Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how j2bit ("j2bit", "we", "us", "our") collects, processes, uses, stores, discloses and protects personal data relating to users ("User", "you", "your") of the j2bit platform, accessible at https://j2bit.cam and any associated mobile applications or services (collectively, the "Platform").

j2bit is a mobile-first online gaming and sports betting information platform designed for adult users in Pakistan and internationally. We take the privacy of our users seriously. This Policy is intended to be clear, specific and honest about our data practices — not a collection of vague assurances.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. By accessing or using the Platform, you acknowledge that you have read this Policy and agree to the processing of your personal data as described herein.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

j2bit collects only the personal data reasonably necessary to operate the Platform, fulfil compliance obligations, provide support and improve user experience. We do not collect data speculatively or for purposes unrelated to the Platform's core functions. The categories of data we may collect are set out below.

j2bit does not knowingly collect sensitive personal data (such as biometric data, health data or religious information) other than where strictly required by applicable KYC or AML obligations, in which case such data is collected and retained only to the minimum extent necessary for compliance purposes.

Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing Personal Data, j2bit relies on one or more of the following bases depending on the specific processing activity:

How We Use Your Personal Data

j2bit uses Personal Data collected through the Platform for the following purposes. Data is not used for purposes incompatible with those described without prior notice or, where required, consent.

• Account Management: Creating, verifying and managing your Account, including processing registration data and maintaining accurate Account records.
• Identity & Age Verification (KYC): Confirming your identity and age to comply with applicable requirements. For Pakistani users this typically involves CNIC or passport verification.
• Transaction Processing: Facilitating deposits and withdrawals, recording transaction histories in PKR or applicable currency, and conducting AML screening on financial activity.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent, abusive or harmful activity on the Platform, including collusion, multiple Account abuse and bonus exploitation.
• Customer Support: Responding to support requests submitted via Live Chat, the Help Centre or email. Support is provided in English; Urdu assistance may be available through select channels.
• Responsible Gambling: Monitoring usage patterns to identify potential indicators of problem gambling and enabling responsible gambling tools such as deposit limits, loss limits, time reminders and self-exclusion.
• Platform Improvement: Analysing aggregated usage data to understand how the Platform is used, identify technical issues, and improve content, navigation and mobile performance for Pakistani users.
• Legal & Regulatory Compliance: Retaining records as required by applicable law, responding to lawful regulatory requests and cooperating with competent authorities as required.
• Marketing Communications: Where you have opted in to receive promotional communications, sending relevant offers, bonus updates and platform news. You may opt out at any time through your Account settings or by contacting support.

Data Sharing & Disclosure

j2bit does not sell, rent or trade your Personal Data to third-party advertisers or marketing brokers. Data is shared only in the circumstances described below, and only to the extent necessary for the specified purpose.

Cookies & Tracking Technologies

j2bit uses cookies and similar tracking technologies (including web beacons, pixel tags and local storage) to operate the Platform, maintain session state, analyse usage, personalise content and support fraud-prevention measures.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect Platform functionality. For analytics and marketing cookies, consent can be withdrawn through the cookie preference centre accessible in the Platform footer. Note that browser-level cookie blocking applies across all sites and is independent of j2bit's consent mechanisms.

Data Retention

j2bit retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention principles apply:

• Active Accounts: Personal Data is retained throughout the lifetime of an active Account and for a defined period thereafter to facilitate Account re-activation requests and resolve any outstanding matters.
• KYC & AML Records: Identity verification documents and AML-related transaction records are retained for the period required by the Operator's licence conditions and applicable anti-money laundering law — typically five (5) years from the date of last transaction or Account closure, whichever is later.
• Financial Transaction Records: Deposit and withdrawal histories are retained for a minimum of five (5) years to satisfy financial record-keeping obligations.
• Self-Exclusion Records: Records of self-exclusion requests are retained for the duration of the exclusion period and for a reasonable period thereafter to prevent circumvention of self-exclusion through re-registration.
• Support Communications: Support ticket and Live Chat records are retained for a reasonable period following resolution for quality, compliance and dispute-resolution purposes.
• Marketing Preferences: Records of marketing opt-in and opt-out choices are retained for as long as necessary to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Where anonymisation is not technically feasible, data is restricted from active use until deletion is possible.

Data Security

j2bit implements technical and organisational security measures appropriate to the risk level of the data processed. These measures include, but are not limited to:

• HTTPS/TLS encryption for all data transmitted between the Platform and your device;
• Encryption of sensitive data at rest, including password hashing using industry-standard algorithms;
• Role-based access controls limiting staff access to Personal Data to those with a documented operational need;
• Regular security assessments and vulnerability monitoring of Platform infrastructure;
• Incident response procedures for detecting, reporting and responding to personal data breaches;
• Contractual security requirements imposed on all Third-Party Service Providers handling Personal Data.

International Data Transfers

j2bit operates as a global platform. In the course of providing services to Pakistani and international users, Personal Data may be transferred to, stored in, or processed in jurisdictions outside Pakistan — including countries where j2bit's hosting infrastructure or Third-Party Service Providers are located.

Where such transfers occur, j2bit takes steps to ensure that an appropriate level of data protection is maintained — including through the use of contractual safeguards such as standard data processing agreements that require recipient parties to protect Personal Data to a standard equivalent to that applied by j2bit.

j2bit does not represent that international data transfers involving Pakistan are governed by specific Pakistani data protection legislation. Users should be aware that data protection standards vary internationally. If you have concerns about international data transfers affecting your Personal Data, contact j2bit through the channels described in Section 15.

Your Rights as a Data Subject

Depending on applicable data protection law and the specific circumstances of processing, you may have the following rights in relation to your Personal Data held by j2bit. j2bit will respond to valid rights requests within a reasonable timeframe and in accordance with applicable law.

To exercise any of the above rights, submit a written request to j2bit via the email address in Section 15. j2bit may require verification of your identity before processing a rights request to prevent disclosure of data to unauthorised parties. Where a request is refused, j2bit will provide reasons for the refusal and information about available remedies.

Certain rights are subject to limitations — for example, the right of erasure does not apply where j2bit is required to retain data by applicable law (such as AML record-keeping obligations). j2bit will clearly communicate any applicable limitations in its response.

Children's Privacy

The Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the Operator's licence jurisdiction. j2bit does not knowingly collect, process or retain Personal Data from persons under the applicable minimum age.

If j2bit becomes aware that Personal Data has been collected from a minor — whether through mis-stated age at registration or otherwise — that Account will be suspended pending verification, and any associated data will be deleted as soon as practicable following identification of the breach, except where retention is required for legal or investigative purposes.

Third-Party Links & Services

The Platform may reference or provide links to third-party services, products or websites — including payment processors, sports data providers and game content suppliers. j2bit does not operate or control these third-party services and is not responsible for their privacy practices.

Payment processors referenced on the Platform — including those handling transactions via channels familiar to Pakistani users such as bank transfer, mobile money or digital wallet services — operate under their own privacy policies and data processing terms. When you interact with a payment processor's service, your data is subject to that processor's privacy terms, not solely this Policy.

j2bit recommends that you review the privacy policies of any third-party service you engage with in connection with your Platform use.

Amendments to This Policy

j2bit reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material — for example, a change in the categories of data collected, a new sharing arrangement, or a change in processing purpose — j2bit will endeavour to notify registered Users via the Platform or their registered email address.

Your continued use of the Platform following the posting of a revised Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept a material change to this Policy, you may request Account closure through the Help Centre.

Contact Us

For any questions, concerns, data subject rights requests or complaints relating to this Privacy Policy or j2bit's data processing practices, contact us through the channels below. Email addresses are displayed as plain text only and are not clickable links.

j2bit aims to respond to all privacy-related requests within thirty (30) days. Complex requests may require additional time; j2bit will communicate expected timelines where a response cannot be provided within the standard window.