1jjo Privacy Policy

1.1 1jjo is an internationally licensed online gaming platform operating under the brand name "1jjo" and accessible at 1jjo.org. The platform is operated by the 1jjo operating entity ("the Company"), which acts as the data controller in respect of all personal data collected from players through the platform.

1.2 As the data controller, 1jjo determines the purposes and means of processing personal data collected through the platform. All data processing activities are conducted in accordance with this Policy and applicable data protection regulations.

1.3 For any privacy-related enquiries, data subject access requests, or complaints, players may contact the 1jjo Data Protection team using the contact details published in Section 12 of this Policy.

2.1 Registration & Identity Data. When you create a 1jjo account, we collect the following personal information:

• Full legal name as it appears on your identity document;
• Date of birth (used for age verification — players must be 21+);
• Pakistani Computerised National Identity Card (CNIC) number or passport number;
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad) and postal code;
• Mobile phone number (Pakistan format);
• Email address.

2.2 KYC Verification Data. To comply with our anti-money laundering (AML) obligations and to process withdrawal requests, we may collect:

• Scanned or photographed copy of CNIC (front and back) or valid passport;
• Proof of address documents (utility bill, bank statement dated within 90 days);
• Proof of payment method ownership (screenshot of JazzCash or EasyPaisa account, bank statement header);
• Selfie photograph for identity matching purposes.

2.3 Financial & Transaction Data. We collect records of all financial transactions conducted on your 1jjo account, including deposit amounts, withdrawal requests, payment method references (JazzCash transaction IDs, EasyPaisa mobile numbers, bank account numbers), transaction timestamps, and currency amounts in PKR.

2.4 Gaming Activity Data. We collect records of all gaming sessions, including games played, bet amounts, game outcomes, session durations, responsible gaming tool usage, and bonus activity. This data is used for regulatory compliance, dispute resolution, and fraud prevention.

2.5 Technical & Device Data. We automatically collect technical information when you access the platform, including IP address, device type and operating system, browser type and version, screen resolution, time zone, and session timestamps.

2.6 Communications Data. If you contact 1jjo support via live chat, email, or any other channel, we retain records of those communications, including content, timestamps, and resolution outcomes.

1jjo collects personal data through the following channels:

• Directly from you — during account registration, KYC submission, deposits, withdrawal requests, support interactions, and any form completions on the platform;
• Automatically — through cookies, server logs, and analytics tools as you navigate and use the platform;
• From third parties — identity verification agencies, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud prevention services, and anti-money laundering screening providers, where necessary to fulfil our legal obligations.

1jjo processes your personal data on the following legal bases:

1jjo uses your personal data for the following specific purposes:

• Account creation and management: to create, maintain, and administer your 1jjo player account and associated wallet;
• Identity verification: to confirm your identity and age (21+) in compliance with KYC requirements before processing withdrawals;
• Payment processing: to process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to verified payment accounts;
• Regulatory compliance: to fulfil obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulations;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other security threats;
• Responsible gaming: to monitor gaming behaviour patterns that may indicate problem gambling and to administer self-exclusion, cooling-off, and limit-setting tools;
• Customer support: to respond to, resolve, and record support enquiries and disputes;
• Platform improvement: to analyse aggregate usage patterns and improve the platform's functionality, performance, and user experience;
• Marketing communications: where you have explicitly consented, to send relevant promotional offers and platform updates to your registered email or mobile number.

6.1 1jjo does not sell, rent, or license your personal data to third parties for their own commercial purposes. Your data is shared only in the circumstances described in this section.

6.2 Payment Processors. Your financial transaction data is shared with the payment service providers you select (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) solely to the extent necessary to process your transactions. Each of these providers operates under its own privacy policy.

6.3 Identity Verification Providers. We use third-party KYC and AML service providers to assist in verifying your identity and screening against international sanctions and politically exposed persons (PEP) lists. These providers process only the data required for verification and are contractually prohibited from using it for any other purpose.

6.4 Fraud Prevention Services. We may share device fingerprint data, IP addresses, and transaction patterns with fraud prevention networks to detect and prevent account takeover, payment fraud, and multi-accounting.

6.5 Regulatory Bodies & Law Enforcement. We may disclose your personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory directive. We are not required to notify you in advance of such disclosures where prohibited by law.

6.6 Service Providers. We engage third-party service providers for functions such as cloud hosting, data analytics, customer support platform operation, and email delivery. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to 1jjo.

6.7 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of the platform operator, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account.

7.1 1jjo retains personal data for as long as is necessary to fulfil the purposes described in Section 5, or as required by applicable law, whichever is longer.

7.2 The following indicative retention periods apply:

7.3 Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with 1jjo's data destruction procedures.

8.1 1jjo implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in transit: All communications between your device and the 1jjo platform are encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive stored data, including identity documents and payment information, is encrypted using AES-256;
• Access controls: Platform and database access is restricted on a strict need-to-know basis with role-based access controls and multi-factor authentication for administrative accounts;
• Intrusion detection: Automated security monitoring systems operate continuously to detect and respond to potential security threats;
• Third-party penetration testing: Regular security assessments are conducted by independent external security professionals;
• Employee training: All 1jjo staff with access to personal data receive regular data protection and security training.

8.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 1jjo will notify affected players without undue delay via the email address registered to their account, providing details of the nature of the breach, the data likely affected, and the steps being taken in response.

9.1 1jjo uses cookies and similar tracking technologies to operate and improve the platform. A "cookie" is a small text file stored on your device by your browser when you visit the platform.

9.2 The following categories of cookies are used on the 1jjo platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security cookies, and load balancing cookies. These cannot be disabled without disabling the platform itself.
• Functional Cookies: Remember your preferences (such as language settings and game lobby filters) between sessions to improve your experience.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the platform, to help us identify areas for improvement. Aggregate data only — no individual player profiles are created.
• Fraud Prevention Cookies: Used to help identify and prevent fraudulent activity, including device fingerprinting to detect multi-accounting.

9.3 1jjo does not deploy advertising cookies or permit third-party advertising networks to place cookies on the 1jjo platform. You may manage cookie preferences through your browser settings, noting that disabling strictly necessary cookies will impair platform functionality.

As a player whose personal data is processed by 1jjo, you hold the following rights, subject to applicable legal limitations:

To exercise any of the above rights, contact the 1jjo Data Protection team as described in Section 12. We will respond to all verifiable requests within thirty (30) days. Where requests are complex or numerous, we may extend this period by a further thirty (30) days with notice.

11.1 The 1jjo platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals below the age of 21. Age verification is conducted as part of the KYC process for all player accounts.

11.2 If 1jjo becomes aware that personal data has been collected from an individual below the age of 21, the associated account will be closed immediately, all gaming activity will be voided, and the personal data will be securely deleted except where retention is required by law or for the purposes of preventing further under-age registrations.

11.3 If you are a parent or guardian and believe your minor child may have registered with 1jjo, please contact us immediately using the details in Section 12 so that we can take appropriate action without delay.

12.1 Policy Updates. 1jjo reserves the right to update or amend this Privacy Policy at any time. When material changes are made, players will be notified via the email address registered to their account and through a notice displayed on the platform. The revised policy will take effect from the date of notification. Continued use of the platform after notification constitutes acceptance of the updated policy.

12.2 Governing Version. In the event of any discrepancy between translated or summarised versions of this Policy and the English language version, the English language version shall prevail.

12.3 Contact. For any privacy-related enquiries, data subject rights requests, or concerns about how 1jjo handles your personal data, please contact the 1jjo Data Protection team. Contact details are available in the platform's Help Centre and via the Support section accessible from any page footer. All privacy-related correspondence should be addressed to the data protection contact email published in the platform.

12.4 Supervisory Authority. If you are not satisfied with our response to a privacy complaint or believe we are not processing your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory data protection authority in your jurisdiction or the jurisdiction in which the platform holds its operating licence.