2jba Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") is published by 2jba ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with your registration, use of gaming services, financial transactions and customer support interactions on the 2jba platform, accessible at 2jba.net.

2jba is committed to protecting the privacy of all players and website visitors. This Policy sets out the types of personal data we collect, the purposes for which it is used, how long it is retained, with whom it may be shared, and the rights available to you in relation to your data. We process personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation and integrity.

By registering an account on 2jba, placing a bet, making a deposit or withdrawal, or otherwise using the platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the 2jba platform.

2 Personal Data We Collect

2jba collects personal data in a number of categories, each serving a distinct operational or legal purpose. We collect only the data that is necessary for the purposes described in this Policy. The following table summarises the categories of data collected and the primary purpose associated with each category.

3 How We Collect Personal Data

2jba collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data provided directly by you when you complete the 2jba registration form, submit identity verification documents, make a deposit or withdrawal request, contact 2jba support, opt in to a promotional offer, or respond to a survey. This is the primary source of your identity and contact data.

3.2 Automated Collection

When you access and use the 2jba platform, technical data is collected automatically through server logs, cookies, web beacons and similar tracking technologies. This includes your IP address, device identifiers, browser type and version, pages visited, time spent on the platform, and the source of your visit. This data is used primarily for security, fraud detection and platform performance monitoring.

3.3 Third-Party Sources

2jba may receive personal data about you from third-party sources in certain circumstances, including:

• Identity verification service providers used to confirm your age and CNIC details during the KYC process.
• Payment processing partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay and Raast, who may share transaction confirmation data.
• Fraud prevention and anti-money laundering screening databases used to validate your account status.
• Our gaming software and content providers, who may share game session data associated with your 2jba account identifier.

4 Purposes of Processing Personal Data

2jba processes your personal data for the following defined purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your explicit consent or establishing a new lawful basis for processing.

• Account Registration and Management: To create and maintain your 2jba account, verify your identity and age, and manage your account settings and preferences.
• Processing Transactions: To receive PKR deposits via JazzCash, EasyPaisa and bank transfers, and to process withdrawal requests to your nominated payment method.
• Regulatory Compliance: To comply with our obligations under the gaming licence and applicable anti-money laundering, know-your-customer and counter-financing-of-terrorism regulations.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to apply and enforce deposit limits and self-exclusion requests, and to fulfil our duty of care obligations to players.
• Security and Fraud Prevention: To detect, investigate and prevent unauthorised account access, fraudulent transactions, bonus abuse and other security threats to the platform.
• Customer Support: To respond to your queries, complaints and requests through live chat and email, and to maintain records of support interactions for quality assurance.
• Marketing and Promotions: With your consent, to send you information about 2jba promotions, new game releases, bonuses and personalised offers relevant to your gaming activity.
• Platform Improvement: To analyse aggregated usage patterns and player feedback to improve the 2jba platform's performance, game selection and user experience.

5 Legal Bases for Processing

2jba processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 2jba — specifically, to provide you with gaming services, process your transactions and manage your account.
• Legal Obligation: Processing required to comply with mandatory legal and regulatory obligations, including KYC, AML screening and reporting obligations under the gaming licence.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics and responsible gaming measures, where 2jba's legitimate operational interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and certain personalisation features, where you have provided explicit, informed consent. You may withdraw consent at any time from your account notification settings.

6 Data Sharing and Third-Party Disclosure

2jba does not sell your personal data to third parties. We do not share your personal information with external organisations for their own marketing purposes. Data sharing occurs only in the following defined and controlled circumstances:

6.1 Service Providers and Data Processors

2jba engages trusted third-party service providers who process personal data on our behalf, under strict data processing agreements that require them to implement appropriate security measures and process data only on 2jba's documented instructions. These include identity verification providers, payment processing partners, game software providers, cloud infrastructure services and customer support platforms.

6.2 Regulatory and Legal Disclosure

2jba may be required to disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies or courts in response to lawful requests, court orders or regulatory obligations. Such disclosures are made to the extent required by applicable law and are not subject to player consent in circumstances where disclosure is mandatory.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the 2jba business, personal data held by 2jba may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer that materially affects the processing of their personal data, and the acquirer will be required to honour the commitments made in this Policy.

7 Payment Data and Anti-Money Laundering

All financial transactions on 2jba — including deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast and USDT TRC20 — are processed by our licensed payment partners. 2jba does not store full payment card or bank account numbers on its servers. Payment references, transaction amounts and timestamps are retained in association with your 2jba account for the purposes set out below.

7.1 AML and KYC Obligations

As an internationally licensed gaming platform, 2jba is subject to anti-money laundering (AML) and know-your-customer (KYC) obligations. These obligations require us to collect and verify identity documents, monitor transaction patterns, maintain detailed transaction records and report suspicious activity to relevant authorities where required. These processing activities are mandatory and cannot be opted out of; they are a condition of holding an account on 2jba.

Financial transaction records associated with your 2jba account are retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable AML record-keeping requirements. This retention period applies regardless of whether your 2jba account remains active.

8 Cookies and Tracking Technologies

The 2jba website and gaming platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to secure your session, and to understand how players interact with the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens and load balancing cookies. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby view and notification preferences to provide a personalised experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are visited, where players drop off, and which features are most used. This data is used to improve the 2jba platform.
• Security Cookies: Detect and prevent fraudulent activity, unauthorised access attempts and bot traffic. These cookies are part of 2jba's security infrastructure and cannot be disabled.

You may manage cookie preferences through your browser settings. Note that disabling cookies beyond strictly necessary categories may affect your experience on the 2jba platform, including the functionality of certain game types and account features.

9 Data Retention

2jba retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory retention obligations, and to resolve disputes or enforce our agreements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to satisfy AML, tax and audit record-keeping requirements.
• Transaction Records: Minimum five (5) years from the date of each transaction, in accordance with AML regulations.
• Identity Verification Documents: Retained for five (5) years from account closure or the date of last verification, whichever is later.
• Support Communications: Three (3) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until consent is withdrawn and for one (1) year thereafter, to demonstrate compliance with consent obligations.
• Technical/Log Data: Typically twelve (12) months from collection, unless retained for longer in connection with a security investigation or regulatory enquiry.

10 Security Measures

2jba implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction and disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 2jba platform.
• Encrypted storage of all personally identifiable information and financial data in our database infrastructure.
• Role-based access controls that limit internal access to personal data on a strict need-to-know basis.
• Two-factor authentication available to all 2jba players, with mandatory 2FA for all internal staff accounts.
• Regular independent security audits and penetration testing of the 2jba platform infrastructure.
• Automated monitoring systems that detect and flag anomalous access patterns and suspicious transaction activity in real time.
• Incident response procedures that ensure affected players are notified promptly in the event of a confirmed data breach affecting their personal data.

11 Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to the personal data that 2jba holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account email address. 2jba will respond within thirty (30) days of receiving a valid, verified request.

• Right of Access: You have the right to request a copy of all personal data 2jba holds about you, including your account information, transaction history, gaming records and any identity verification documents submitted.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by 2jba. Contact support to update your registered details.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to our legal obligations to retain certain data, particularly transaction records under AML regulations.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances — for example, while the accuracy of data is disputed.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used machine-readable format, where processing is based on your consent or on contractual necessity.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also opt out of direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12 Children's Privacy and Age Restriction

The 2jba platform is strictly prohibited for individuals under the age of twenty-one (21) years. 2jba does not knowingly collect, process or store personal data relating to minors. Age verification is a mandatory step in the 2jba account registration and activation process, and 2jba will not activate a real-money account or process any financial transaction without satisfactory confirmation that the account holder meets the minimum age requirement.

If 2jba becomes aware that personal data has been collected from or in relation to an individual under the age of 21 without verifiable parental consent, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that your minor child has created a 2jba account, please contact support at [email protected] immediately.

13 Marketing Communications

2jba may send you promotional communications — including information about bonus offers, new game launches, PSL cricket betting promotions and platform updates — via email or SMS, but only where you have given your explicit consent to receive such communications during registration or at a subsequent point in your account settings.

You may opt out of marketing communications at any time by updating your notification preferences in your 2jba account settings, or by contacting the support team at [email protected] with a request to unsubscribe. Opting out of marketing communications does not affect transactional communications — you will continue to receive account-related notifications such as deposit confirmations, withdrawal processing updates and security alerts, which are sent on the basis of contractual necessity.

14 Changes to This Privacy Policy

2jba reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements or platform features. When material changes are made, 2jba will provide reasonable prior notice via email to the address registered to your account, or through a prominent notice displayed on the 2jba platform.

The effective date of the most recent version of this Policy is displayed at the top of this page. Your continued use of the 2jba platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you disagree with the updated terms, you should close your account and cease use of the platform before the revision takes effect.

15 Contact — Data Protection

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by 2jba, please contact our Data Protection team using the details below. We aim to acknowledge all data-related queries within five (5) business days and to provide a substantive response within thirty (30) days.

• Data Rights Requests: Email [email protected] with subject line "Data Rights Request" and include your registered account email address and a clear description of your request.
• Privacy Queries: General questions about this Policy or 2jba's data practices may also be directed to [email protected].
• Live Chat: For urgent data-related concerns, our support team is available 24/7 via the live chat widget on any 2jba page.
• Support Hours: Priority response between 9:00 AM – 11:00 PM PKT. After-hours queries answered within 4 hours.

Where you are not satisfied with 2jba's response to a data rights request, you have the right to escalate your complaint to the relevant supervisory authority or to the dispute resolution body designated by 2jba's gaming licence holder.