JJ Win Privacy Policy – How We Protect Your Personal Data

JJ Win ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at jjwin.world. JJ Win is the data controller for all personal information collected from players and visitors to the platform. As data controller, we are responsible for determining how and why your personal data is processed.

This Privacy Policy applies to all users of the JJ Win platform, including registered players, visitors browsing the site without an account, and anyone who contacts our customer support team. It covers all data collected through the website, mobile browser experience, and any communications between you and JJ Win.

If you have questions about this policy, about how your data is handled, or if you wish to exercise any of your rights described below, you can reach our data team at support@jjwin.world. We respond to data-related queries within 7 working days.

JJ Win collects personal data through several routes: information you provide directly when registering or using the platform, data generated automatically by your use of the platform, and in some cases data received from third parties such as payment processors.

JJ Win does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where required by law (for example, responsible gaming self-exclusion records). We do not collect biometric data beyond what is necessary for identity verification where required by AML regulations.

JJ Win collects and processes personal data only where there is a valid legal basis for doing so. We rely on the following legal bases for our data processing activities:

• Performance of a contract: Processing your account registration, deposits, withdrawals, and gameplay is necessary to provide the gaming service you have signed up for. Without this processing, we cannot operate your account.
• Legal obligation: Certain data processing is required by law. Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) requirements, and financial record-keeping obligations require us to collect and retain specific identity and transaction data regardless of individual consent.
• Legitimate interests: JJ Win processes some data to protect the platform and its players from fraud, collusion, and abuse; to improve platform performance and game selection; and to ensure responsible gaming obligations are met. We balance our legitimate interests against player privacy rights before relying on this basis.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so only with your explicit consent. You can withdraw this consent at any time through your account settings or by contacting support.

Here is a straightforward breakdown of what we actually do with the data we collect at JJ Win:

• Account management: Creating and maintaining your player account, processing logins, updating account information, and managing your session security.
• Payment processing: Facilitating deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments. This requires sharing limited financial data with the respective payment processors.
• Identity verification (KYC): Verifying your identity as required by AML regulations and platform terms. This may involve third-party identity verification services operating under data processing agreements with JJ Win.
• Fraud prevention and security: Monitoring account activity to detect suspicious behaviour, multiple accounts, bonus abuse, and potential fraud. Technical data including IP addresses and device fingerprints are used for this purpose.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling and enabling the responsible gaming tools available on the platform.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution.
• Promotions and bonuses: Administering bonus offers, tracking wagering activity against bonus requirements, and managing promotion eligibility. If you have opted in to marketing communications, sending you relevant offers by email or SMS.
• Platform improvement: Using aggregated, anonymised usage data to understand how players use the platform and identify areas for improvement. Individual player data is not used for this purpose without anonymisation.

JJ Win uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us provide a better experience and enable certain platform functions.

The types of cookies used on the JJ Win platform are:

• Essential cookies: These are necessary for the platform to function. They maintain your login session, remember your language preferences, and enable core features like the cashier. The platform cannot function without these cookies and they do not require consent.
• Analytics cookies: These help us understand how players navigate and use the platform — which pages are visited, how long sessions last, and where players encounter issues. This data is aggregated and anonymised. We use analytics cookies only with your consent.
• Security cookies: These help detect and prevent fraudulent access attempts, bot activity, and account hijacking. They form part of our fraud prevention system.

JJ Win does not use advertising or targeting cookies to build profiles for advertising purposes. We do not share cookie data with advertising networks.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in and using the platform. Blocking analytics cookies will not affect your ability to play — it simply means we receive less information about platform usage patterns.

JJ Win shares personal data with third parties only where necessary and under strictly controlled conditions. We do not sell your data to any third party under any circumstances.

The categories of third parties who may receive your data, and the reason for sharing, are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card payment gateways receive the financial data necessary to process your transactions. These parties operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Where KYC verification is required, we use certified third-party identity verification services. These providers receive your identity documents and verification data under data processing agreements with JJ Win.
• Game providers: The third-party studios whose games appear on JJ Win may receive your anonymous player session data (session ID, bet amounts, game events) necessary for the game to function. Individual identity data is not shared with game providers.
• Regulatory and law enforcement authorities: JJ Win is legally required to cooperate with financial intelligence units, law enforcement agencies, and regulatory bodies. Where a lawful request for data is received, JJ Win will comply with applicable legal obligations.
• Fraud prevention services: Aggregated technical data (IP addresses, device data) may be shared with fraud prevention services to detect and block fraudulent activity across the platform.

All third parties who receive personal data from JJ Win are required to process that data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection laws. JJ Win does not transfer personal data outside Pakistan to countries that do not provide an adequate level of data protection without appropriate safeguards in place.

Data security at JJ Win is treated as a core operational requirement, not an afterthought. The following technical and organisational measures are in place to protect your personal data:

• Encryption in transit: All data transferred between your device and the JJ Win platform is encrypted using TLS (Transport Layer Security). The padlock symbol in your browser confirms this connection is active.
• Encryption at rest: Personal data and financial records stored on JJ Win's servers are encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within JJ Win is restricted on a need-to-know basis. Staff members can only access the specific data required for their role. All access is logged and audited.
• Two-factor authentication: JJ Win offers SMS OTP two-factor authentication for player accounts. We strongly recommend enabling this — it significantly reduces the risk of unauthorised account access even if your password is compromised.
• Payment data security: JJ Win does not store card numbers or full payment account credentials on our servers. Card transactions are processed through PCI-DSS compliant payment gateways that handle sensitive payment data.
• Regular security reviews: JJ Win's technical infrastructure undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

JJ Win retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

When data reaches the end of its retention period and no legal obligation requires its continued storage, it is securely deleted or permanently anonymised. Anonymised data may be retained indefinitely for aggregated analytics as it can no longer be linked to an individual player.

As a JJ Win player, you have the following rights in relation to your personal data. These rights can be exercised by contacting us at support@jjwin.world with the subject line "Data Rights Request":

We will respond to all data rights requests within 30 days. For complex requests, we may extend this by a further 30 days and will inform you if this extension is necessary. We may need to verify your identity before processing a data rights request to ensure we are not disclosing data to the wrong person.

JJ Win is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Account registration requires age declaration, and JJ Win conducts age verification checks as part of the KYC process.

If we become aware that a person under 18 has registered an account or provided personal data, the account will be closed immediately, all data relating to the minor will be securely deleted (except where retention is required for regulatory compliance), and any deposited funds will be handled in accordance with applicable law.

If you believe a minor may have registered on JJ Win, please contact us immediately at support@jjwin.world so we can investigate and take action. For tools to prevent underage access to the platform, visit the Responsible Gaming page.

The JJ Win platform may contain links to third-party websites or services such as payment provider portals. Once you leave the JJ Win platform by following such a link, this Privacy Policy no longer applies. JJ Win is not responsible for the privacy practices or content of third-party websites.

We encourage you to read the privacy policy of any website you visit after leaving jjwin.world. JJ Win only links to third-party sites where necessary for platform functionality, and we do not endorse the privacy practices of any third-party site simply by linking to it.

JJ Win may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes that affect how your data is processed, we will:

• Send an email notification to your registered email address describing the key changes
• Display a prominent notice on the JJ Win platform upon your next login before the changes take effect
• Update the "Last Updated" date at the top of this page

Your continued use of JJ Win after an updated Privacy Policy has been communicated and takes effect constitutes your acceptance of the changes. If you do not accept the updated policy, you must stop using the platform and contact support to close your account, after which any remaining eligible balance will be returned to you.

For changes that are minor corrections, clarifications, or administrative updates that do not affect how your data is processed, we will update this page without sending a notification. The "Last Updated" date will reflect any such changes.

If you have any questions, concerns, or requests related to your privacy or this Privacy Policy, please reach out to JJ Win through the following channels:

• Live Chat: Available 24/7 from within your account on any page. Fastest response for general queries — average response under 2 minutes during peak hours.
• Email: support@jjwin.world — use subject line "Privacy Query" or "Data Rights Request" as appropriate. We respond to all data-related emails within 7 working days.

When submitting a data rights request by email, please include your registered mobile number or username so we can locate your account and verify your identity. Do not send CNIC scans or sensitive documents until a team member has confirmed a secure method for receiving them.

JJ Win takes privacy seriously and treats every query about personal data with the attention it deserves. If you are not satisfied with our response to a privacy concern, you have the right to raise the matter with the relevant data protection authority in Pakistan.