Privacy Policy – 1jjcom Pakistan Online Casino Data Protection

1. Introduction

This Privacy Policy describes how 1jjcom ("1jjcom", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals who register accounts, make deposits, play games, or otherwise interact with the 1jjcom platform at 1jjcom.app. The policy applies to all players regardless of the device they use to access 1jjcom — including mobile browsers, desktop browsers, and any future dedicated applications.

We understand that for Pakistani players, privacy is not a bureaucratic formality — it is a genuine concern. When you deposit in PKR and share your CNIC details for verification, you are trusting 1jjcom with sensitive information. We take that trust seriously and this document explains, in plain language, exactly what we do with that information and what we absolutely do not do.

By registering an account at 1jjcom and confirming your agreement to our Terms and Conditions, you also confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please do not register or continue using the platform.

2. Data Controller

For the purposes of applicable data protection law, 1jjcom is the data controller responsible for the personal data collected through this platform. "Data controller" means the entity that determines the purposes and means of processing your personal data — in other words, 1jjcom decides what data is collected, why it is collected, and how it is stored and used.

All queries, requests, and complaints related to this Privacy Policy should be directed to 1jjcom using the contact details set out in Section 14 of this document. We have a designated privacy contact within our support team who handles all data-related requests and responds in both Urdu and English.

3. What We Collect

1jjcom collects personal data from you in three main ways: information you provide directly when registering or using the platform, information generated automatically by your use of 1jjcom, and information received from third-party service providers such as payment processors. Here is a detailed breakdown:

1jjcom does not collect full payment card numbers. Card payments are processed through a PCI-DSS compliant payment gateway — full card data is handled exclusively by the gateway and is never stored on 1jjcom servers. Similarly, Easypaisa and JazzCash wallet numbers are stored only in masked format after transaction completion.

4. How We Use Your Data

Every piece of data 1jjcom collects is used for a specific, documented purpose. We do not collect data speculatively and we do not use data for purposes beyond those listed here without updating this policy and notifying you where required.

• Account operation: Your registration data is used to create, maintain, and secure your 1jjcom account, authenticate your identity at login, and personalise your platform experience.
• Payment processing: Financial and identity data is used to process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments, and to verify that payment methods belong to you.
• Identity verification (KYC): CNIC and photograph data is used to comply with anti-money laundering and know-your-customer obligations. This data is processed by 1jjcom and, where necessary, by our licensed KYC verification partner.
• Fraud prevention and security: Technical and behavioural data is used to detect, investigate, and prevent fraud, collusion, money laundering, bonus abuse, and other prohibited activities at 1jjcom.
• Responsible gaming: Gaming history and session data is used to monitor for signs of problem gambling behaviour, apply self-imposed limits, and fulfil our responsible gaming obligations.
• Customer support: Communication data is used to respond to and resolve your support queries. Support transcripts are retained for quality assurance and dispute resolution.
• Legal compliance: We process and retain certain data to comply with applicable financial, anti-money laundering, and gaming regulatory obligations. Some data must be retained for defined periods regardless of your account status.
• Platform improvement: Aggregated, anonymised technical and gaming data is analysed to improve platform performance, game loading speeds, and the overall 1jjcom player experience. This analysis does not identify you personally.
• Promotional communications: If you have opted in to marketing at 1jjcom, your contact details may be used to send you bonus offers and promotional messages. You can opt out at any time through your account settings or by contacting support.

5. Legal Basis for Processing

1jjcom processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — operating your account, processing payments, settling game results.
• Legal obligation: Processing required to comply with anti-money laundering regulations, financial reporting requirements, and gaming compliance obligations applicable to 1jjcom's operations.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics, where these interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other processing where we have explicitly asked for your agreement. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6. Who We Share Your Data With

1jjcom does not sell, rent, or trade your personal data to third parties for commercial purposes. Full stop. Data sharing at 1jjcom is limited to what is strictly necessary for operational, compliance, and legal purposes. The categories of third parties who may receive limited personal data from 1jjcom are as follows:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, and card payment gateways receive transaction data necessary to process your PKR deposits and withdrawals. Each processor operates under its own privacy framework and is bound by contractual obligations to 1jjcom regarding data security.
• KYC verification partner: Our licensed identity verification partner receives CNIC data and photographs when KYC verification is required. This partner is contractually prohibited from using your data for any purpose other than identity verification on behalf of 1jjcom.
• Game providers: Certified game providers such as Evolution Gaming and Pragmatic Play may receive session and game data necessary to operate their games on the 1jjcom platform. This data does not include your financial transaction history or full identity documents.
• Technology infrastructure: Cloud hosting providers and content delivery networks that power the 1jjcom platform may have technical access to data stored on their infrastructure. These providers are bound by strict data processing agreements and operate only under 1jjcom's documented instructions.
• Legal and regulatory authorities: Where required by law, by court order, or by a competent regulatory authority, 1jjcom may disclose personal data. We will inform you of such disclosures where legally permitted to do so.
• Fraud prevention services: Industry fraud prevention and anti-money laundering networks may receive limited data where we have a legitimate interest in preventing financial crime. Data shared in this context is governed by strict industry protocols.

7. Payment Data and PKR Transactions

Given that 1jjcom handles real PKR transactions for Pakistani players, payment data deserves specific attention in this policy. Here is exactly how financial information is handled at 1jjcom:

• Full card numbers are never stored on 1jjcom servers. Visa and Mastercard transactions are routed through a PCI-DSS Level 1 certified payment gateway which tokenises card details. 1jjcom retains only a masked reference and the last four digits for display purposes.
• Easypaisa and JazzCash mobile wallet numbers are stored in masked format after transaction completion. The full wallet number is used only during the active transaction process and is not retained in full on 1jjcom's database.
• Transaction records — including deposit amounts, withdrawal amounts, timestamps, and payment method references — are retained by 1jjcom for a minimum of five years to comply with anti-money laundering regulations. This retention period applies even if your account is closed.
• All payment data transmitted between your device and 1jjcom's payment infrastructure is encrypted using TLS 1.2 or higher.
• 1jjcom uses transaction monitoring systems to detect unusual financial patterns that may indicate money laundering, fraud, or bonus abuse. Flagged transactions are reviewed by our compliance team.

Withdrawal requests at 1jjcom require that your payment method has been verified as belonging to you. This anti-fraud measure protects you from unauthorised withdrawals from your account and protects 1jjcom from being used as a vehicle for financial crime. If you change your primary payment method, re-verification may be required before the new method can be used for withdrawals.

8. Cookies and Tracking Technologies

1jjcom uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device by your browser. Cookies do not contain executable code and cannot carry viruses or install malware. Here is exactly what cookies 1jjcom uses and why:

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Blocking essential cookies will impair your ability to use 1jjcom. You can also manage cookie preferences through the consent banner displayed on your first visit to 1jjcom.

9. Data Retention

1jjcom retains personal data only for as long as necessary for the purposes described in this policy and as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account data: Retained for the duration of your active account at 1jjcom plus five years following account closure. This retention period is required by anti-money laundering regulations and is not discretionary.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years from the date of each transaction, regardless of account status.
• KYC documents: CNIC scans and verification photographs are retained for five years following account closure. Regulatory requirements mandate this retention period.
• Game history: Detailed game session records are retained for three years. Aggregated statistical data derived from game sessions may be retained longer in anonymised form.
• Support communications: Chat transcripts and email correspondence are retained for two years for quality assurance and dispute resolution purposes.
• Technical/log data: Server logs and IP address records are retained for 12 months and then automatically deleted.
• Marketing preferences: Records of your marketing consent or opt-out status are retained for the duration of your account plus three years.

When data is no longer required for any of the above purposes, 1jjcom securely deletes or anonymises it. Secure deletion means the data cannot be recovered through standard or forensic means. Anonymisation means the data is irreversibly stripped of all identifiers that could connect it to you as an individual.

10. Security Measures

1jjcom implements technical and organisational security measures appropriate to the nature and sensitivity of the data we process. These are not theoretical commitments — they are operational systems in place today:

• TLS encryption in transit: All communications between your browser and 1jjcom are encrypted using TLS 1.2 or higher. The 1jjcom domain maintains a valid SSL certificate.
• Encrypted storage: Sensitive fields in the 1jjcom database — including identity document data and payment references — are stored encrypted at rest using AES-256.
• Access controls: Personal data is accessible only to 1jjcom staff and systems that require it for legitimate operational purposes. Access is role-based and logged. All access is auditable.
• Two-factor authentication: Internal systems used by 1jjcom staff to access player data require multi-factor authentication. Players are encouraged to enable 2FA on their own 1jjcom accounts through account settings.
• Penetration testing: 1jjcom conducts periodic security assessments and penetration tests of the platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Breach response: In the event of a data breach that is likely to result in risk to affected players, 1jjcom will notify affected players and relevant authorities within the timeframes required by applicable law. Notification will be sent to your registered email address.

11. Your Privacy Rights

As a player at 1jjcom, you have the following rights over your personal data. These rights can be exercised at any time by contacting our support team. We will respond to all valid requests within 72 hours and complete all requests within 30 days unless legal retention obligations prevent earlier action.