ji888 Privacy Policy — How We Handle Your Personal Data

ji888 ("we", "us", "our") is the operator of the online sportsbook and casino platform accessible at ji888.bio, serving players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, and all other regions. ji888 operates under an international gaming license and acts as the data controller in respect of all personal data collected through the ji888 Platform.

As the data controller, ji888 determines the purposes and means of processing personal data. This Privacy Policy applies to all data collected through the ji888 website, mobile browser interface, account registration and verification processes, cashier and payment systems, customer support channels, and any marketing communications you receive from ji888.

This Privacy Policy should be read alongside ji888's Terms and Conditions, which govern your overall use of the Platform. By creating an Account or using any ji888 service, you acknowledge that you have read and understood this Privacy Policy.

ji888 collects the following categories of personal data from players. We collect only what is necessary for the specific purposes described in this Policy.

ji888 collects personal data through the following channels and means:

• Account Registration: Information you provide when creating your ji888 account — name, CNIC number, mobile number, and chosen password;
• KYC Submission: Identity documents uploaded during verification — CNIC scans, selfies, or proof of address documents;
• Cashier Transactions: Payment method details provided when making deposits or requesting withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20;
• Customer Support Interactions: Information shared with ji888 support agents via live chat or email, including account details, transaction references, and any documents you submit to resolve a query;
• Responsible Gaming Forms: Information provided when requesting deposit limits, cooling-off periods, or self-exclusion.

• Platform Activity: Your betting and gaming activity — every wager placed, game session, cashier action — is recorded automatically as part of normal platform operation;
• Cookies and Tracking Technologies: Session cookies, preference cookies, and analytics tools that collect technical and usage data as described in Section 7;
• Device and Network Data: IP address, device fingerprint data, and browser information collected automatically on each login and session for security and fraud detection purposes.

• Payment Processors: Transaction status and reference data from JazzCash, EasyPaisa, and banking partners to confirm deposits and process withdrawals;
• Identity Verification Services: Results from third-party KYC and AML screening providers used to verify CNIC documents and conduct sanctions screening;
• Fraud Prevention Databases: Information from industry fraud-sharing databases used to identify accounts associated with known fraudulent activity.

ji888 processes personal data only where a valid legal basis exists. The following legal bases apply to ji888's data processing activities:

• Contractual Necessity: Processing required to provide the services you have contracted for — account management, bet placement, payment processing, withdrawal handling, and customer support. Without this processing, ji888 cannot deliver its services to you;
• Legal Obligation: Processing required to comply with ji888's obligations under its international gaming license — including mandatory KYC age verification, Anti-Money Laundering (AML) checks, responsible gaming monitoring, and record-keeping requirements imposed by licensing regulators;
• Legitimate Interests: Processing necessary for ji888's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, service improvement, and internal analytics. ji888 conducts a balancing assessment before relying on this basis;
• Consent: Where you have provided explicit consent — primarily in relation to optional marketing communications. Consent may be withdrawn at any time by contacting support or updating your account communication preferences, without affecting prior lawful processing.

ji888 uses the personal data collected for the following specific purposes:

• Creating and maintaining your ji888 account, including authentication and access control;
• Processing deposits and withdrawals via all supported payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, USDT TRC20);
• Crediting and managing bonus balances and promotional offers in accordance with applicable terms;
• Providing customer support and responding to account queries, disputes, and complaints;
• Delivering account-related notifications — transaction confirmations, security alerts, and responsible gaming reminders.

• Conducting KYC age verification — confirming all players are 21 or older before any real-money activity is permitted;
• Performing AML and counter-terrorism financing checks as required under ji888's international gaming license;
• Monitoring gaming patterns for indicators of problem gambling and triggering responsible gaming interventions as required;
• Maintaining mandatory transaction and betting records for the duration required by licensing regulations;
• Responding to law enforcement requests, court orders, or regulatory directions received by ji888.

• Detecting and preventing fraudulent account creation, unauthorised access, and prohibited activities as defined in ji888's Terms and Conditions;
• Identifying and investigating unusual betting patterns, payment anomalies, and suspected collusion;
• Securing the ji888 Platform against cyberattacks, account takeovers, and data breaches.

Where you have opted in to marketing communications, ji888 may use your contact details and platform activity data to send you information about relevant promotions, bonus offers, PSL and cricket betting boosts, new game releases, and ji888 VIP programme updates. You may unsubscribe from marketing communications at any time by contacting [email protected] or adjusting your account preferences.

ji888 does not sell personal data to third parties under any circumstances. We share personal data only in the following limited circumstances and only to the minimum extent necessary:

• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and cryptocurrency network processors — receive transaction data necessary to process deposits and withdrawals on your behalf;
• KYC & Identity Verification Providers: Third-party KYC service providers receive identity documents and personal details for the purpose of verifying age, identity, and conducting AML/sanctions screening as required under licensing obligations;
• Gaming Platform and Software Providers: Casino game providers (including live dealer studio operators) receive necessary session and account data to deliver game services. These providers operate under contractual obligations to process data only for specified gaming purposes;
• Fraud Prevention Services: Industry-standard fraud prevention databases may receive hashed or pseudonymised account identifiers to identify patterns linked to known fraudulent activity;
• Regulatory and Law Enforcement Authorities: ji888 will disclose personal data to licensing regulators, financial intelligence units, law enforcement agencies, or courts where required by law or valid legal process — without prior notification to the player where legally prohibited;
• Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of ji888's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections. Players will be notified of such transfers.

ji888 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your browser or device. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — session management, login authentication, security token storage. These cannot be disabled without breaking Platform functionality;
• Functional Cookies: Remember your preferences such as language setting, device type optimisation, and responsible gaming tool configurations. These improve your ji888 experience between sessions;
• Analytics Cookies: Collect aggregated, anonymised data on how players navigate the ji888 Platform — pages visited, features used, time on page. This data is used to improve the user experience. No individual player is identified from analytics data;
• Security Cookies: Track session activity to detect anomalies that may indicate account compromise or fraud. These are strictly necessary for platform security.

ji888 does not use advertising tracking cookies, third-party retargeting pixels, or any cookies designed to track your activity across websites other than ji888.bio. Cookie preferences can be adjusted through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to log in and use the ji888 Platform.

ji888 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. Security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the ji888 Platform — including login credentials, financial data, and personal information — is encrypted using 256-bit SSL/TLS, the same standard deployed by Pakistan's major commercial banks;
• Encryption at Rest: Sensitive personal data stored in ji888's databases — including CNIC numbers, payment references, and identity documents — is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within ji888's systems is restricted on a strict need-to-know basis. All internal access is logged, audited, and reviewed regularly;
• Two-Factor Authentication: All ji888 internal staff accounts with access to personal data require two-factor authentication;
• Intrusion Detection: Continuous automated monitoring for unusual access patterns, brute-force attempts, and system intrusions with real-time alerting to the security team;
• Regular Security Audits: Periodic penetration testing and security audits conducted by independent third-party security specialists;
• Data Minimisation: ji888 processes only the personal data necessary for each stated purpose — no excess data is collected or retained.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ji888 will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate any harm.

ji888 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and licensing obligations. The following retention periods apply:

• Account Data (active accounts): Retained for the duration of your account, plus 5 years from the date of account closure, to comply with AML record-keeping requirements under ji888's international gaming license;
• KYC Documents (CNIC scans, selfies, proof of address): Retained for 5 years from the date of verification, or the date of account closure, whichever is later — in accordance with licensing anti-money laundering obligations;
• Transaction Records (deposits, withdrawals, bet history): Retained for 5 years from the date of each transaction;
• Customer Support Communications: Retained for 3 years from the date of the interaction, unless related to an open dispute or legal matter;
• Marketing Preference Data: Retained until you withdraw consent or for 2 years from last active platform engagement, whichever is earlier;
• Security Logs (IP addresses, session data): Retained for 12 months for fraud investigation and security audit purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data anonymisation is used, the anonymised data may be retained indefinitely for aggregate analytics purposes.

You have the following rights in respect of your personal data held by ji888. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" along with your account username and CNIC number for identity verification.

• Right of Access: You have the right to request a copy of the personal data ji888 holds about you, the purposes for which it is processed, the categories of data processed, and information about any third parties with whom it has been shared;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Requests to update CNIC numbers or date of birth require supporting documentary evidence;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies. Note that ji888 is required to retain certain data for 5 years after account closure under AML regulations — this obligation takes precedence over erasure requests for the relevant data;
• Right to Restrict Processing: You may request restriction of processing in certain circumstances — for example, while a data accuracy dispute is under investigation;
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider, where processing is based on consent or contract and carried out by automated means;
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ji888 will respond to verified data subject requests within 30 days. Complex or multiple requests may require an extension of up to a further 60 days, in which case you will be notified of the extension and reasons within the initial 30-day period.

ji888 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If ji888 discovers that personal data has been collected from a minor — whether through fraudulent registration, misrepresentation of age, or any other means — the following immediate actions will be taken:

• The relevant Account will be immediately suspended pending investigation;
• All personal data collected from the minor will be securely deleted from ji888's systems as soon as practicable;
• Any deposits made to the Account will be returned to the originating payment method after identity verification of the account holder;
• Any winnings accrued during the period of underage use will be voided.

If you are a parent or guardian and believe a person under 21 has created a ji888 account, please contact us immediately at [email protected] with full details. ji888 will investigate and act without delay. We also recommend the use of parental control software to prevent minors from accessing gambling websites on shared devices.

ji888 operates under an international gaming license, and as a result some personal data may be transferred to, stored in, or processed by systems located outside of Pakistan. Such transfers may occur in connection with payment processing, KYC verification services, gaming platform hosting, and customer support infrastructure.

Wherever personal data is transferred outside of Pakistan, ji888 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applicable within Pakistan and consistent with ji888's licensing obligations. Safeguards used include:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where transfers occur within a corporate group;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by the applicable licensing regulatory framework.

Players may request further information regarding the specific safeguards applicable to international transfers of their personal data by contacting [email protected].

The ji888 Platform integrates with third-party services for the purpose of delivering game content, processing payments, verifying identities, and supporting operational functions. These third-party services have their own independent privacy policies and data processing terms. ji888 is not responsible for the data practices of third-party services once data is received and processed by those providers in accordance with their own terms.

Third-party service categories integrated within the ji888 Platform include:

• Casino Game Providers: Companies such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming — which provide live dealer game streams and RNG slot software to the ji888 Casino lobby;
• Payment Gateways: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 network infrastructure — which process financial transactions to and from player accounts;
• KYC and AML Providers: Identity verification and sanctions screening services that process CNIC document images and personal details to fulfill licensing compliance requirements;
• Platform Analytics: Aggregated, anonymised platform performance analytics tools that help ji888 improve the quality and reliability of its services.

ji888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, legal requirements, or regulatory obligations. The "Last Reviewed" date displayed at the top of this Policy will be updated each time a revision is made.

Where changes to this Privacy Policy are material — meaning they significantly affect how your personal data is used or the rights available to you — ji888 will notify you via email to your registered address, or by displaying a prominent notice on the ji888 Platform upon your next login. Your continued use of the ji888 Platform following notification of a material policy change constitutes acceptance of the revised Policy.

Minor, non-material updates — such as clarifications of existing practices, corrections of typographical errors, or administrative changes — will be made without individual notification, though the "Last Reviewed" date will always be updated. We encourage you to review this Privacy Policy periodically. The current version is always accessible at ji888.bio/privacy-policy.

For all questions, concerns, or requests relating to this Privacy Policy or ji888's data processing practices, please contact the ji888 Data Protection team:

• Email: [email protected] — subject line "Privacy Request" — response within 5 business days;
• Live Chat: Available 24 hours a day, 7 days a week via the ji888.bio Platform — Urdu and English speaking agents on all shifts;
• Postal Address: Not available. All privacy requests must be submitted via email or live chat for security verification purposes.

To enable ji888 to process your request promptly and securely, please include in your communication: (a) your full name as registered on your ji888 account; (b) your ji888 account username; (c) your registered Pakistani mobile number; and (d) a brief description of your request or concern. ji888 may ask for CNIC verification before actioning any request that would affect account data access or deletion.

If you are not satisfied with ji888's response to a privacy concern, you have the right to escalate your complaint to the supervisory authority under ji888's applicable international gaming license. Details of the relevant supervisory body are available upon request from the ji888 Data Protection team. ji888 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.