2jber Privacy Policy

1 Introduction

2jber is committed to handling all personal data with the highest degree of care, transparency, and responsibility. This Policy applies to all personal data collected through the 2jber Platform, including data submitted during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and general Platform usage.

This Policy should be read in conjunction with the 2jber Terms & Conditions, which form a binding agreement between you and 2jber governing your use of the Platform. Where any inconsistency exists between this Policy and the Terms & Conditions on matters relating to data privacy, this Policy shall prevail.

2 Information We Collect

2jber collects personal data through several channels during the normal course of operating the Platform. The categories of personal data we collect are set out in the table below:

2jber does not intentionally collect special category data (such as health data, religious beliefs, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming self-exclusion or support request. In such cases, the data is used solely to deliver the service you have requested and is not retained beyond what is necessary for that purpose.

3 How We Use Your Information

2jber processes your personal data for specific, legitimate purposes only. The legal basis and purpose for each category of processing is described below:

• Account Registration & Management: To create and administer your Player Account, verify your identity, and enable you to access all Platform features. Legal basis: contractual necessity.
• KYC & Age Verification: To confirm that you are at least 21 years of age and to comply with our anti-money-laundering and responsible gaming obligations. Legal basis: legal obligation.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain an accurate transaction history for your account. Legal basis: contractual necessity.
• Fraud & Security Monitoring: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct on the Platform. Legal basis: legitimate interest and legal obligation.
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and accurate manner. Legal basis: contractual necessity.
• Responsible Gaming: To monitor your gaming behaviour, enforce self-exclusion periods, and provide cooling-off and deposit-limit tools where requested. Legal basis: legal obligation and legitimate interest.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have given explicit prior consent to receive such communications. You may withdraw this consent at any time by contacting [email protected] or updating your account preferences. Legal basis: consent.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the overall quality and performance of the 2jber Platform. Legal basis: legitimate interest.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, financial crime legislation, and any lawful requests from regulatory or law enforcement authorities. Legal basis: legal obligation.

4 Sharing of Personal Data

2jber does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may, however, share your personal data with the following categories of recipients where strictly necessary:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the minimum data necessary to process your deposit or withdrawal transaction. These providers are contractually bound to handle your data in accordance with applicable financial data protection standards.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by 2jber to assist in CNIC verification and fraud screening. These providers operate under strict data processing agreements and may not use your data for any purpose beyond the verification service.
• Gaming Software Providers: Casino game studios and sports data providers that power the 2jber Platform may receive anonymised usage data necessary for game delivery and integrity monitoring. No personally identifiable information is shared beyond what is technically required.
• Legal & Regulatory Authorities: Where 2jber is required by law, regulation, court order, or lawful request from a regulatory or law enforcement authority to disclose personal data, we will comply. 2jber will, where permitted, notify the affected player of such a disclosure.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by 2jber on a confidential basis, where access to personal data is necessary for their professional services.

5 Cookies & Tracking Technologies

2jber uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website you visit. Cookies are used to make the Platform function correctly and to help us understand how players use the Platform so we can improve it.

2jber does not use advertising, retargeting, or third-party social media tracking cookies. You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your Player Account and using core Platform features.

6 Data Retention

2jber retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following retention periods apply:

• Player Account Data (identity and contact): Retained for the lifetime of the Player Account and for a minimum of 5 years following permanent account closure, in accordance with anti-money-laundering regulatory requirements.
• KYC Documents (CNIC, proof of address): Retained for a minimum of 5 years following the end of the player relationship, as required under financial crime legislation.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support and Communications Data: Retained for 3 years from the date of the interaction, unless the matter relates to an ongoing legal or regulatory proceeding, in which case retention continues until that proceeding is fully resolved.
• Technical and Usage Data (logs): Retained for 13 months on a rolling basis, after which aggregated and anonymised data may be retained indefinitely for Platform analytics.
• Marketing Consent Records: Retained for the duration of your consent and for 3 years following withdrawal of consent, as evidence of the consent and its withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

7 Data Security

2jber implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for all personal data stored on 2jber servers;
• TLS 1.3 encryption for all data transmitted between your device and the 2jber Platform;
• Role-based access controls, ensuring that only authorised personnel can access personal data relevant to their specific function;
• Multi-factor authentication requirements for all 2jber internal systems that process personal data;
• Regular penetration testing and security audits conducted by qualified third-party security professionals;
• Incident response procedures, including a defined process for notifying affected players and relevant authorities in the event of a data breach that poses a risk to your rights and freedoms.

8 Your Rights

As a 2jber player, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting the 2jber support team at [email protected]:

2jber will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period. There is no charge for exercising any of the above rights unless a request is manifestly unfounded or excessive.

9 Minors & Age Verification

As part of the registration and KYC process, 2jber requires all players to confirm their date of birth and to submit a valid CNIC, which serves as proof of both identity and age. Any Player Account found to belong to an individual under the age of 21 will be immediately and permanently closed, and any funds held in the account will be dealt with in accordance with our legal obligations.

If you believe that a minor has registered a Player Account on the 2jber Platform, please contact us immediately at [email protected]. 2jber takes all such reports seriously and will investigate them as a priority matter. We also encourage parents and guardians to make use of available parental control tools and internet filtering software to prevent minors from accessing online gambling platforms.

10 International Data Transfers

2jber's primary servers and data processing infrastructure are located in jurisdictions that maintain data protection standards consistent with internationally recognised frameworks. Where your personal data is transferred outside of Pakistan to a third-party service provider or infrastructure partner, 2jber ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that impose binding data protection obligations on the recipient;
• Transfer to jurisdictions that maintain an adequate level of data protection as determined by relevant international standards;
• Where required, implementation of standard contractual clauses or equivalent legal mechanisms to govern the transfer.

You may request details of the specific safeguards applied to any international transfer of your personal data by contacting [email protected].

11 Changes to This Policy

2jber reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change in the types of personal data collected or a new category of third-party recipient — 2jber will notify all registered players by email to the address held on their Player Account at least 14 days before the amended Policy takes effect.

Non-material amendments, such as clarifications of existing language or corrections of typographical errors, may take effect immediately upon publication on the Platform. The "Last Reviewed" date at the top of this Policy will be updated each time any amendment is made.

Your continued use of the 2jber Platform following publication of a revised Privacy Policy constitutes your acceptance of the amended terms. If you do not agree with any amendment, you may close your Player Account in accordance with the process described in the 2jber Terms & Conditions.

12 Contact & Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by 2jber, please contact the 2jber Data Privacy team using the details below. Note that the email address is provided as plain text only and is not a clickable link.