Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by 2jba, the operator of the online gaming and sports betting platform accessible at https://2jba.cam ("Platform", "we", "us", "our"). It describes how we collect, use, store, share and protect personal data relating to users of the Platform ("you", "User").

2jba is an English-language platform designed primarily for users in Pakistan and other English-speaking markets. We recognise the particular importance of data privacy for our Pakistani users and are committed to handling all personal information in a lawful, fair and transparent manner consistent with applicable data protection principles.

By accessing or using the 2jba Platform, registering an Account, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, please cease use of the Platform and contact support to close your Account.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

3 Data We Collect

2jba collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration Data

• Full legal name, date of birth and gender.
• Residential address — including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and country.
• Email address and mobile phone number.
• Username and encrypted password.
• Currency preference (e.g., PKR).

3.2 KYC & Verification Data

• Copy of government-issued identity document — CNIC or passport.
• Proof of residential address (utility bill, bank statement or official correspondence).
• Selfie or liveness-check image for identity confirmation.
• Documentation confirming ownership of a payment method used on the Platform.

3.3 Financial Data

• Deposit and withdrawal transaction records, including amounts expressed in PKR or other currencies.
• Payment method identifiers (e.g., masked card numbers, e-wallet account references for methods such as Easypaisa or JazzCash where applicable). Full payment credentials are handled by third-party payment processors — 2jba does not store complete card numbers.
• Source-of-funds documentation where required for enhanced due diligence.

3.4 Activity & Behavioural Data

• Wagering history, game session data, bet amounts and outcomes.
• Sports markets accessed, including cricket, PSL, ICC tournament markets, football and UFC events.
• Bonus usage and promotional engagement records.
• Customer support interactions and correspondence.

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom.
• Device type, operating system and browser information.
• Session timestamps, login history and access logs.
• Cookie identifiers and similar tracking data as described in Section 7.

4 Data Processing — How We Use Your Data

We process your personal data for the following specific purposes:

We do not use your personal data for unsolicited third-party marketing. Where we send promotional communications about 2jba's own products or offers, these will be relevant to your Account activity and you may opt out at any time via your account settings or by contacting support.

5 Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, 2jba relies on the following bases depending on the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 2jba — including Account management, payment processing and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws — including KYC/AML obligations, responsible gambling regulations and lawful authority requests.
• Legitimate Interests: Processing necessary for 2jba's legitimate interests — including fraud prevention, platform security, analytics and improving service quality — where these interests are not overridden by your rights.
• Consent: Where processing is based on your consent — such as for certain cookies or optional marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Third Parties

2jba does not sell, rent or trade your personal data. We may share personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Identity Verification Providers: Third-party KYC and liveness-check services that process identity documents on our behalf to verify your age and identity.
• Payment Processors: Third-party payment gateway providers that facilitate deposits and withdrawals. These providers process financial data under their own privacy frameworks and applicable financial regulations. References to payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, or banks including HBL, UBL, Meezan Bank and Bank Alfalah — are contextual only. Their mention does not imply affiliation with or endorsement of 2jba by these providers.
• Game Content Providers: Software studios and technology partners that supply casino games, sports data feeds and live dealer streams. These providers may process limited technical session data.
• Fraud Prevention & Security Partners: Providers of fraud detection, AML screening and cybersecurity services.
• Regulatory & Law Enforcement Authorities: Where required by a valid legal order, regulatory instruction or court order, we may disclose personal data to competent authorities. We will notify affected users where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors and compliance consultants, subject to professional confidentiality obligations.

All third-party data processors engaged by 2jba are required to enter into data processing agreements that restrict their use of personal data to the purposes for which it was shared and require them to maintain appropriate security measures.

7 Cookies & Tracking Technologies

2jba uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies and load-balancing identifiers. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences — such as language settings, display options and responsible gambling limit configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This data informs product improvements and is not linked to your personal identity.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity and suspicious session patterns.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. Strictly necessary cookies cannot be refused without preventing access to core services.

We do not use cross-site tracking cookies or share cookie data with third-party advertising networks for behavioural advertising purposes.

8 Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce our agreements. General retention principles applied by 2jba are as follows:

• Active Account Data: Retained for the duration of your Account's active status plus such additional period as required by law or our operating license.
• KYC & Identity Documents: Retained for a minimum of five years from the date of account closure, or longer where required by applicable AML regulation or a pending investigation.
• Transaction Records: Financial transaction records are retained for a minimum of five years from the transaction date to comply with anti-money laundering and financial recordkeeping requirements.
• Support Correspondence: Retained for a minimum of two years from the date of the interaction, or until any related dispute is resolved.
• Technical Logs: Access logs and security event logs are retained for up to 12 months unless a security incident necessitates longer retention.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention and disposal procedures.

9 Data Security

2jba implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. Key security controls include:

• Transport Layer Security (TLS) encryption on all Platform connections.
• Encryption of sensitive data fields at rest using industry-standard algorithms.
• Role-based access controls restricting data access to authorised personnel on a need-to-know basis.
• Multi-factor authentication requirements for internal system access.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Continuous monitoring for anomalous account activity and potential data breach indicators.
• Incident response procedures for detecting, containing and reporting data security incidents.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, 2jba will notify you and relevant authorities as required by applicable law.

You are also responsible for maintaining the security of your Account credentials. Use a strong, unique password and enable two-factor authentication where available. Do not share your login details with anyone.

10 User Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 2jba. To exercise any of these rights, contact our support team using the details in Section 14.

We will respond to verified data rights requests within the timeframe required by applicable law — typically 30 days, subject to extension where requests are complex. We may need to verify your identity before processing a request.

11 International Data Transfers

2jba operates across international jurisdictions and may transfer personal data to service providers, data processors or storage infrastructure located outside of Pakistan. Such transfers may occur in the course of KYC verification, payment processing, game provision or platform support.

Where personal data is transferred internationally, 2jba ensures that appropriate safeguards are in place — including contractual data transfer agreements, standard contractual clauses or equivalent mechanisms recognised under applicable law — to maintain a standard of data protection equivalent to that applied within the Platform.

By using the 2jba Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan for the purposes described in this Policy, where such transfers are necessary to deliver the services you have requested.

12 Minors & Age Restriction

The 2jba Platform is strictly intended for adults. You must be at least 18 years of age, or the higher minimum age required by the operator's license jurisdiction, to register and use the Platform. We do not knowingly collect personal data from individuals under the age of 18.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated Account. KYC verification is designed in part to detect and prevent under-age account registration.

If you are a parent or guardian and believe your child has registered an Account on 2jba, please contact our support team immediately using the contact details in Section 14.

13 Amendments to This Policy

2jba reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. When material changes are made, we will notify registered users via the email address associated with their Account and by posting a prominent notice on the Platform.

The "Last updated" date at the top of this page will be revised whenever a new version of this Policy is published. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of material changes constitutes acceptance of the revised Policy.

If you do not agree to a revised Policy, you must cease using the Platform and contact support to close your Account and request deletion of your data where applicable.

14 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the 2jba support team. All privacy-related enquiries are handled by our English-language support staff. Urdu-language assistance is available on request.

For responsible gambling requests — including self-exclusion, limit adjustments and cooling-off periods — please refer to our Responsible Gambling Policy.