2jbat Privacy Policy – How We Collect, Use and Protect Your Personal Data

1What Information We Collect

2jbat collects personal information in two ways: information you provide directly, and information collected automatically when you use the platform.

Information You Provide

• Registration Details. When you create a 2jbat account, we collect your full name, date of birth, mobile phone number and, where applicable, your email address. This information is required to open an account and verify that you meet the minimum age requirement of 18 years.
• Identity Verification Documents. 2jbat may request a copy of your CNIC (Computerised National Identity Card) or other government-issued identification to verify your identity. This is particularly required before processing withdrawals above certain thresholds. Documents provided for verification are stored securely and used solely for identity purposes.
• Payment Information. When you deposit or withdraw funds, we collect the mobile wallet number (Easypaisa or JazzCash), bank account details or card information associated with the transaction. We do not store your full card number, CVV code or mobile wallet PIN — these are handled by our certified payment processors.
• Support Communications. When you contact 2jbat support via chat or email, we retain a record of the conversation. This helps us handle follow-up queries and maintain a consistent service standard.
• Self-Exclusion and Responsible Gaming Data. If you use our responsible gaming tools — including deposit limits, cooling-off periods or self-exclusion — we record those instructions to ensure they are applied correctly.

Information Collected Automatically

• Device and Browser Data. When you access 2jbat, our servers automatically log your IP address, browser type and version, operating system, screen resolution and the time and date of your visit. This is standard web server logging used for security monitoring and platform optimisation.
• Game and Betting Activity. All gaming activity on 2jbat — bets placed, games accessed, outcomes, session duration — is logged. This data is used to operate the platform, settle disputes, detect suspicious activity and generate your account history.
• Cookies and Tracking Technologies. 2jbat uses cookies, local storage and similar tools to maintain your session, remember preferences and collect analytics. Full details are provided in Section 5 of this policy.

2How We Use Your Information

2jbat uses the personal data we hold about you for the following purposes:

2jbat does not use your personal data for automated decision-making that would produce significant legal or financial effects on you without human review.

3Who We Share Your Data With

2jbat shares personal information only where strictly necessary. We do not sell your data to third parties. The categories of recipients with whom we may share your information are:

• Payment Processors. To complete your deposits and withdrawals, we share the necessary transaction information with payment providers including Easypaisa, JazzCash, NayaPay, SadaPay and bank payment gateways. These providers are bound by their own privacy and security standards and are prohibited from using your data for any other purpose.
• Identity Verification Services. Where we use a third-party provider to verify your identity documents (such as CNIC verification), we share the necessary documentation with that provider for that sole purpose. Verification providers operate under strict data handling agreements with 2jbat.
• Game Technology Providers. Some of our live casino games and slot titles are operated by third-party software providers. These providers may receive your player ID and stake data to operate the game and settle outcomes. They do not receive your full personal profile.
• Fraud Detection Services. To protect the platform and genuine users, 2jbat may use specialised fraud detection tools that analyse transaction and behaviour patterns. These services receive anonymised or pseudonymised data where possible.
• Legal and Regulatory Authorities. 2jbat will share personal information with law enforcement, financial intelligence units or regulatory bodies when required to do so by a lawful order or legal obligation. We will notify affected users where we are legally permitted to do so.
• Business Transfers. In the event that 2jbat undergoes a merger, acquisition or sale of assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

4Payment Data and PKR Transactions

Given that all 2jbat transactions are conducted in Pakistani Rupees through local mobile wallets and banking channels, this section addresses how payment data is handled specifically in the Pakistani context.

• What We Store. 2jbat stores a record of each transaction — the amount in PKR, the date and time, the payment method used and the transaction reference number. This is necessary for account management, dispute resolution and compliance with anti-money laundering regulations.
• What We Do Not Store. 2jbat does not store your Easypaisa or JazzCash PIN, your mobile wallet password, your full debit/credit card number or your card CVV. Payment authentication takes place through the payment provider's own secure interface and those credentials never pass through 2jbat's systems in full.
• Registered Payment Methods. The mobile wallet number or bank account you use for transactions is retained on file to ensure withdrawals are returned to the correct account. This is a security measure to prevent funds being misdirected. You can update your registered payment method by contacting support with the required verification.
• Anti-Money Laundering. Pakistani financial regulations require 2jbat to maintain records of all customer transactions and to report suspicious activity. This is a legal obligation and not discretionary. Transaction monitoring does not involve human review of every transaction — automated systems flag unusual patterns for review.
• Third-Party Fees. 2jbat does not charge fees on deposits or withdrawals. Your payment provider may apply their own transaction fees, which are entirely outside 2jbat's control and are not visible in your 2jbat transaction history.

5Cookies and Tracking Technologies

2jbat uses cookies and similar technologies to operate the platform, remember your preferences and understand how players use the site. Here is a plain-language breakdown of what we use and why:

Most browsers allow you to control cookies through their settings. Blocking all cookies may affect your ability to log in and use certain features of 2jbat. Required cookies cannot be opted out of without disabling the platform's core functionality.

6How Long We Keep Your Data

2jbat retains personal data only for as long as it is necessary for the purposes described in this policy or to meet our legal obligations. The following retention periods apply:

• Active Account Data. Personal information associated with an active 2jbat account is retained for the lifetime of the account plus an additional period after closure as required by applicable law.
• Transaction Records. All PKR transaction records — deposits, withdrawals, bet history — are retained for a minimum of five years from the date of the transaction. This is required under standard financial record-keeping and anti-money laundering regulations.
• Identity Verification Documents. Copies of identity documents such as CNIC or bank statements are retained for as long as required by applicable regulations governing identity verification in financial services.
• Customer Support Records. Support conversation histories are retained for a period of two years from the date of the last interaction. This allows us to reference previous communications when handling follow-up queries.
• Self-Exclusion Records. If you have requested self-exclusion from 2jbat, your exclusion record is retained indefinitely to prevent re-registration. This is a protective measure for your benefit.
• Closed or Dormant Accounts. Following account closure or after a dormant period, personal data is either deleted or anonymised after the applicable legal retention period has expired. Anonymised data that cannot be linked back to an individual may be retained for analytics.

7Data Security

2jbat takes the security of your personal data seriously. The technical and organisational measures we have in place include:

• TLS Encryption. All data transmitted between your device and 2jbat is protected by TLS (Transport Layer Security) encryption. Look for the padlock icon in your browser's address bar — that confirms your connection to 2jbat is encrypted.
• Encrypted Data at Rest. Personal data stored in 2jbat's databases is encrypted at rest. Even in the highly unlikely event of an unauthorised database access, the data would not be readable without the decryption keys.
• Access Controls. Access to personal data within 2jbat is restricted to employees and contractors who need it to perform their job. Permissions are granted on a least-privilege basis and reviewed regularly.
• Two-Factor Authentication. 2jbat supports two-factor authentication for account logins. We strongly recommend enabling this in your account security settings to protect against unauthorised access.
• Breach Response. In the event of a data breach that affects your personal information, 2jbat will assess the incident immediately, take steps to contain it, and notify affected users in accordance with applicable legal requirements.

8Your Rights Over Your Personal Data

As a 2jbat user, you have the following rights regarding the personal information we hold about you. To exercise any of these rights, contact support@2jbat.click from your registered email address or phone number:

9Minors and Age Verification

2jbat is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18.

• Age verification is required as part of the account registration process. You must confirm you are 18 or older at the time of registration.
• 2jbat may request documentary proof of age — such as a CNIC — at any time, including prior to processing a withdrawal. Accounts that cannot confirm minimum age will be suspended.
• If we discover that an account has been registered by a person under 18, the account will be closed immediately, all activity will be voided and any deposited funds will be returned to the payment source.
• If you are a parent or guardian and believe a minor has accessed 2jbat using your details or a fraudulently registered account, contact us immediately at support@2jbat.click. We will investigate and take appropriate action without delay.
• We recommend that parents use available parental control software to prevent minors from accessing online gaming and gambling platforms.

10Changes to This Privacy Policy

2jbat may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we do:

• The effective date shown at the top of this page will be updated to reflect when the revised policy takes effect.
• For material changes — those that significantly affect how we process your personal data — we will notify you through the platform or via your registered contact details at least 7 days before the change takes effect.
• For minor clarifications or corrections that do not materially change how we use your data, the updated policy will take effect immediately upon posting.
• Continued use of 2jbat after a policy update constitutes your acceptance of the revised terms. If you disagree with any changes, you should stop using the platform and contact us to request account closure.

11Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how 2jbat has handled your personal information, please contact us:

Please include your registered phone number or email address in any privacy request so we can verify your identity before providing access to or modifying your personal data. This is a security requirement to protect against unauthorised requests.