j2bat Privacy Policy — How We Handle Your Personal Data

1. Introduction — Who We Are and Why This Policy Exists

j2bat ("we", "us", "the platform") operates an online betting and gaming service at j2bat.ws, primarily serving players in Pakistan. As part of running this service, j2bat necessarily collects and processes certain personal information about the people who use it.

This Privacy Policy explains that process in full. It tells you what information we collect, the reasons we need it, what we do with it, how long we keep it and what you can do if you want to access, correct or delete your data. We've written it to be as plain and readable as possible, because we believe Pakistani players deserve honest, clear answers about their privacy — not paragraphs of legalese designed to obscure rather than explain.

This Privacy Policy forms part of j2bat's Terms and Conditions and should be read alongside them. By registering on j2bat or using the platform in any way, you acknowledge that you have read this policy and consent to the data practices described within it.

2. What Personal Data j2bat Collects

j2bat collects different categories of personal data at different stages of your relationship with the platform. Here is a breakdown of what we collect and when:

Data We Do Not Collect

j2bat does not collect your full bank account number, your Easypaisa or JazzCash PIN, your card CVV, or any biometric data beyond what is submitted for KYC identity verification. We do not access your contacts, camera or location without explicit request and permission.

3. How j2bat Uses Your Personal Data

j2bat uses your personal data only for the purposes listed below. We do not use your data for any purpose not described here without first updating this policy and, where required, obtaining your consent.

• Account creation and management: Your identity and contact data are used to create, verify and maintain your j2bat account, including password resets and login security.
• Payment processing: Your financial data is used to process deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card methods. j2bat shares only the minimum required payment data with each payment processor to complete the transaction.
• Identity verification (KYC): We verify your identity as required to comply with anti-money laundering obligations and to confirm you are 18 or over. CNIC data is used solely for this purpose.
• Fraud prevention and security: Technical data (IP address, device fingerprint, login patterns) is used to detect and prevent fraudulent account access, bonus abuse and money laundering activity.
• Service delivery: Gameplay data is used to settle bets, calculate winnings, generate your bet history and operate the games on j2bat accurately.
• Customer support: Communications data is used to respond to your queries, resolve disputes and improve the quality of j2bat's support.
• Responsible gaming: Gameplay and transaction data is used to monitor for signs of problem gambling, enforce deposit limits you have set, and trigger self-exclusion where requested.
• Platform improvement: Anonymised and aggregated gameplay and technical data is used to improve j2bat's features, fix bugs and optimise performance.
• Marketing (where opted in): Contact data is used to send promotional communications to players who have opted in. See Section 10 for full details.

4. Legal Basis for Processing Your Data

j2bat processes your personal data on the following legal grounds, depending on the type of data and purpose:

• Contract performance: Processing your identity, contact, financial and gameplay data is necessary to fulfil the contract between you and j2bat — i.e., to run your account and provide the betting and gaming services you have signed up for.
• Legal obligation: Certain processing — particularly KYC identity verification and transaction monitoring — is required by applicable law and anti-money laundering regulations.
• Legitimate interests: j2bat processes technical and communications data for fraud prevention, security monitoring and service improvement, where these interests do not override your privacy rights.
• Consent: Marketing communications are sent only where you have actively opted in. You may withdraw this consent at any time.

5. Who j2bat Shares Your Data With

j2bat does not sell your data. We share your data only with the categories of recipients listed below, and only to the extent necessary:

Payment Processors

When you make a deposit or withdrawal, j2bat shares the minimum required payment data with the relevant payment processor — Easypaisa (Telenor Microfinance Bank), JazzCash (Mobilink Microfinance Bank), NayaPay, SadaPay, or your bank. This is limited to what is technically required to initiate and confirm the transaction. j2bat does not share your full wallet history or account balance with payment processors.

Identity Verification Services

j2bat may use a third-party identity verification service to process CNIC documents submitted for KYC. These services operate under strict data processing agreements and are prohibited from using your data for any purpose other than the specific verification task.

Technology Infrastructure Partners

j2bat's platform runs on cloud hosting and uses third-party software for various functions (database management, email delivery, analytics). These providers access your data only as processors acting on j2bat's instructions and are bound by data processing agreements.

Regulatory and Law Enforcement Authorities

Where required by law — for example, in response to a court order, a formal law enforcement request or a regulatory compliance obligation — j2bat will disclose personal data. j2bat will not disclose data beyond what is legally required in any such situation.

6. Data Storage & Security

j2bat takes the security of your personal data seriously. The measures we have in place include:

• Encryption in transit: All data transmitted between your browser or device and j2bat's servers is encrypted using TLS (Transport Layer Security). The padlock you see in your browser confirms this is active.
• Encryption at rest: Personal data stored on j2bat's servers — including financial data and identity documents — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. j2bat staff do not have general access to your CNIC images, payment account numbers or communications history unless required by their specific role.
• Two-factor authentication: Sensitive operations within your j2bat account (large withdrawals, payment method changes) require an additional verification step beyond your password.
• Security monitoring: j2bat's systems are monitored continuously for unusual access patterns, unauthorised login attempts and other indicators of a security incident.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights, j2bat will notify affected users as promptly as practicable — and within 72 hours of becoming aware of the breach where technically possible. The notification will describe the nature of the breach, the data affected and the steps j2bat is taking to address it.

7. Cookies & Tracking Technologies

j2bat uses cookies and similar tracking technologies to operate the platform, keep you logged in, remember your preferences and improve performance. Here is a breakdown of the cookie types in use:

8. Your Rights Over Your Personal Data

As a j2bat user, you have the following rights over your personal data. You can exercise any of these rights by contacting j2bat support at support@j2bat.ws:

9. Children and Minors

j2bat's platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and you believe your child has registered on j2bat without your consent, please contact us immediately at support@j2bat.ws. Upon verification, we will close the account and delete all associated personal data as promptly as legally permissible.

j2bat employs age verification measures during registration — including CNIC verification — specifically to prevent minors from accessing the platform. Any account found to belong to a minor will be closed and all balances forfeited, in accordance with j2bat's Terms and Conditions.

10. Marketing Communications

j2bat sends promotional emails and SMS notifications only to players who have explicitly opted in to receive them. These communications may include information about bonuses, new game launches, PSL promotions, esports betting offers and referral programme updates.

Opting Out

You can withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link at the bottom of any j2bat marketing email.
• Replying STOP to any j2bat marketing SMS.
• Updating your notification preferences in your j2bat account settings.
• Contacting j2bat support directly at support@j2bat.ws.

Opting out of marketing communications does not affect transactional communications — you will continue to receive account-related notifications such as deposit confirmations, withdrawal updates and security alerts regardless of your marketing preference.

11. How Long We Retain Your Data

j2bat retains personal data for as long as necessary to fulfil the purposes described in this policy, and as required by law. The general retention periods are:

At the end of the applicable retention period, j2bat will securely delete or anonymise personal data so that it can no longer identify you.

12. Changes to This Privacy Policy

j2bat may update this Privacy Policy from time to time — for example, to reflect changes in the platform, new data processing activities, or updated legal requirements. When we do, we update the "Last Updated" date shown at the top of this page.

For material changes that meaningfully affect your privacy rights or how we use your data, j2bat will notify registered players via email or an in-app notification before the changes take effect. Minor updates (such as clarifying existing practices without changing them) may be made without individual notice.

We encourage you to review this policy periodically. Your continued use of j2bat after any update constitutes acknowledgement of the revised policy.

13. Contact Us & Complaints

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a complaint about how j2bat has handled your personal data, please contact us:

j2bat takes privacy complaints seriously. If you raise a concern with us and feel it has not been resolved adequately, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.