j2bat Privacy Policy

j2bat ("j2bat", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the j2bat platform at j2bat.org ("Platform"), including all casino games, live dealer tables, sports betting, slot titles, account management features, and any other associated services (collectively, "Services").

This Privacy Policy ("Policy") sets out in clear and plain terms how j2bat collects, uses, stores, shares, and protects personal data provided by or generated by players ("you", "Player", "User") in the course of using j2bat's Services. It also describes the rights you hold in relation to your personal data and how to exercise those rights.

This Policy applies to all players accessing j2bat's Services, including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other locations across Pakistan. By registering an Account with j2bat or otherwise using our Services, you acknowledge that you have read, understood, and accepted the practices described in this Policy.

This Policy must be read together with j2bat's Terms & Conditions, which are available at j2bat.org/terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding the treatment of personal data, this Policy shall prevail.

For the purposes of applicable data protection law, j2bat is the data controller in respect of personal data collected and processed in connection with your use of the j2bat Platform and Services. As data controller, j2bat determines the purposes and means by which your personal data is processed.

j2bat operates under an international gaming licence which imposes mandatory data protection standards including requirements for data minimisation, purpose limitation, security, and defined retention periods. j2bat's data processing activities are conducted in compliance with the obligations of that licensing regime.

All enquiries regarding j2bat's privacy practices or requests to exercise data subject rights should be directed to j2bat's designated privacy contact: [email protected] (email address — not a clickable link). Please include "Privacy Request" in the subject line of your correspondence.

j2bat collects the categories of personal data described in the table below. The specific data collected from any individual Player will depend on how that Player engages with the Platform and the Services.

j2bat collects personal data through the following channels:

• Direct Provision: Data you provide voluntarily when creating a j2bat Account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to surveys and promotions.
• Automated Technical Collection: Data generated automatically when you access or use the j2bat Platform — including your IP address, device identifiers, browser information, and session activity — collected via server logs and similar technologies.
• Cookies and Similar Technologies: j2bat uses cookies and similar tracking technologies to collect data about your browsing activity on the Platform. See Section 8 for full details of j2bat's Cookie Policy.
• Third-Party Payment Processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, j2bat receives confirmation data from those processors including transaction reference numbers, amounts, and account identifiers sufficient to match the transaction to your j2bat Account.
• Identity Verification Providers: j2bat may use third-party identity verification services to assist with KYC checks. These services return verification outcome data to j2bat but do not share your original documents with j2bat where verification is conducted on the provider's secure platform.

j2bat processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform j2bat's contractual obligations to you under the Terms & Conditions — including Account operation, payment processing, game provision, and support services. Without this processing, j2bat cannot provide its Services.
• Legal Obligation: Processing required to comply with j2bat's obligations under its international gaming licence, including mandatory KYC verification, anti-money laundering (AML) record-keeping, and responsible gaming compliance reporting.
• Legitimate Interests: Processing conducted for j2bat's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, platform security, product improvement, and customer analytics.
• Consent: Processing conducted on the basis of your explicit consent where required — including the sending of marketing communications. Consent-based processing may be withdrawn at any time by contacting j2bat at [email protected] or adjusting your Account communication preferences.

j2bat uses the personal data it collects for the following purposes:

• Account Creation and Management: To create, verify, and maintain your j2bat Account; to authenticate your login; and to manage your Account settings, balance, and preferences.
• Age and Identity Verification (KYC): To verify that you meet j2bat's minimum age requirement of 21 years and to confirm your identity as required under j2bat's international gaming licence. KYC is mandatory before withdrawals are processed.
• Payment Processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to reconcile transaction records; and to process refunds where applicable.
• Service Delivery: To provide access to j2bat's casino games, slots, live dealer tables, sports betting markets (including PSL cricket, international cricket, UFC, and football), and all other platform Services.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeovers, and other conduct prohibited under j2bat's Terms & Conditions.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling; to administer deposit limits, loss limits, session controls, and self-exclusion tools; and to comply with responsible gaming obligations under j2bat's licence.
• Customer Support: To respond to your enquiries, complaints, and requests; to maintain records of support interactions; and to improve the quality of j2bat's support services.
• Regulatory Compliance: To fulfil j2bat's reporting and record-keeping obligations under its international gaming licence and applicable anti-money laundering regulations.
• Marketing (with consent): To send you promotional communications about j2bat offers, bonuses, new games, and seasonal promotions where you have consented to receive such communications.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving j2bat's platform performance, user interface, game library, and overall player experience.

j2bat shares personal data with third parties only in the following circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and data security obligations.
• Identity Verification Providers: Third-party KYC and age verification providers receive identity document data for the purpose of conducting verification checks as required under j2bat's licensing obligations.
• Gaming Software Providers: Game providers (including third-party slot developers and live dealer studios) may receive technical session data necessary for game operation and RNG certification compliance. These providers do not receive your personal identity information except where required for licensing audit purposes.
• Regulatory and Licensing Authorities: j2bat's international gaming licence authority and any relevant regulatory body may require disclosure of player data for audit, compliance, or enforcement purposes. j2bat is legally obligated to comply with such requests.
• Law Enforcement and Legal Process: j2bat will disclose personal data to law enforcement agencies, government bodies, or courts of competent jurisdiction where required by a valid legal order, warrant, or applicable law.
• Anti-Money Laundering Authorities: Where j2bat is required to file suspicious activity reports or similar regulatory disclosures, relevant player data may be shared with designated financial intelligence authorities.
• Professional Advisors: j2bat's legal counsel, auditors, and professional advisors may access personal data on a confidential basis in connection with the provision of their services to j2bat.

All third parties who receive personal data from j2bat are required to process that data only for the specific purpose for which it was shared and to maintain appropriate technical and organisational security measures.

j2bat uses cookies and similar tracking technologies on its Platform. Cookies are small text files placed on your device when you visit a website. j2bat uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the j2bat Platform to function. These cookies enable core functionality such as session management, secure login authentication, and load balancing. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Enable j2bat to remember your preferences — such as your preferred language, last-visited game section, and responsible gaming settings — to provide a more personalised experience.
• Performance and Analytics Cookies: Collect anonymised information about how players use j2bat to help identify improvements. No personally identifying information is transmitted via these cookies in anonymised form.
• Security Cookies: Used to detect fraudulent logins, monitor for unusual account activity, and protect players' accounts from unauthorised access.

Players may manage cookie preferences via browser settings. Please note that disabling certain cookies may impair the functionality of the j2bat Platform. j2bat does not use third-party advertising cookies that share your data with external advertising networks.

j2bat retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by j2bat's international gaming licence and applicable anti-money laundering regulations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of the Account's active status plus a minimum of five (5) years following Account closure, as required by AML and gaming licence record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure or the date of the last transaction, in compliance with gaming regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute or compliance matter.
• Marketing Consent Records: Retained for three (3) years from the date of consent withdrawal or last interaction, whichever is later.
• Technical Logs: Retained for twelve (12) months from collection for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised such that it can no longer be attributed to an identifiable individual. Where anonymisation is used in preference to deletion, j2bat may retain the resulting anonymised data for analytical purposes without time limit.

j2bat implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The security measures j2bat employs include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and j2bat's servers.
• Encryption of sensitive data fields (including payment details and identity document references) in j2bat's databases.
• Role-based access controls ensuring that j2bat personnel can only access player data to the extent required by their specific job function.
• Regular penetration testing and security audits of j2bat's platform infrastructure by qualified third-party security assessors.
• Multi-factor authentication requirements for j2bat staff accessing player data systems.
• Automated monitoring and alerting systems to detect unusual access patterns or potential data breaches in real time.

Notwithstanding j2bat's security measures, no method of data transmission over the internet or electronic storage can be guaranteed to be completely secure. Players are encouraged to maintain strong passwords, enable two-factor authentication on their j2bat Account, and report any suspected security incidents to [email protected] immediately.

As j2bat operates under an international gaming licence, your personal data may be processed by j2bat's service providers in jurisdictions outside Pakistan, including the jurisdiction of j2bat's gaming licence authority, data hosting locations, and the locations of third-party game providers and verification service providers.

Where personal data is transferred outside Pakistan to jurisdictions that may not provide an equivalent level of data protection, j2bat takes appropriate safeguards to ensure that your data remains protected to a standard that is consistent with this Privacy Policy. Such safeguards may include contractual data transfer agreements with receiving parties that impose binding data protection obligations.

By using j2bat's Services, you acknowledge that your data may be transferred, stored, and processed in countries outside Pakistan for the purposes described in this Policy.

With your explicit consent at the time of registration or subsequently provided, j2bat may send you promotional communications relating to new games, bonus offers, reload promotions, seasonal campaigns (including j2bat's Eid and Ramadan-season promotions, which are designed to be culturally respectful and appropriate), PSL season betting offers, and other j2bat news.

j2bat's marketing communications are sent via email and/or SMS to the contact details registered on your Account. You may opt out of receiving marketing communications at any time by:

• Adjusting your communication preferences in your j2bat Account settings.
• Using the unsubscribe mechanism included in each marketing email.
• Contacting j2bat directly at [email protected] with a request to opt out.

Withdrawal of marketing consent does not affect the lawfulness of processing conducted on the basis of consent prior to its withdrawal. Operational communications — including transaction confirmations, KYC requests, security alerts, and Account status notifications — are not marketing communications and will continue to be sent to your registered contact details regardless of marketing preference.

j2bat's Services are strictly restricted to individuals aged 21 years and above. j2bat does not knowingly collect, store, or process personal data of individuals under the age of 21. Age verification is a mandatory component of j2bat's registration and KYC process, and no Account may be fully activated or any withdrawal processed without successful completion of age verification.

If j2bat becomes aware that personal data has been collected from an individual who is under 21 years of age, j2bat will immediately suspend the Account, investigate the circumstances, and permanently delete the personal data associated with that Account to the extent permitted by j2bat's regulatory obligations. Any funds associated with such an Account will be handled in accordance with j2bat's Terms & Conditions and the requirements of j2bat's licensing authority.

Parents and guardians who believe that a minor has accessed j2bat's Platform and provided personal data should contact j2bat immediately at [email protected] so that appropriate action can be taken without delay.

Subject to applicable law and j2bat's regulatory obligations, you hold the following rights in relation to your personal data held by j2bat. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your j2bat Account username.

• Right of Access: You may request confirmation of whether j2bat holds personal data about you and, if so, a copy of that data along with details of how it is used.
• Right to Rectification: If personal data j2bat holds about you is inaccurate or incomplete, you may request correction. Some corrections may require re-verification via the KYC process.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that j2bat is required by its gaming licence and anti-money laundering obligations to retain certain data for minimum periods regardless of erasure requests, as described in Section 9.
• Right to Restrict Processing: You may request that j2bat restrict its processing of your personal data to storage only in certain defined circumstances while a dispute or verification matter is resolved.
• Right to Data Portability: Where processing is based on contract or consent and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to j2bat's processing of your personal data where that processing is based on legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

j2bat will respond to verified data rights requests within thirty (30) calendar days. In complex cases, j2bat may extend this period by a further thirty (30) days, with notice provided to the requesting individual. j2bat will not charge a fee for responding to data rights requests unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

j2bat reserves the right to update or amend this Privacy Policy at any time to reflect changes in j2bat's data processing practices, regulatory requirements, or applicable law. Where material changes are made to this Policy, j2bat will notify registered Players by email to the address associated with their Account at least seven (7) days before the changes take effect.

The "Last Reviewed" date at the top of this Policy indicates when the most recent review was conducted. It is your responsibility to review this Policy periodically. Continued use of j2bat's Services following notification of an updated Policy constitutes acceptance of the revised terms. If you do not accept any changes to this Policy, you may request Account closure in accordance with j2bat's Terms & Conditions.

For all enquiries, requests, or complaints relating to j2bat's privacy practices or this Policy, please contact j2bat using the details below. All correspondence relating to data privacy must be in writing (email is acceptable) and should clearly identify the nature of the request and your j2bat Account username.

• Privacy Email: [email protected] (plain text — not a clickable link)
• Email Subject Line: "Privacy Request" or "Data Rights Request"
• Response Time: j2bat aims to acknowledge all privacy-related correspondence within five (5) business days and to provide a substantive response within thirty (30) calendar days.
• Platform: j2bat.org