JJWins Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy describes how JJWins collects, processes, stores and protects the personal data of players who register for and use the JJWins platform, including our website, sports betting services, casino games and all related features. By registering an account with JJWins, you confirm that you have read this Privacy Policy and consent to the processing of your personal data as described within it.

JJWins is the data controller responsible for your personal information. We are committed to handling your data with respect, storing it securely and never selling it to third parties for marketing purposes. Every decision we make about how your data is used follows from a clear operational or legal need — nothing more.

This policy applies to all personal data collected from players in Pakistan and any other jurisdiction from which JJWins accepts registrations. Where Pakistani data protection laws impose requirements on JJWins, those requirements are reflected in this policy and our operational practices.

JJWins collects personal data through several channels — directly from you when you register or contact us, automatically when you use the platform, and from third parties such as payment processors during transaction verification. The following table summarises the main categories of data JJWins collects and the source of each.

JJWins does not collect sensitive personal data such as biometric information, medical records or political opinions. We collect only the minimum data necessary to operate the platform safely, comply with legal obligations and deliver the service you have registered for.

JJWins uses the personal data it collects for the following purposes:

• Account Management: To create, maintain and secure your JJWins account. This includes storing your login credentials, processing your registrations and managing your profile settings.
• Identity Verification (KYC): To verify your age and identity as required by our operating obligations. JJWins is required to confirm that all players are at least 18 years old and that the person operating an account is who they claim to be.
• Payment Processing: To process deposits and withdrawals in PKR via Easypaisa, JazzCash, bank IBFT and card payments. Financial data is shared with payment processors only to the extent necessary to complete each transaction.
• Game Delivery: To deliver casino games, sports betting markets, live dealer games and all other JJWins platform features to your session accurately and securely.
• Responsible Gaming: To monitor your gaming activity for patterns that may indicate problem gambling behaviour. JJWins uses gaming data to operate responsible gaming tools including deposit limits and self-exclusion.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, identity theft, multi-account abuse and other security threats.
• Legal and Regulatory Compliance: To meet our legal obligations, including record-keeping requirements and responses to lawful regulatory enquiries.
• Customer Support: To respond to your queries, resolve disputes, manage complaints and improve the support experience using historical interaction records.
• Platform Improvement: To analyse usage patterns and technical performance in order to improve the JJWins platform for Pakistani players.

JJWins does not use your data to send unsolicited marketing communications unless you have explicitly opted in to receive such communications during or after registration. You can withdraw any marketing consent at any time by contacting support@jjwins.biz.

JJWins processes your personal data under the following legal bases, depending on the purpose for which the data is used:

• Contract Performance: Processing your registration, managing your account, handling deposits and withdrawals and delivering the platform's core services are all necessary to fulfil the contractual relationship between you and JJWins that is established when you register.
• Legal Obligation: Identity verification, age checks, financial record-keeping and cooperation with lawful regulatory enquiries are all required by applicable law and cannot be opted out of by either party.
• Legitimate Interest: Fraud detection, security monitoring, responsible gaming monitoring and platform analytics are carried out on the basis of JJWins' legitimate interest in operating a safe and compliant platform — as long as this interest is not overridden by your fundamental rights and freedoms.
• Consent: Where JJWins sends you optional marketing communications or uses non-essential cookies, this is done only with your explicit prior consent. You can withdraw this consent at any time with no effect on your account or service access.

JJWins does not sell personal data. We share data with third parties only in the following limited, defined circumstances:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card payment networks receive the transactional data required to process your deposits and withdrawals. Each processor handles this data under their own security standards and privacy obligations.
• Identity Verification Providers: JJWins may use third-party identity verification services to check documents submitted during KYC. These providers receive your document data solely for verification purposes and are contractually required not to retain or use it for any other purpose.
• Game Content Providers: Third-party game studios whose titles appear in the JJWins casino or live casino may receive session data necessary to deliver and settle game outcomes. This data is limited to what is operationally necessary.
• Legal and Regulatory Authorities: JJWins will disclose personal data to relevant authorities — including law enforcement, financial regulators and courts — where required to do so by a valid legal obligation or court order.
• Fraud Prevention Networks: Where JJWins has reasonable grounds to suspect fraud or money laundering, it may share relevant account data with industry fraud prevention bodies or financial intelligence organisations as permitted by law.

All third parties with whom JJWins shares data are subject to contractual data handling obligations that require them to process the data securely, use it only for the stated purpose and not share it further without JJWins' authorisation. JJWins does not share your data with advertisers, data brokers or social media platforms.

JJWins uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the platform to remember your session, preferences and certain usage information across page loads and return visits.

JJWins uses the following categories of cookies:

• Essential Cookies: Required for the platform to function — including session authentication, account login state and security tokens. These cannot be disabled without breaking core platform features.
• Performance Cookies: Used to collect anonymised data about how players use the JJWins platform — which pages are visited most, where errors occur, how long sessions last. This data helps improve the platform experience for Pakistani users. These cookies do not identify you personally.
• Preference Cookies: Store your display and language preferences so the platform remembers your settings between sessions. These are not required but improve convenience.
• Analytics Cookies: JJWins uses privacy-conscious analytics tools to understand aggregate usage patterns. Analytics data does not include individually identifiable information and is stored separately from player account records.

You can control non-essential cookies through your browser settings. Blocking essential cookies will affect platform functionality — you may not be able to log in or maintain a session if essential cookies are blocked. For more information about managing cookies, consult the help documentation in your browser.

JJWins takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:

• TLS Encryption in Transit: All data transmitted between your browser and the JJWins platform is encrypted using current Transport Layer Security (TLS) protocols. The padlock icon in your browser address bar confirms this encryption is active during your session.
• Encryption at Rest: Sensitive personal data stored on JJWins infrastructure — including identity documents, financial records and account credentials — is encrypted at rest.
• Role-Based Access Controls: Internal access to player data is controlled on a need-to-know basis. Different staff roles have different access levels and all access is logged for audit purposes.
• Two-Factor Authentication: JJWins offers optional two-factor authentication (2FA) for player accounts. We strongly encourage all Pakistani players to enable 2FA for additional account protection.
• Penetration Testing: JJWins platforms are subject to regular penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: JJWins maintains a documented incident response plan. In the event of a data breach that is likely to affect player rights, JJWins will notify affected players and relevant authorities within the legally required timeframe.

While JJWins implements robust security measures, no digital platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their JJWins account, enable 2FA and never share their login credentials with anyone. JJWins will never ask for your password through any communication channel.

JJWins retains personal data for as long as it is needed to fulfil the purpose for which it was collected — and no longer. Specific retention periods apply to different categories of data:

• Account and Identity Data: Retained for the duration of your active account relationship with JJWins, and for a minimum of five years following account closure to meet legal and regulatory record-keeping obligations.
• Financial and Transaction Records: Retained for a minimum of five years from the date of each transaction, as required under anti-money laundering and financial record-keeping regulations.
• Gaming History: Retained for the duration of your active account and for at least three years following account closure, for dispute resolution, responsible gaming monitoring and regulatory purposes.
• Support Communications: Retained for three years from the date of the last interaction for each case, to enable historical dispute review if required.
• Technical and Usage Data: Retained for up to 12 months in identifiable form, after which it is anonymised or deleted.

When personal data is no longer required and no legal obligation requires its retention, JJWins deletes or anonymises it in a manner that prevents reconstruction. Anonymised, aggregated data — from which you cannot be identified — may be retained indefinitely for platform analytics purposes.

As a JJWins player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting JJWins support at support@jjwins.biz. JJWins will acknowledge your request within 5 working days and aim to fulfil it within 30 days.

The JJWins platform is strictly for adults aged 18 and above. JJWins does not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the registration and KYC process to prevent minors from accessing the platform.

If JJWins discovers that a registered account belongs to a person under 18, the account will be suspended immediately, all funds held pending review and the account permanently closed. Any data held in connection with an underage account will be retained only for the period required to discharge related legal obligations and then permanently deleted.

If you believe a minor has registered on JJWins — whether a family member or someone in your household — please contact us at support@jjwins.biz immediately. JJWins will investigate and act on the report without delay. Parents and guardians using shared devices are encouraged to enable parental controls to prevent unauthorised access to betting and gaming platforms.

JJWins reviews its Privacy Policy regularly and reserves the right to update it when our data practices change, when legal requirements change, or when we improve our platform in ways that affect how data is handled. When changes are made, the "Last Updated" date at the top of this page will be revised to reflect the date of the most recent version.

Where changes are significant — meaning they materially affect how your data is used or your rights in relation to it — JJWins will notify registered players by email to the address held on their account at least 7 days before the change takes effect. For minor updates such as wording clarifications or formatting changes, notification may not be sent but the updated date will be revised.

Your continued use of the JJWins platform after any policy update takes effect constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should stop using the platform and contact support to close your account before the effective date.

If you have any questions about how JJWins handles your personal data, want to exercise any of your data rights, or need to report a suspected privacy incident, you can reach the JJWins privacy team through the following channels:

• Email: support@jjwins.biz — use the subject line "Privacy Request" for data rights enquiries to ensure your message reaches the right team promptly.
• Live Chat: Available 24/7 on the JJWins platform. Our support team includes staff with privacy training who can log and escalate data requests appropriately.

JJWins will acknowledge privacy requests within 5 working days and aims to resolve all requests within 30 days. If a request is complex or requires extended investigation, JJWins will notify you within the initial 30-day window and provide an updated timeline.

If you are not satisfied with the response you receive from JJWins regarding a privacy matter, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.