1jj5 Privacy Policy — How We Protect Your Personal Data

1jj5 ("we", "us", "our") operates the online casino and sports betting platform accessible at 1jj5.org (the "Platform"). As the operator of a platform used by players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Peshawar, and beyond — we collect and process personal data in order to provide our services, verify player identities, process PKR transactions, and comply with our legal and regulatory obligations.

This Privacy Policy ("Policy") applies to all individuals who register an account on the 1jj5 Platform, access any feature of the Platform, or otherwise interact with 1jj5 in connection with our services. It should be read alongside, and is incorporated by reference into, the 1jj5 Terms & Conditions available at /terms-conditions.

We are committed to handling all personal data entrusted to us by Pakistani players with integrity, transparency, and the highest standards of data security. This Policy is written in plain, readable English so that every player — regardless of their technical background — can clearly understand how their personal information is used at 1jj5.

For the purposes of applicable data protection law, the data controller responsible for your personal information is the 1jj5 platform operator — the entity that determines the purposes and means of processing your personal data in connection with the services offered at 1jj5.org.

All data protection enquiries, subject access requests, and complaints relating to 1jj5's handling of personal data should be directed to our designated data protection contact point. Contact details are provided in Section 14 of this Policy.

1jj5 collects the following categories of personal data from players during the course of account registration, identity verification, gameplay, and customer support interactions. We collect only the data that is genuinely necessary for the purposes described in this Policy — we do not collect data for its own sake.

1jj5 does not collect or store full payment card numbers. Payment processing is handled via certified third-party payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) who operate their own security and compliance frameworks. 1jj5 receives only the transaction confirmation references and status indicators necessary for PKR wallet management.

1jj5 collects personal data through the following mechanisms. Understanding each collection method helps you make informed decisions about the information you share with us on the Platform:

• Direct Registration: When you create a 1jj5 account, you directly provide Identity Data and Contact Data through the registration form. This information is submitted voluntarily by you as a condition of account creation.
• KYC Verification: When we conduct Know Your Customer verification — required before processing withdrawals above a threshold — you submit identity documents including CNIC scans or photographs directly to 1jj5's verification system.
• Financial Transactions: Deposits and withdrawals processed through JazzCash, EasyPaisa, and Pakistani bank transfers generate transaction records in our system. We receive confirmation data from payment processors for reconciliation and anti-fraud purposes.
• Gameplay Activity: As you use the 1jj5 Platform — browsing the casino lobby, playing slots, betting on PSL or international cricket, using the Fortune Dragon game, or accessing live dealer tables — Usage Data is automatically recorded by our platform infrastructure.
• Technical Logging: Our servers automatically collect Technical Data each time you access the Platform, including your IP address, device characteristics, and session timestamps. This happens automatically as part of standard internet protocol operation.
• Customer Support: When you contact 1jj5 support via live chat, email, or account messaging, the content of those communications is recorded and stored as Communications Data for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: The 1jj5 Platform uses cookies and similar technologies to collect certain Usage Data and Technical Data automatically. Full details are provided in Section 10 of this Policy.

1jj5 processes your personal data for the following specific, documented purposes. We do not use your data for purposes beyond those listed here without either obtaining fresh consent or updating this Policy:

• Account Creation and Management: To create, maintain, and manage your 1jj5 player account, including your PKR wallet, bonus records, VIP tier status, and gaming history.
• Identity and Age Verification (KYC): To verify that you are who you claim to be and that you are at least 21 years of age, as required by our Terms & Conditions and responsible gaming obligations.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank accounts, and to maintain accurate financial records of all transactions in your account.
• Service Delivery: To provide you with access to casino games, sports betting markets including PSL and international cricket, live dealer games, wheel games, Fortune Dragon, and all other features of the 1jj5 Platform.
• Anti-Fraud and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, identity theft, bonus abuse, and any other prohibited activity as defined in the 1jj5 Terms & Conditions.
• Responsible Gaming Monitoring: To monitor gaming behaviour for signs of problematic gambling and to facilitate the operation of responsible gaming tools including deposit limits, session limits, and self-exclusion, where applicable.
• Legal and Regulatory Compliance: To comply with our obligations under applicable gaming licensing requirements, anti-money laundering legislation, and any lawful demands from regulatory or law enforcement authorities.
• Customer Support: To provide assistance with account queries, payment issues, technical problems, and responsible gaming concerns in English and Urdu.
• Platform Improvement: To analyse usage patterns, identify technical issues, and continuously improve the 1jj5 Platform experience for Pakistani players in aggregate and anonymised form.
• Marketing Communications (with consent): To send promotional offers, bonus alerts, and gaming updates to players who have explicitly opted in to receive such communications. Opt-out is available at any time.

1jj5 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the 1jj5 Terms & Conditions — including account management, payment processing, and service delivery — is carried out because it is necessary to perform the contract between you and 1jj5.
• Legal Obligation: Processing required to comply with our legal obligations — including KYC identity verification, anti-money laundering record-keeping, and responding to lawful regulatory requests — is carried out on the basis of legal compliance necessity.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregate platform analytics is based on 1jj5's legitimate interest in operating a secure, fair, and sustainable gaming platform, balanced against your privacy interests.
• Consent: Processing for marketing communications and optional personalisation features is carried out only on the basis of your explicit, freely given, and revocable consent. You may withdraw consent for marketing at any time without affecting the lawfulness of processing carried out before withdrawal.

1jj5 does not sell, rent, or commercially trade your personal data to any third party. We share personal data only in the following specific and necessary circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum personal and transaction data necessary to process deposits and withdrawals from your 1jj5 PKR wallet. Each payment processor operates under their own privacy and data security standards.
• Game Providers: Certified game providers — including Pragmatic Play, PG Soft, NetEnt, Play'n GO, and others — may receive anonymised or pseudonymised player session data necessary to deliver game content, resolve game disputes, and maintain certified RNG audit trails. Personally identifying data is minimised in these transmissions.
• KYC Verification Services: Third-party identity verification services may receive your CNIC details and identity documents for the sole purpose of conducting automated or manual identity and age verification checks. These providers operate under strict confidentiality and data processing agreements with 1jj5.
• Regulatory and Law Enforcement Authorities: 1jj5 will disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction. We will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by 1jj5 may access personal data on a strictly need-to-know basis subject to binding confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of 1jj5's business, player data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy. Affected players will be notified of any change of data controller.

1jj5 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active 1jj5 account relationship and for a period of five (5) years following account closure, to satisfy anti-money laundering and gaming licensing record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, consistent with standard financial services regulatory requirements for identity verification records.
• Transaction Records: All PKR deposit, withdrawal, and wager transaction records are retained for a minimum of five (5) years from the date of each transaction for financial audit and regulatory compliance purposes.
• Customer Support Records: Support correspondence and chat transcripts are retained for a period of two (2) years from the date of the interaction, or longer where the correspondence relates to an unresolved dispute or regulatory matter.
• Marketing Consent Records: Records of your marketing opt-in and opt-out decisions are retained for the duration of your account relationship and for a period of three (3) years thereafter, to provide evidence of consent management compliance.
• Technical and Usage Logs: Server log data and session-level technical data are retained for a period of twelve (12) months, after which they are aggregated, anonymised, or deleted.

When data reaches the end of its applicable retention period and there is no ongoing legal or regulatory reason to extend retention, 1jj5 securely destroys or anonymises the data in accordance with our internal data disposal procedures.

1jj5 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 1jj5 Platform is encrypted using industry-standard 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this protection is active during every session.
• Encrypted Data Storage: Sensitive personal data stored in 1jj5's databases — including CNIC details, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption, rendering it unreadable to any party without the appropriate decryption keys.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm, meaning that even 1jj5 personnel cannot retrieve or view your password — only verify it.
• Access Controls: Access to systems containing personal player data is restricted to 1jj5 personnel on a strict need-to-know basis, enforced through role-based access control, multi-factor authentication for internal systems, and comprehensive access logging.
• Penetration Testing: The 1jj5 platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 1jj5 maintains a documented data breach incident response plan. In the event of a security incident that creates a material risk to player privacy, affected players will be notified without undue delay in accordance with our legal obligations.

While 1jj5 takes every reasonable precaution to protect your data, no data transmission over the internet or electronic storage system is completely impervious to security risk. Players are strongly encouraged to use strong, unique passwords for their 1jj5 accounts and to enable two-factor authentication where available.

The 1jj5 Platform uses cookies and similar tracking technologies to provide core Platform functionality, improve performance, and understand how players interact with the Platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on the 1jj5 Platform:

• Strictly Necessary Cookies Essential
  These cookies are required for the 1jj5 Platform to function correctly. They include session authentication cookies that maintain your logged-in status, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings and preferences within an active session. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies Analytics
  These cookies collect anonymised and aggregated information about how players use the 1jj5 Platform — which pages are most visited, how long sessions last, which games are most popular among Pakistani players, and where technical errors occur. This data helps 1jj5 continuously improve the Platform experience. No personally identifiable information is collected through analytics cookies.
• Functionality Cookies Optional
  These cookies remember optional preferences you have set — such as your preferred language, your favourite game category, or your last-viewed sports market in the sportsbook. They are not essential to the Platform's operation but enhance the convenience of your experience. You may disable functionality cookies without affecting core Platform access.

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to remain logged in to your 1jj5 account and may prevent access to certain Platform features. Most modern browsers provide cookie management controls in their privacy or settings menus.

As a data subject whose personal information is processed by 1jj5, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our data protection team using the details in Section 14. 1jj5 will respond to all valid rights requests within 30 days of receipt:

The 1jj5 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under 21 years of age. The 1jj5 registration process requires CNIC-based age verification precisely to enforce this restriction.

If 1jj5 becomes aware — through any means — that personal data has been collected from or on behalf of an individual under 21 years of age, we will immediately suspend the associated account, delete the relevant data as promptly as possible consistent with our legal obligations, and report the matter internally in accordance with our underage access response procedures.

1jj5 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory obligations. The "Last Updated" date displayed at the top of this Policy reflects the date of the most recent revision.

For material changes to this Policy — meaning changes that significantly affect how your personal data is processed or your rights with respect to it — 1jj5 will provide prominent notice via the Platform notification system and, where appropriate, by email to your registered address, at least 14 days before the revised Policy takes effect. Your continued use of the 1jj5 Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to remain informed about how 1jj5 protects and manages your personal data. The current version of this Policy is always available at 1jj5.org/privacy-policy.

For all matters relating to this Privacy Policy — including subject access requests, data correction requests, erasure requests, objections to processing, consent withdrawal, or privacy complaints — please contact the 1jj5 data protection contact point through the following channel:

1jj5 will acknowledge receipt of all data protection requests within 5 business days and will provide a substantive response within 30 calendar days of receipt, except in cases of particular complexity where an extension of up to a further 60 days may be required. We will inform you if an extension is needed and explain the reason for it.

If you are dissatisfied with 1jj5's handling of your personal data or our response to a data protection request, you have the right to escalate your complaint to the relevant data protection supervisory authority or regulatory body applicable to your jurisdiction. You may also seek independent legal advice regarding your data rights at any stage.