jjwan Privacy Policy — How We Handle Your Personal Data in Pakistan

This Privacy Policy applies to the jjwan platform available at jjwan.biz and all associated products, services, and communication channels operated under the jjwan brand. When this policy refers to "jjwan", "we", "us", or "our", it means the entity responsible for operating the jjwan platform and acting as the data controller for personal information collected from Pakistani players and visitors.

jjwan is the operator of a digital gaming and sports betting platform designed specifically for players in Pakistan. As the data controller, jjwan determines the purposes for which your personal data is used and the means by which it is processed. If you have questions about who is responsible for your data or how to exercise your rights, the contact details at the end of this policy will connect you with the right person.

By registering an account on jjwan or continuing to use the platform after this policy was last updated, you acknowledge that you have read and understood how jjwan handles your personal information as described in this document. This policy should be read alongside jjwan's Terms and Conditions.

jjwan collects personal data from you in several ways — information you provide directly when registering or using the platform, information generated automatically through your use of jjwan, and in some cases information received from third parties such as KYC providers or payment processors. The table below summarises the main categories.

jjwan does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data except where a liveness check is required as part of KYC verification — in which case it is used solely for identity confirmation and not retained for any other purpose.

jjwan processes your personal data for specific, defined purposes. We do not use your information for any purpose not listed below without seeking your additional consent first.

• Account management — creating and maintaining your jjwan account, verifying your login, managing your PKR wallet balance, and updating your preferences.
• Processing transactions — handling deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card; processing withdrawal requests; maintaining accurate transaction records.
• Identity and age verification — confirming that you are at least 18 years old and that the person operating the account matches the registered identity, in accordance with regulatory requirements.
• Fraud prevention and security — detecting unusual account activity, preventing unauthorised access, identifying and investigating suspected bonus abuse, money laundering, or match-fixing-related betting patterns.
• Legal and regulatory compliance — meeting obligations under applicable laws, responding to lawful requests from authorities, and maintaining records required for audit or regulatory review purposes.
• Customer support — resolving account queries, handling complaints, processing requests related to responsible gaming tools such as deposit limits or self-exclusion.
• Improving the jjwan platform — analysing aggregated, anonymised usage patterns to identify performance issues, improve game loading times, and optimise the betting interface for Pakistani mobile users.
• Marketing communications — sending you information about jjwan promotions, PSL betting specials, or new game launches via email or SMS. You can opt out of these at any time — see Section 10 for how.

Each use of your personal data by jjwan rests on one of the following legal bases. Understanding this helps you know when you have the right to object to or restrict processing — which is covered in Section 10.

• Contract performance — processing your data is necessary to operate your jjwan account, process your bets, and pay your winnings. Without this processing, jjwan cannot provide the service you signed up for.
• Legal obligation — certain data processing is required for jjwan to comply with applicable anti-money laundering regulations, age verification requirements, and similar regulatory obligations.
• Legitimate interests — jjwan has a legitimate business interest in preventing fraud, maintaining platform security, and improving the product — provided these interests do not override your fundamental privacy rights.
• Consent — for marketing communications and non-essential analytics cookies, jjwan relies on your explicit consent. You can withdraw consent at any time without affecting any previous processing.

jjwan does not sell your personal data to anyone. The only situations in which jjwan shares your data with external parties are those listed below — and in each case only the minimum data required for that specific purpose is shared.

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and bank partners receive the transaction data necessary to process your deposit or withdrawal. They are bound by their own privacy and security obligations.
• KYC / identity verification providers — third-party services used by jjwan to verify your CNIC, age, and identity receive only the documents and data needed to perform that check. They do not retain your data beyond their own contractual obligations.
• Game providers — where jjwan uses third-party game engines (such as provably fair crash game providers), the game provider may receive a pseudonymous player identifier and bet amount. They do not receive your name, CNIC, or payment details.
• Regulatory and law enforcement authorities — jjwan will disclose personal data to government bodies, courts, or law enforcement agencies when required to do so by law, court order, or other lawful authority.
• Advertisers, data brokers, and marketing networks — jjwan does not share or sell your personal data to these parties under any circumstances.

Know Your Customer (KYC) verification is a standard requirement for licensed gaming platforms. jjwan may require you to complete identity verification before processing your first withdrawal or when your account activity triggers a review threshold. This process protects jjwan players collectively by preventing fraudulent accounts, underage gambling, and money laundering from occurring on the platform.

When jjwan asks you to verify your identity, you will typically be asked to submit a clear copy of your CNIC (Computerised National Identity Card) — both front and back. You may also be asked to provide a recent utility bill or bank statement as proof of address, or to complete a liveness check (a brief selfie video) to confirm that the person submitting the documents matches the CNIC photo.

• KYC documents submitted to jjwan are handled exclusively by jjwan's verified KYC partner and are not visible to general jjwan staff.
• Documents are transmitted over encrypted connections and stored in secure, access-controlled environments.
• KYC data is retained only for as long as required by the applicable regulatory retention period, after which it is securely deleted.
• jjwan will never ask for your full bank account password, your Easypaisa PIN, or your JazzCash MPIN. If anyone claiming to be jjwan asks for these, it is a phishing attempt — report it to jjwan's support team immediately.

When you deposit or withdraw funds through your jjwan account, the financial details you provide — whether an Easypaisa mobile number, a JazzCash account number, an IBFT bank account, or a card number — are used solely for the purpose of processing that transaction. jjwan does not use your payment information for any other purpose.

jjwan does not store full card numbers on its own servers. Card payments are processed by jjwan's payment partner using tokenisation, meaning that only a secure token representing your card is retained for future use — not the raw card number itself. Your Easypaisa and JazzCash mobile numbers are stored in your account profile and are used only for processing withdrawals to the registered method and for account security communications.

All transaction records — deposit amounts, withdrawal amounts, and bet settlement records denominated in PKR — are retained by jjwan for the minimum period required by applicable financial regulations. These records may be accessed by jjwan's compliance team in the event of a dispute or regulatory inquiry.

jjwan uses cookies and similar tracking technologies on the jjwan platform. A cookie is a small file stored on your device by your browser when you visit a website. Cookies allow jjwan to remember your preferences, keep you logged in between sessions, and understand how players navigate the platform so we can improve it.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies from specific websites. Note that disabling cookies beyond essential ones may affect some jjwan features but will not prevent you from placing bets or accessing your account.

jjwan does not keep your personal data longer than necessary. The retention periods applied to different categories of data are driven by a combination of operational necessity, legal obligations, and the reasonable expectation of needing data to resolve potential disputes.

• Transaction and financial records — retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC and identity documents — retained for the duration of your active account plus a minimum of five years following account closure, unless a longer period is required by applicable regulations.
• Betting and gameplay records — retained for the duration of your account plus three years following account closure, to support dispute resolution and regulatory compliance.
• Support and communication records — retained for two years from the date of the last communication in a given thread, or longer if the matter relates to an ongoing dispute.
• Session, device, and analytics data — aggregated and anonymised after 13 months. Anonymised data does not constitute personal data and is not subject to deletion requests.

When personal data reaches the end of its retention period, jjwan deletes it securely or anonymises it so that it can no longer be linked back to you as an individual. You may request early deletion of certain categories of data — see Section 10 for your rights in this regard.

As a registered jjwan account holder and Pakistani resident, you have meaningful rights over your personal data. These are not just theoretical — they are practical rights that jjwan will honour when you exercise them. Here is what you can ask for.

To exercise any of these rights, contact jjwan's support team at support@jjwan.biz. We will acknowledge your request within 48 hours and complete it within 30 days. We may ask you to verify your identity before processing a data request to ensure we only action requests from the genuine account holder.

jjwan is strictly an 18+ platform. The jjwan platform is not directed at, designed for, or intended to be used by anyone under the age of eighteen. jjwan does not knowingly collect or store personal data from minors. If jjwan discovers or is notified that a person under 18 has registered and provided personal data, that account will be immediately closed and the personal data associated with it will be deleted as quickly as technically possible.

If you are a parent or guardian and believe your child may have registered a jjwan account, please contact jjwan's support team immediately at support@jjwan.biz. We take these reports seriously and will investigate and resolve them as a high priority. Please see jjwan's Responsible Gaming page for information on parental controls and tools available to restrict access to online gaming platforms.

jjwan applies technical and organisational security measures that are appropriate to the nature of the data being processed and the risks involved. These measures are reviewed regularly and updated as the threat landscape evolves. The following is a summary of key security controls jjwan maintains.

• 256-bit SSL/TLS encryption on all pages and all data transmission between your device and jjwan's servers.
• Passwords are hashed using industry-standard algorithms — jjwan staff cannot see your password and jjwan never stores it in plain text.
• Two-factor authentication (2FA) is available and recommended for all jjwan accounts. Enable it in your account security settings for an additional layer of protection.
• Access controls — jjwan staff only have access to the player data they need to perform their specific role. KYC documents are accessible only to a defined, vetted team.
• Regular security audits — jjwan's platform is subject to regular penetration testing and security review by qualified security professionals.
• Fraud detection systems — automated monitoring runs continuously on jjwan to identify suspicious login attempts, unusual transaction patterns, and other indicators of account compromise.

jjwan reviews and updates this Privacy Policy periodically to reflect changes in how we operate the platform, changes in applicable laws and regulations, or to improve clarity for Pakistani players. When we make material changes to how we process personal data, we will notify registered jjwan account holders via the email address on their account before the changes take effect.

The "Last Updated" date at the top of this page is revised each time changes are made. For minor clarifications or formatting updates that do not change the substance of how data is processed, jjwan may update the policy without direct notification — but the updated date will always reflect when any change was last made. Continued use of jjwan after an updated policy is published constitutes acceptance of the revised terms.

If you have a question about this Privacy Policy, want to exercise one of your data rights, or want to make a complaint about how jjwan has handled your personal information, please get in touch using the details below. jjwan is committed to resolving privacy concerns quickly and fairly.

If jjwan's response to your privacy complaint does not satisfy you, you have the right to escalate the matter to the relevant data protection authority or regulator applicable to your situation. jjwan will cooperate fully with any regulatory investigation.

This Privacy Policy was last updated in January 2025 and supersedes all previous versions. It should be read together with jjwan's Terms and Conditions and Responsible Gaming policy.