jj33 Privacy Policy — How We Handle Your Personal Data

jj33 operates the online betting and gaming platform accessible at jj33.ws. As the operator of this platform, jj33 acts as the data controller for all personal data collected from members and visitors. This means jj33 determines the purposes and means by which your personal data is processed.

jj33 is committed to handling all personal data responsibly, securely and in accordance with applicable data protection principles. Our platform is built for Pakistani users and all data handling practices reflect the realities of operating in Pakistan — including our use of local payment processors such as JazzCash and Easypaisa, which have their own privacy practices you should also be aware of.

jj33 collects different categories of personal data depending on how you interact with the platform. Below is a full breakdown of what we collect and when.

Every piece of data jj33 collects serves a specific, documented purpose. We do not collect data speculatively or in bulk. Here is exactly why we need each category:

• Identity and contact data are required to create and manage your jj33 account, verify your age and identity, and communicate with you about your account.
• Financial data is needed to process your deposits and withdrawals securely and to apply anti-money laundering (AML) checks required for any financial services platform.
• Transaction data enables us to maintain accurate account histories, investigate disputes, calculate bonuses and comply with legal record-keeping obligations.
• Technical data is used for platform security — identifying unauthorised logins, detecting duplicate accounts and protecting the integrity of jj33 games.
• Usage data helps jj33 improve the platform — understanding which features are used, which pages perform poorly and how to make jj33 more useful for Pakistani players.
• Communications data allows us to resolve your support queries accurately and to train our support team to serve Pakistani members better.

jj33 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contract performance: Most data processing is necessary to fulfil the contract between you and jj33 — i.e., to provide you with betting and gaming services, process your PKR transactions and maintain your account.
• Legal obligation: Certain processing — particularly identity verification and transaction records — is required by anti-money laundering regulations and financial compliance obligations applicable to gaming platforms.
• Legitimate interests: Technical and usage data processing is based on jj33's legitimate interest in operating a secure, functional platform and preventing fraud.
• Consent: Where jj33 sends promotional emails or push notifications, this is done on the basis of your explicit consent at registration or subsequently via your account settings. You may withdraw this consent at any time.

In concrete terms, here is how your personal data is actually used within jj33's operations on a day-to-day basis:

• Verifying your identity during registration and KYC review to comply with age and fraud prevention requirements.
• Processing deposits and withdrawals to and from your designated PKR wallet or bank account.
• Running your betting account — tracking stakes, odds, outcomes, balances and bonus progress accurately.
• Sending transactional notifications — deposit confirmations, withdrawal approvals, password resets and security alerts.
• Detecting and preventing fraud, collusion, multi-accounting and bonus abuse across jj33's platform.
• Personalising the jj33 experience — showing relevant sports markets, casino games or promotions based on your activity history.
• Sending marketing communications about jj33 promotions, new features or special events — only if you have opted in to receive these.
• Responding to your support queries through live chat, email or any other support channel you use to contact jj33.
• Conducting internal analytics to understand how Pakistani members use jj33 and where the platform can be improved.

jj33 does not sell, rent or trade your personal data to any third party for their own marketing purposes. Full stop. Your data is shared only in the following specific, necessary circumstances:

• Payment processors: JazzCash, Easypaisa, NayaPay, SadaPay and card payment gateway providers receive the minimum data necessary to process your transaction. These providers have their own privacy policies and security standards.
• Game providers: Casino and poker software providers (such as Pragmatic Play and Evolution) may receive your account identifier to manage game sessions. They do not receive your full personal details.
• KYC verification services: Identity document verification may be processed by a certified third-party KYC provider. All such providers are contractually bound to handle your data securely and only for the stated purpose.
• Legal and regulatory authorities: jj33 will disclose personal data to law enforcement, regulatory bodies or courts if required to do so by law — for example, in response to a valid court order or anti-money laundering investigation.
• Fraud prevention services: Anonymised or pseudonymised data may be shared with industry fraud prevention platforms to protect the integrity of jj33 and other platforms from known bad actors.
• Business transfers: In the event of a merger, acquisition or sale of all or part of jj33's business, member data may be transferred to the successor entity — members will be notified in advance of such a transfer.

Because jj33 handles real money transactions in PKR, payment data security receives the highest level of attention within our security architecture. Here is specifically how jj33 protects the financial data of Pakistani members:

• All connections to jj33.ws use TLS 1.3 encryption — the same standard used by Pakistan's major banks for online banking.
• jj33 does not store full card numbers. Card transactions are tokenised — only a non-sensitive reference token is retained on jj33 servers, not the actual card details.
• JazzCash and Easypaisa wallet numbers are stored in encrypted format and are never displayed in full in account interfaces or support communications.
• Withdrawals require OTP verification to your registered mobile number before processing — protecting you even if your password is compromised.
• jj33 conducts regular security audits and penetration testing on all systems handling financial data.
• Access to financial data within jj33 is restricted to a small number of authorised staff on a need-to-know basis only.

jj33 uses cookies and similar tracking technologies on its website. Cookies are small text files stored on your device that help jj33 function correctly and improve your experience. Here is a breakdown of the cookie types used on jj33:

You can manage or disable non-essential cookies through your browser settings. Be aware that disabling functional cookies may affect some jj33 features such as saved preferences. jj33 does not use third-party advertising or social media tracking cookies.

jj33 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Account data (identity, contact): Retained for the duration of your active jj33 account and for 5 years after account closure, in line with financial record-keeping requirements.
• Transaction and betting history: Retained for 5 years from the date of each transaction, as required for AML compliance and dispute resolution.
• KYC documents (CNIC copies): Retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the interaction to enable follow-up and quality review.
• Technical and usage data: Aggregated and anonymised after 12 months; raw logs are deleted after 90 days.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as proof of compliance.

When data reaches the end of its retention period, it is securely deleted from jj33 systems. Data held in backups is deleted within the next scheduled backup purge cycle.

As a jj33 member, you have the following rights regarding your personal data. jj33 is committed to honouring all valid requests within 30 days of receipt.

To exercise any of these rights, contact jj33 at support@jj33.ws with the subject line "Data Rights Request". Include your full name, registered mobile number and a description of your request. We will verify your identity before processing the request and respond within 30 days.

jj33 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in the jj33 KYC process, and any account found to belong to a minor will be immediately closed with any funds held within it returned via the original payment method after verification.

If you are a parent or guardian and believe a minor has created a jj33 account using false information, please contact us immediately at support@jj33.ws. We take underage gambling seriously and will act on all such reports without delay.

jj33 may update this Privacy Policy from time to time as the platform evolves or as legal requirements change. When significant changes are made, active jj33 members will be notified via email or an in-platform notification before the changes take effect.

• The "Last Updated" date at the top of this page will be revised whenever changes are published.
• Continued use of jj33 following publication of an updated Privacy Policy constitutes acceptance of the revised policy.
• If you disagree with significant changes, you may close your jj33 account before the changes take effect and request deletion of your data where legally permissible.

We recommend bookmarking this page and reviewing it periodically. We will always explain what has changed and why in the notification accompanying any update.

If you have any questions about this Privacy Policy, want to exercise your data rights or wish to raise a concern about how jj33 has handled your personal data, please use one of the following channels: