
• Security and Fraud Detection: Session-level technical data including IP address and device fingerprint is collected for fraud prevention purposes. This is a strictly necessary function and cannot be disabled.

You can manage your cookie preferences through the cookie settings available in the platform and through your browser's privacy settings. Note that blocking necessary cookies will prevent you from using core JJWin features including login and payment processing.

JJWin implements multiple layers of technical and organisational security to protect your personal data. These measures are reviewed and updated regularly to address emerging threats and maintain industry best practice.

• Encryption in Transit: All data transmitted between your device and JJWin's servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to all platform traffic — login, betting, payments and support chat.
• Encryption at Rest: Sensitive personal data stored on JJWin's servers, including identity documents and KYC records, is encrypted at rest using AES-256.
• Access Controls: Access to personal data within JJWin is restricted on a need-to-know basis. Employees and contractors who do not require access to your data as part of their role cannot access it. All access is logged and auditable.
• Two-Factor Authentication: JJWin offers two-factor authentication (2FA) for player accounts. We strongly recommend all Pakistani JJWin players enable 2FA to protect against unauthorised account access.
• Penetration Testing: JJWin's platform and infrastructure are subject to regular penetration testing by independent security firms. Identified vulnerabilities are remediated within defined timelines based on severity.
• Data Breach Response: In the event of a data breach that poses a risk to your rights, JJWin will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in line with applicable regulatory requirements.

JJWin retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply to the main data categories held by JJWin.

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual. You may request early deletion of certain data categories (where not subject to mandatory retention obligations) by contacting support@jjwin.im.

JJWin respects your rights over your own personal data. The following rights are available to all registered JJWin players, free of charge. Requests are responded to within 30 days.