j2bit Privacy Policy

This Privacy Policy applies to all personal data collected and processed by j2bit in connection with the operation of the online gaming platform accessible at https://j2bit.pro and any associated sub-domains, mobile applications, or related digital services (collectively, the "Platform").

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, CNIC number, IP address, device identifiers, and payment account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — j2bit, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on j2bit's behalf under a contractual data processing agreement.
• "Player" / "You" — any individual who registers an account on j2bit, browses the Platform, or otherwise interacts with j2bit's services.
• "KYC" — Know Your Customer verification process, required for identity confirmation and withdrawal processing.

This Policy is to be read together with j2bit's Terms & Conditions and any game-specific rules published on the Platform. Where this Policy conflicts with a game-specific notice, this Policy prevails in respect of data protection matters.

j2bit collects Personal Data through several channels. The categories of data we collect, and the primary channel through which each category is obtained, are set out in the table below:

In certain circumstances j2bit may receive Personal Data about you from third parties, including payment processors (to confirm transaction status), identity verification service providers (to validate KYC documents), fraud prevention agencies, and advertising partners (where you have clicked on a j2bit advertisement on an approved affiliate platform). Such data is handled in accordance with this Policy from the moment it is received by j2bit.

You are not obligated to provide any Personal Data beyond what is strictly required for registration and the services you actively use. However, failure to provide certain mandatory data — particularly KYC documents — will prevent j2bit from processing your withdrawal requests, as we are required by our anti-money laundering obligations to verify player identities before releasing funds.

j2bit uses the Personal Data we collect for the following purposes:

• Account Creation and Management: To create and maintain your j2bit player account, authenticate your login sessions, and enable you to access all Platform features.
• Service Delivery: To process deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), settle bets, and credit winnings to your account.
• Identity Verification (KYC): To verify your identity and ownership of your payment method as required by our AML and responsible gaming obligations before processing withdrawals.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce self-imposed limits (such as deposit caps or session time reminders), and action any self-exclusion request you submit through the Platform.
• Fraud Prevention and Platform Integrity: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any other behaviour that violates our Terms & Conditions or applicable law.
• Regulatory Compliance: To meet our obligations under applicable gaming regulations, AML laws, and our international operating license, including maintaining required transaction records and reporting suspicious activity to competent authorities where legally required.
• Customer Support: To respond to your queries, investigate complaints, and resolve disputes in a timely and fair manner.
• Platform Improvement: To analyse aggregated and anonymised usage patterns to improve the performance, usability, and game offering of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and game recommendations — but only where you have opted in to receive marketing communications and only through your chosen channels. You may unsubscribe at any time via your account settings.

j2bit processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and j2bit — i.e. to provide the gaming services you registered to use. This covers account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML record-keeping, age verification obligations under our gaming license, and tax-related reporting requirements.
• Legitimate Interests: Processing carried out in j2bit's legitimate interests where those interests are not overridden by your data protection rights — for example, fraud prevention, platform security, responsible gaming monitoring, and improvement of our services.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Cookies are small text files placed on your device when you visit the j2bit Platform. They allow the Platform to recognise your device across sessions, remember your preferences, maintain your login state, and collect usage analytics.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your language and display preferences, your responsible gaming settings, and certain UI customisations to improve your experience across sessions.
• Analytics Cookies: Collect anonymised data about how players interact with the Platform — which pages are visited, how long sessions last, and where errors occur. This data helps j2bit improve the Platform experience.
• Marketing Cookies: Used only where you have consented, to track which promotional campaigns you responded to and to avoid showing you repeated advertisements for the same offer.

You can manage non-essential cookies via the cookie consent banner displayed on your first visit to the Platform. You may also configure or block cookies through your browser settings, though doing so may impair certain Platform features including login persistence and responsible gaming tool recall.

j2bit does not sell or rent your Personal Data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers receive the transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Specialist KYC partners receive copies of your identity documents (e.g. CNIC, passport) and payment method proof solely for the purpose of verifying your identity before withdrawal processing.
• Fraud Prevention & AML Partners: j2bit uses third-party fraud screening and AML watchlist checking services. These providers receive only the minimum data required to perform their screening function.
• Customer Support Infrastructure: Our live chat and ticketing system providers process the content of your support interactions. These providers are contractually prohibited from using support data for any purpose other than service delivery.
• Legal and Regulatory Authorities: j2bit may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or under our gaming license obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of j2bit's business assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

j2bit operates under an international gaming license and uses infrastructure and service providers that may be located outside Pakistan. Your Personal Data may therefore be transferred to and processed in countries other than the one in which you are located. When such transfers occur, j2bit ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses in Data Processor agreements that impose data protection standards equivalent to those applied within j2bit's operating jurisdiction.
• Transfer only to jurisdictions that provide an adequate level of data protection as assessed by j2bit's compliance function.
• Technical safeguards including end-to-end encryption for all data in transit across international network boundaries.

By registering an account on j2bit, you acknowledge that your Personal Data may be transferred internationally for the purposes described in this Policy. If you have questions about the specific countries to which your data may be transferred, please contact us at the address in Article 13.

j2bit implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All Personal Data is encrypted at rest using AES-256 and in transit using TLS 1.3. Payment data is tokenised and never stored in plain text on j2bit's servers.
• Access Controls: Access to Personal Data within j2bit is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic audit.
• Penetration Testing: j2bit's infrastructure undergoes regular independent security assessments and vulnerability scanning to identify and remediate weaknesses before they can be exploited.
• Incident Response: j2bit maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, j2bit will notify affected players without undue delay and in accordance with applicable regulatory requirements.
• Employee Training: All j2bit staff who handle Personal Data receive regular training on data protection obligations and secure data handling practices.

j2bit retains your Personal Data only for as long as is necessary for the purposes for which it was collected, as required by applicable law, or as permitted by our legitimate interests. The principal retention periods are:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

The j2bit Platform is strictly intended for individuals aged 21 years and over. j2bit does not knowingly collect, store, or process Personal Data of individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or use any service on the j2bit Platform.

If j2bit becomes aware that Personal Data has been collected from a person under the age of 21 — whether through its own monitoring processes, KYC review, or notification by a third party — j2bit will:

• Immediately suspend the relevant account pending investigation.
• Void all bets placed and cancel any bonuses or winnings associated with the account.
• Process a return of any net deposits made via the original payment method, after deducting any amounts that j2bit is entitled to retain under applicable law.
• Securely and permanently delete all Personal Data associated with the underage account, except where retention is required for legal compliance or fraud investigation purposes.

j2bit reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect the way we collect, use, or share your Personal Data — j2bit will provide advance notice by:

• Sending a notification to your registered email address at least 14 days before the revised Policy takes effect.
• Displaying a prominent notice on the j2bit Platform homepage and account dashboard for a minimum of 14 days prior to the effective date.

Your continued use of the j2bit Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may request closure of your account with return of any unencumbered Real Money Balance.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about j2bit's data handling practices, please contact our Data Protection team:

• Email: [email protected] — Subject line: "Privacy Enquiry — [Your Account ID]"
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a substantive response within 30 calendar days.
• Data Rights Requests: To verify your identity before processing a Subject Access Request or erasure request, j2bit may ask you to provide a copy of your CNIC or other identity document. This is a necessary step to prevent unauthorised access to your data.

If you are not satisfied with j2bit's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or gaming regulator in your jurisdiction.