2jbt Privacy Policy — How We Handle Your Personal Data

2jbt collects the following categories of personal data from players:

2jbt collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit, place a bet, contact support, or respond to a survey or promotion at 2jbt.
• Automated technologies: As you navigate and use the 2jbt platform, our servers automatically collect technical data including your IP address, device identifiers, browser type, and usage patterns through cookies and similar tracking technologies.
• Payment providers: When you process a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the relevant payment provider may share transaction confirmation data with 2jbt to verify the transaction.
• Identity verification services: When we perform KYC checks, we may use third-party identity verification services who provide us with a verification result and risk assessment based on the documents you submit.
• Fraud prevention services: 2jbt works with fraud detection providers who analyse technical data to identify suspicious behaviour and protect the integrity of the platform.
• Publicly available sources: In some cases, and only where legally permitted, 2jbt may verify information against publicly available databases to confirm identity or detect fraud.

2jbt uses your personal data for the following purposes, each of which has a lawful basis under applicable data protection law:

• Account management: To register your account, verify your identity, manage your PKR balance, and maintain your account history on the 2jbt platform.
• Service delivery: To process bets, settle winnings, operate casino games, and deliver any other features of the 2jbt platform you choose to use.
• Payment processing: To handle PKR deposits and withdrawals via your chosen payment method, and to maintain records of all financial transactions associated with your account.
• Legal and regulatory compliance: To meet our obligations under our gaming licence, anti-money laundering (AML) regulations, and any other applicable laws. This includes maintaining transaction records, performing due diligence checks, and reporting to regulatory authorities where required.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other activity that threatens the security of 2jbt or its players.
• Responsible gaming: To monitor gaming behaviour, apply player-requested limits, identify potentially problematic gambling patterns, and intervene with responsible gaming support where appropriate.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of all support interactions for quality assurance and audit purposes.
• Platform improvement: To analyse aggregated usage data, understand how players interact with 2jbt, and continuously improve the platform's features, performance, and user experience.
• Marketing communications: To send you relevant promotions, bonus offers, and updates about 2jbt products — but only where you have consented to receive such communications or where we have a legitimate interest in contacting you as an existing customer.

2jbt does not use your personal data to make automated decisions that produce significant legal effects on you without human oversight. Where automated processing is used for fraud detection, any flag raised is reviewed by a member of our team before any account action is taken.

2jbt does not sell your personal data to third parties. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Game providers: Studios such as Evolution Gaming, Pragmatic Play, Spribe, and others receive the minimum data necessary (typically a player session token and account identifier) to operate their games within the 2jbt platform. These providers do not receive your full personal profile.
• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, and card networks receive the data necessary to process your PKR transaction. Each provider operates under its own privacy policy and data handling standards.
• Identity verification and KYC providers: Third-party verification services receive the documents and data you submit during KYC to perform identity and age verification on behalf of 2jbt.
• Fraud and security services: Technical data is shared with fraud prevention providers to identify and block malicious activity. No unnecessary personal data is included in these data transfers.
• Regulatory authorities: 2jbt is required by law to share certain data with our licensing regulator, financial intelligence units, and law enforcement agencies where legally compelled to do so.
• Professional advisors: Lawyers, auditors, and other professional advisors may have access to your data on a strictly confidential basis in connection with their professional services to 2jbt.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 2jbt's business, your personal data may be transferred to the successor entity, subject to the same privacy protections.

2jbt uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:

• Essential cookies: Required for the 2jbt platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that maintain your bet slip and account balance display. You cannot opt out of essential cookies.
• Performance cookies: These help us understand how players use 2jbt — which pages are visited most, where errors occur, and how quickly pages load. This data is aggregated and anonymous.
• Functionality cookies: These remember your preferences such as language settings, preferred payment method display, and whether you have seen a particular notice. They make your 2jbt experience more personalised without storing personally identifiable information.
• Analytics cookies: We use analytics tools to measure overall platform usage and identify areas for improvement. Data collected through analytics cookies is processed in aggregate form.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from using the 2jbt platform. Blocking other cookie categories may reduce the quality of your experience without affecting core functionality.

2jbt retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with our legal obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account being open at 2jbt plus a minimum of five years after account closure, to meet AML and regulatory record-keeping obligations.
• Transaction records: All PKR deposit, withdrawal, and betting transaction records are retained for a minimum of seven years in accordance with financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years following account closure or the last relevant transaction, whichever is later.
• Support communications: Customer support logs and email correspondence are retained for three years to allow complaint resolution and quality monitoring.
• Technical and usage data: Aggregated performance and usage data may be retained indefinitely in anonymised form. Individual session logs are typically retained for 12 months.
• Marketing consent records: Records of your marketing preferences and consent are retained for the duration of your relationship with 2jbt and for six months after unsubscribing, to evidence compliance.

When data is no longer required, 2jbt destroys or anonymises it securely. Where deletion is not immediately possible due to system constraints, data is isolated from active processing until it can be securely deleted.

Protecting your personal data is a priority at 2jbt. We implement multiple layers of technical and organisational security measures to safeguard your information against unauthorised access, disclosure, alteration, or destruction:

• All data in transit between your device and 2jbt servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to the website, mobile application, and all API communications.
• Data at rest is encrypted using AES-256 encryption on our servers. This includes stored personal data, financial records, and KYC documents.
• Access to personal data within the 2jbt organisation is restricted on a strict need-to-know basis. Staff access is logged, and access privileges are reviewed regularly.
• Payment card data is never stored directly by 2jbt. Card transactions are tokenised by our certified payment processor, meaning 2jbt retains only a token reference rather than your actual card number.
• Our systems are monitored continuously for unusual activity, and our security team responds to incidents according to a formal incident response procedure.
• Regular penetration testing and security audits are conducted by independent third-party security specialists.

While 2jbt takes all reasonable precautions, no security system is infallible. In the unlikely event of a data breach that creates a risk to your rights and freedoms, 2jbt will notify the relevant supervisory authority within 72 hours and will communicate directly with affected players without undue delay.

Under applicable data protection law, you have the following rights in relation to your personal data held by 2jbt:

To exercise any of these rights, contact 2jbt at support@2jbt.ws with your request. We may need to verify your identity before processing the request to ensure we do not disclose data to the wrong person. We will respond within 30 calendar days.

2jbt is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification checks, and we conduct ongoing monitoring to identify accounts that may have been opened by minors.

If you are a parent or guardian and you believe that a minor has created a 2jbt account using your details or their own, please contact us immediately at support@2jbt.ws. We will investigate promptly and, if confirmed, close the account, delete all associated personal data to the extent legally permissible, and refund any real-money deposits that were made.

2jbt operates internationally and your personal data may be processed or stored on servers located outside Pakistan. When we transfer your data to countries outside your jurisdiction, we take steps to ensure that appropriate safeguards are in place to protect your information to the same standard as it would receive under applicable Pakistani data protection principles.

Transfers to third-party service providers such as game studios, fraud detection services, and cloud infrastructure providers are governed by data processing agreements that require those providers to maintain appropriate security standards and use your data only for the specific purposes for which it was shared.

2jbt may contact you with information about promotions, bonuses, new game launches, and other relevant 2jbt offers via email and SMS to your registered Pakistani mobile number. We will only send you marketing communications where you have opted in during registration or where we have a legitimate interest in communicating with you as an existing player.

You can opt out of marketing communications from 2jbt at any time by:

• Clicking the "Unsubscribe" link in any marketing email from 2jbt.
• Updating your notification preferences in your 2jbt account settings.
• Contacting our support team at support@2jbt.ws with a request to be removed from marketing lists.

Please note that opting out of marketing communications does not affect transactional notifications such as deposit confirmations, withdrawal updates, and account security alerts. These are necessary for the operation of your 2jbt account and cannot be disabled.

The 2jbt platform may contain links to the websites or services of third parties, including game providers and payment processors. This Privacy Policy applies only to the 2jbt platform itself and does not cover the privacy practices of any external websites or services.

When you follow a link to a third-party site, we encourage you to review that site's privacy policy before providing any personal information. 2jbt is not responsible for the privacy practices of third parties, even where those third parties provide services integrated into the 2jbt platform.

2jbt may update this Privacy Policy from time to time to reflect changes in our data practices, new features, or evolving legal requirements. When we make material changes, we will notify you via email to your registered address and/or by displaying a prominent notice on the 2jbt platform.

The "Last Updated" date at the top of this page will always indicate when the most recent revision was made. We recommend reviewing this Policy periodically. Your continued use of the 2jbt platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2jbt handles your personal data, our team is available 24 hours a day, seven days a week:

• Email: support@2jbt.ws
• FAQ: Visit our FAQ page for quick answers to common questions about 2jbt accounts and privacy
• Responsible Gaming: For privacy concerns related to your responsible gaming tools and data, visit our Responsible Gaming page

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in accordance with the laws applicable to your jurisdiction. We take all privacy complaints seriously and aim to resolve every query promptly and professionally.

Thank you for trusting 2jbt with your personal data. We do not take that trust lightly, and we are committed to maintaining the highest standards of data protection across every aspect of the platform.