j2bat Privacy Policy —
Your Data, Your Rights

1 Who We Are

j2bat is an online casino and sports betting platform accessible at j2bat.pro, operated under an international gaming licence. For the purposes of this Privacy Policy, j2bat is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

j2bat serves players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond — providing cricket betting, live dealer casino games, slot games, crash games, and a wide range of other gaming services denominated in Pakistani Rupees (PKR). Our platform supports both English and Urdu languages and integrates local Pakistani payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

If you have any questions about how j2bat handles your personal data, you may contact our Data Protection team at the details provided in Section 14 of this Policy.

2 Data We Collect

2.1 Data You Provide Directly

When you register an Account on j2bat or interact with our platform, we collect personal data that you provide to us directly, including:

• Identity Data: Your full name, date of birth, National Identity Card (CNIC) number, nationality, and a photograph or scan of your identity document as part of the KYC verification process.
• Contact Data: Your email address, mobile phone number, and residential address (including city, province, and postal code within Pakistan).
• Account Credentials: Your chosen username and an encrypted hash of your password. j2bat never stores passwords in plain text.
• Financial Data: Payment method details necessary to process deposits and withdrawals — such as your JazzCash or EasyPaisa mobile wallet number, or your bank account details for HBL, UBL, Meezan Bank, or IBFT transfers. Full payment credentials are processed by our regulated payment partners and are not stored on j2bat servers.
• Communications Data: Records of support conversations, live chat transcripts, emails, and feedback you submit to j2bat's customer service team.

2.2 Data Collected Automatically

When you access j2bat.pro, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and hardware identifiers.
• Usage Data: Pages visited on j2bat.pro, games played, bet amounts, session duration, click patterns, search queries within the platform, and navigation paths.
• Transaction Data: A full record of all deposits, withdrawals, bets placed, game outcomes, bonus credits, and wagering activity associated with your Account, including timestamps and PKR amounts.
• Location Data: Approximate geographic location derived from your IP address, used to verify eligibility and comply with our licensing requirements.

2.3 Data from Third Parties

j2bat may receive supplementary personal data about you from third parties in the following circumstances:

• Identity verification providers and KYC bureaus who confirm the authenticity of documents you submit.
• Fraud detection and anti-money laundering (AML) screening services that cross-reference your details against sanction lists and watchlists.
• Payment processors who confirm the status and outcome of deposit and withdrawal transactions.

3 How We Use Your Data

j2bat uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for any purpose incompatible with those listed below:

• Account Management: To create, verify, maintain, and administer your j2bat Account, including resetting credentials and processing Account closure requests.
• Age & Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required under our international gaming licence obligations.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Bank Transfer, and to maintain accurate financial records of all Account transactions.
• Game Delivery & Platform Operation: To deliver the casino games, sportsbook, crash games, and other services you use on j2bat.pro, and to maintain the technical infrastructure required to do so reliably.
• Fraud & AML Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as described in the j2bat Terms and Conditions.
• Regulatory Compliance: To comply with our licensing obligations, respond to lawful requests from regulatory authorities, and maintain records as required by applicable law.
• Customer Support: To respond to your queries, complaints, and support requests — whether submitted via email at [email protected] or through our live chat system.
• Responsible Gaming: To monitor Account activity for patterns that may indicate problem gambling behaviour, and to administer self-exclusion, deposit limits, and other responsible gaming tools when requested.
• Platform Improvement: To analyse aggregate usage patterns and technical performance data to improve the j2bat platform, fix bugs, and develop new features.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given your consent or where we have a legitimate interest in doing so, and in all cases subject to your right to opt out at any time.

4 Legal Basis for Processing

j2bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and j2bat — i.e., to operate your Account, deliver gaming services, and process payments.
• Legal Obligation: Processing required to comply with j2bat's obligations under its international gaming licence, including KYC, AML screening, and regulatory record-keeping.
• Legitimate Interests: Processing undertaken to protect j2bat's legitimate business interests — such as fraud detection, platform security, and improving our services — where those interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes — such as sending marketing communications — where we have obtained your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5 Sharing Your Data

j2bat does not sell your personal data. We share your data only with carefully selected third parties where necessary for the purposes described in this Policy:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum financial data required to process your transactions. These providers are contractually bound to process your data securely and only for the purpose of executing the relevant transaction.
• KYC & Identity Verification Providers: Third-party identity verification services that help j2bat confirm the authenticity of CNIC documents, passports, and other identity materials submitted during account verification.
• Fraud Prevention & AML Services: Compliance technology providers who assist j2bat in screening for sanctioned individuals, politically exposed persons (PEPs), and patterns of behaviour associated with money laundering or fraud.
• Gaming Technology Providers: The game studios and platform providers whose titles are available on j2bat may receive anonymised or pseudonymised gameplay data for the purpose of delivering their games and maintaining game integrity.
• Regulatory Authorities: j2bat's licensing authority and any relevant law enforcement or financial regulatory body may receive your data where required by law, court order, or regulatory mandate. j2bat will always seek legal advice before complying with any such request to ensure it is lawful.
• IT Infrastructure Providers: Cloud hosting, server management, and cybersecurity providers who process data on j2bat's behalf under strict data processing agreements and are not permitted to use your data for their own purposes.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. j2bat uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, maintain your session security, and understand how players use our site.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the j2bat platform to function. These include session authentication cookies that keep you logged into your Account securely. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your language preference (English or Urdu), your preferred payment method, and other platform customisation settings to improve your experience on return visits.
• Analytics Cookies: Collect anonymised information about how players navigate j2bat.pro — which pages are visited most frequently, where players experience difficulties, and how long sessions last — to help us improve the platform.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats to your Account and to the j2bat platform as a whole.

6.3 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into or using j2bat.pro. For all other cookie types, you can opt out without losing core functionality. Browser-specific instructions for managing cookies are available through your browser's help documentation.

7 Data Retention

j2bat retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following general retention periods apply:

• Account Data: Retained for the full duration of your Account's existence plus a minimum of five (5) years following Account closure, to comply with anti-money laundering record-keeping requirements under our international gaming licence.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the duration of the account relationship plus five (5) years. After this period, documents are securely deleted unless a longer retention period is required by law.
• Support Communications: Customer support records are retained for three (3) years following the resolution of the relevant query or complaint.
• Marketing Preferences: Records of your marketing consent or opt-out are retained for as long as necessary to respect and evidence your preferences.

8 Data Security

j2bat implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and j2bat's servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Password Hashing: Account passwords are never stored in plain text. j2bat uses a strong, salted cryptographic hashing algorithm to store password credentials.
• Two-Factor Authentication (2FA): j2bat supports and encourages the use of 2FA for all Account logins. Players in Pakistan can authenticate via their mobile number or an authenticator application.
• Access Controls: Access to personal data within j2bat's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business reason may access player data, and all access is logged and monitored.
• Regular Security Audits: j2bat conducts periodic penetration testing, vulnerability assessments, and security audits of its platform infrastructure.
• Incident Response: j2bat maintains a documented data breach response plan. In the event of a data security incident affecting your personal data, we will notify you and the relevant regulatory authority within the timeframes required under our licensing obligations.

While j2bat takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials. If you suspect your Account has been compromised, please contact j2bat support immediately.

9 Your Rights

As a j2bat player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact j2bat at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data j2bat holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update basic Account information directly within your j2bat Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that j2bat delete your personal data where there is no longer a legitimate basis for us to hold it. Note that this right is subject to j2bat's legal obligations to retain certain data under our licensing requirements.
• Right to Restriction of Processing: You may request that j2bat temporarily stop processing your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to j2bat in a structured, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to j2bat processing your personal data on the basis of legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where j2bat processes your data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

10 Children & Minors

j2bat strictly prohibits the use of its platform by any individual under the age of 21. j2bat does not knowingly collect personal data from individuals under 21. The platform is designed, marketed, and operated exclusively for adults who meet the minimum age requirement.

If j2bat becomes aware that a user under 21 has registered an Account or provided personal data, we will immediately suspend the Account, delete all personal data associated with it, and refund any real-money balance to the payment method used for deposit, after satisfying applicable verification requirements.

11 International Data Transfers

j2bat operates under an international gaming licence, and some of the third-party service providers we work with — including cloud infrastructure providers, KYC services, and fraud prevention platforms — may process your data in jurisdictions outside Pakistan.

Where your personal data is transferred internationally, j2bat ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include:

• Contractual data processing agreements with recipient organisations that impose data protection obligations consistent with this Policy.
• Transfers only to jurisdictions or organisations that maintain data protection standards acceptable under j2bat's licensing obligations.
• Technical measures such as encryption and pseudonymisation that protect data during transmission and at rest in recipient systems.

If you have questions about international transfers of your personal data, please contact j2bat's Data Protection team using the contact details in Section 14.

12 Marketing Communications

j2bat may send you promotional emails, SMS notifications, and in-platform messages about bonus offers, new game launches, PSL cricket betting promotions, and other j2bat news where you have consented to receive such communications, or where j2bat has a legitimate interest in keeping existing players informed about relevant platform updates.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every promotional email j2bat sends.
• Updating your communication preferences within your j2bat Account settings.
• Contacting j2bat support directly at [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications will not affect your ability to use j2bat or receive transactional messages — such as deposit confirmations, withdrawal notifications, Account security alerts, and KYC verification updates — which are necessary for the operation of your Account and cannot be disabled.

13 Changes to This Policy

j2bat reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on j2bat.pro and within your Account dashboard for a minimum of 30 days following the update.
• Sending an email notification to the address registered on your Account, where the change is material and affects how we process your personal data.
• Updating the "Last Updated" date at the top of this page and incrementing the version number.

Your continued use of j2bat.pro following notification of a material Policy update constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should close your Account and cease using the platform before the revised Policy takes effect. For non-material or administrative updates — such as correcting typographical errors or clarifying existing language without changing substantive meaning — j2bat may update this Policy without advance notice.

14 Contact & Complaints

If you have any questions, concerns, or complaints about how j2bat processes your personal data, or if you wish to exercise any of the data rights described in Section 9, please contact j2bat's Data Protection team using the following details:

j2bat takes all privacy complaints seriously and will acknowledge receipt of your complaint within five (5) business days and provide a substantive response within 30 calendar days. If you are not satisfied with j2bat's response to your complaint, you may refer the matter to the relevant supervisory authority under j2bat's international gaming licence jurisdiction.

For general customer support inquiries unrelated to data protection — such as Account issues, game queries, deposit problems, or bonus questions — please contact our main support team at [email protected]. Our team is available 24 hours a day, 7 days a week, and is well-equipped to assist players across Pakistan, whether you are based in Karachi, Lahore, Islamabad, Peshawar, Quetta, or anywhere else in the country.