1jj Privacy Policy — Your Data, Protected

1. Overview & Scope

1.1 This Privacy Policy ("Policy") describes how 1jj ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the 1jj platform at 1jj.asia, including all associated pages, features, and services.

1.2 1jj takes its data protection obligations seriously. We collect only the personal data that is necessary for the operation of the platform, the fulfilment of our legal obligations (including KYC and anti-money laundering requirements), and the delivery of a safe gaming experience to players across Pakistan.

1.3 This Policy applies to all personal data collected via registration, account usage, payment processing, KYC verification, customer support interactions, and platform browsing behaviour. It does not apply to third-party websites that may be referenced from the 1jj platform.

2. Personal Data We Collect

1jj collects personal data in several categories depending on how you interact with the platform:

Category	Data Points	When Collected
Registration Data	Full name, date of birth, mobile number, email address, password (hashed)	Account creation
KYC Documents	CNIC (front & back), selfie with CNIC, proof of payment method	Prior to first withdrawal
Financial Data	Deposit/withdrawal amounts, payment method identifiers (e.g., JazzCash number), transaction history	Each transaction
Gaming Activity	Game sessions, bet history, win/loss records, bonus usage	During platform use
Technical Data	IP address, device type, browser/OS, session duration, pages visited	Automatically on access
Support Communications	Live chat transcripts, email correspondence, support ticket content	When you contact support

2.1 Sensitive Data. CNIC images and facial photographs submitted for KYC are considered sensitive personal data and are subject to heightened security measures and strict access controls within 1jj's systems.

2.2 Voluntary Data. Some data (such as optional profile preferences) is provided voluntarily. Declining to provide voluntary data will not affect your ability to use the 1jj platform.

3. How 1jj Uses Your Personal Data

1jj processes personal data for the following specific purposes:

• Account Management: Creating, verifying, and maintaining your 1jj player account; authenticating logins; and communicating account-related notifications.
• KYC & Compliance: Verifying your identity and age, meeting anti-money laundering (AML) obligations, and complying with international responsible gaming standards.
• Payment Processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT; detecting and preventing payment fraud.
• Platform Delivery: Providing access to games, sports betting markets, live casino tables, and all associated platform features.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours; applying self-imposed limits or platform-initiated restrictions where necessary.
• Security & Fraud Prevention: Detecting and investigating suspicious account activity, unauthorised access, multi-accounting, and bonus abuse.
• Analytics & Improvement: Understanding aggregate platform usage patterns to improve the user experience — all analytics are performed on anonymised or pseudonymised data sets.
• Legal Obligations: Complying with applicable laws and regulatory requirements, including responding to lawful requests from competent authorities.

4. Legal Basis for Processing

4.1 Contractual Necessity. The majority of data processing at 1jj is necessary for the performance of the contract between you and 1jj — i.e., the delivery of gaming and betting services as described in the Terms & Conditions. Without this processing, 1jj cannot provide the platform.

4.2 Legal Obligation. KYC document collection and AML monitoring are carried out to fulfil mandatory legal obligations applicable to online gaming operators.

4.3 Legitimate Interest. Security monitoring, fraud prevention, and platform analytics are conducted on the basis of 1jj's legitimate interest in operating a secure and efficient platform, balanced against your privacy rights.

4.4 Consent. Where processing is based on consent (for example, optional marketing communications), you may withdraw that consent at any time by updating your notification preferences within your 1jj account settings or by contacting support.

5. Data Sharing & Third Parties

5.1 1jj does not sell, rent, or commercially transfer your personal data to any third party.

5.2 1jj may share personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Processors: JazzCash, Easypaisa, and banking partners receive the minimum transaction data necessary to process deposits and withdrawals.
• KYC & Identity Verification Providers: Where a third-party identity verification tool is used to process CNIC verification, data is transferred under strict data processing agreements.
• Game Software Providers: JILI and other game providers receive pseudonymised session identifiers necessary to deliver game content. They do not receive your real name, CNIC, or payment details.
• Legal & Regulatory Authorities: 1jj will disclose personal data where required by a lawful order from a competent court, regulator, or law enforcement authority.
• Technical Service Providers: Hosting, analytics, and cybersecurity vendors who process data on 1jj's behalf under contractual data processing agreements that prohibit independent use of your data.

5.3 Any third party receiving personal data from 1jj is contractually required to maintain confidentiality, implement appropriate technical and organisational security measures, and use the data only for the specified purpose.

6. Data Retention

6.1 1jj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations.

6.2 Account data (registration information, KYC documents, financial transaction records, and gaming history) is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements. This retention period may be extended if an account is subject to an ongoing investigation or legal proceeding.

6.3 Technical data and session logs are retained for a maximum of 12 months unless required for an active security investigation.

6.4 Customer support communications are retained for 24 months following the resolution of the relevant support interaction.

6.5 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

7. Data Security

7.1 1jj implements a multi-layered technical and organisational security framework to protect the personal data of all platform users:

• Encryption in Transit: All data transmitted between your device and 1jj servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive data (including KYC documents and payment identifiers) is encrypted in storage using industry-standard encryption algorithms.
• Password Security: Passwords are never stored in plain text. 1jj uses one-way cryptographic hashing with salt — even 1jj staff cannot retrieve your actual password.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with all access logged and audited.
• Two-Factor Authentication: Optional 2FA is available for all 1jj accounts, providing an additional authentication layer beyond password-based login.
• Regular Security Reviews: 1jj conducts periodic technical security reviews to identify and address vulnerabilities in its systems and processes.

7.2 In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, 1jj will notify affected users without undue delay via their registered contact information.

8. Cookies & Tracking Technologies

8.1 1jj uses cookies and similar browser-based tracking technologies to operate the platform and improve the user experience. Cookies are small data files stored on your device by your browser.

8.2 The following categories of cookies are used on the 1jj platform:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your 1jj account during a session. They cannot be disabled without preventing platform access.
• Analytical Cookies: Collect anonymised usage data (pages visited, session duration, device type) to help 1jj understand how the platform is used and where improvements are needed. No personally identifiable information is included in analytical data sets.
• Security Cookies: Used to detect fraudulent login attempts, multi-accounting, and bot activity. These protect both the platform and individual player accounts.

8.3 1jj does not use third-party advertising cookies, remarketing pixels, or social media tracking scripts. No player behaviour data from the 1jj platform is shared with advertising networks.

8.4 You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to log in and use the 1jj platform.

9. Your Data Rights

As a 1jj player, you have the following rights in relation to your personal data. To exercise any of these rights, contact 1jj support with the subject line "Data Rights Request" from your registered email address:

1jj will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days with notification to you of the delay and reason.

10. Minors & Under-18 Access

10.1 18+ The 1jj platform is strictly restricted to adults aged 18 and over. 1jj does not knowingly collect personal data from individuals under the age of 18.

10.2 If 1jj becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account permanently closed. Parents and guardians who suspect their child has created a 1jj account should contact support immediately for prompt action.

10.3 Age verification through KYC (CNIC submission) is a mandatory step before withdrawal access is granted, serving as an additional protective layer against underage account use.

11. Changes to This Privacy Policy

11.1 1jj reserves the right to update this Privacy Policy at any time. When material changes are made, registered players will be notified via email or a prominent in-platform notice at least seven (7) days before the updated policy takes effect.

11.2 The "Last Updated" date at the top of this Policy indicates when the most recent revision was published. Continued use of the 1jj platform following notification of changes constitutes your acceptance of the updated Policy.

11.3 Where changes are required immediately due to a legal or security obligation, 1jj may implement those changes without prior notice, though you will be informed as soon as reasonably practicable.

12. Privacy Contact

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how 1jj handles your personal data, you may contact the 1jj data team through the platform's live support channel or via the email address displayed in the platform footer.

Contact address: 1jj.asia.support (plain text — not a clickable link)

1jj aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days.