This Privacy Policy explains how 2jbit collects, processes, stores, shares, and protects the personal information of all users — including Pakistani players — who access or register on the 2jbit online gaming platform. Your privacy is a core commitment of 2jbit, not a regulatory formality. Please read this document in full before using any 2jbit service.
Six foundational data privacy principles that govern how 2jbit handles every piece of information you share with us.
2jbit collects only the personal data that is strictly necessary for the purposes stated in this policy. We do not gather data speculatively or for purposes beyond what is required to operate the platform, meet regulatory obligations, and deliver the services you have signed up for.
Data security is built into 2jbit's architecture — not applied as an afterthought. All stored personal data is protected with AES-256 encryption. All data in transit is protected by TLS 1.3. Access to personal data is restricted to authorised personnel on a strict need-to-know basis with full audit logging.
2jbit does not sell, rent, exchange, or commercially exploit your personal data with any third party. Where data is shared with service providers — for example, payment processors processing your JazzCash or EasyPaisa transaction — it is shared only to the extent necessary and under strict contractual data protection obligations.
This policy sets out exactly what data 2jbit collects, why it is collected, how long it is retained, and who may access it. 2jbit commits to updating this policy whenever our data practices change, with notice provided to registered users before changes take effect.
Every category of personal data processed by 2jbit is processed on a defined lawful basis — either contractual necessity (to deliver the platform services you have signed up for), legal obligation (regulatory compliance), legitimate interest, or your explicit consent where required by applicable law.
2jbit recognises and respects your rights over your personal data — including the right to access, correct, port, and in applicable circumstances, erase the data we hold about you. Requests to exercise these rights are handled promptly and without charge in ordinary circumstances.
For the purposes of applicable data protection legislation, the data controller responsible for the personal data processed in connection with the 2jbit platform is the 2jbit operating entity, which operates the platform under international gaming regulatory frameworks. References to "2jbit," "we," "us," and "our" in this Privacy Policy refer to the data controller entity.
As data controller, 2jbit determines the purposes and means of processing personal data submitted by or collected in relation to users of the 2jbit platform, including Pakistani players who register, deposit, wager, or otherwise interact with our services.
All data protection enquiries, rights requests, and complaints should be directed to 2jbit's designated data protection contact via the support channels identified in Section 15 of this policy. 2jbit is committed to responding to data protection enquiries promptly and in accordance with our obligations under applicable law.
2jbit collects the following categories of personal data in connection with your use of the platform. The specific data collected in any instance depends on the nature of your interaction with 2jbit and the services you access.
3.1 Directly from You. The majority of personal data 2jbit holds is provided directly by you during the account registration process, identity verification (KYC), deposit and withdrawal transactions, support interactions, and marketing preference settings.
3.2 Automatically Through Platform Use. When you access and use the 2jbit platform, we automatically collect certain technical and behavioural data — including device information, IP addresses, session data, and gaming activity records — through server logs, cookies, and similar technologies. This collection is necessary for platform security, fraud prevention, and service delivery.
3.3 From Payment Service Providers. When you make a deposit or withdrawal via JazzCash, EasyPaisa, or bank transfer, our payment processing partners communicate confirmation and reference data to 2jbit. 2jbit does not receive full financial account numbers — only the reference identifiers necessary to match and settle transactions.
3.4 From Identity Verification Services. In the course of KYC verification, 2jbit may engage third-party identity verification services to validate the authenticity of documents you provide, such as CNIC copies. These services process your data under contract with 2jbit and do not use your data for their own independent purposes.
3.5 From Fraud Prevention and Compliance Services. 2jbit may receive data from third-party risk and compliance tools used to screen for fraudulent activity, verify declared identities, and comply with anti-money laundering (AML) obligations. Such data is processed only for the specific compliance purpose for which it was obtained.
2jbit processes your personal data for the following specific, defined purposes:
| Purpose | Data Categories Used | Lawful Basis |
|---|---|---|
| Account registration and management | IdentityContact | Contractual necessity |
| Identity and age verification (KYC) | IdentityCNIC | Legal obligation |
| Processing deposits and withdrawals | FinancialIdentity | Contractual necessity |
| Platform security and fraud prevention | TechnicalFinancial | Legitimate interest |
| Anti-money laundering compliance | IdentityFinancial | Legal obligation |
| Responsible gaming monitoring | Gaming ActivityFinancial | Legal obligation / Legitimate interest |
| Customer support delivery | CommunicationsAccount | Contractual necessity |
| Platform performance and improvement | TechnicalGaming Activity | Legitimate interest |
| Personalised marketing communications | ContactPreferences | Consent |
| VIP programme administration | Gaming ActivityFinancial | Contractual necessity |
5.1 Contractual Necessity. The majority of personal data processing by 2jbit is necessary for the performance of the contract between 2jbit and the player — specifically, to provide the gaming platform services that the player has signed up to use. Without this processing, 2jbit cannot create your account, process your transactions, or deliver gameplay.
5.2 Legal Obligation. Certain processing activities are required by law — including identity verification under KYC/AML regulatory frameworks, age verification to enforce the 21+ restriction, transaction record-keeping for regulatory audit purposes, and responsible gaming monitoring obligations imposed by 2jbit's gaming licence conditions.
5.3 Legitimate Interests. 2jbit processes certain data on the basis of its legitimate interests — including fraud detection, platform security, and technical performance analysis. Where legitimate interests are relied upon, 2jbit has conducted a balancing assessment confirming that its interests do not override the fundamental rights and freedoms of the data subjects concerned.
5.4 Consent. Where 2jbit relies on consent as the basis for processing — primarily in the context of marketing communications and certain non-essential cookies — such consent is obtained clearly and separately, can be withdrawn at any time without detriment to your platform access, and is documented in 2jbit's consent records.
2jbit does not sell, rent, or commercially transfer your personal data to any third party. Personal data is shared with third parties only in the following limited, defined circumstances:
As an international online gaming platform serving Pakistani players, 2jbit's infrastructure and service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred to countries outside your home jurisdiction, 2jbit ensures that appropriate safeguards are in place to protect your data — including standard contractual clauses, adequacy decisions, or equivalent transfer mechanisms recognised under applicable data protection frameworks.
2jbit does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing specific contractual and technical safeguards. Details of the transfer mechanisms applicable to specific data flows are available upon written request to 2jbit's data protection contact.
2jbit retains personal data only for as long as necessary for the purposes described in this policy, or as required by applicable regulatory and legal obligations. The following retention principles apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration & identity data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC verification documents (CNIC) | Duration of account + 5 years post-closure | Gaming regulatory obligation |
| Transaction and financial records | 7 years from transaction date | Financial recordkeeping law |
| Gaming activity logs | 3 years from last activity | Regulatory audit / Dispute resolution |
| Customer support communications | 3 years from interaction date | Dispute resolution / Legitimate interest |
| Marketing consent records | Until consent withdrawn + 1 year | Consent compliance |
| Technical logs (IP, device) | 12 months rolling | Security / Fraud prevention |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Anonymised aggregate data may be retained beyond these periods for statistical and analytics purposes without restriction, as it no longer constitutes personal data.
9.1 What Are Cookies. Cookies are small text files placed on your device when you visit the 2jbit platform. They serve several functions — from keeping you logged in across page loads, to remembering your preferences, to providing the platform with analytics data about how users navigate the site.
9.2 Categories of Cookies Used by 2jbit.
9.3 Cookie Control. You may manage your cookie preferences through the cookie consent banner displayed on your first visit to 2jbit, or at any time through the cookie settings accessible in your account preferences. Withdrawing consent for non-essential cookies does not affect the validity of processing that took place prior to withdrawal.
2jbit implements a comprehensive, layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
As a data subject whose personal data is processed by 2jbit, you have the following rights, exercisable by contacting 2jbit's data protection contact via the details in Section 15. 2jbit will respond to valid rights requests within 30 days, and will not charge a fee for responding to ordinary requests:
You may request a copy of all personal data 2jbit holds about you, together with information about how it is being processed, the categories involved, and who it has been shared with.
If personal data 2jbit holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, corrections must be supported by documentary evidence.
You may request deletion of personal data 2jbit holds about you, subject to our legal obligations (such as AML retention requirements) that may require certain data to be retained notwithstanding such a request.
In certain circumstances — such as while the accuracy of data is disputed — you may request that 2jbit restrict processing of your personal data to storage only, pending resolution of the relevant issue.
Where data is processed on the basis of your consent or contractual necessity, and processing is carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
You have the right to object to processing carried out on the basis of 2jbit's legitimate interests or for direct marketing purposes. Objections to direct marketing will always be honoured without restriction.
The 2jbit platform is strictly restricted to individuals aged 21 years and above. 2jbit does not knowingly collect, process, or retain personal data from individuals under the age of 21. The mandatory CNIC-based KYC verification process is the primary mechanism through which 2jbit enforces this age restriction.
If 2jbit becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or any other means — all such data will be immediately deleted, the associated account permanently closed, and any balance forfeited in accordance with 2jbit's Terms and Conditions.
Parents and guardians who believe that a person under 21 in their household has registered with 2jbit should contact our support team immediately. We will take urgent action to verify and, if confirmed, close the account without delay.
13.1 Consent-Based Marketing. 2jbit will only send you promotional emails, SMS notifications, or push messages about bonuses, new games, cricket betting promotions, and VIP rewards where you have explicitly opted in to receive such communications during registration or at a later stage through your account marketing preferences.
13.2 Opting Out. You may withdraw your consent to receive marketing communications at any time through your 2jbit account notification settings, or by contacting support and requesting removal from marketing lists. Opt-outs will be processed within five (5) business days. Withdrawal of marketing consent does not affect your ability to continue using the 2jbit platform.
13.3 Transactional Communications. Regardless of your marketing preferences, 2jbit may send you communications that are strictly necessary for your use of the platform — including deposit confirmations, withdrawal notifications, account security alerts, OTP messages for two-factor authentication, and regulatory or terms update notifications. These are not marketing communications and cannot be opted out of while your account remains active.
13.4 Responsible Gaming Communications. Where 2jbit's responsible gaming monitoring identifies patterns that may indicate problematic gaming behaviour, we may contact you with responsible gaming information and support resources. These communications are sent in your interests and are not marketing in nature.
2jbit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes to this policy will be communicated to registered 2jbit players via the email address on file and/or via a prominent notice on the platform, with a minimum of seven (7) days' notice before the changes take effect.
The "Last Updated" date at the top of this document indicates when the current version of this Privacy Policy came into effect. We encourage all 2jbit players to review this policy periodically. Your continued use of the 2jbit platform following publication of an updated Privacy Policy constitutes your acknowledgement of the updated policy.
If you object to any changes in our Privacy Policy, you may close your account by contacting 2jbit support. Any outstanding PKR balance on a confirmed, un-wagered balance will be returned to your registered withdrawal method following account closure processing.
For all privacy-related enquiries — including data rights requests, questions about this policy, complaints regarding data processing, or concerns about data security — please contact 2jbit's data protection team via the following channels:
If you are not satisfied with how 2jbit has handled your data protection enquiry, you have the right to escalate your complaint to the relevant gaming regulatory authority under whose jurisdiction 2jbit's operating licence is held, or to the applicable data protection supervisory authority. Contact details for the applicable regulatory authority are available on request from the 2jbit support team.
2jbit is built on transparency, security, and respect for your privacy. Now that you know how your data is handled, explore everything the platform has to offer — cricket betting, live casino, and 500+ slots — all in PKR.
21+ only. Real-money gaming involves financial risk. All platform use is subject to our Terms & Conditions and this Privacy Policy. Play Responsibly.