2jbt Privacy Policy – How We Collect, Use, and Protect Your Personal Data

02. Personal Data We Collect

2jbt collects and processes the following categories of personal data in connection with the operation of the Platform and its obligations under the applicable gaming licence:

2jbt does not collect or store full payment card details directly. Where card transactions are processed, card data is handled exclusively by PCI-DSS compliant third-party payment processors and is not retained on 2jbt servers.

03. How We Collect Your Data

2jbt collects personal data through the following means:

• Direct submission by you — when you complete the 2jbt account registration form, submit KYC documentation, make a deposit or withdrawal, contact our support team, set responsible gaming limits, or otherwise interact with the Platform by inputting data.
• Automatic technical collection — when you access or browse the 2jbt Platform, technical data including your IP address, device identifiers, session timestamps, and browser information is collected automatically through server logs and similar standard web technologies.
• Cookies and tracking technologies — the 2jbt Platform uses cookies and similar technologies to collect certain browsing and session data, as described in Section 7 of this Policy.
• Third-party payment providers — when you deposit via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or other accepted payment methods, 2jbt receives confirmation data from those providers relating to the transaction (reference numbers, account identifiers, and amounts), sufficient to credit your 2jbt wallet and maintain compliant financial records.
• Identity verification services — where 2jbt engages third-party KYC verification providers to assist with identity and age confirmation, those providers may supply 2jbt with verification outcomes and flagging data.
• Fraud and security monitoring systems — automated systems that monitor platform activity for signs of fraudulent conduct, multi-accounting, or system abuse generate data records that form part of the personal data associated with your account.

04. How We Use Your Data

2jbt processes personal data collected from players for the following purposes:

1. Account creation and management: To establish, maintain, and administer your 2jbt account, including authentication, password recovery, and account settings management.
2. Identity and age verification (KYC): To verify that you meet the 21+ age requirement and confirm your identity in compliance with 2jbt's licensing obligations, including anti-money laundering and counter-terrorism financing requirements.
3. Payment processing: To process deposits from and withdrawals to your JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other registered payment accounts, and to maintain accurate financial records.
4. Platform operation and game delivery: To provide you with access to casino games, sports betting markets, live dealer tables, Money Wheel, Lucky Bingo, and all other 2jbt Platform features.
5. Customer support: To respond to your enquiries, resolve disputes, and provide assistance through 2jbt's 24/7 Urdu and English support channels.
6. Responsible gaming compliance: To operate deposit limits, session timers, cooling-off periods, and self-exclusion mechanisms you have set, and to monitor for signs of problem gambling behaviour in accordance with 2jbt's licensing obligations.
7. Security and fraud prevention: To detect and prevent fraudulent activity, multi-accounting, money laundering, system abuse, and other prohibited conduct on the 2jbt Platform.
8. Legal and regulatory compliance: To fulfil 2jbt's obligations under its gaming licence and applicable law, including the maintenance of required records and the reporting of specific activity to regulatory authorities where mandated.
9. Marketing and personalisation (with consent): To send you promotional communications about 2jbt offers, bonuses, and new game launches where you have provided consent, and to personalise your dashboard experience based on your gaming preferences.
10. Platform improvement and analytics: To analyse aggregate usage patterns, identify technical issues, and improve the features and performance of the 2jbt Platform for all players.

05. Legal Basis for Processing

2jbt processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted when creating your 2jbt account — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with 2jbt's obligations under its gaming licence — including KYC identity verification, age confirmation, anti-money laundering record-keeping, and responsible gaming programme administration.
• Legitimate interests: Processing for the purpose of fraud detection, platform security, abuse prevention, and aggregate analytics, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and cookie-based tracking beyond what is strictly necessary, where you have provided specific, informed consent that may be withdrawn at any time through your account settings or by contacting 2jbt support.

06. Data Sharing & Third Parties

2jbt does not sell personal data to third parties. Personal data may be shared with the following categories of recipients under appropriate data protection safeguards:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing services receive the minimum data necessary to process your specific transactions and verify payment ownership.
• KYC and identity verification providers — Third-party identity verification services engaged by 2jbt receive the documentation you submit for age and identity confirmation, and return verification outcomes to 2jbt. These providers process data under contractual obligations to 2jbt that restrict their use of your data to verification purposes only.
• Game content providers — Third-party casino game suppliers whose titles appear on the 2jbt Platform may receive a player session identifier sufficient to deliver game content. These providers do not receive your full identity or payment details.
• Regulatory authorities — 2jbt is required to report specific transaction data and player information to its licensing authority as part of its regulatory obligations. In cases involving suspected money laundering or fraud, 2jbt may be required to disclose information to law enforcement authorities without prior notice to the player concerned.
• Technology and infrastructure providers — Cloud hosting, server infrastructure, and technical service providers engaged by 2jbt may process personal data as part of platform operation, subject to data processing agreements requiring them to act only on 2jbt's instructions.
• Professional advisers — Legal, accounting, and compliance advisers engaged by 2jbt may access personal data where necessary for the provision of their professional services, subject to applicable professional confidentiality obligations.

07. Cookies & Tracking Technologies

The 2jbt Platform uses cookies and similar tracking technologies to support platform functionality, security, and where you have consented, analytical and marketing purposes. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the 2jbt Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in to your 2jbt account, security cookies that prevent cross-site request forgery, and cookies that remember your responsible gaming settings within a session.
• Functional cookies: These cookies remember your preferences (such as language settings) and improve your experience on the 2jbt Platform. They are not strictly necessary but are set by default unless you opt out.
• Analytical cookies: Where you have consented, these cookies collect aggregate data about how players use the 2jbt Platform — which pages are visited most frequently, how long sessions last, and where players encounter errors — to help 2jbt improve Platform performance.
• Marketing cookies: Where you have provided specific consent to receive marketing communications, certain cookies may track whether you opened a 2jbt promotional email or clicked a 2jbt promotion. These cookies do not track your activity on third-party websites.

You may manage cookie preferences through your 2jbt account settings. Disabling non-essential cookies will not affect your ability to log in to 2jbt, access games, or process payments, but may affect certain personalisation features and the Platform's ability to remember your preferences across sessions.

08. Data Retention

2jbt retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following specific retention guidelines:

• Account data and KYC records: Retained for a minimum of 5 years following account closure, as required by 2jbt's gaming licence and applicable anti-money laundering regulations. Where legal or regulatory proceedings are active or anticipated, retention may be extended until those proceedings conclude.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations under the applicable gaming licence.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period plus 5 years to prevent re-registration in circumvention of an active exclusion request.
• Customer support communications: Retained for 2 years from the date of the relevant interaction unless the content relates to a dispute or regulatory matter, in which case the extended retention periods above apply.
• Marketing consent records: Retained for the period of active consent plus 1 year following withdrawal of consent, to evidence compliance with consent requirements.
• Technical and log data: Retained for up to 12 months from collection for security and analytics purposes, after which it is deleted or anonymised.

09. Data Security

2jbt employs technical and organisational security measures proportionate to the sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 2jbt servers, protecting your login credentials, payment information, and personal data from interception during transit
• Encryption of sensitive personal data at rest, including KYC documentation and financial records stored in 2jbt's secure data infrastructure
• Access controls limiting 2jbt personnel access to personal data on a strict need-to-know basis, with all data access logged and auditable
• Two-factor authentication options for player accounts, reducing the risk of unauthorised account access even in the event of credential compromise
• Regular security testing and vulnerability assessments of 2jbt Platform infrastructure
• Mandatory data protection training for all 2jbt staff who handle personal data
• Incident response procedures to detect, contain, and notify affected parties in the event of a personal data breach

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event that 2jbt becomes aware of a personal data breach that poses a risk to your rights and freedoms, 2jbt will notify you without undue delay through your registered contact details and, where required, notify the relevant regulatory authority within the timeframe required by applicable law.

11. Marketing & Communications

2jbt may send you promotional communications about bonuses, new games, PSL cricket betting markets, and other 2jbt offers where you have provided specific consent to receive such communications during account registration or subsequently through your account marketing preferences settings.

You may withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences in your 2jbt account settings panel
• Clicking the unsubscribe link included in any 2jbt marketing email
• Contacting 2jbt support and requesting removal from marketing communications

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it prevent 2jbt from sending essential operational communications about your account — such as deposit confirmations, withdrawal notifications, KYC requests, responsible gaming alerts, and security notifications — which are sent regardless of marketing consent status because they are necessary for account management.

12. Children's Privacy & Age Verification

The 2jbt Platform is strictly intended for adults aged 21 years or older. 2jbt does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory identity and age verification (KYC) as a condition of withdrawal processing, and 2jbt employs age verification checks at the point of registration.

If 2jbt discovers or is notified that an account has been created by or on behalf of a person under the age of 21, that account will be immediately suspended and all personal data associated with that account will be deleted, subject to any retention obligations relating to anti-money laundering record-keeping that may apply to financial transactions processed prior to the discovery.

13. Policy Amendments

2jbt reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, licensing requirements, data processing practices, or Platform functionality. Material amendments will be notified to registered players via email to the registered address and/or through a prominent notice displayed on the 2jbt Platform prior to the effective date of the change.

The date of the most recent version of this Policy is displayed at the top of this page. Players who do not accept an amended Privacy Policy may close their 2jbt account prior to the effective date of the amendment. Continued use of the 2jbt Platform following the effective date of an amendment constitutes acceptance of the revised Policy.

14. Contact & Complaints

If you have questions, concerns, or complaints about 2jbt's privacy practices or the handling of your personal data, please contact the 2jbt Data Protection team through the following channel:

Email (plain text, not a clickable link): [email protected]

Our support team — including Urdu and English-speaking agents — is available 24 hours a day, 7 days a week. For data rights requests specifically, please clearly state in your message the nature of the request and include sufficient information to verify your identity as the registered account holder.

If you are dissatisfied with 2jbt's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or dispute resolution body associated with 2jbt's gaming licence jurisdiction, whose contact details are available from the licensing authority upon request.