Privacy Policy — jjwim Online Casino

jjwim is an online casino and sports betting platform operating at jjwim.net, serving registered players in Pakistan. For the purposes of this Privacy Policy, jjwim acts as the data controller in respect of all personal information collected from users of the platform. This means jjwim determines the purposes and means by which your personal data is processed.

jjwim operates under an international gaming regulatory licence and is bound by the data protection obligations prescribed under that regulatory framework. All data processing activities conducted by jjwim are carried out in accordance with applicable data protection principles — including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions or concerns regarding how jjwim handles your personal data, you may contact the jjwim Data Protection team directly at [email protected] at any time. jjwim commits to acknowledging all data-related queries within 2 business days and providing a substantive response within 14 calendar days.

jjwim collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data collected are as follows:

jjwim collects personal data through the following channels:

• Direct submission at registration: When you create a jjwim account, you voluntarily provide your name, date of birth, email address, and mobile number. This is the primary source of identity and contact data.
• KYC document upload: When you submit your CNIC scan and payment method proof through the account verification portal, jjwim collects the identity and financial data necessary to complete the verification process.
• Platform interactions: As you use jjwim — placing bets on PSL cricket, spinning slots, accessing live casino tables, or using responsible gaming tools — the platform automatically records usage and behavioural data to operate the service correctly.
• Payment processing: When you deposit via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, the associated payment provider transmits transaction confirmation data to jjwim to verify successful fund receipt.
• Cookies and tracking technologies: jjwim's website uses first-party cookies and session tokens to manage your login state, maintain platform performance, and improve user experience. See Section 9 for full cookie details.
• Support communications: When you contact jjwim via live chat or email, the content of those communications, including your contact details and any account information you share, is collected and stored as part of your support record.

jjwim uses the personal data it collects strictly for the purposes listed below. Personal data is never used for purposes incompatible with those for which it was originally collected without your explicit prior consent.

• Account creation and management: To register your jjwim account, maintain your account settings, process deposits and withdrawals in PKR, and provide access to all casino and sportsbook features.
• Identity and age verification (KYC): To verify that you are a real individual who meets the 21+ age requirement, and that the payment methods linked to your account are registered in your own name.
• Anti-Money Laundering (AML) compliance: To monitor transaction patterns, detect suspicious activity, and fulfil jjwim's obligations under international gaming regulatory AML frameworks.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of support interactions for quality and compliance purposes.
• Responsible gaming: To administer deposit limits, session reminders, cooling-off periods, and self-exclusion requests you have activated. Usage data may also be used to identify early indicators of problem gambling behaviour so that jjwim can proactively offer responsible gaming support.
• Fraud prevention and security: To detect and prevent unauthorised account access, duplicate account creation, bonus abuse, and any other fraudulent or prohibited activity described in jjwim's Terms & Conditions.
• Platform improvement: Aggregated and anonymised usage data is used internally to improve game selection, platform performance, mobile responsiveness, and the overall user experience for Pakistani players.
• Marketing communications (opt-in only): If you have explicitly opted in to marketing communications during registration or through your account settings, jjwim may send you promotional emails or SMS messages about new games, PSL betting promotions, bonus offers, and platform updates. You may opt out at any time.

jjwim processes your personal data under the following legal bases. Where more than one basis applies to a specific processing activity, all applicable bases are listed:

Where jjwim relies on legitimate interests as the legal basis, a balancing test has been conducted to confirm that jjwim's interests do not override the fundamental rights and interests of data subjects. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jjwim does not share your personal data with third parties except in the limited and specific circumstances described below. In all cases, data sharing is conducted only to the extent strictly necessary for the stated purpose and subject to appropriate contractual data protection safeguards.

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own regulatory obligations and privacy policies.
• KYC and identity verification partners: Third-party identity verification technology providers may process your CNIC data and liveness check images on jjwim's behalf under strict data processing agreements. These partners are prohibited from using your data for any purpose other than completing the verification task assigned by jjwim.
• Regulatory and law enforcement authorities: jjwim is legally obligated to disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or regulatory direction. jjwim will not provide advance notice of such disclosures where doing so would compromise an active investigation.
• Fraud prevention networks: In cases of confirmed or strongly suspected fraud, jjwim may share relevant account and transaction data with shared fraud prevention databases operated in connection with the gaming regulatory framework.
• IT infrastructure and hosting providers: jjwim's platform is hosted on secure cloud infrastructure. Hosting providers have access to server-level data as a technical necessity but are contractually prohibited from accessing or processing user data for their own purposes.

As a licensed online gaming operator, jjwim is subject to mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. These are not optional — they are legal requirements that jjwim must fulfil as a condition of its operating licence, and failure to comply could result in licence revocation.

KYC data — specifically your CNIC scan, date of birth confirmation, and payment method proof — is retained for the full duration of your account and for a mandatory minimum period of five years following account closure. This retention period is set by regulatory requirement and cannot be shortened at a user's individual request.

jjwim's AML monitoring system analyses transaction patterns, deposit frequency, withdrawal amounts, and account behaviour against established risk indicators. Where an account is flagged for review, the monitoring process may involve manual review by jjwim's compliance team. Accounts under active AML review may have withdrawal facilities suspended pending the outcome of the review.

Pakistani players should be aware that transactions processed via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank are subject to the respective financial institutions' own transaction monitoring obligations under Pakistan's applicable financial regulations. jjwim's AML obligations operate in addition to, not instead of, those institutional obligations.

jjwim retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following retention schedule applies:

Once a retention period expires, jjwim securely deletes or irreversibly anonymises the relevant personal data so that it can no longer be attributed to any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

jjwim uses cookies and similar technologies on jjwim.net to ensure the platform functions correctly and to improve your experience as a Pakistani player. The following types of cookies are used:

• Strictly Necessary Cookies: These are essential for the platform to operate. They manage your login session, maintain your account authentication token, remember your preferred language setting, and ensure that the responsible gaming tools you have activated remain in effect during your session. These cookies cannot be disabled without breaking core platform functionality.
• Performance Cookies: These collect anonymised data about how you interact with jjwim — which game categories you visit, how long pages take to load, and whether any errors are encountered. This data is used purely to improve platform performance and is not linked to your individual identity.
• Functional Cookies: These remember preferences you have set, such as display settings or game view preferences, so that you do not need to reconfigure them each time you log in.

jjwim does not use third-party advertising cookies or social media tracking pixels. You can manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the jjwim platform.

jjwim takes the security of your personal data seriously and employs a layered set of technical and organisational security measures proportionate to the sensitivity of the data held. Key security measures include:

• Encryption in transit: All data transmitted between your device and jjwim.net is encrypted using TLS 1.2 or higher. This includes login credentials, KYC document uploads, and payment transaction data.
• Encryption at rest: Sensitive data — including CNIC documents, password hashes, and financial records — is encrypted at the storage layer using AES-256 encryption.
• Access controls: Access to personal data within jjwim's internal systems is restricted on a strict need-to-know basis. Staff with access to user data undergo background checks and are bound by confidentiality obligations. All internal data access is logged and auditable.
• Two-factor authentication: All jjwim staff accounts with access to user data are protected by mandatory two-factor authentication. Players are also strongly encouraged to enable OTP-based login verification on their own jjwim accounts.
• Penetration testing: jjwim's platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, jjwim will notify affected users and the relevant regulatory authority within the timeframes required by applicable law and without undue delay.

You are responsible for maintaining the confidentiality of your own login credentials. If you believe your jjwim account has been compromised, contact support immediately at [email protected] or via live chat.

As a jjwim account holder, you have the following rights in relation to your personal data. jjwim will respond to all valid rights requests within 30 calendar days of receipt. Some rights are subject to limitations where jjwim has overriding legal obligations — for example, KYC and AML retention requirements may prevent immediate deletion of certain data categories.

To exercise any of the above rights, submit a written request to [email protected] with the subject line DATA RIGHTS REQUEST and include your registered email address and the specific right you wish to exercise. jjwim may need to verify your identity before processing the request.

jjwim is strictly an adults-only platform. Persons under the age of 21 are absolutely prohibited from registering an account, depositing funds, or participating in any game or betting activity on jjwim.net. This restriction applies to all users regardless of location.

jjwim does not knowingly collect or process personal data from any individual under the age of 21. CNIC-based age verification is applied to every account before withdrawal rights are granted, precisely to enforce this restriction. If jjwim discovers that personal data belonging to a person under 21 has been collected — for example, due to falsified age information provided at registration — jjwim will immediately:

• Suspend and permanently close the relevant account.
• Freeze and return any deposited funds to the payment source where technically possible.
• Permanently delete all personal data associated with the underage account, except where retention is required by law.
• Report the incident to the relevant regulatory authority where required.

jjwim reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. All amendments will be published on this page with a revised effective date prominently displayed at the top of the document.

Where an amendment is material — meaning it significantly affects your rights or how your personal data is used — jjwim will provide advance notice to registered account holders via email to the address on file, no less than 14 days before the amended policy takes effect. Continued use of jjwim following the effective date of any amended Privacy Policy constitutes acceptance of the revised terms.

If you do not agree with any amendment to this Privacy Policy, you have the right to close your account before the amended policy takes effect. To request account closure, contact support at [email protected]. Note that mandatory KYC and AML data retention obligations will continue to apply to your records following account closure as set out in Section 8 above.

For all privacy-related queries, data rights requests, or concerns regarding jjwim's data processing practices, please contact the jjwim Data Protection team using the details below:

• Email: [email protected] — use subject line PRIVACY ENQUIRY for fastest routing to the data protection team.
• Live Chat: Available 24/7 via the jjwim platform. Live chat is recommended for urgent account security issues requiring immediate attention.
• Response commitment: jjwim acknowledges all privacy queries within 48 hours and provides a substantive response within 14 calendar days, in line with standard data subject rights response timeframes.

jjwim is committed to resolving all privacy concerns fairly and promptly. If you believe your data protection rights have been violated and jjwim has failed to address your concern satisfactorily, you have the right to lodge a complaint with the relevant supervisory authority under the gaming regulatory framework applicable to your jurisdiction.