1jj Privacy Policy

1 Overview and Data Controller Identity

This Privacy Policy describes the data processing practices of 1jj ("1jj", "we", "us", "our") in relation to the personal information of users ("you", "Player") who access the online gaming platform at https://1jj.lat and any associated mobile interfaces.

1jj is the data controller in respect of the personal information collected through the platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out lawfully, transparently, and in accordance with the data protection principles outlined in this policy.

This policy applies to all personal data collected by 1jj in connection with your registration, account use, financial transactions, customer support interactions, and any other engagement with the platform. It covers data collected through the website, any associated mobile applications, and via direct communications with our support team.

2 Personal Data We Collect

The following table summarizes the categories of personal data collected by 1jj, the specific data points within each category, and the primary reason for collection. We collect only what is genuinely necessary — no more.

3 How 1jj Uses Your Personal Data

1jj uses your personal data for the following purposes. Each purpose is linked to a specific legal basis, which is detailed in Section 4 below.

• Account creation and management: Registering your account, maintaining your profile, processing your gaming preferences, and communicating account-related updates.
• Identity and age verification: Confirming that you are who you say you are and that you meet the mandatory 21+ age requirement for all gaming and betting activities on the platform.
• Payment processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and processing withdrawal requests to your nominated payment method.
• Fraud and security monitoring: Detecting and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Regulatory compliance: Meeting anti-money laundering (AML) reporting obligations, maintaining gaming records required under our international license, and cooperating with regulatory audits.
• Responsible gaming: Monitoring betting patterns for indicators of problem gambling, enforcing deposit limits, cooling-off periods, and self-exclusion restrictions, and communicating with players who display signs of harmful gambling behavior.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and improving the overall quality of our player support service.
• Marketing communications (with consent only): Sending you information about 1jj promotions, bonuses, and new game offerings — but only where you have explicitly opted in. You can withdraw this consent at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game offerings, payment flows, website performance, and the overall user experience.

4 Legal Basis for Processing

Every data processing activity at 1jj is grounded in one of the following legal bases. Where more than one basis applies to a specific processing activity, we rely on the most appropriate one.

5 Sharing Your Personal Data

1jj does not sell your personal data. We share it only in the following limited circumstances, and only to the extent necessary for the stated purpose.

• Payment providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own regulatory obligations regarding data protection.
• Identity verification services: Third-party KYC providers may receive copies of your identity documents and personal details to perform automated verification checks on our behalf. These providers act as data processors under our instruction and may not use your data for any other purpose.
• Game providers: Where 1jj offers games supplied by third-party game studios, those studios may receive anonymised session data necessary to operate the game and detect cheating or technical faults. They do not receive your personal identity or financial data.
• Regulatory authorities: 1jj is required by its international gaming license to share certain player data with the licensing regulatory authority upon request. We may also be required to report suspicious financial activity to financial intelligence units in relevant jurisdictions.
• Professional advisors: Legal counsel, auditors, and accountants may access limited personal data where necessary for the provision of professional services, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all 1jj assets, player data may be transferred to the acquiring entity. We will notify you via your registered email address before such a transfer occurs.

6 Cookies and Tracking Technologies

The 1jj platform uses cookies and similar tracking technologies to operate the website, maintain your login session, and — where you have consented — to analyze platform usage and deliver relevant content.

7 Data Retention

1jj retains your personal data for as long as is necessary to fulfil the purposes set out in this policy and to meet our legal and regulatory obligations. We do not keep data indefinitely. The following retention periods apply as a general guide:

• Account data (active accounts): Retained for the duration of the account relationship and for a period of five years following account closure, in accordance with our gaming license requirements.
• Transaction records: Retained for a minimum of five years following the transaction date, as required by anti-money laundering regulations applicable to licensed gaming operators.
• Identity verification documents: Retained for five years following account closure, or longer where required by a specific regulatory obligation or ongoing investigation.
• Gaming history and bet records: Retained for five years for regulatory compliance; anonymised summaries may be retained for longer for statistical analysis.
• Support communications: Retained for three years from the date of the last interaction, or longer where the communication is relevant to an unresolved dispute or regulatory matter.
• Marketing consent records: Retained for as long as the consent is active plus three years following withdrawal, to demonstrate compliance with consent requirements.

When data reaches the end of its retention period, it is securely deleted or anonymised. Secure deletion means the data is rendered permanently unrecoverable and cannot be associated with any identifiable individual.

8 How We Protect Your Data

The security of your personal data is a fundamental operational priority at 1jj. We implement technical and organisational measures proportionate to the sensitivity of the data being protected, including:

• SSL/TLS encryption in transit: All data transmitted between your device and the 1jj platform is protected by TLS 1.2 or higher. The padlock icon in your browser confirms this encryption is active.
• AES-256 encryption at rest: Personal data and financial records stored on 1jj servers are encrypted using AES-256, the internationally recognized standard for data-at-rest protection.
• Access controls: Access to personal data is restricted to 1jj team members who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Two-factor authentication: 1jj offers and recommends two-factor authentication (2FA) for all player accounts to protect against unauthorized access in the event of password compromise.
• Fraud detection systems: Automated and manual monitoring systems are in place to detect unusual account activity, unauthorized access attempts, and suspicious financial transactions in real time.
• Incident response: In the event of a data security incident affecting your personal data, 1jj will notify you via your registered email address within 72 hours of becoming aware of the incident, in accordance with our regulatory obligations.

9 Your Data Protection Rights

As an individual whose personal data is processed by 1jj, you hold the following rights. You can exercise any of these rights by contacting us at [email protected] from your registered email address.

10 Minors and the 21+ Age Requirement

The 1jj platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from anyone below the age of 21. Age verification is a mandatory step in the account lifecycle and is enforced through identity document checks before withdrawal is permitted.

Where 1jj discovers that personal data has been collected from an individual who is below the age of 21 — whether through a false declaration during registration or any other means — we will immediately close the account, forfeit any associated balance in accordance with our Terms and Conditions, and securely delete all personal data associated with that account as promptly as our regulatory obligations permit.

11 International Data Transfers

As an internationally licensed gaming platform, 1jj may transfer your personal data to servers and service providers located outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to the same standard that applies within our operational environment.

Safeguards for international transfers may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules where applicable, and transfer impact assessments to evaluate the legal protections available in the destination country. We do not transfer personal data to jurisdictions that do not provide an adequate level of protection without first putting appropriate safeguards in place.

Where you would like more information about the specific safeguards applied to any particular international data transfer involving your personal data, please contact us at [email protected] and we will provide the relevant details within a reasonable timeframe.

12 Third-Party Links and Services

The 1jj platform may reference or link to third-party services such as payment providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, as well as third-party game studios whose games are hosted within the platform. This Privacy Policy applies only to data processed by 1jj directly and does not extend to the data practices of third-party service providers.

When you interact with a third-party payment provider — for example, when completing a JazzCash or EasyPaisa deposit — that provider's own privacy policy governs the handling of data you provide directly to them through their interface. We recommend reviewing the privacy policies of any third-party services you use in connection with your 1jj account.

Third-party game studios integrated into the 1jj platform operate under data processing agreements with 1jj that restrict their use of any data to the specific purposes necessary for game operation. They may not use any data derived from your 1jj gaming sessions for their own marketing, profiling, or analytics purposes without your separate consent.

13 Changes to This Privacy Policy

1jj reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. The effective date at the top of this document indicates when the current version entered into force.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you via your registered email address at least seven calendar days before the updated policy takes effect. For minor updates such as typographical corrections, clarifications that do not change the substance of any provision, or changes required for immediate regulatory compliance, we may update the policy without advance notice.

Your continued use of the 1jj platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated policy, you should cease using the platform and may request account closure in accordance with the process set out in the 1jj Terms and Conditions.

14 Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 1jj processes your personal data, please get in touch using the contact details below. We treat all privacy enquiries with the same priority as financial support requests.

If you are not satisfied with our response to a privacy enquiry or rights request, you have the right to escalate your concern to the relevant regulatory authority overseeing 1jj's international gaming license. Details of the applicable authority are available on request from our support team.