8jjj Privacy Policy — How We Collect, Use & Protect Your Personal Data

For the purposes of this Privacy Policy, the data controller responsible for the personal data of 8jjj Platform users is 8jjj, the operator of the online casino and sports betting platform accessible at 8jjj.biz ("the Platform").

8jjj operates under international gaming licensing regulations and processes personal data in accordance with its obligations under applicable data protection law and the regulatory requirements imposed by its licensing authority.

All data protection enquiries, subject access requests, and privacy complaints should be directed to the 8jjj Data Protection contact point: [email protected], with the subject line "Data Protection Request".

8jjj collects and processes the following categories of personal data from Players and Platform visitors. The specific data points collected depend on the nature of your interaction with 8jjj:

• Full legal name as appearing on government-issued identification.
• Date of birth — required to confirm minimum age eligibility of 21 years.
• Pakistani mobile telephone number — used for OTP verification and account communications.
• Chosen username and password (stored in hashed, non-recoverable form).
• Residential address — collected at account verification stage.

• Copy of Pakistani CNIC (Computerized National Identity Card) or valid passport — front and reverse, as applicable.
• Proof of residential address — recent utility bill or bank statement where required.
• Source of funds documentation — where requested by the 8jjj compliance team for AML purposes.

• JazzCash or EasyPaisa mobile wallet identifiers associated with deposits and withdrawals.
• Pakistani bank account details provided for bank transfer transactions (HBL, UBL, Allied Bank, Meezan Bank).
• Cryptocurrency wallet address provided for USDT TRC20 transactions.
• Deposit history, withdrawal history, and net account balance records.

• Complete game session logs — game played, bet amount, result, RTP performance, session duration.
• Sports betting records — markets selected, stakes placed, odds accepted, settlement outcomes.
• Responsible Gaming settings applied — deposit limits set, session limits configured, cooling-off periods activated.
• Bonus and promotion participation records — offers claimed, wagering progress, expiry outcomes.

• IP address — used for geographic access verification and fraud detection.
• Device type, operating system, and browser version — collected automatically on Platform access.
• Session timestamps, login history, and geographic login patterns.
• Cookie identifiers and session tokens — see Section 9 for full cookie policy.

• Content of live chat conversations with 8jjj support agents — retained for training and dispute resolution purposes.
• Email correspondence submitted to [email protected].
• Records of notifications sent to the Player by 8jjj and delivery/read status where available.

8jjj collects personal data through the following mechanisms:

• Directly from you: Information provided during account registration, identity verification submissions, deposit and withdrawal requests, support interactions, and voluntary communications to 8jjj.
• Automatically: Technical and device data collected by the Platform's servers and analytics infrastructure on each visit, login, and game session — including IP address, device fingerprint, and session metadata.
• From payment providers: Transaction confirmation data returned by JazzCash, EasyPaisa, participating Pakistani banks, and USDT processing infrastructure — limited to transaction reference, amount, and timestamp.
• From identity verification services: Where 8jjj employs third-party KYC verification services, confirmation data returned by those services regarding identity document authenticity and cross-reference results.
• From fraud prevention systems: Device reputation, IP reputation, and behavioural risk signals provided by 8jjj's fraud prevention infrastructure in connection with account access and payment processing events.

8jjj processes personal data on the following legal bases, depending on the specific processing activity:

8jjj uses the personal data it collects for the following specific purposes:

• To create, maintain, and operate your 8jjj Account, including processing your deposits, withdrawals, bonus credits, and gaming activity.
• To verify your identity and age eligibility as required by 8jjj's operating license and anti-money laundering obligations — including the mandatory 21+ age verification requirement.
• To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other prohibited conduct set out in the 8jjj Terms & Conditions.
• To monitor gaming behaviour for Responsible Gaming indicators — including unusual betting patterns, extended session durations, and escalating deposit amounts that may indicate problem gambling — and to take appropriate Player protection actions where indicated.
• To respond to your support requests, resolve disputes, and provide account assistance via live chat and email channels.
• To send you service communications essential to your account — including transaction confirmations, security alerts, and material policy updates. These communications are not optional and cannot be unsubscribed from while your account remains active.
• To send promotional communications about 8jjj offers, new games, and betting opportunities — where you have provided consent for such communications. You may withdraw consent at any time.
• To comply with requests from regulatory authorities, law enforcement agencies, courts, or other governmental bodies as required by applicable law.
• To improve the Platform's technical performance, user experience, and game offering — using aggregated and anonymised analytics data.

8jjj does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. Personal data is shared with third parties only in the following specific circumstances:

• Payment Processors: JazzCash, EasyPaisa, participating Pakistani banks (HBL, UBL, Allied Bank, Meezan Bank), SadaPay, and cryptocurrency processing infrastructure — strictly the minimum data necessary to process your deposit or withdrawal transaction.
• Identity Verification Providers: Third-party KYC service providers engaged by 8jjj to verify identity document authenticity. These providers process identity data solely for the verification purpose and are bound by contractual data protection obligations.
• Game Content Providers: Licensed game studios whose games are hosted on the 8jjj Platform may receive anonymised session identifiers for game performance and technical troubleshooting purposes. Game providers do not receive personally identifiable Player information.
• Fraud Prevention Services: Third-party fraud detection providers that analyse device and behavioural signals to identify suspicious access patterns. Data shared is limited to technical identifiers and does not include payment account details.
• Legal and Regulatory Authorities: Where required by a court order, regulatory directive, law enforcement request, or applicable legal obligation, 8jjj will disclose personal data to the relevant authority. We will notify affected Players of such disclosures where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or sale of substantially all of 8jjj's assets, personal data held by 8jjj may be transferred to the acquiring entity, provided that entity commits to maintaining equivalent data protection standards.

8jjj's platform infrastructure and some of its third-party service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred to a jurisdiction that does not maintain an equivalent level of data protection to applicable international standards, 8jjj ensures that such transfers are subject to appropriate safeguards, including:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules applicable to intra-group data transfers.
• Adequacy determinations where applicable to the recipient jurisdiction.

By using 8jjj Services, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan in the manner described in this Policy.

8jjj retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following minimum retention requirements:

Following expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8jjj uses cookies and similar tracking technologies when you access the Platform. A cookie is a small data file placed on your device that enables the Platform to recognise your browser and remember certain information about your session or preferences.

• Essential Cookies: Required for core Platform functionality — maintaining your login session, remembering your language preference, and enabling secure account access. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences within the Platform — such as preferred game categories, responsible gaming settings display, and lobby layout preferences — to improve your experience on return visits.
• Analytics Cookies: Collect anonymised information about how Players use the Platform — pages visited, features used, session duration — to help 8jjj improve performance and identify usability issues. Data is aggregated and cannot be used to identify individual users.
• Security Cookies: Used by 8jjj's fraud prevention and session security systems to detect and prevent unauthorised access attempts, identify suspicious device patterns, and protect account integrity.

You may configure your browser settings to refuse non-essential cookies or to alert you when cookies are being set. Please note that disabling essential cookies will impair Platform functionality and may prevent you from logging in to your 8jjj Account. Specific cookie management instructions vary by browser — refer to your browser's help documentation for guidance.

8jjj implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and 8jjj servers is protected using 256-bit SSL/TLS encryption — the same standard used by international banking institutions.
• Encryption at rest: Sensitive personal data — including identity documents, payment details, and password hashes — is stored in encrypted form on 8jjj's infrastructure.
• Access controls: Access to systems holding personal data is restricted to authorised 8jjj personnel with a legitimate operational need, enforced through role-based access control and multi-factor authentication.
• Security monitoring: 8jjj's infrastructure is subject to continuous security monitoring for intrusion attempts, anomalous access patterns, and data exfiltration indicators.
• Vendor security assessments: Third-party service providers with access to personal data are subject to security due diligence assessments before engagement and ongoing contractual security obligations.

Subject to applicable law and the limitations described below, you have the following rights in respect of personal data held about you by 8jjj. All rights requests should be submitted to [email protected] with the subject line "Data Rights Request" and will be responded to within thirty (30) calendar days.

• Right of Access: You may request confirmation of whether 8jjj holds personal data about you and, if so, a copy of that data together with information about how it is processed.
• Right to Rectification: You may request correction of any personal data held by 8jjj that is inaccurate or incomplete. Some corrections may require documentary evidence.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, where you have withdrawn consent, or where processing is unlawful — subject to 8jjj's legal retention obligations, which may require certain data to be retained notwithstanding an erasure request.
• Right to Restriction: You may request that 8jjj restrict the processing of your personal data in defined circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract, and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on 8jjj's legitimate interests. Processing will cease unless 8jjj can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

8jjj's Services are strictly restricted to persons aged 21 years or older. 8jjj does not knowingly collect personal data from individuals below the minimum age of 21. Age verification is applied during registration and at the point of withdrawal processing.

If 8jjj becomes aware that personal data has been collected from an individual below the minimum age, that data will be deleted and the associated Account will be immediately terminated. Any deposits made by an underage player will be returned via the original payment method.

We request that adults with minors in their household take appropriate steps to prevent access to 8jjj and similar platforms, including the use of available internet content filtering tools.

The 8jjj Platform may contain references or links to third-party content, services, or payment platforms. This Privacy Policy applies exclusively to data processed by 8jjj in connection with your use of the 8jjj Platform. 8jjj is not responsible for the privacy practices or data handling standards of third-party platforms, including payment processors, game content providers, or any other external services accessed via links on the 8jjj Platform.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of 8jjj — including JazzCash, EasyPaisa, and your nominated bank — to understand how those services handle your personal data independently of 8jjj.

8jjj reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform operations. The following process applies to Policy changes:

• Material changes — those that meaningfully affect your data rights or how your data is used — will be communicated to registered Players via the mobile number or email address associated with their Account at least seven (7) calendar days before taking effect.
• The updated Policy will be published on this page with a revised "Last Updated" date. Continued use of 8jjj Services after the effective date of any revision constitutes acceptance of the amended Policy.
• Non-material changes — clarifications, formatting corrections, and updates that do not affect your substantive data rights — may take effect immediately on publication.
• A version history of this Policy is maintained internally and is available on request by submitting a "Policy Version Request" to [email protected].

If you have any questions about this Privacy Policy, wish to exercise a data right, have a concern about how 8jjj handles your personal data, or wish to lodge a formal privacy complaint, please contact us through the following channels:

• Email: [email protected] — subject line "Data Protection Request" for rights requests; "Privacy Complaint" for formal complaints.
• Live Chat: Available 24/7 via the 8jjj website — for urgent account security concerns or immediate data protection queries, live chat provides the fastest response.

8jjj will acknowledge data protection requests within five (5) business days and provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend the response period by a further thirty (30) days, in which case we will notify you of the extension and reason within the initial thirty-day period.