jj7 Privacy Policy

jj7 operates the online casino and sports betting platform available at jj7.club (the "Platform"). As a data controller, jj7 is responsible for the personal data you provide to us and the data we generate through your use of the Platform. This Privacy Policy sets out the categories of personal data we collect, the purposes for which we process it, the legal bases on which we rely, and the rights you hold as a data subject.

This Policy applies to all users of the jj7 Platform, including registered account holders, visitors who browse without registering, and individuals who interact with jj7 through our support channels. It should be read alongside the jj7 Terms & Conditions and Responsible Gaming Policy.

Pakistani players should note that the data practices described in this Policy are applicable to their use of the Platform. jj7 handles all player data with the same level of care regardless of the player's geographic location.

jj7 collects personal data in the following categories:

2.1 Registration Data. When you create a jj7 account, we collect your name, email address, date of birth, Pakistani mobile number, and any other information submitted during registration. Date of birth is collected for the mandatory purpose of verifying that you are 18 years of age or older.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations, we may collect copies of government-issued identity documents (such as a Pakistani CNIC), proof of address documents, and evidence of your payment method. These documents are processed as part of our Know Your Customer ("KYC") verification workflow.

2.3 Financial Data. We collect records of all transactions on your jj7 account, including deposits, withdrawals, bonus credits, and wagers. We do not store full payment card details — card processing is handled by our payment service providers. JazzCash and Easypaisa transaction reference data is stored to enable dispute resolution and withdrawal matching.

2.4 Usage Data. We collect data about how you use the jj7 Platform, including pages visited, games played, betting patterns, session durations, device type, browser type, and IP address. This data is used for platform improvement, fraud detection, and responsible gaming monitoring.

2.5 Communications Data. When you contact jj7 support, we retain the content of those communications, including chat transcripts, emails, and support tickets, for quality assurance and dispute resolution purposes.

jj7 processes your personal data for the following purposes:

• Account administration: Creating and maintaining your jj7 account, processing deposits and withdrawals, applying bonuses, and updating account settings.
• Identity and age verification: Confirming that you are at least 18 years of age and that the information you have provided is accurate and genuine.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other criminal conduct in connection with your account.
• Responsible gaming compliance: Monitoring usage patterns to identify potential indicators of problem gambling, applying self-imposed limits and exclusions, and maintaining self-exclusion records.
• Platform improvement: Analysing aggregated usage data to improve the jj7 Platform, identify technical issues, and optimise the player experience on mobile devices commonly used by Pakistani players.
• Customer support: Responding to queries, resolving disputes, and providing assistance through jj7's support channels.
• Marketing communications: Sending promotional emails, bonus notifications, and PSL season offers to players who have opted in to receive marketing communications. You may opt out at any time.
• Legal compliance: Meeting jj7's obligations under applicable law, including retaining transaction records as required by anti-money laundering regulations.

jj7 processes your personal data on the following legal bases:

4.1 Contractual Necessity. The majority of jj7's data processing is necessary to perform the contract between you and jj7 — specifically, to operate your account, process transactions, and deliver the services you have requested.

4.2 Legal Obligation. jj7 is required by applicable law to collect and retain certain categories of data, including KYC identity documents and financial transaction records for anti-money laundering purposes.

4.3 Legitimate Interests. jj7 processes usage data for fraud prevention, platform security, and responsible gaming monitoring on the basis of its legitimate interests in operating a safe and compliant platform.

4.4 Consent. Where jj7 processes data for marketing purposes or sets non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jj7 does not sell your personal data to third parties. We share data only in the following limited circumstances:

• Payment service providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and USDT processing partners receive the transaction data necessary to process deposits and withdrawals.
• Game software providers: PG Soft, Pragmatic Play, and other game providers whose titles are integrated into the jj7 Platform may receive pseudonymised session data for technical purposes. No directly identifying personal data is shared with game providers.
• Identity verification services: Third-party KYC service providers process identity documents on our behalf under data processing agreements that bind them to the same data protection standards as jj7.
• Legal and regulatory authorities: jj7 will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required by applicable law or in response to a valid legal order.
• Self-exclusion databases: Where applicable, jj7 may share self-exclusion records with responsible gaming bodies or multi-operator exclusion schemes to give effect to a player's self-exclusion request.

6.1 All PKR deposits and withdrawals processed via JazzCash, Easypaisa, or bank transfer generate transaction records that jj7 retains for the purposes described in this Policy. These records include transaction amounts, timestamps, reference numbers, and payment method identifiers. Full payment card numbers and bank account credentials are never stored by jj7 directly.

6.2 KYC identity documents — including CNIC scans and address evidence — are stored in encrypted form on access-controlled infrastructure. These documents are reviewed only by authorised jj7 compliance personnel and the third-party KYC service provider retained to perform verification. KYC documents are retained for the period required by applicable anti-money laundering regulations following account closure.

6.3 jj7 uses the financial transaction history associated with your account for responsible gaming monitoring. Unusual spending patterns, rapid deposit sequences, or high-frequency betting behaviour may trigger a responsible gaming review. This is part of jj7's obligation to identify and respond to potential indicators of gambling harm.

7.1 What We Use. jj7 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, maintain your login session, remember your preferences, and analyse how the Platform is used.

7.2 Categories of Cookies.

• Essential cookies: Required for the Platform to function. These include session cookies that maintain your authenticated state after login. You cannot opt out of essential cookies without losing access to the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform. This data helps jj7 identify performance issues and improve the mobile experience — particularly relevant given that the majority of Pakistani jj7 players access the Platform via mobile browsers.
• Preference cookies: Store your language, display, and notification preferences.
• Marketing cookies: Set only with your consent. Used to deliver relevant promotional messages and measure the effectiveness of jj7's marketing communications.

7.3 Managing Cookies. You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the jj7 Platform.

jj7 retains personal data for the following periods:

• Active account data: Retained for the duration of your account relationship with jj7 plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the last transaction to which they relate.
• Financial transaction records: Retained for a minimum of 5 years following the date of the transaction.
• Support communications: Retained for a minimum of 2 years from the date of the interaction.
• Self-exclusion records: Retained indefinitely to prevent circumvention of a self-exclusion request through re-registration.
• Marketing opt-out records: Retained indefinitely to ensure we do not send unwanted communications to players who have opted out.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jj7's internal data lifecycle procedures.

Subject to applicable law, you have the following rights in respect of the personal data jj7 holds about you:

• Right of access: You may request a copy of the personal data jj7 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: In certain circumstances, you may request deletion of your personal data. Note that jj7 may be required to retain certain data by law and cannot delete it on request where a legal obligation applies.
• Right to restrict processing: You may request that jj7 restrict processing of your data in certain circumstances.
• Right to data portability: You may request that jj7 provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact jj7 support at [email protected]. jj7 will respond to verified data subject requests within 30 days.

jj7 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jj7's servers.
• Cryptographic hashing of account passwords — jj7 staff cannot view your password in any form.
• Access controls limiting personal data access to authorised jj7 personnel on a need-to-know basis.
• Login anomaly detection systems that flag unusual access patterns for investigation.
• Optional two-factor authentication for all registered jj7 accounts, strongly recommended for all players.
• Regular security assessments and vulnerability testing of jj7's technical infrastructure.

Despite these measures, no data transmission or storage system can be guaranteed as completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, jj7 will notify affected players and relevant authorities in accordance with applicable legal requirements.

jj7 does not knowingly collect personal data from individuals under the age of 18. The jj7 Platform is strictly restricted to adults aged 18 and over. Date of birth is collected during registration specifically to screen for underage access. Where jj7 discovers or has reason to believe that an account is held by a person under 18, that account will be immediately suspended, and any personal data collected in connection with it will be handled in accordance with this Policy and applicable child data protection obligations.

If you believe that a minor has created a jj7 account, please contact support immediately at [email protected].

jj7 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Where changes are material, jj7 will notify registered players via email or on-site notification at least 7 days before the revised Policy takes effect.

The date at the top of this Policy reflects when it was last updated. Continued use of the jj7 Platform after a revised Policy takes effect constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should close your account before the effective date of the changes.

For questions about this Policy or jj7's data practices, contact support at [email protected].