JJ804 Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy explains how jj804 collects, uses, stores and protects the personal information of its registered players and website visitors. It applies to all services operated under the jj804 brand at jj804.ws, including cricket betting, football betting, live card games, poker, crash games and all promotional programmes.

jj804 is committed to handling your personal data with care, transparency and respect. We understand that handing over your personal and financial information to an online platform requires trust — and we take that responsibility seriously. This policy is written in plain English so you can understand exactly what happens with your data, not just check a legal compliance box.

By registering an account with jj804 or using any of the platform's services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described within it. If you do not agree with any aspect of this policy, please discontinue use of jj804 and contact our support team to close your account.

jj804 collects personal data across several categories, depending on how you interact with the platform. Here is a complete picture of what we collect and why:

jj804 does not collect sensitive personal data such as biometric data, religious beliefs, political opinions or health information. Where identity documents (CNIC, passport) are submitted for verification, only the relevant identifying information is extracted — original document images are stored securely and not accessible to general staff.

The personal data jj804 collects is used for specific, legitimate purposes. We do not use your data in ways that go beyond what is described here without seeking your explicit consent:

• Account creation and management: Your name, contact details and identity information are used to create and maintain your jj804 account, verify your identity and process your deposits and withdrawals.
• Payment processing: Financial data is used exclusively to process your transactions — deposits from Easypaisa, JazzCash, IBFT or card, and withdrawals back to your registered payment method.
• Security and fraud prevention: Device data, IP addresses and transaction patterns are monitored to detect and prevent fraudulent activity, unauthorised account access and money laundering. This is both a legal obligation and a service to honest players.
• Regulatory compliance: jj804 is required by anti-money laundering (AML) regulations to collect, verify and retain certain identity and transaction data. This data is held for the legally mandated retention period and is not used for any other purpose.
• Customer support: When you contact jj804's support team, your account and transaction history is accessed to resolve your query efficiently. Support interactions are recorded for quality assurance and training purposes.
• Platform improvement: Aggregated, anonymised gaming activity data helps jj804 understand how players use the platform, identify technical issues and prioritise product improvements. This data cannot be linked back to individual players.
• Responsible gaming: Gaming activity and deposit data is monitored by jj804's responsible gaming system to identify patterns that may indicate problem gambling. Where such patterns are detected, we may proactively reach out with responsible gaming resources.
• Marketing communications (with consent only): If you have opted in to receive promotional communications from jj804, we will send you information about new games, promotions and bonuses by email or SMS. You can opt out at any time by contacting support or using the unsubscribe link in any marketing email.

jj804 processes your personal data only where there is a lawful basis to do so. The main legal grounds we rely on are:

• Contract performance: Processing your identity, contact and financial data is necessary to deliver the services you signed up for when creating a jj804 account — including taking your deposits, settling your bets and paying your winnings.
• Legal obligation: jj804 is legally required to verify player identities, retain transaction records and report certain activity under applicable anti-money laundering and counter-terrorism financing regulations. This processing is mandatory and cannot be opted out of.
• Legitimate interests: Fraud detection, security monitoring, responsible gaming monitoring and platform improvement are carried out on the basis of legitimate interests — jj804's interest in operating a secure, fair platform that protects all players. We apply a proportionality check to ensure these activities do not override your privacy rights.
• Consent: Marketing communications, optional analytics cookies and any data processing that falls outside the categories above are carried out only with your explicit consent. Consent can be withdrawn at any time.

jj804 does not share your personal data with third parties except in the following specific and limited circumstances:

• Payment processors: To process your deposits and withdrawals, relevant financial data is shared with your chosen payment provider (e.g., Easypaisa, JazzCash, your bank for IBFT). Each of these providers operates under their own privacy and security standards.
• Identity verification services: When you submit identity documents for KYC verification, the documents are processed by a secure third-party identity verification service. This service acts as a data processor under jj804's instructions and cannot use your data independently.
• Game content providers: Certified game providers (Evolution Gaming, Pragmatic Play, Spribe) receive a player session token to provide game content. They do not receive your full personal profile, name or financial data.
• Legal and regulatory authorities: jj804 will disclose personal data to law enforcement, financial regulators or other government authorities when required to do so by law, court order or regulatory obligation. We will notify you of such disclosures where permitted by law.
• Corporate transactions: In the event of a merger, acquisition or sale of the jj804 business, player data may be transferred to the acquiring entity. You will be notified in advance and given the opportunity to close your account if you do not wish your data to be transferred.

jj804 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. Our standard retention periods are:

• Account data (name, contact details, identity documents): Retained for the duration of your account plus five years after account closure, in compliance with AML record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the interaction.
• Marketing opt-in records: Retained for as long as you remain subscribed plus two years after opt-out for audit purposes.
• Device and session data: Retained for 12 months from the date of the session, unless flagged for a security investigation.

After the applicable retention period, your data is securely deleted or anonymised so it can no longer be associated with you as an individual. You can request early deletion of non-legally-mandated data by contacting jj804 support — see Section 9 (Your Rights) for details.

jj804 implements technical and organisational security measures appropriate to the sensitivity of the data held. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and jj804's servers
• Encrypted data storage for all sensitive fields including identity document references and financial account identifiers
• Role-based access control ensuring staff only access the data necessary for their specific function
• Access logging and auditing — all internal access to player data is recorded and regularly reviewed
• Two-factor authentication available to all players for their jj804 account login
• Regular security testing including penetration testing and vulnerability assessments conducted by independent security professionals
• Incident response procedures — in the event of a data breach, jj804 will notify affected players and relevant authorities within 72 hours of discovery

While jj804 takes all reasonable precautions, no online system can guarantee absolute security. Players are encouraged to use a strong, unique password for their jj804 account and to enable two-factor authentication to add an extra layer of protection.

jj804 uses cookies and similar tracking technologies on its platform. A cookie is a small file placed on your device that helps jj804 remember your preferences and provide a functional experience. Here is what each category of cookie does:

You can manage cookie preferences through your browser settings or through jj804's consent management tool. Blocking essential cookies will prevent jj804 from functioning correctly.

As a jj804 player, you have the following rights over your personal data. These rights are real and exercisable — not just words on a page. Contact jj804 support at support@jj804.ws to exercise any of them:

jj804 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is required before any withdrawal is processed, and jj804 monitors registration data to identify potential underage users.

If you are a parent or guardian and believe that a minor has created a jj804 account, please contact us immediately at support@jj804.ws. We will investigate, close the account and delete all data associated with it without delay. No funds deposited by a minor will be retained by jj804.

The jj804 platform integrates third-party services for game content, identity verification and payment processing. Each of these services has its own privacy policy and data practices. jj804 selects third-party partners carefully and requires them to implement data protection standards consistent with this policy, but once your data is transmitted to a third-party service provider, their own privacy policy governs how they handle it.

jj804 is not responsible for the privacy practices of third-party payment providers such as Easypaisa, JazzCash or your issuing bank. We recommend reviewing their respective privacy policies to understand how they handle your financial data during payment processing.

The jj804 website does not contain links to external websites except as specifically noted in the navigation menu and footer. Any third-party sites you reach through other means are entirely outside jj804's control and this Privacy Policy does not apply to them.

jj804 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or operational structure. When material changes are made — meaning changes that affect your rights or how your data is used — we will:

• Update the "last updated" date at the top of this policy
• Send a notification email to all registered players at least seven days before the changes take effect
• Display a prominent notice on the jj804 platform for at least 14 days following the update

Your continued use of jj804 after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you have the right to close your account before the effective date and withdraw any remaining balance without penalty.

Minor, non-material changes (such as grammatical corrections, formatting updates or clarifications that do not alter the substance of the policy) may be made without prior notice, but the updated date will always be changed to reflect when any revision occurred.

If you have any questions, concerns or requests relating to this Privacy Policy or jj804's handling of your personal data, please contact us through any of the following channels:

• Email: support@jj804.ws — use subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24/7 through your jj804 account dashboard
• Subject-specific requests: For formal data rights requests, use the subject line "Data Rights Request" as described in Section 9

We aim to respond to all privacy-related enquiries within 48 hours and to resolve formal data rights requests within 30 days. Where a request is complex or involves a high volume of data, we may extend the response period by up to two additional months but will notify you of the extension within the initial 30-day period.

For additional information on related policies, see our Terms and Conditions and Responsible Gaming page.