ja88 Privacy
Policy

1. Introduction

ja88 is committed to protecting the privacy and personal data of every player who uses our platform. We recognise that the data you share with us — your name, contact details, payment information, and gaming history — is personal and sensitive, and we treat it accordingly. This Policy is written to be clear and transparent, so that you know precisely what happens to your information when you use ja88.

As an internationally licensed online casino and sports betting platform serving players across Pakistan — from Karachi and Lahore to Islamabad and Faisalabad — ja88 is required under its gaming licence to maintain robust data protection standards as a condition of continued operation. This is not simply a compliance exercise; we genuinely believe that privacy is a player right, not a courtesy.

This Policy applies to all personal data processed by ja88 in connection with your use of the Platform, including data collected through the ja88 website, any ja88 mobile application, live chat, email communications, and payment processing systems.

2. Data Controller

For the purposes of applicable data protection legislation, ja88 is the Data Controller in respect of all personal data collected and processed in connection with the Platform. As Data Controller, ja88 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, and complaints may be directed to ja88 via the contact details set out in Section 15 of this Policy. ja88 will acknowledge all data protection correspondence within five (5) working days and respond substantively within thirty (30) calendar days.

3. Personal Data We Collect

3.1 Registration Data

When you create a ja88 account, we collect the personal information you provide during the registration process:

• Identity Data: Full legal name, date of birth, gender, nationality.
• Contact Data: Pakistani mobile number, email address, residential address.
• Account Credentials: Username, encrypted password (never stored in plain text).
• Verification Documents: CNIC (Computerised National Identity Card) or other government-issued identification provided for KYC purposes.

3.2 Financial Data

• Payment Method Details: JazzCash or EasyPaisa wallet numbers, bank account details (HBL, UBL, Meezan Bank), or other payment credentials used for deposits and withdrawals.
• Transaction History: Records of all deposits, withdrawals, bonuses credited, and wagers placed on the Platform.

3.3 Technical & Usage Data

• Device Information: Device type, operating system version, browser type and version, screen resolution.
• Network Data: IP address, mobile network operator (Jazz, Zong, Telenor, Ufone), approximate geolocation.
• Session Data: Login timestamps, session duration, pages visited, games played, bet history, game outcomes.
• Communication Records: Live chat transcripts, email correspondence, and support ticket history.

3.4 Responsible Gaming Data

Where you voluntarily set responsible gaming controls — including deposit limits, loss limits, session timers, or self-exclusion — ja88 records these preferences as part of our player protection obligations under our gaming licence. This data is used solely to enforce your chosen restrictions and is treated with the highest level of confidentiality.

4. How We Use Your Personal Data

ja88 uses your personal data for the following clearly defined purposes:

5. Legal Basis for Processing

ja88 processes your personal data only where a valid legal basis exists under applicable data protection law. The following bases apply:

• Contractual Necessity: Processing required to perform our agreement with you — including account management, payment processing, and providing gaming services.
• Legal Obligation: Processing required to comply with legal and regulatory requirements, including KYC, AML obligations, and responsible gaming mandates under our gaming licence.
• Legitimate Interests: Processing for fraud detection, platform security, and analytics where ja88's interests do not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications, where you have freely given explicit consent that may be withdrawn at any time.

6. Data Sharing & Third Parties

6.1 When We Share Data

ja88 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited and necessary circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast — to process deposits and withdrawals. These providers receive only the data necessary to complete the specific transaction.
• Identity Verification Services: Third-party KYC providers engaged to verify identity documents and age. All such providers operate under contractual data protection obligations.
• Game Software Providers: MG Live and other licensed game providers receive anonymised session identifiers to enable game functionality. No personal identity data is shared with game providers without your consent.
• Regulatory Authorities: ja88's licensing authority and relevant regulatory bodies where disclosure is required by law or licence condition.
• Fraud & AML Screening: Industry fraud prevention and anti-money laundering screening services, where required under compliance obligations.

6.2 Third-Party Data Processing Agreements

All third-party data processors engaged by ja88 are contractually required to process personal data only on ja88's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of the processing relationship. ja88 does not engage processors who cannot provide adequate data protection guarantees.

7. Cookies & Tracking Technologies

7.1 What Cookies We Use

ja88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies in use are:

• Essential Cookies: Required for the Platform to function — session management, login state, security tokens. Cannot be disabled without preventing platform use.
• Performance Cookies: Collect anonymised data about how pages are used, which features are accessed, and where errors occur — used to improve Platform performance.
• Preference Cookies: Remember your Platform settings such as language preference, display options, and responsible gaming control selections.
• Analytics Cookies: Aggregate, anonymised data on user journeys within ja88 to understand product usage patterns. No individual is identified through analytics data.

7.2 Managing Cookies

You may control non-essential cookies through your browser settings. Note that disabling essential cookies will impair or prevent your ability to log in to and use the ja88 Platform. Mobile browser cookie settings vary by device and browser application — refer to your browser's help documentation for specific instructions.

8. Data Retention

ja88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or our gaming licence obligations:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by AML and gaming licence regulations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute.
• Self-Exclusion Records: Retained indefinitely where a permanent self-exclusion has been applied, to prevent re-registration by the excluded individual.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus three (3) years, to evidence lawful basis for communications sent.

Upon expiry of the applicable retention period, ja88 will securely delete or anonymise personal data in a manner that prevents recovery or reconstruction.

9. Security Measures

ja88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ja88 platform is encrypted using industry-standard SSL/TLS protocols — the same standard applied by Pakistan's major banks including HBL and Meezan Bank.
• At-Rest Encryption: Sensitive personal and financial data stored on ja88 servers is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are hashed using strong one-way cryptographic algorithms. ja88 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Two-Factor Authentication: Optional 2FA via OTP to registered Pakistani mobile numbers provides an additional account security layer.
• Access Controls: Personal data is accessible internally only to staff with a documented need to access it. Access is logged and audited.
• Penetration Testing: ja88 commissions regular third-party security assessments and penetration tests of the Platform and supporting infrastructure.
• Incident Response: ja88 maintains a documented data breach response procedure with defined timelines for assessment, containment, notification, and remediation.

10. Your Privacy Rights

As a ja88 player, you hold the following rights in respect of your personal data. These rights may be exercised by contacting ja88 via the details in Section 15. ja88 will respond to all rights requests within thirty (30) calendar days.

11. Third-Party Links & Services

The ja88 Platform may contain references to third-party services — including payment providers such as JazzCash and EasyPaisa — whose privacy practices are governed by their own separate privacy policies. ja88 is not responsible for the privacy practices or data processing activities of any third-party service provider, and we encourage you to review the privacy policies of any third-party services you use in connection with your ja88 account.

When you make a deposit or withdrawal via JazzCash, EasyPaisa, or any partner bank, the relevant payment provider will process your transaction data according to their own terms. ja88 shares only the minimum data necessary to complete each payment instruction.

12. Children's Privacy

The ja88 Platform is strictly for adults aged 21 years and over. ja88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete all associated data, and report the incident to our licensing authority where required.

13. International Data Transfers

ja88 operates under an international gaming licence, and some personal data processing — including server infrastructure, KYC verification, and fraud screening — may involve transfer of data to countries outside Pakistan. Where such transfers occur, ja88 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan, including through contractual data transfer agreements with all receiving parties.

ja88 does not transfer personal data to countries with materially inadequate data protection standards without first implementing appropriate supplementary safeguards. You may request details of international transfer safeguards applicable to your data by contacting [email protected].

14. Changes to This Privacy Policy

ja88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ja88 will update the "Last Updated" date at the top of this Policy and, where the changes significantly affect your rights, provide notice via the Platform or your registered email address.

Your continued use of the ja88 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this Policy periodically. The most current version will always be available at ja88.bid/privacy-policy.

15. Contact Us — Data & Privacy Enquiries

For all privacy-related questions, Subject Access Requests, marketing opt-out requests, or data protection concerns, please contact ja88 through the following channels:

• Privacy & Data Requests: [email protected] — subject line "Privacy Rights Request"
• General Support: Live Chat available 24/7 directly on the ja88 Platform
• Response Timeline: Acknowledgement within 5 working days; substantive response within 30 calendar days
• Terms of Service: Terms & Conditions page
• Responsible Gaming: Responsible Gaming page