jjawin Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "jjawin," "we," "us," "our" — the legal entity operating the jjawin platform and all associated services accessible at jjawin.com.
• "Platform" — the jjawin website, all associated sub-domains, and mobile browser interfaces through which jjawin Services are delivered.
• "Player," "you," "your" — any individual who registers for, accesses, or uses a jjawin account.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, CNIC number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "KYC" — Know Your Customer: the identity verification process through which jjawin confirms the identity and age of its players using official Pakistani identification documents.
• "Third Party" — any entity other than you and jjawin, including payment processors, technology service providers, and regulatory authorities.

jjawin is the data controller in respect of all personal data collected from players through the jjawin Platform. As data controller, jjawin determines the purposes for which personal data is processed and the means by which that processing is carried out.

jjawin takes its responsibilities as data controller seriously. This means that jjawin is accountable for ensuring that all personal data processing activities comply with applicable data protection law and that players' rights are respected at all times.

The categories of personal data collected by jjawin from registered players include the following:

jjawin does not collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where responsible gaming monitoring requires jjawin to record and act on information voluntarily disclosed by a player in the context of a support interaction relating to problem gambling.

jjawin collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide directly to jjawin during registration, KYC submission, deposit or withdrawal requests, support communications, and responsible gaming tool configuration.
• Automated collection: Technical data collected automatically when you access the jjawin Platform, including IP address, device identifiers, browser type, and session metadata collected via server logs and first-party cookies.
• Third-party collection: Data received from payment providers — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — in connection with the processing of your deposits and withdrawals. Also data received from identity verification partners in the course of KYC processing.
• Inferred data: Analytical inferences drawn from your transactional and behavioural data on the Platform — for example, risk indicators used to support responsible gaming monitoring — derived from the data described in Section 3 above.

jjawin processes your personal data on the following legal bases, depending on the nature and purpose of each processing activity:

• Contractual necessity: Processing required to perform our contract with you — specifically, the jjawin Terms and Conditions — including account management, deposits, withdrawals, and game/bet settlement. Without this processing, jjawin cannot operate your account.
• Legal obligation: Processing required to comply with jjawin's legal and regulatory obligations, including anti-money laundering (AML) compliance, KYC verification, responsible gaming mandates, and record-keeping requirements imposed by jjawin's gaming authorisation.
• Legitimate interests: Processing carried out on the basis of jjawin's legitimate interests where those interests are not overridden by your own data protection rights. This includes fraud prevention, security monitoring, platform improvement analytics, and internal reporting.
• Consent: Where jjawin relies on consent as the legal basis for processing — for example, in connection with optional marketing communications — you have the right to withdraw that consent at any time by contacting jjawin support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

jjawin uses the personal data collected from players for the following specific purposes:

• Account creation and management: To register your jjawin account, verify your identity and age, maintain accurate account records, and manage account security including OTP verification for logins from unrecognised devices.
• Service delivery: To process deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank transfers; to settle bets and game wagers; to credit and manage bonus funds; and to deliver all other jjawin Services as described in the Terms and Conditions.
• KYC and regulatory compliance: To verify that players are aged 21 or over, to confirm the authenticity of identification documents, and to satisfy jjawin's anti-money laundering and counter-terrorism financing obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, abuse of promotional offers, and other conduct prohibited under the jjawin Terms and Conditions.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, to enforce deposit and session limits set by players, to process self-exclusion requests, and to fulfil jjawin's duty of care obligations towards vulnerable players.
• Customer support: To respond to your support queries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game selection, and the overall player experience — without identifying individual players in this analysis.
• Marketing communications: Where you have consented to receive promotional communications from jjawin, to send you information about relevant offers, bonuses, and new game launches via your registered contact details. You may opt out at any time.

jjawin does not sell your personal data. Data is shared with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations and by contractual data processing agreements with jjawin.
• KYC and identity verification partners: Third-party identity verification services receive your CNIC or passport data solely for the purpose of verifying your identity and age on jjawin's behalf, under strict contractual data protection terms.
• Regulatory and law enforcement authorities: jjawin may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to lawful requests, court orders, or regulatory directions. Such disclosures are made only to the extent legally required.
• Gaming licence authorities: jjawin's gaming authorisation may require the disclosure of certain player data to the issuing licensing authority for audit, compliance monitoring, or responsible gaming purposes.
• Technology and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers may process personal data on jjawin's behalf as data processors, under contractual obligations that restrict their use of that data to the provision of services to jjawin.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of jjawin's assets, personal data held by jjawin may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Players will be notified of any such transfer.

The jjawin Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session when you are logged in, and to collect anonymised analytics data about how the Platform is used.

• Strictly necessary cookies: These are required for the Platform to function. They include session cookies that keep you logged in during an active session and security cookies that support OTP and fraud prevention functions. These cannot be disabled without disabling your ability to use the Platform.
• Functional cookies: These remember your preferences — such as your preferred language and display settings — to improve your experience on return visits.
• Analytics cookies: These collect anonymised data about how players navigate the Platform, which pages are most visited, and how long sessions typically last. This data is used in aggregate to improve the Platform. No individual player is identified in this analysis.
• No third-party advertising cookies: jjawin does not permit third-party advertising networks to place tracking cookies on the jjawin Platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of your jjawin account.

jjawin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable law and jjawin's regulatory obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active jjawin account is retained for the lifetime of the account and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: CNIC and passport copies submitted for identity verification are retained for a minimum of five (5) years following the date of submission, as required by applicable regulatory standards.
• Transaction records: Deposit, withdrawal, bet, and game records are retained for a minimum of five (5) years following the relevant transaction date for regulatory compliance purposes.
• Support communications: Records of customer support interactions are retained for a minimum of three (3) years for dispute resolution and quality assurance purposes.
• Marketing data: Where processing is based on consent, marketing preference data is retained until consent is withdrawn or for a maximum of two (2) years from the date of last interaction, whichever is sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual. Where anonymisation is not technically feasible, the data is deleted.

jjawin operates internationally and may transfer personal data to servers and service providers located outside Pakistan. Where personal data is transferred outside Pakistan, jjawin takes steps to ensure that an adequate level of data protection is maintained in connection with that transfer.

These steps may include ensuring that the recipient is located in a jurisdiction recognised as providing adequate data protection, entering into contractual data protection clauses with the recipient that impose equivalent protections to those described in this Policy, or relying on other lawful transfer mechanisms available under applicable law.

For further information about the specific safeguards applied to any international transfer of your personal data, please contact jjawin support at [email protected].

As a jjawin player, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations and exceptions under applicable law, but jjawin will always respond to your request and explain any limitations that apply:

• Right of access: You have the right to request a copy of the personal data that jjawin holds about you, together with information about how that data is processed. jjawin will respond to access requests within thirty (30) days of receipt.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by jjawin. You can also update certain data directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Note that this right is subject to jjawin's legal obligation to retain certain data for regulatory compliance purposes, which takes precedence.
• Right to restriction: You have the right to request that jjawin restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to jjawin in a structured, commonly used, and machine-readable format, where technically feasible and where processing is carried out by automated means.
• Right to object: You have the right to object to processing carried out on the basis of jjawin's legitimate interests. jjawin will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests and rights.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact jjawin support at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. jjawin may request proof of identity before processing your request.

The jjawin Platform is strictly prohibited for use by individuals under the age of 21. jjawin does not knowingly collect personal data from anyone under the age of 21. If jjawin discovers that personal data has been collected from an individual who has misrepresented their age and is under 21, that account will be immediately suspended, the personal data will be deleted, and any funds held in the account will be dealt with in accordance with applicable regulatory requirements.

Parents and guardians who believe that a minor may have registered a jjawin account or accessed the Platform are urged to contact jjawin support immediately at [email protected]. jjawin will investigate and respond promptly to all such reports.

jjawin implements and maintains a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jjawin Platform.
• Encryption of sensitive personal data — including identity document images — at rest on jjawin's servers.
• Strict role-based access controls limiting internal access to personal data to staff with a genuine operational need.
• OTP-based two-factor authentication for player logins from unrecognised devices.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Incident response procedures that include prompt notification to affected players and relevant authorities in the event of a data breach that poses a risk to player rights and freedoms.

While jjawin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — do not share your password, ensure your registered mobile number remains in your control, and contact jjawin support immediately if you suspect unauthorised access to your account.

jjawin reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. Where changes are material — meaning they significantly affect how jjawin processes your personal data or affect your data rights — jjawin will provide advance notice to registered players via their registered email address or through an in-platform notification prior to the changes taking effect.

Your continued use of the jjawin Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you should contact jjawin support to discuss your options, which may include account closure.

For any questions, concerns, or requests relating to this Privacy Policy or jjawin's processing of your personal data, please contact jjawin's data protection team using the details below:

If you are not satisfied with jjawin's response to a data rights request or privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. jjawin will provide details of the applicable supervisory authority upon request.

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the jjawin Privacy Policy.