jj99 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how jj99 ("jj99", "we", "us", "the Platform") collects, uses, stores, discloses, and protects the personal information of users ("you", "User", "Player") who access or use the jj99 website at jj99.biz, including all associated services such as sports betting, cricket markets, live casino, slot games, lottery, and promotional programmes.

By registering an account, making a deposit, placing a wager, or otherwise accessing jj99.biz, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the jj99 platform.

jj99 is committed to handling your personal data in accordance with applicable international data protection standards and the privacy obligations imposed under our operating licence framework. We treat the security and confidentiality of your information with the utmost seriousness.

jj99 collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data we may collect and hold about you are described in the table below:

jj99 does not collect sensitive personal data such as biometric data, health information, or religious or political beliefs unless specifically required by applicable law or with your explicit consent.

jj99 collects your personal data through the following channels and mechanisms:

• Direct registration: When you create a jj99 account, you provide identity data, contact data, and set your account credentials. This is the primary point of data collection.
• Financial transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, financial data is collected and processed by jj99 and the relevant payment processor.
• KYC verification: When you submit identity documents to complete the verification process, jj99 collects and stores copies of those documents for the duration required under our compliance obligations.
• Automated technical collection: When you browse jj99.biz, our servers automatically log technical data including your IP address, device identifiers, and session information through standard web server logging and analytics tools.
• Cookies and tracking technologies: jj99 uses cookies, web beacons, and pixel tags to collect usage and preference data as described in Section 7 of this Policy.
• Customer support interactions: When you contact jj99 support via email, the content of your communications and any information you provide is retained as part of our support records.
• Third-party sources: In some cases, jj99 may receive data about you from third-party KYC and fraud prevention providers where this is necessary to verify your identity or assess risk in compliance with our licensing obligations.

jj99 processes your personal data for the following specific and legitimate purposes:

• To create and manage your jj99 player account, including verifying your identity and age in compliance with our 21+ age restriction policy.
• To process deposits and withdrawals in Pakistani Rupees (PKR) through supported payment methods and maintain accurate financial records.
• To deliver the jj99 gaming and betting services you have requested, including cricket betting, PSL markets, live casino, slot games, and promotional offers.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities on the platform.
• To comply with anti-money laundering (AML), know-your-customer (KYC), and other regulatory requirements applicable to jj99's licensed operations.
• To send you transactional communications related to your account, including deposit confirmations, withdrawal notifications, and security alerts.
• To send marketing communications about jj99 promotions, bonuses, and offers where you have provided consent or where permitted under applicable law.
• To operate the jj99 Responsible Gaming programme, including monitoring for signs of problem gambling and applying self-exclusion or limit restrictions at your request.
• To analyse platform usage patterns and improve the jj99 product, user interface, and service quality over time.
• To respond to customer support enquiries and resolve disputes in accordance with the jj99 complaints procedure.

jj99 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to deliver the jj99 services you have contracted for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and age verification obligations under our operating licence.
• Legitimate interests: Processing necessary for jj99's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing of your data for marketing communications, optional personalisation features, and any non-essential cookie use, where your explicit consent has been obtained and can be withdrawn at any time.

Where jj99 relies on legitimate interests as the legal basis for processing, we carry out a balancing assessment to ensure that our interests do not override your fundamental privacy rights. You may request details of any such assessment by contacting [email protected].

jj99 does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to maintain appropriate data protection standards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and their respective technical partners, receive the financial data necessary to process your deposits and withdrawals. These parties operate under their own privacy policies and regulatory obligations.
• KYC and identity verification providers: Third-party providers engaged by jj99 to verify the identity, age, and address of registered players. These providers process identity documents under strict data processing agreements.
• Fraud and AML screening services: jj99 may share account and transaction data with specialist fraud detection and anti-money laundering screening providers to assess risk and prevent financial crime.
• Game and software providers: Third-party casino game developers and RNG certification bodies may receive anonymised usage data to support game performance analysis and fairness certification.
• Regulatory authorities and law enforcement: jj99 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by law, court order, or our licensing obligations — without prior notice to you where legally required.
• Corporate transactions: In the event of a merger, acquisition, or sale of jj99 assets, personal data held by jj99 may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

jj99 uses cookies and similar tracking technologies on jj99.biz to support essential platform functions, remember your preferences, and collect anonymised analytics data. The categories of cookies used by jj99 are as follows:

• Strictly necessary cookies: Required for core platform functions such as maintaining your login session, remembering your language preference, and securing your account activity. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect anonymised information about how users interact with jj99.biz, including pages visited, time on site, and navigation paths. This data is used solely to improve the platform experience.
• Preference cookies: Used to remember your display settings, notification preferences, and other customisation choices you have made on the jj99 platform.
• Security cookies: Used to detect fraudulent activity, monitor for unusual login patterns, and protect your account from unauthorised access attempts.

You can manage or disable non-essential cookies at any time through your browser settings. Disabling analytics or preference cookies will not prevent you from accessing jj99 core services, though some personalisation features may not function as intended. jj99 does not use third-party advertising cookies or behavioural tracking cookies for retargeting purposes.

jj99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The general retention periods applied by jj99 are as follows:

• Active account data: Retained for the lifetime of your jj99 account plus a minimum of 5 years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction to meet financial record-keeping obligations.
• KYC and identity documents: Retained for the duration of the account relationship plus 5 years following closure, or longer where required by a specific regulatory obligation or ongoing investigation.
• Customer support records: Retained for 3 years from the date of the last interaction, except where records are relevant to an unresolved dispute or legal proceeding.
• Marketing preferences: Retained until you withdraw consent or request erasure of your marketing profile.
• Technical / log data: Retained for up to 12 months from the date of collection for security and fraud analysis purposes, then deleted or anonymised.

When your personal data is no longer required under the applicable retention period, jj99 will securely delete or anonymise that data so it can no longer be associated with your identity.

jj99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security controls include:

• SSL/TLS encryption for all data transmitted between your device and jj99 servers.
• Encryption at rest for sensitive personal and financial data stored on jj99 infrastructure.
• Role-based access controls ensuring that only authorised jj99 personnel can access personal data, limited strictly to what is necessary for their job function.
• Regular security audits and penetration testing conducted by qualified third-party security assessors.
• Multi-factor authentication options available to players to protect account access.
• Continuous monitoring of jj99 systems for anomalous activity, suspicious login attempts, and potential data security incidents.

In the event of a data security incident that poses a risk to your rights, jj99 will notify affected users and relevant regulatory authorities in accordance with applicable incident notification requirements.

Subject to applicable law and our legitimate operational and legal obligations, you have the following rights in relation to the personal data jj99 holds about you:

• Right of access: You may request a copy of the personal data jj99 holds about you at any time. jj99 will provide this within 30 days of a valid request.
• Right to rectification: If any personal data jj99 holds about you is inaccurate or incomplete, you have the right to request correction. Some corrections may require re-verification of your identity.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jj99's legal and regulatory retention obligations.
• Right to restrict processing: You may request that jj99 limit the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data while jj99 investigates.
• Right to data portability: Where processing is based on your consent or a contract, you may request that jj99 provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where jj99 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of jj99's legitimate interests, including direct marketing. jj99 will cease processing unless compelling legitimate grounds can be demonstrated.

To exercise any of the above rights, submit a written request to [email protected] from your registered email address. Include your full name, jj99 username, and a clear description of the right you wish to exercise. jj99 will respond within 30 calendar days. For complex requests, this period may be extended by a further 30 days with prior notification.

jj99 is strictly an adults-only platform. No person under the age of 21 may register an account, make a deposit, or use any jj99 service. jj99 takes the prevention of underage gambling extremely seriously and maintains a mandatory age and identity verification process for all registered users.

If you are the parent or guardian of a minor and believe they may have registered on jj99, please contact [email protected] immediately. jj99 will investigate and take appropriate action, including account closure and refund of any demonstrably verified deposits made by the minor, in accordance with our regulatory obligations.

jj99 recommends that parents and guardians in Pakistan use parental control software and maintain open conversations with minors about the risks of gambling. Platforms such as jj99 are designed exclusively for responsible adult entertainment.

As an internationally operated platform, jj99 may process and store your personal data on servers located outside of Pakistan. Where personal data is transferred to jurisdictions that may not offer an equivalent level of data protection to that applied within jj99's primary operating jurisdiction, jj99 implements appropriate safeguards to protect the transfer, including:

• Standard contractual clauses and data processing agreements with all recipients of personal data.
• Contractual obligations on third-party processors to maintain security standards equivalent to those applied by jj99.
• Transfer only to jurisdictions and processors with demonstrable data protection frameworks where practically possible.

By using jj99, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan for the operational purposes described in this Policy. jj99 will not transfer your data internationally in a manner that materially undermines the protections described in this Policy.

jj99 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — such as a new category of data being collected, a new purpose being added, or a significant change to how data is shared — jj99 will notify registered users via email to their registered address and display a prominent notice on jj99.biz.

Non-material or administrative updates may be made without specific notification. The effective date displayed at the top of this page will always reflect the version currently in force. Your continued use of jj99 following the publication of any amended Policy constitutes your acceptance of the updated terms. If you do not accept any amendment, you must stop using jj99 and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or jj99's data practices, please contact the jj99 data team using the details below:

• Email: [email protected]
• Response Time: Within 2 business days for general enquiries; within 30 days for formal data rights requests
• Language: English
• Availability: 24 hours a day, 7 days a week

When submitting a data rights request, please include your full name, registered username, registered email address, and a clear description of your request. This will allow jj99 to locate your account and process your request without unnecessary delay.