Privacy Policy

01. Introduction

This Privacy Policy (the "Policy") sets out the practices of t2jbet (the "Operator", "We", "Us" or "Our") in relation to the collection, use, disclosure, storage and protection of personal data belonging to users (each a "User", "You" or "Your") of the t2jbet platform accessible at https://t2jbet.cam and any associated mobile interfaces or services (collectively the "Platform").

We are committed to protecting your privacy and processing your personal data in a transparent and lawful manner. This Policy is designed to help you understand what data we hold about you, why we hold it, how long we keep it and what your rights are in relation to it.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of and should be read in conjunction with our Terms & Conditions.

02. Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

03. Data Controller

The Data Controller responsible for your personal data collected through the t2jbet Platform is the Operator operating under the license applicable to the platform's jurisdiction of registration. For all data-related enquiries, the Operator can be contacted at the address and email provided in Section 15 (Contact & Complaints) of this Policy.

Where third-party service providers process your data on the Operator's behalf (as Data Processors), the Operator retains responsibility for ensuring that such processors handle your data in accordance with this Policy and applicable data protection standards.

04. Data We Collect

We collect personal data from you directly (when you register, deposit, contact support or complete KYC) and automatically (through your use of the Platform). The categories of data we collect are set out below.

4.1 Identity & Registration Data

• Full legal name;
• Date of birth;
• CNIC number or passport number (Pakistani users);
• Username and account password (stored in hashed form);
• Selfie or liveness verification image submitted during KYC.

4.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (where required for proof-of-address verification).

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, denominated in PKR;
• Payment method identifiers (e.g., partial account numbers, wallet references) — but never full unmasked card or bank account numbers stored in plain text;
• Source-of-funds declarations where provided for enhanced due diligence.

4.4 Betting & Gaming Data

• Bet history, stakes, odds, markets and outcomes;
• Casino game session data, including game type, stake size and session duration;
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status).

4.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Pages visited, navigation paths, session duration and referral source;
• Cookie identifiers and similar tracking technology data (see Section 10).

4.6 Communications Data

• Contents of support chat transcripts and email correspondence with our team;
• Feedback or survey responses submitted voluntarily.

05. Purposes & Legal Basis for Processing

We process your personal data only where we have a lawful basis for doing so. The table below sets out the principal processing purposes and the corresponding legal basis applied in each case.

06. Data Sharing & Disclosure

We do not sell, rent or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of recipient:

6.1 Identity & Age Verification Providers

Third-party KYC and identity verification services may process your CNIC, passport or biometric data to confirm your identity and age eligibility. These processors operate under strict data processing agreements and are prohibited from using your data for any purpose other than providing verification services to the Operator.

6.2 Payment Processors

Payment service providers involved in processing deposits and withdrawals receive the minimum transaction data necessary to execute the payment. For Pakistani users, this may include transaction references associated with payment rails such as interbank transfers — the Operator does not claim any formal partnership with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah. These are referenced as contextual examples only and do not imply endorsement of gambling.

6.3 Fraud Detection & AML Partners

Specialist third-party fraud detection and anti-money-laundering screening services may process limited personal data (such as name, date of birth and transaction patterns) to identify suspicious activity.

6.4 Regulatory & Law Enforcement Authorities

The Operator may disclose personal data to competent regulatory, judicial or law enforcement authorities where required by applicable law, court order or legitimate governmental request. We will, where legally permissible, notify you of such a disclosure.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring or sale of assets involving the Operator, your personal data may be transferred to the acquiring entity subject to equivalent data protection commitments. You will be notified of any such change in advance where practicable.

07. International Data Transfers

The Operator and its service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, the Operator ensures that appropriate safeguards are in place — such as contractual data protection clauses — to provide a level of protection equivalent to that applied within the Operator's license jurisdiction.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside of Pakistan, including countries whose data protection laws may differ from those applicable in your home location.

08. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes set out in this Policy and to comply with applicable legal, regulatory and contractual obligations. The general retention principles we apply are:

• Active account data: Retained for the full duration of your account relationship with the Operator.
• KYC and identity documents: Retained for the period required by the Operator's license jurisdiction, typically a minimum of five years from the date of account closure or the last transaction — whichever is later.
• Transaction records: Retained for the minimum period required by applicable anti-money-laundering regulations — typically five to seven years.
• Betting and gaming history: Retained as required by the Operator's license obligations and for dispute resolution purposes.
• Support correspondence: Retained for a reasonable period to enable resolution of follow-up queries, typically two years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

09. Security Measures

The Operator implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration or destruction. Key security controls include:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive stored data including identity documents and payment references;
• Two-factor authentication (2FA) available on all accounts;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability management practices;
• Secure document submission portal for KYC — HTTPS only, no uploads via email or chat.

While we take all reasonable precautions, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to enable core platform functionality, analyze usage patterns and, where applicable, deliver relevant communications. The principal categories of cookies we use are:

You can manage your cookie preferences through your browser settings or through the cookie consent banner displayed on your first visit to the Platform. Note that disabling strictly necessary cookies will affect the Platform's ability to function correctly.

11. Minors

The Platform is strictly intended for adults aged 18 years or over, or the higher minimum age required by the Operator's license jurisdiction. We do not knowingly collect or process personal data belonging to minors.

Where the Operator discovers, or has reasonable grounds to believe, that personal data has been provided by or on behalf of a person under the minimum age requirement, the relevant account will be immediately suspended, all personal data associated with that account will be deleted (subject to any overriding legal retention requirement) and any deposited funds will be returned via the original payment method.

If you are a parent or guardian and believe that a minor has provided their data to t2jbet, please contact us immediately at the address in Section 15.

12. Your Rights

Subject to the law of the Operator's license jurisdiction and any overriding legal obligations, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us as set out in Section 15. We will respond to verified requests within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing a data rights request to prevent unauthorized disclosure.

13. Marketing Communications

Where you have given explicit consent during registration or through your account settings, t2jbet may send you marketing communications about promotions, bonus offers, new games and platform updates. These communications may be delivered by email, SMS or in-platform notification.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your account settings;
• Clicking the "unsubscribe" link included in any marketing email;
• Contacting our support team directly and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal, nor does it affect transactional or account-related communications that are necessary for the operation of your account.

14. Policy Amendments

The Operator reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or regulatory requirements. When material changes are made, we will:

• Update the "Last updated" date at the top of this Policy;
• Publish the revised Policy on this page;
• Where changes are significant, notify registered Users by email to their registered address or via an in-platform notification.

Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically. The current version of this Policy was last updated on 1 January 2026.

15. Contact & Complaints

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact us using the details below. Please include "Data Protection" in the subject line of any privacy-related enquiry.