Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how j288 ("j288", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to registered players, website visitors, and any other individuals who interact with the j288 platform at j288.bio ("Platform").

j288 is committed to protecting the privacy and personal data of all individuals whose information we process. This Policy is drafted in accordance with the requirements of j288's international gaming licence and applicable data protection standards. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

By registering a j288 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the j288 Platform.

2. Data Controller

j288 is the data controller responsible for the personal data collected and processed through the Platform. As data controller, j288 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, requests, or complaints, you may contact j288's data protection team directly at [email protected]. We aim to respond to all data-related correspondence within 48 hours of receipt.

3. Personal Data We Collect

j288 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city — e.g. Karachi, Lahore, Islamabad, Faisalabad)
• Email address and contact number
• Government-issued photographic identification (CNIC, passport, or driving licence)
• Proof of address documentation

3.2 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet identifiers
• HBL, UBL, or Meezan Bank account details used for deposits or withdrawals
• Transaction histories, deposit and withdrawal amounts in PKR
• Source-of-funds documentation where requested for enhanced due diligence

3.3 Account & Activity Data

• j288 account username and encrypted password
• Login timestamps, session durations, and IP addresses
• Game play history, bet amounts, win/loss records, and wagering patterns
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.4 Technical & Device Data

• Device type, operating system, and browser version
• IP address and approximate geographic location derived from IP
• Cookie identifiers and similar tracking technologies (see Section 9)
• Referral source and on-site navigation behaviour

3.5 Communications Data

• Records of live chat conversations with j288 support staff
• Email correspondence sent to or received from j288
• Complaints, feedback, and dispute records

4. How We Collect Your Data

j288 collects personal data through the following means:

• Directly from you: when you register a j288 account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotion.
• Automatically: through cookies, server logs, and similar technologies when you access and navigate the j288 Platform.
• From third parties: including identity verification agencies, payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud prevention platforms, and our licensing authority where required for compliance purposes.

5. Purpose & Legal Basis for Processing

j288 processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis:

Where j288 relies on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your rights and freedoms, taking into account the nature of the data and the context of processing. You may request further information about these assessments by contacting [email protected].

6. Data Sharing & Disclosure

j288 does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly for the purposes outlined in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to facilitate PKR deposits and withdrawals to and from your j288 account.
• Identity verification providers: Third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) platforms used to verify your identity documents and conduct source-of-funds checks.
• Fraud prevention services: Platforms that help j288 detect and prevent fraudulent account activity, bonus abuse, and financial crime.
• Game content providers: Licensed software studios that supply casino games to the j288 Platform may receive session-level technical data necessary to operate their games. These providers do not receive your full identity data.
• IT and cloud infrastructure providers: Hosting, database, and security vendors who process data on j288's behalf under data processing agreements that bind them to confidentiality and security obligations.
• Regulatory and licensing authorities: j288's licensing authority and relevant law enforcement or government agencies where j288 is legally required to disclose information.
• Professional advisers: Lawyers, auditors, and insurers where disclosure is necessary for j288 to obtain professional advice or to establish, exercise, or defend legal claims.

All third-party processors engaged by j288 are required to process personal data only on j288's documented instructions and to maintain appropriate technical and organisational security measures.

7. International Data Transfers

j288 operates under an international gaming licence and some of our service providers and infrastructure partners may be located outside Pakistan. Where personal data is transferred to a country that does not provide the same level of data protection as the country in which you reside, j288 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities
• Binding corporate rules where applicable
• Adequacy decisions recognising the destination country's data protection framework

You may request details of the specific safeguards applied to any particular international transfer by contacting j288's data protection team.

8. Data Retention

j288 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your j288 account being open and active.
• Post-closure account data: Following account closure, identity and financial records are retained for a minimum of five (5) years in line with anti-money laundering regulatory requirements under j288's international gaming licence.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support and communications records: Retained for a minimum of three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent having been obtained.
• Technical and device logs: Retained for up to twelve (12) months from collection.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

9. Cookies & Tracking Technologies

The j288 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. Cookies are small text files placed on your device when you visit the Platform.

j288 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged into your j288 account. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the j288 Platform, helping us identify and fix usability issues and improve the overall experience.
• Fraud prevention cookies: Help j288 identify and prevent fraudulent access attempts and suspicious activity patterns across sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log into and use the j288 Platform. j288 does not use third-party advertising or behavioural targeting cookies.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data j288 holds about you:

• Right of access: You may request a copy of all personal data j288 holds about you. j288 will provide this within 30 days of a verified request.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For most account details, you can update this directly within your j288 account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to j288's legal retention obligations (see Section 8).
• Right to restriction of processing: You may request that j288 restrict processing of your data in certain circumstances, such as while a dispute regarding the accuracy of the data is resolved.
• Right to data portability: You may request that j288 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on j288's legitimate interests, including profiling for responsible gaming purposes. j288 will assess each objection and cease processing unless compelling legitimate grounds exist to continue.
• Right to withdraw consent: Where j288 processes your data on the basis of your consent (e.g. for marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11. Security Measures

j288 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration:

• Encryption: All data transmitted between your device and the j288 Platform is protected by TLS 1.2 or higher. Stored personal and financial data is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted to j288 personnel and third-party processors who require it to perform their designated functions. Access is governed by role-based permissions and regularly audited.
• Two-factor authentication: j288 supports and encourages the use of two-factor authentication (2FA) on player accounts to prevent unauthorised access even if login credentials are compromised.
• Penetration testing: j288's Platform and infrastructure are subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: j288 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players without undue delay.

While j288 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your j288 account credentials and should contact support immediately if you suspect any unauthorised access.

12. Minors

The j288 Platform is strictly for individuals aged 21 years and above. j288 does not knowingly collect, store, or process personal data belonging to anyone under the age of 21. Age verification checks are applied during the registration process and may be repeated at any subsequent point.

If j288 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any funds deposited will be returned to the originating payment method following investigation.

If you believe a minor may have registered a j288 account, please contact us immediately at [email protected] so that we can take prompt action.

13. Changes to This Privacy Policy

j288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we collect or use your personal data — j288 will notify registered players via email or on-platform notification prior to the changes taking effect. For non-material clarifications or corrections, the updated Policy will be published on this page without individual notification.

Your continued use of the j288 Platform following any update to this Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed of how j288 protects your data.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to j288's handling of your personal data, please contact our data protection team:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the j288 Platform

If you are not satisfied with j288's response to a data protection complaint, you have the right to escalate your complaint to the relevant supervisory authority or to the dispute resolution body prescribed under j288's international gaming licence. j288 will cooperate fully with any such authority in the resolution of complaints.