jj17 Privacy Policy

1 Who We Are

This Privacy Policy is issued by jj17 ("jj17", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at jj17.net (the "Platform"). jj17 acts as the data controller in respect of all personal data collected from players and visitors through the Platform.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or can reasonably be used to identify a natural person — including your name, CNIC number, email address, phone number, payment details, device identifiers, and IP address.

If you have any questions about how jj17 processes your personal data, you may contact our support team at any time. Contact details are provided in Section 15 of this Policy.

2 Personal Data We Collect

jj17 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the main categories of personal data we collect and specific examples within each category:

jj17 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information except where strictly required by applicable gaming regulations for responsible gaming monitoring purposes.

3 How We Collect Your Data

jj17 collects your personal data through the following channels and methods:

• Direct interactions: When you create a jj17 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide us with personal data directly.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data and Usage Data using cookies, web beacons, pixel tags, and similar tracking technologies. For full details, see Section 7 (Cookies & Tracking).
• Identity verification providers: Where you submit identity documents for KYC purposes, our third-party identity verification partner processes your document images and returns a verification result to jj17. The document data is handled in accordance with that provider's own data processing agreement with jj17.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, our payment processing partners share limited transaction confirmation data with jj17 to facilitate deposit crediting and withdrawal processing.
• Fraud and security providers: We receive risk signals and device fingerprint data from third-party fraud prevention tools to help us identify and block fraudulent account activity before it affects our players.

4 How and Why We Use Your Data

jj17 uses the personal data we collect for the following specific purposes:

1. Account creation and management: To register your jj17 account, verify your identity, maintain your account profile, and enable you to access all Platform features.
2. Processing deposits and withdrawals: To facilitate PKR-denominated financial transactions through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) and to maintain accurate transaction records.
3. KYC and age verification: To comply with our obligation to verify that all players are aged 21 or above and to prevent underage gambling on the Platform.
4. Regulatory compliance and anti-money laundering (AML): To fulfil our obligations under applicable gaming regulations and international AML standards, including monitoring transaction patterns for suspicious activity and maintaining records as required by law.
5. Responsible gaming monitoring: To detect and respond to indicators of problem gambling behaviour, including tracking deposit frequency, session duration, and loss patterns in order to trigger appropriate player protection interventions.
6. Customer support: To handle your queries, complaints, and feedback effectively and to maintain records of previous interactions for quality and dispute resolution purposes.
7. Platform improvement: To analyse aggregated Usage Data and Technical Data in order to improve the jj17 Platform's performance, user experience, game selection, and feature set.
8. Security and fraud prevention: To detect, investigate, and prevent fraudulent accounts, multi-accounting, bonus abuse, money laundering, and unauthorised access attempts.
9. Direct marketing: To send promotional communications about jj17 bonuses, new games, PSL cricket betting markets, and special offers — but only where you have provided consent for such communications. You may withdraw consent at any time.
10. Legal claims: To establish, exercise, or defend legal claims where necessary.

5 Legal Basis for Processing

jj17 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contract performance: Processing that is necessary to provide you with the jj17 service under our Terms & Conditions — including account management, payment processing, and customer support.
• Legal obligation: Processing that is required to comply with our obligations under applicable gaming regulations, AML legislation, and data retention laws — including KYC verification and transaction record-keeping.
• Legitimate interests: Processing that is necessary for jj17's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, Platform security, and aggregated analytics for service improvement.
• Consent: Processing that relies on your freely given, specific, informed, and unambiguous consent — including the sending of direct marketing communications. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

jj17 does not sell, rent, or trade your personal data. We share your data only with the following categories of trusted third parties, and only to the extent necessary for each stated purpose:

• Identity verification providers: To process KYC document checks and age verification in accordance with our regulatory obligations.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data necessary to execute your deposit or withdrawal transaction.
• Game software providers: Licensed game providers receive Technical Data and pseudonymous player identifiers necessary to deliver their games within the jj17 Platform.
• Fraud prevention and security services: Third-party risk and fraud detection providers receive Technical Data and behavioural signals to help jj17 identify and block fraudulent activity.
• Cloud hosting and infrastructure providers: jj17's Platform is hosted on secure cloud infrastructure. Our hosting provider processes data solely as a data processor acting on jj17's instructions.
• Customer support platform: Our live chat and support ticketing provider processes Communications Data to enable us to respond to your enquiries.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulators, or courts where required to do so by law, court order, or in connection with legal proceedings.

All third parties with whom jj17 shares personal data are required to handle that data in accordance with applicable data protection laws and are bound by contractual data processing obligations.

7 Cookies & Tracking Technologies

jj17 uses cookies and similar tracking technologies to operate and improve the Platform, to remember your preferences, and to support security and analytics functions. A cookie is a small text file placed on your device when you visit a website. It allows the website to recognise your device on subsequent visits.

jj17 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable you to log in to your jj17 account, navigate between pages, and access secure areas. You cannot opt out of strictly necessary cookies as the Platform cannot function without them.
• Performance and analytics cookies: These collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve Platform performance.
• Functional cookies: These remember your preferences such as language settings, preferred payment method, and display options to provide a more personalised experience.
• Session security cookies: These help jj17 detect and prevent fraudulent login attempts, multi-accounting, and other security threats by associating your session with expected device and network characteristics.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the jj17 Platform. Your browser's help documentation provides instructions for managing cookies on your specific browser.

8 Data Retention

jj17 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active jj17 account, and for a minimum of five (5) years following account closure, in accordance with gaming regulatory and AML record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial record-keeping obligations.
• KYC verification documents: Retained for the period required by applicable gaming regulations, typically five (5) years following the end of the business relationship.
• Support and communications data: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality management.
• Technical and usage data: Retained in aggregated or anonymised form for analytical purposes indefinitely; identifiable technical logs are retained for up to twelve (12) months.
• Marketing preference data: Retained until you withdraw consent or close your account.

Where jj17 has a legal obligation to retain data beyond the periods above, we will retain it for the minimum period required and no longer. Upon expiry of the applicable retention period, data is securely deleted or anonymised.

9 Security Measures

jj17 takes the protection of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, loss, or destruction.

Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jj17's servers;
• Encryption at rest for all databases containing personal and financial data;
• Role-based access controls limiting database and system access to authorised personnel only;
• Two-factor authentication (2FA) available for player accounts and mandated for all internal staff systems;
• Regular penetration testing conducted by independent security professionals;
• Continuous security monitoring and automated alerting for anomalous access patterns;
• Comprehensive staff training on data protection obligations and security best practices.

While jj17 takes all reasonable precautions, no system is entirely impenetrable. You also play a role in protecting your data — please use a strong, unique password for your jj17 account and enable two-factor authentication to minimise your exposure to unauthorised access.

10 Your Rights Over Your Personal Data

You have the following rights in respect of the personal data jj17 holds about you. To exercise any of these rights, please contact our support team using the details provided in Section 15:

• Right of access: You have the right to request a copy of the personal data jj17 holds about you, together with information about how it is used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected or completed without undue delay.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jj17's legal retention obligations (see Section 8).
• Right to restriction of processing: You have the right to request that jj17 restrict the processing of your data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on jj17's legitimate interests, including direct marketing. On receipt of a valid objection to direct marketing, jj17 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jj17 will respond to all valid data rights requests within thirty (30) days. Where a request is complex or jj17 receives a high volume of requests, we may extend this period by a further two months, in which case we will notify you within the initial thirty-day period.

11 Children and Minors

The jj17 Platform is strictly intended for adults aged 21 years and above. jj17 does not knowingly collect, process, or retain personal data from any person under the age of 21.

If jj17 becomes aware that it has inadvertently collected personal data from an individual who is under 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be returned to the originating payment method after deducting any bonuses claimed.

If you are a parent or guardian and you believe that a minor in your care has registered a jj17 account or provided personal data to jj17, please contact our support team immediately at [email protected]. We will investigate and act promptly.

12 International Data Transfers

jj17 operates on a globally distributed infrastructure. As a result, your personal data may be stored and processed in countries outside Pakistan. Where such transfers occur, jj17 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.

Safeguards employed by jj17 for international data transfers include:

• Contractual clauses binding data recipients to equivalent data protection obligations;
• Transfers only to countries or organisations that maintain adequate data protection standards under applicable law;
• Encryption of all data in transit and at rest, irrespective of geographic location;
• Periodic review of international transfer arrangements to ensure continued adequacy.

You may request information about the specific safeguards jj17 has in place for any international transfer of your personal data by contacting our support team.

13 Third-Party Links

The jj17 Platform may contain references to third-party game providers or service partners. jj17 does not control the privacy practices of third-party websites or services and is not responsible for their content or privacy policies.

This Privacy Policy applies exclusively to the jj17 Platform. If you navigate away from jj17 to a third-party website, we recommend that you review that website's privacy policy before providing any personal information. jj17 accepts no liability for the privacy practices of third-party operators.

14 Updates to This Privacy Policy

jj17 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify you by:

• Displaying a prominent notice on the jj17 Platform for a reasonable period following the change;
• Sending a notification to your registered email address where the change materially affects your rights or the way we process your data.

The "Effective" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the jj17 Platform following notification of a Policy update constitutes your acknowledgement of the updated Policy. If you do not agree to the updated Policy, you should stop using the Platform and may request account closure in accordance with jj17's Terms & Conditions.

Historical versions of this Privacy Policy are available upon request by contacting our support team.

15 Contact Us & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or jj17's data processing practices, please contact our support team through the following channels:

• Email: [email protected] (response within 2 hours)
• Live Chat: Available 24/7 via the chat widget on jj17.net

Our support team is available around the clock, every day of the year, and is equipped to handle data protection enquiries from players across Pakistan, including Karachi, Lahore, Faisalabad, and Islamabad.