Privacy Policy — 1jjcom

1jjcom (the "Platform", "we", "us", "our"), accessible at https://1jjcom.cam, is an English-language online gaming information and entertainment platform serving Pakistani users. We respect the privacy of every individual who accesses our platform and are committed to protecting your personal data in a responsible, transparent and lawful manner.

This Privacy Policy ("Policy") describes how 1jjcom collects, uses, stores, shares and otherwise processes personal data obtained in connection with your use of the Platform. It applies to all visitors, registered users and any other individuals whose personal data 1jjcom processes in the course of platform operations.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform, and our Responsible Gambling page, which outlines our commitments to player safety. By using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, government identity numbers (such as a Pakistani CNIC), IP address and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means 1jjcom, which determines the purposes and means by which personal data is processed.
• "Data Processor" means any third-party service provider that processes personal data on behalf of 1jjcom, subject to a data processing agreement.
• "User" / "you" means any individual who accesses or interacts with the Platform in any capacity.
• "KYC" means Know Your Customer — identity and age verification procedures that may be required before full account access or withdrawals are granted.
• "Cookie" means a small text file placed on your device by the Platform for session management, analytics or functional purposes.
• "Sensitive Personal Data" means special-category data including health information, biometric data and financial identity data that requires heightened protection under applicable law.

1jjcom collects personal data through a number of means depending on how you interact with the Platform. The categories of data we may collect include:

3.1 Registration Data

When you create an account, we collect information such as your full name, email address, date of birth, country of residence and chosen username. This information is necessary to create and manage your account and to verify age eligibility.

3.2 Identity Verification (KYC) Data

To comply with applicable regulations and responsible gambling requirements, we may collect and process copies of government-issued identity documents. For Pakistani users, this typically includes a copy of your valid CNIC (Computerised National Identity Card) or passport. Additional verification documents may include proof of address and selfie or liveness check images.

3.3 Transaction and Payment Data

Records of deposits, withdrawals, transaction amounts and payment method references (excluding full payment instrument numbers) are processed in connection with account financial activity. Payment method references to channels familiar in Pakistan — such as mobile wallets and bank transfers — are recorded in transaction logs for audit, compliance and dispute resolution purposes. No unencrypted full payment credentials are stored.

3.4 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration and click-path data. This data is collected through server logs and cookie-based analytics tools.

3.5 Communications Data

If you contact our support team via Live Chat, Help Center or email, we retain records of those communications for support quality, dispute resolution and compliance purposes.

1jjcom processes personal data only where a lawful basis exists for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing is required to fulfil our contractual obligations to you under our Terms & Conditions — for example, creating and managing your account, processing transactions and delivering platform services.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring and record-keeping — are required to comply with applicable regulatory and legal obligations.
• Legitimate Interests: We process certain technical and usage data on the basis of our legitimate interests in operating a secure, functional and well-performing platform — including fraud prevention, security monitoring and aggregate analytics. Such processing does not override your fundamental privacy rights.
• Consent: Where processing is based on your consent — such as marketing communications or non-essential cookies — we will ask for your explicit agreement prior to processing and you may withdraw consent at any time without affecting the lawfulness of prior processing.

1jjcom uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining and managing your registered account, including authentication, password recovery and account security alerts.
• Age and Identity Verification: Confirming that users meet the minimum age requirement (18+, or the higher minimum required by the applicable operator or license jurisdiction) and verifying the identity of account holders for KYC compliance purposes.
• Transaction Processing: Recording and processing deposits, withdrawals and account balance adjustments in connection with platform activity.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, identity theft, bonus abuse and other forms of platform misuse. This includes automated risk-scoring processes and manual review by our compliance team.
• Customer Support: Responding to your queries, processing complaints and resolving disputes via our Live Chat, Help Center and email channels.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, content quality, navigation and the overall user experience.
• Legal Compliance: Meeting our obligations under applicable law, including record-keeping, regulatory reporting and responding to lawful requests from competent authorities.
• Responsible Gambling: Monitoring account activity patterns that may indicate problem gambling behaviour and facilitating access to responsible gambling tools such as deposit limits, loss limits, session time limits and self-exclusion.

1jjcom does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may, however, share personal data in the following limited circumstances:

6.1 Service Providers and Data Processors

We engage certain third-party service providers to assist with the delivery of platform services — including cloud hosting providers, identity verification services, payment processing infrastructure partners and analytics platforms. These parties act as Data Processors and are contractually bound to process personal data only on our instructions, implement appropriate security measures, and not use your data for any purpose beyond delivering the contracted service.

6.2 Legal and Regulatory Disclosures

We may disclose personal data to law enforcement agencies, regulatory authorities or courts where required to do so by applicable law, court order, or other binding legal process. Such disclosures are made on a case-by-case basis, limited to the minimum data required, and to the extent permitted by applicable law.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, asset sale or other corporate transaction, personal data held by 1jjcom may be transferred to the acquiring or successor entity. Users will be notified of any such transfer and the applicable privacy terms prior to personal data being transferred to a different data controller.

6.4 Payment References

When you reference payment channels familiar to Pakistani users — such as mobile wallets or bank transfers — transaction metadata is processed in accordance with this Policy. References to payment brand names (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) on this Platform are provided as educational context only. These institutions do not endorse or officially support gambling transactions and are not data-sharing partners of 1jjcom in any capacity.

Identity verification (KYC) data — including copies of government-issued identity documents such as CNIC or passport, proof of address documents and selfie or liveness check images — constitutes sensitive personal data and is subject to heightened protection within our processing environment.

• KYC documents are collected only through the operator's official, HTTPS-secured verification portal. Users must never submit identity documents via unsecured messaging applications, email or chat.
• Identity documents are processed solely for the purpose of verifying age, identity and residence in fulfilment of regulatory obligations.
• Access to KYC documents is restricted to authorised compliance personnel on a strictly need-to-know basis.
• KYC data is retained for the period required by applicable regulatory obligations and is thereafter securely deleted.
• The submission of altered, falsified or fraudulent documents is prohibited under our Terms & Conditions and may result in permanent account closure and referral to relevant authorities.

1jjcom uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, login persistence and security controls. They cannot be disabled without disrupting core platform functionality.
• Analytical / Performance Cookies: Used to understand how users interact with the Platform — including pages visited, time spent and navigation paths. This data is aggregated and anonymised before analysis. These cookies help us improve the platform experience for Pakistani users.
• Functional Cookies: Enable the Platform to remember your preferences — such as language settings, preferred currency display (PKR) and session customisations — to provide a more personalised experience on return visits.

8.2 Cookie Control

You may control or disable non-essential cookies through your browser settings. Most modern browsers — whether on Android, iOS, Windows or other platforms — allow you to block or delete cookies through the browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the Platform.

8.3 No Cross-Site Advertising Tracking

1jjcom does not deploy third-party cross-site advertising trackers or participate in behavioural advertising networks. We do not sell user browsing data to advertising technology platforms.

1jjcom implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include:

• Transport Layer Security (TLS/HTTPS): All data transmitted between your device and the Platform is encrypted using HTTPS/TLS protocols. Accessing the Platform over an unsecured HTTP connection is not permitted.
• Access Controls: Access to personal data is restricted to authorised employees and contractors on a least-privilege, need-to-know basis. All access is logged and subject to periodic review.
• Encryption at Rest: Sensitive personal data, including KYC documents and identity records, is encrypted when stored in our systems.
• Security Monitoring: Our infrastructure is subject to continuous security monitoring for anomalous activity, intrusion attempts and other indicators of compromise.
• Incident Response: In the event of a personal data breach that poses a risk to affected users, 1jjcom will notify the relevant supervisory authorities and affected individuals in accordance with applicable legal obligations and without undue delay.

While we employ robust security measures, no system is entirely immune to risk. Users are responsible for maintaining the security of their own account credentials and for accessing the Platform only through trusted, secure network connections.

1jjcom retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law. Retention periods vary by data category:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be attributed to any individual.

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data 1jjcom holds about you:

To exercise any of the above rights, please contact us through the support channels listed in Section 15. We will respond to valid requests within a reasonable timeframe, typically within 30 days of receipt. We may need to verify your identity before processing a rights request.

In the course of platform operations, personal data collected from users — including Pakistani users in Karachi, Lahore, Islamabad and other cities — may be transferred to and processed in countries outside of Pakistan. Such transfers may occur when data is processed by cloud infrastructure providers, identity verification services or other third-party processors located internationally.

Where personal data is transferred internationally, 1jjcom implements appropriate safeguards to ensure that the transfer is lawful and that the data receives an adequate level of protection comparable to that applied within our primary operating jurisdiction. These safeguards may include standard contractual clauses, binding corporate rules or transfer to jurisdictions with recognised adequacy determinations.

If you have questions about the specific countries to which your personal data may be transferred, please contact us using the details in Section 15.

The 1jjcom Platform is strictly for adults aged 18 years and older — or the higher minimum age prescribed by the applicable operator or license jurisdiction. We do not knowingly collect, process or retain personal data from individuals under the minimum age threshold.

If we become aware that personal data has been collected from a person below the minimum eligible age, we will take immediate steps to delete that data and close the associated account. Age verification is a mandatory step in the account registration and KYC process to prevent underage access.

If you are a parent or guardian and believe that a minor under your care has provided personal data to 1jjcom, please contact us immediately using the details in Section 15 so that we can investigate and take appropriate action.

1jjcom reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform features. When we make changes, we will update the "Last Updated" date at the top of this page.

For material changes that significantly affect how we process your personal data, we will take reasonable steps to provide additional notice — such as a prominent notice on the Platform or a communication to registered users. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed of how your data is being handled.

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which 1jjcom processes your personal data — including data rights requests, consent withdrawal or data breach notifications — please reach out through the following channels:

• Live Chat: Available 24/7 on the Platform. The fastest channel for urgent privacy-related enquiries.
• Help Center: Self-serve articles covering data access, account management and cookie controls are available at all times.
• Email (plain text — not a link): [email protected]

When submitting a data rights request, please include your full registered name, account email address and a clear description of the request so that we can verify your identity and process your request without unnecessary delay. We aim to respond to all privacy-related enquiries within 30 calendar days of receipt.