Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") is published by jjrr (hereinafter "jjrr", "we", "us" or "our"), the operator of the online casino and sports betting platform accessible at jjrr.cam (the "Website" or "Platform"). This Policy applies to all users (hereinafter "User", "you" or "your") of the Website, regardless of the jurisdiction from which they access the Platform.

This Policy describes: (a) what categories of personal data jjrr collects; (b) the purposes for which that data is processed; (c) the legal basis on which processing is conducted; (d) how and with whom data may be shared; (e) how long data is retained; (f) the security measures applied to protect data; and (g) the rights available to Users in respect of their personal data.

By accessing or using the Website, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should not access or use the Website. This Policy should be read alongside jjrr's Terms and Conditions, which govern your use of the Platform as a whole.

Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, an online identifier or one or more factors specific to that person.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, adaptation, retrieval, use, disclosure or erasure.
• "Data Controller" means jjrr, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of jjrr and under its instruction.
• "KYC Data" means identity and age verification documents and associated data collected as part of the Know Your Customer process.
• "Sensitive Data" means categories of Personal Data that warrant additional protection, including government-issued identity documents such as CNIC or passport numbers.
• "Cookies" means small text files placed on your device by the Website for the purposes described in Section 8 of this Policy.

Data We Collect

jjrr collects the following categories of Personal Data from Users:

3.1 Registration Data

When you create an Account, we collect: your chosen username; email address; date of birth; country of residence; and a password (stored in hashed form — plain-text passwords are never stored).

3.2 Identity Verification (KYC) Data

To comply with age verification, anti-money laundering (AML) and fraud prevention obligations, we may collect: your full legal name; national identity document details (Pakistani CNIC number or passport number and expiry); date of birth; residential address; and a selfie or liveness check image where required by our verification system. Proof of address documents and source of funds documentation may also be requested for higher-value accounts.

3.3 Financial Transaction Data

We record details of all deposit and withdrawal transactions, including: the payment method used; transaction amounts in PKR or the applicable currency; transaction dates and reference identifiers; and, where applicable, partial payment instrument details (such as the last four digits of a card or a masked mobile wallet number) sufficient to confirm payment method ownership without exposing full account credentials.

3.4 Gameplay and Betting Activity Data

We maintain records of your gameplay and betting activity, including: games played; bets placed and settled; wagering history; session duration; and balance history. This data is used for account management, responsible gambling monitoring, dispute resolution and regulatory compliance.

3.5 Technical and Device Data

When you access the Website, we automatically collect certain technical data, including: your IP address; browser type and version; operating system; device type and screen resolution; referring URL; pages visited on the Website; and session timestamps. This data is used for security monitoring, fraud detection and platform performance analysis.

3.6 Communications Data

Records of your communications with jjrr Support — including live chat transcripts, email correspondence and any documents you submit via support — are retained for account management and quality assurance purposes.

Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing Personal Data, jjrr relies on the following bases:

• Contractual necessity: Processing of Registration Data and Financial Transaction Data is necessary to fulfil the contractual obligations arising from the Terms and Conditions you agree to upon registration.
• Legal obligation: Processing of KYC Data and certain Financial Transaction Data is necessary to comply with applicable legal obligations, including AML regulations and age verification requirements under the laws of jjrr's operating jurisdiction.
• Legitimate interests: Processing of Technical and Device Data for security monitoring, fraud prevention and platform performance analysis is conducted on the basis of jjrr's legitimate interest in maintaining a secure and functional platform. These interests are balanced against User privacy rights.
• Consent: Where processing is based on your consent — such as the sending of promotional communications — you may withdraw that consent at any time by contacting Support or adjusting your account communication preferences.

How We Use Your Data

jjrr uses collected Personal Data for the following specific purposes:

• Account creation and management: Setting up and maintaining your registered Account, processing login authentication, and administering account settings.
• Identity and age verification: Conducting mandatory KYC checks to confirm your identity, verify your age as 18 or above (or the higher minimum required by applicable jurisdiction), and detect potential fraud or identity misuse.
• Payment processing: Processing deposit and withdrawal transactions. Pakistani players using familiar payment references such as Easypaisa, JazzCash, Raast, or bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah should note that payment data shared with those providers is governed by each provider's own privacy policy — jjrr does not control those providers' data practices.
• Responsible gambling monitoring: Analysing gameplay patterns to identify potentially problematic behaviour and to enforce deposit, loss and time limits set by the User or applied by jjrr in accordance with its Responsible Gambling Policy.
• Security and fraud prevention: Monitoring Technical and Device Data to detect unauthorised access attempts, bot activity, multiple account creation, and other prohibited conduct as defined in the Terms and Conditions.
• Customer support: Using account and communications data to respond to support enquiries, investigate disputes, and resolve complaints.
• Legal and regulatory compliance: Retaining records and disclosing data as required by applicable law, regulatory authority requests, court orders or law enforcement directives.
• Platform improvement: Using aggregated and anonymised analytics data to improve platform design, performance and user experience.
• Marketing communications (where consented): Sending promotional offers and platform updates to Users who have opted in to receive such communications. Marketing communications can be opted out of at any time.

Data Sharing & Disclosure

jjrr does not sell or rent Personal Data to third parties. Personal Data may be disclosed in the following limited circumstances:

• KYC verification partners: Identity and age verification documents are processed by third-party KYC service providers operating under data processing agreements with jjrr. These providers are bound by strict confidentiality obligations and are authorised only to process data for the specific purposes of identity verification.
• Payment processors: Financial transaction data is shared with payment processors to the extent required to complete deposit and withdrawal transactions. Each payment processor operates under its own privacy terms, which Users should review independently.
• Game software providers: Certain gameplay session data may be processed by third-party game software providers to facilitate game delivery and resolve technical disputes. Providers receive only the data necessary for these purposes.
• Regulatory authorities and law enforcement: jjrr may be required by applicable law, court order or regulatory directive to disclose Personal Data to competent authorities. We will not disclose data beyond what is legally required in such circumstances.
• Corporate transfers: In the event of a merger, acquisition or asset transfer involving jjrr, Personal Data held by jjrr may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

International Data Transfers

jjrr may process or transfer Personal Data to service providers located in jurisdictions outside the User's country of residence. Where such transfers occur, jjrr takes steps to ensure that appropriate safeguards are in place to protect transferred data, including the use of data processing agreements, standard contractual clauses or equivalent contractual protections.

Pakistani users should be aware that data transferred outside Pakistan may be subject to the laws of the receiving jurisdiction, which may differ from Pakistani law. By using the Platform, you acknowledge that your Personal Data may be transferred and processed in jurisdictions outside Pakistan, including the jurisdiction in which jjrr holds its operating licence.

Cookies & Tracking Technologies

jjrr uses cookies and similar technologies (including local storage and session storage) to operate the Website, maintain your session state and gather analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Website to function. These include session authentication tokens and security cookies. These cookies cannot be disabled without rendering the Website non-functional.
• Performance and analytics cookies: Used to understand how Users interact with the Website — including which pages are visited, session duration and error events. Data collected through these cookies is aggregated and does not identify individual Users. These cookies may be disabled through your browser settings.
• Preference cookies: Used to remember your settings and preferences, such as display language and responsible gambling limit configurations.

jjrr does not use advertising cookies that transmit your browsing data to external advertising networks or social media platforms. You can manage cookie settings through your browser's privacy controls. Note that disabling strictly necessary cookies may impair the functionality of the Website.

Data Retention

Personal Data is retained only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following general retention principles apply:

• Account Registration Data and gameplay records are retained for the duration of your active Account, plus an additional post-closure period as required by the applicable regulatory framework of jjrr's operating jurisdiction.
• KYC documentation and financial transaction records are retained for the period required by applicable AML and financial regulation — typically a minimum of five years from the date of the relevant transaction or account closure, whichever is later.
• Technical and Device Data collected for security and analytics purposes is retained for up to 24 months from the date of collection, after which it is deleted or anonymised.
• Customer support communications are retained for up to three years from the date of the relevant communication.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where deletion is delayed due to a legal hold or active dispute, data is flagged accordingly and access is restricted to those with a legitimate need.

Data Security

jjrr applies a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, disclosure or destruction. These measures include but are not limited to:

• HTTPS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive data categories including KYC documents and password hashes;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access Personal Data;
• Regular security monitoring and logging of access to systems containing Personal Data;
• Two-factor authentication (2FA) options for User accounts to reduce the risk of unauthorised account access;
• Staff training on data protection and security protocols.

Your Rights

Subject to applicable law, you may have the following rights in respect of your Personal Data held by jjrr. To exercise any of these rights, please contact Support using the details in Section 14. We will respond to valid requests within a reasonable timeframe.

Please note that certain rights may be limited or overridden by jjrr's legal obligations — for example, we cannot delete KYC or transaction records that we are required to retain under applicable AML regulation, even upon a valid erasure request.

Minors & Age Restrictions

The Website and its Services are strictly restricted to adults aged 18 years or older, or the higher minimum age required by the applicable operator licence jurisdiction. jjrr does not knowingly collect or process Personal Data from persons under the minimum age requirement.

Age verification is a mandatory step in the KYC process. If jjrr becomes aware that Personal Data has been collected from an underage individual, the relevant Account will be immediately suspended, all associated data will be assessed for deletion in accordance with applicable law, and any funds associated with the Account will be handled in accordance with jjrr's standard underage account procedures.

Adults who become aware of underage persons accessing this platform should contact Support immediately using the details provided in Section 14.

Changes to This Policy

jjrr reserves the right to amend, update or replace this Privacy Policy at any time. Where amendments are material — for example, where we introduce a new category of data processing or change how we share data — we will endeavour to provide advance notice to registered Users via on-site notification or email to the address registered on your Account.

The date of the most recent revision is displayed at the foot of the table of contents in the sidebar. Your continued use of the Website following publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any change to this Policy, you should cease using the Website and may request Account closure as described in the Terms and Conditions.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to report a concern about how your Personal Data is being handled, please contact jjrr Support using the details below. All data-related requests should be submitted in writing to enable proper handling and record-keeping.