Privacy Policy – 2jba Pakistan Online Gaming Platform

1 Introduction

This Privacy Policy applies to the 2jba platform in full — that includes the 2jba website at 2jba.win, the 2jba Android app, and any related services accessible through your 2jba account. When we say "2jba", "we", "us" or "our" in this document, we are referring to the operator of the 2jba platform.

By creating a 2jba account and using the platform, you are accepting the practices described in this Privacy Policy. If you have any concerns about how your data is handled, please read this policy in full before registering. This policy should be read alongside the Terms and Conditions.

We built 2jba specifically for Pakistani players, and that context shapes how we handle data. Your payment details — JazzCash wallet numbers, Easypaisa mobile accounts, bank account information — are treated with the same care as any other sensitive personal data. KYC documents submitted on 2jba are processed for identity verification only and are not used for any other purpose.

2 Data We Collect

The personal data we collect from you falls into a few clear categories, depending on how you interact with the 2jba platform.

We do not collect sensitive personal data beyond what is listed above. We do not ask for your religion, ethnicity, political views or any other category of sensitive information.

3 How We Use Your Data

Every piece of data we collect has a specific reason behind it. Here is how your information is actually used on the 2jba platform:

• Account management: Your registration details are used to create, maintain and secure your 2jba account. Your mobile number is used for OTP verification and account recovery.
• Identity verification (KYC): Your CNIC details are used to confirm your identity before significant withdrawals are processed, and to ensure each player holds only one account.
• Payment processing: Your payment details are used solely to process deposits and withdrawals in PKR through your chosen method — JazzCash, Easypaisa, Raast, bank transfer or card.
• Platform security and fraud prevention: Technical and usage data helps us detect suspicious activity, prevent account takeover attempts, identify bonus abuse and protect the integrity of the platform.
• Customer support: Communication records are used to resolve your queries, investigate complaints and improve the support experience.
• Platform improvement: Aggregated, anonymised usage data helps us understand how players interact with the game lobby, which features are popular and where the experience can be improved.
• Responsible gaming: Usage patterns may be monitored to identify signs of problematic gaming behaviour so we can offer timely support tools or intervention.
• Marketing communications: Only where you have opted in, your contact details may be used to send you updates on promotions, bonuses and platform news. You can opt out at any time.

4 Legal Basis for Processing

We process your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing your registration data, KYC documents and payment information is necessary to fulfil our obligations to you as a 2jba account holder under the Terms and Conditions.
• Legitimate interests: Platform security, fraud prevention, anti-money laundering checks and responsible gaming monitoring are carried out in the legitimate interests of the platform and its users.
• Consent: Marketing communications are only sent where you have given explicit, informed consent. You may withdraw this consent at any time.
• Legal obligations: In certain circumstances we may be required to process or retain data to comply with applicable legal obligations, including financial crime reporting requirements.

5 Payment Data and Financial Information

Given that all transactions on 2jba are conducted in PKR using local Pakistani payment channels, we want to be especially clear about how financial data is handled.

When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, debit card or a mobile wallet, your payment details are transmitted through encrypted channels to the relevant payment processing partner. 2jba does not store full card numbers, complete bank account credentials or mobile wallet PINs on its own servers.

• Transaction records — amounts, timestamps, payment method type — are retained in your account history for auditing and dispute resolution purposes.
• Your registered payment method is stored as a reference for withdrawal matching — for example, the last four digits of a card or a partial wallet number — to ensure funds are returned to the correct account.
• Payment data is never shared with any third party for their own commercial purposes.
• Suspicious transaction patterns may be flagged for manual review as part of our anti-fraud and AML obligations.

6 Data Sharing with Third Parties

2jba does not sell your personal data to any third party. Data sharing is limited to the specific operational circumstances described below, and only to the extent necessary for those purposes.

• Payment processors: Your payment details are shared with the relevant payment service provider — JazzCash, Easypaisa, your bank or card network — solely to process the transaction you have requested.
• Identity verification services: KYC document data may be processed by a third-party verification partner operating under strict data handling obligations to 2jba.
• Game content providers: When you play a live casino or third-party game within the 2jba lobby, a session identifier may be shared with the game provider for the purposes of running the game. This is typically anonymised or pseudonymised.
• Technical infrastructure: Cloud hosting and database services used by 2jba operate under contractual data processing agreements that restrict their use of your data.
• Legal and regulatory: In exceptional circumstances, we may be required to share data with law enforcement or regulatory authorities in response to a lawful request. We will only do so to the extent legally required.

All third parties that handle your data on behalf of 2jba are bound by data processing agreements that prohibit them from using your data for their own purposes.

7 Data Retention

We only keep your personal data for as long as is genuinely necessary for the purpose it was collected. The following principles apply to how long we retain different categories of data:

• Active account data — including your profile information and transaction history — is retained for as long as your 2jba account remains open and active.
• KYC documents are retained for a minimum of five years from the date of submission or account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records are retained for a minimum of five years for audit and financial record purposes.
• Support and communication records are retained for up to three years from the date of the interaction.
• Marketing consent records are retained until you withdraw consent, plus a reasonable period for audit trail purposes.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

8 How We Keep Your Data Secure

Data security is an operational priority at 2jba, not just a compliance checkbox. The following technical and organisational measures are in place to protect your personal information:

• SSL/TLS encryption on all data transmitted between your device and the 2jba platform, including during login, deposit and withdrawal flows.
• Password hashing — your account password is never stored in plain text. Only a secure, salted hash is retained.
• OTP verification for account registration, password resets and sensitive account changes.
• Access controls — internal access to personal data is restricted to authorised personnel on a need-to-know basis.
• Automated fraud and anomaly detection monitors for unusual login patterns, unexpected device changes or high-risk transaction behaviour.
• Regular security reviews of platform infrastructure, access logs and third-party integrations.

9 Cookies and Tracking

The 2jba website and platform use cookies and similar technologies to make the site function correctly and to improve your experience. Here is a straightforward breakdown of the cookies we use:

• Essential cookies: Required for the platform to function — session management, login state, security tokens. You cannot opt out of these without stopping use of the platform.
• Preference cookies: Remember your settings and preferences across sessions, such as your preferred language or game filter settings.
• Analytics cookies: Aggregate, anonymised data about how players navigate the platform — which pages are visited, where sessions end, how features are used. This data does not identify you personally.
• Marketing cookies: Only present where you have opted in to marketing communications. Used to make promotional content more relevant to your interests on the 2jba platform.

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect your ability to use the platform normally. Blocking other cookie types will not affect core functionality.

10 Your Privacy Rights

As a 2jba account holder, you have meaningful rights over your personal data. These rights can be exercised by contacting 2jba support at any time.

To exercise any of these rights, contact our support team by email or live chat. We will respond within a reasonable period, typically within 30 days, and will not charge a fee for legitimate requests.

11 Minors and Under-18 Protection

2jba is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older, and KYC verification via CNIC is used to confirm this for accounts involved in significant financial activity.

If we become aware that personal data has been submitted by or on behalf of a minor, that account will be suspended immediately and any associated data will be reviewed and deleted where appropriate. Any funds deposited on an account confirmed to belong to a minor will be handled in accordance with our Terms and Conditions.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time as the platform evolves, as new features are added, or as legal requirements change. When we make material changes, registered account holders will be notified through the platform or via their registered contact details.

The "Last updated" date at the top of this page reflects when the most recent revision was made. We encourage you to review this policy periodically. Continued use of the 2jba platform after a policy update constitutes your acceptance of the revised terms.

Minor changes — such as clarifications of existing language or corrections of typographical errors — may be made without formal notification but will always be reflected in the updated date on this page.

13 Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, please get in touch with our support team.

• Live Chat: Available within the 2jba platform and app. This is the fastest way to get a response, particularly during Pakistan evening hours when our team is most active.
• Email: [email protected] — please include your registered mobile number (partial is fine) and a brief description of your query so we can look into it efficiently.
• FAQ: Common privacy questions may already be answered in our FAQ section.

We aim to acknowledge all privacy-related queries within 24 hours. Formal data subject requests — such as access, erasure or portability requests — will be handled within 30 days of receipt, or we will notify you if additional time is needed.