jj66 Privacy Policy

01 Introduction

1.1 jj66 is committed to protecting the privacy and personal data of all players who use the jj66 platform at jj66.ws. This Privacy Policy has been prepared in the spirit of full transparency and sets out in plain, clear terms exactly what data we collect, why we collect it, and how it is handled throughout its lifecycle on our systems.

1.2 jj66 operates primarily for Pakistani players and processes all financial transactions in Pakistani Rupees (PKR). Given the nature of our services — online casino gaming, cricket betting, PSL wagering, and slot games — we are required by our operating framework to collect certain categories of personal data to verify identity, prevent fraud, comply with anti-money laundering (AML) obligations, and provide responsible gaming safeguards.

1.3 This Privacy Policy should be read alongside our Terms & Conditions (available at /terms-conditions) and our Responsible Gaming policy (available at /responsible-gaming), both of which contain additional provisions that interact with how personal data is used on the jj66 platform.

1.4 All references to "personal data" in this Policy mean any information that identifies or could reasonably be used to identify a living individual, whether directly (such as your full name or CNIC number) or indirectly (such as a combination of device identifiers and location data).

02 Data We Collect

2.1 jj66 collects personal data through several channels: the account registration process, ongoing account activity, payment transactions, customer support interactions, and automated technical data collection from your device and browser.

2.2 jj66 does not collect sensitive personal data such as biometric data, health information, or religious or political beliefs unless specifically required by a regulatory authority to fulfil a legal obligation, in which case you will be informed in advance.

2.3 Where jj66 requests documents for KYC verification — such as a copy of your CNIC, passport, or utility bill — these documents are processed by our appointed third-party KYC service provider and are not stored in plain-text form on jj66's own servers beyond the period required for verification completion.

03 How We Use Your Data

3.1 jj66 uses the personal data collected for the following specific purposes:

• Account creation and management — to register your account, verify your identity, maintain your player profile, and provide you with access to all jj66 platform features;
• Transaction processing — to facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, and Mastercard;
• Legal and regulatory compliance — to meet our KYC, AML, and responsible gaming obligations, including verifying that all players are 21 years of age or older;
• Fraud prevention and security — to detect and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• Customer support — to respond to your queries, complaints, and support requests submitted via live chat or email to [email protected];
• Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling behaviour, to apply and manage self-exclusion requests, and to enforce deposit and loss limits configured by the player;
• Platform improvement — to analyse aggregated usage data in order to improve the design, performance, and content of the jj66 platform;
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have given your explicit consent to receive such communications. You may opt out at any time.

3.2 jj66 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such processing is necessary for fraud prevention or responsible gaming intervention, in which case human review is available upon request.

04 Legal Basis for Processing

4.1 jj66 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the player agreement between you and jj66, including account registration, payment processing, and game delivery;
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, AML transaction monitoring, age verification (21+), and data retention obligations;
• Legitimate interests — processing necessary for jj66's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided that such interests do not override your fundamental privacy rights;
• Consent — processing based on your freely given, specific, informed, and unambiguous consent, such as for direct marketing communications. Where consent is the basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

05 Third-Party Sharing

5.1 jj66 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing with third parties is limited to the following categories of recipients, each of whom is bound by appropriate data protection obligations:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and card scheme processors (Visa / Mastercard) receive only the financial data necessary to execute your requested transaction;
• KYC and identity verification providers — appointed third-party services that process identity documents to verify your age (21+) and identity in accordance with our legal obligations;
• Game content providers — casino game studios whose titles are available on the jj66 platform may receive anonymised session data for RNG certification and fair play auditing purposes;
• Platform infrastructure providers — hosting, cloud storage, and cybersecurity service providers who process technical data on jj66's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities — jj66 will disclose personal data to competent authorities where required by law, court order, or regulatory direction. jj66 will not notify the affected player of such disclosure where prohibited from doing so by the relevant authority.

5.2 Any third-party service provider engaged by jj66 to process personal data on our behalf is required to process such data solely on jj66's documented instructions and to implement appropriate technical and organisational security measures at least equivalent to those maintained by jj66.

06 Cookies & Tracking Technologies

6.1 jj66 uses cookies and similar tracking technologies to operate the platform, authenticate your sessions, remember your preferences, and analyse aggregate usage patterns. The following categories of cookies are used on jj66.ws:

• Strictly necessary cookies — essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without rendering the platform inoperable;
• Functional cookies — used to remember your preferences such as language settings and display options, improving your experience on return visits;
• Analytics cookies — used to collect aggregated, anonymised data about how players interact with the jj66 platform, enabling us to identify performance issues and improve navigation and content;
• Responsible gaming cookies — used to enforce session time limits, cooling-off periods, and self-exclusion restrictions configured on your account.

6.2 You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your jj66 account or completing payment transactions. jj66 does not use third-party advertising cookies or cross-site tracking technologies.

07 Data Security

7.1 The technical security measures applied by jj66 include, but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and jj66 servers;
• AES-256 encryption for all personal data stored at rest in jj66 databases;
• Multi-factor authentication (MFA) for all administrative access to systems that contain personal data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of platform infrastructure for anomalous access patterns and potential breaches.

7.2 In the event of a personal data breach that poses a risk to your rights and freedoms, jj66 will notify affected players without undue delay and will take immediate remedial action to contain the breach and prevent further exposure.

7.3 You are responsible for maintaining the security of your jj66 account credentials. jj66 strongly recommends using a unique, strong password for your jj66 account and enabling any additional account security features available within your Account Settings panel. If you suspect your account has been compromised, contact [email protected] immediately.

08 Data Retention

8.1 jj66 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data — retained for the duration of your active jj66 account;
• Closed account data — retained for a minimum of five (5) years following account closure to satisfy AML record-keeping obligations;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction in PKR;
• KYC verification documents — retained for the duration of the active account plus five (5) years following closure, unless a longer period is mandated by applicable law;
• Customer support communications — retained for three (3) years from the date of the last interaction;
• Self-exclusion records — retained permanently to prevent re-registration during an active exclusion period and to maintain a verifiable audit trail.

8.2 Upon expiry of the applicable retention period, jj66 will securely delete or anonymise your personal data in accordance with recognised data destruction standards, such that the data can no longer be attributed to any identifiable individual.

09 Your Rights

9.1 As a player on the jj66 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact jj66 support at [email protected] with the subject line "Data Rights Request":

9.2 jj66 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, jj66 may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reasons for it within the initial thirty-day window.

9.3 jj66 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply. jj66 will notify you before any fee is applied.

10 Children & Minors

10.1 jj66 employs mandatory age verification at the point of registration and during the KYC process to ensure that no player under the age of 21 can access real-money gaming or betting services on the platform. Any account found to belong to a person under 21 will be immediately suspended, all balances will be returned, and all personal data associated with that account will be deleted.

10.2 If you are a parent or guardian and believe that your child has registered a jj66 account, please contact [email protected] immediately. jj66 will investigate the matter on a priority basis and take all necessary remedial action, including account closure and data deletion, within 48 hours of receiving a verified report.

11 International Data Transfers

11.1 jj66 primarily stores and processes personal data of Pakistani players within secure data centre infrastructure. Where certain service providers — such as KYC verification platforms or cloud infrastructure providers — are located outside Pakistan, personal data may be transferred to and processed in those locations.

11.2 In all cases where personal data is transferred internationally, jj66 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include contractual data processing agreements and, where applicable, standard contractual clauses.

11.3 By using the jj66 platform and providing your personal data, you acknowledge that your data may be transferred to, stored in, and processed in locations outside Pakistan as described in this section.

12 Updates to This Privacy Policy

12.1 jj66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this document will be updated to reflect the date of any revision.

12.2 Where changes to this Privacy Policy are material — meaning they substantially affect your rights or how your personal data is used — jj66 will notify registered players via the email address on their account at least fourteen (14) days before the revised Policy takes effect.

12.3 Continued use of the jj66 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your jj66 account before the revised Policy takes effect by contacting [email protected].

13 Contact & Complaints

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way jj66 handles your personal data, please contact our support team:

13.2 jj66 takes all privacy complaints seriously and will acknowledge receipt of your complaint within two (2) business days. We aim to resolve all privacy complaints within thirty (30) calendar days. Where a complaint is complex, we will keep you informed of progress throughout the review process.

13.3 If you are not satisfied with jj66's response to your privacy complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority or to seek independent legal advice regarding your rights.