Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how jj66 ("we", "us", "our", "jj66"), the operator of the platform accessible at https://jj66.cam, collects, processes, stores, shares and protects personal data relating to registered users, visitors and any other individuals who interact with the jj66 platform ("you", "User", "Player").

jj66 is committed to handling your personal data responsibly and in accordance with applicable data protection legislation. By registering an account or otherwise using the jj66 platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use jj66.

2. Definitions

In this Policy the following definitions apply:

• "Account" — the registered user account created by an eligible individual on jj66.
• "Controller" — the entity that determines the purposes and means of processing personal data; for jj66, this is the platform operator.
• "Data Subject" — any identified or identifiable natural person whose personal data is processed by jj66.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, IP address, device identifiers and financial information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Processor" — a third party that processes personal data on behalf of jj66 under a contractual arrangement.
• "Sensitive Data" — a subset of personal data that warrants enhanced protection, including identity documents, financial records and biometric data collected during KYC verification.

3. Data Controller

jj66 acts as the Data Controller for personal data collected through the platform at https://jj66.cam. The Controller is responsible for determining the purposes for which, and the manner in which, any personal data is or is to be processed. Enquiries relating to data controllership may be directed to the contact details set out in Section 18 of this Policy.

4. Data We Collect

4.1 Registration Data

When you create a jj66 account, we collect information you provide directly, which may include:

• Full legal name;
• Date of birth;
• Email address;
• Mobile telephone number;
• Country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
• Chosen username and encrypted password.

4.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, we may collect:

• Copies of government-issued identity documents (Pakistani CNIC, passport);
• Proof of address documents;
• Selfie or liveness-check images for biometric matching.

4.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests and payment method references. We do not store full payment card numbers; card data is handled by PCI-DSS compliant payment processors. Payment method references may include familiar Pakistani services such as Easypaisa, JazzCash, Raast or bank transfer details; these are recorded for transactional and compliance purposes only.

4.4 Technical & Usage Data

We automatically collect technical data when you access jj66, including:

• IP address and geolocation data derived therefrom;
• Device type, operating system and browser;
• Session duration, pages visited and features accessed;
• Cookies and similar tracking technologies (see Section 10).

4.5 Communications Data

Records of communications between you and jj66 support — via live chat, email or the Help Centre — are retained for training, quality assurance and dispute resolution purposes.

5. Legal Basis for Processing

jj66 processes personal data on the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract
Identity verification (KYC)	Legal obligation; performance of contract
Payment processing and fraud prevention	Legal obligation; legitimate interests
Anti-money laundering (AML) controls	Legal obligation
Customer support communications	Performance of contract; legitimate interests
Platform analytics and performance improvement	Legitimate interests
Marketing communications	Consent (withdrawable at any time)
Responsible gambling monitoring	Legal obligation; legitimate interests

6. How We Use Your Data

jj66 uses your personal data for the following purposes:

• Creating, maintaining and securing your jj66 Account;
• Verifying your identity and age in compliance with KYC requirements;
• Processing deposits, withdrawals and bonus payments;
• Detecting and preventing fraud, money laundering and account abuse;
• Providing personalised platform experiences and relevant content;
• Delivering customer support via live chat, email and the Help Centre;
• Sending account-related notifications (transaction confirmations, security alerts);
• Sending promotional communications where you have provided explicit consent;
• Monitoring responsible gambling indicators and enforcing account limits;
• Complying with applicable legal, regulatory and audit obligations;
• Improving platform performance, fixing technical issues and developing new features.

7. Data Sharing & Disclosure

jj66 does not sell, rent or trade your personal data to third parties for commercial marketing purposes. We may share personal data in the following limited circumstances:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors, identity verification providers, cloud hosting services, fraud detection tools and analytics platforms. All processors are required to implement appropriate technical and organisational security measures.

7.2 Legal and Regulatory Obligations

We may disclose personal data to governmental authorities, law enforcement agencies, courts or regulators when required by applicable law, a court order or a valid regulatory request. We will notify you of such disclosures where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale or business reorganisation involving jj66, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any changes to this Policy that result from it.

7.4 Consent-Based Sharing

We will not share your personal data with any third party for purposes other than those described in this Policy without first obtaining your explicit consent.

8. International Data Transfers

jj66 may process or store personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as the laws applicable in your country of residence, jj66 will implement appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to protect your data in transit and at the destination.

9. Data Retention

jj66 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory retention obligations. Specific retention periods include:

• Account data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer if required by applicable law.
• Transaction records: Retained for a minimum of five (5) years for financial audit and AML compliance purposes.
• Support communications: Retained for a period of up to three (3) years for quality assurance and dispute resolution.
• Marketing consent records: Retained until consent is withdrawn and for a period thereafter sufficient to demonstrate the existence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jj66's internal data lifecycle procedures.

10. Cookies & Tracking Technologies

jj66 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

Cookie Type	Purpose	Consent Required
Essential / Session	Maintain login session, security tokens, shopping cart state	No — strictly necessary
Functional	Remember language preferences, account display settings	No — necessary for functionality
Analytics	Aggregate usage statistics to improve platform performance	Yes
Marketing / Retargeting	Personalised promotional content delivery	Yes

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core jj66 features, however some personalisation functionality may be reduced.

11. Marketing Communications

jj66 will send you promotional emails, SMS messages or platform notifications about bonuses, new games, PSL and cricket betting markets, and other offers only where you have given explicit consent to receive such communications during registration or through your account preferences.

You may withdraw marketing consent at any time by:

• Updating your communication preferences in the account settings panel;
• Clicking the unsubscribe link in any marketing email;
• Contacting jj66 support at the email address provided in Section 18.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect the sending of essential account-related communications (e.g., transaction confirmations, security alerts).

12. KYC & Identity Data Security

Identity documents and biometric data collected during the KYC verification process are treated as Sensitive Data and are subject to enhanced security controls. The following specific rules apply:

• KYC documents must be uploaded exclusively through jj66's official secure HTTPS verification portal.
• Documents are never requested via email, standard chat or any other unsecured channel.
• Access to KYC data is strictly limited to authorised compliance and verification personnel.
• jj66 does not use KYC data for any purpose other than identity verification, age confirmation, fraud prevention and AML compliance.

13. Children's Privacy

jj66 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18 (or the higher minimum age required by the operator's licence jurisdiction). If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Age verification is enforced through the KYC process.

If you believe a minor has accessed or registered on jj66, please contact support immediately so that we can investigate and take appropriate action.

14. Your Data Rights

Subject to applicable law and the legal bases on which we process your data, you may hold the following rights in respect of your personal data:

To exercise any of the above rights, please submit a written request to jj66 support (see Section 18). We will respond to verified requests within thirty (30) days. We may ask you to verify your identity before fulfilling a rights request to prevent unauthorised access.

15. Data Security

jj66 implements a range of technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and jj66 servers;
• Encryption of sensitive data stored at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for administrative system access;
• Regular security audits and vulnerability assessments;
• Contractual data security obligations imposed on all third-party processors.

While jj66 takes reasonable precautions, no data transmission or storage system can be guaranteed as fully secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jj66 will notify affected users and relevant authorities in accordance with applicable law.

16. Third-Party Links

The jj66 platform may contain references to or links to third-party resources for informational purposes. This Privacy Policy applies solely to data processed by jj66 through the jj66 platform. We are not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

17. Changes to This Policy

jj66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing activities or operational practices. Material changes will be communicated to registered users via the email address on file or through a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent revision was made. Continued use of jj66 following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must discontinue use of jj66 and may request account closure.

18. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact jj66 using the following channels:

• Live Chat: Available through the jj66 platform Help Centre during support hours.
• Email (plain text — not a clickable link):
  [email protected]

Do not send identity documents, CNIC copies, passport scans or any other sensitive personal data by email. All KYC documents must be submitted exclusively through jj66's secure in-platform HTTPS verification portal.

For formal data rights requests (access, erasure, rectification, portability, restriction or objection), please mark your email with the subject line "Data Rights Request" and include your registered account username or email address to assist us in locating your records. We will acknowledge receipt within five (5) business days and aim to fulfil verified requests within thirty (30) days.