IJJGame Privacy Policy — How We Protect Your Personal Data

IJJGame is an online gaming and sports betting platform operated under a valid international gaming licence. For the purposes of this Privacy Policy, IJJGame is the data controller — meaning we determine why and how your personal data is processed.

If you have any questions about this Policy, want to exercise any of your data rights, or need to report a privacy concern, you can contact us at:

• Email: support@ijjgame.app
• Subject line: "Privacy Policy Enquiry"
• Response time: Within 48 hours on working days

For urgent account security matters, the IJJGame live chat support channel is available 24 hours a day, 7 days a week and can action account freezes and security queries in real time.

IJJGame collects personal data in two broad categories: data you provide directly and data we generate or collect automatically through your use of the platform.

IJJGame collects your personal data through the following channels:

• Direct submission: When you register an account, complete the verification process, make a deposit or withdrawal request, contact support or respond to a survey, you provide data directly to IJJGame.
• Automated technical collection: When you access the platform, our servers automatically log your IP address, device type, browser information and session behaviour. This happens on all platform access, including before you log in.
• Payment processors: When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, our payment processing partners pass transaction confirmation data back to IJJGame, including transaction reference numbers and masked account identifiers.
• Game providers: Our third-party game providers generate session and result data that is passed back to IJJGame for account crediting purposes. This data relates to bets placed and results achieved — it does not include any additional personal data beyond what IJJGame already holds.
• Identity verification services: Where additional identity checks are required, IJJGame may use a third-party identity verification service that processes your submitted documents to confirm their authenticity.

IJJGame uses your personal data only for the purposes set out below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without your explicit consent.

• Account operation: To create, maintain and manage your player account, process your bets and credit your winnings accurately.
• Payment processing: To process deposits and withdrawals securely through your chosen Pakistani payment method, verify that payment accounts are in your name and prevent fraudulent transactions.
• Identity verification (KYC): To verify your age (18+) and identity as required by our gaming licence obligations. This is a non-negotiable legal requirement, not optional.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, account takeovers, money laundering and terms violations. This includes automated monitoring of unusual account or betting patterns.
• Responsible gaming: To operate the responsible gaming tools you set (deposit limits, loss limits, self-exclusion) and to identify patterns that may suggest a player is experiencing gambling-related harm.
• Legal compliance: To meet our obligations under applicable gaming regulations, anti-money laundering requirements and any lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the IJJGame platform, identify technical issues and develop new features. Aggregated data does not identify individual players.
• Customer communications: To respond to your support queries, send you account-related notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, to send promotional communications about IJJGame offers.

IJJGame processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to fulfil the contract between you and IJJGame — primarily operating your account, processing transactions and delivering the gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable laws and regulations, including gaming licence requirements, anti-money laundering obligations and age verification mandates.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring and aggregated analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, where you have explicitly opted in. You can withdraw this consent at any time without it affecting your ability to use the platform.

IJJGame shares personal data with third parties only where necessary and only under appropriate data protection terms. We do not sell your data to any third party. The categories of third parties who may receive your data are:

• Game providers: To enable you to play their games on the IJJGame platform. Providers receive a unique player identifier and session data. They do not receive your full name, payment details or identity documents.
• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the transaction details needed to process your deposit or withdrawal. They operate under their own regulated data protection frameworks.
• Identity verification services: Where a third-party KYC provider is used to verify your identity documents, they process your submitted data under strict contractual confidentiality obligations and do not retain your documents beyond the verification period.
• IT and security infrastructure providers: Third-party hosting, CDN and security providers may process technical data (IP addresses, session logs) as part of operating IJJGame's infrastructure. These providers are contractually prohibited from using the data for any other purpose.
• Regulatory and legal authorities: IJJGame is legally required to share certain data with its licensing authority, and may be required to share data with law enforcement or other government bodies under a valid legal order. IJJGame will challenge requests that appear overbroad or unlawful before complying.

IJJGame takes payment data security particularly seriously given the financial nature of the platform. The following practices govern how your financial information is handled:

• Full payment card numbers are never stored on IJJGame's servers. Only the last four digits are retained for account display purposes.
• Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and are only accessed when processing a transaction.
• Bank account details provided for IBFT withdrawals are verified against your identity data and stored in encrypted form with access limited to the payments team.
• All payment transactions are processed through PCI-DSS compliant gateways. IJJGame itself does not handle raw card transaction data.
• Transaction history (deposit and withdrawal records) is retained for a minimum of 5 years as required by anti-money laundering regulations.

For further detail on deposit and withdrawal processes, timelines and methods, please see the Deposit and Withdrawal page.

IJJGame uses cookies and similar tracking technologies to operate the platform and improve your experience. The types of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in while navigating between pages, security tokens and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories and last-used bet amounts. Disabling these won't break the platform but will mean your preferences reset each session.
• Analytical cookies: Used to collect aggregated, anonymised data about how players use the platform — which pages are visited most, where players drop off in registration flows, how different game categories perform. This data is used solely to improve the product.
• Session security cookies: Used to detect and prevent session hijacking, cross-site request forgery and other session-based security threats.

IJJGame does not use third-party advertising or retargeting cookies. You will not see IJJGame ads following you around other websites based on your gaming behaviour.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use IJJGame and may prevent you from logging in.

Protecting your personal data is not just a compliance requirement at IJJGame — it is a genuine operational priority. The technical and organisational measures we have in place include:

• Encryption in transit: All data between your device and IJJGame's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive personal data fields (payment details, identity document data, passwords) are encrypted in our databases using strong encryption keys that are stored separately from the data.
• Access controls: IJJGame staff access to personal data is strictly limited on a need-to-know basis. Privileged access requires multi-factor authentication and is logged comprehensively.
• Penetration testing: The platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: IJJGame maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified within the timeframe required by applicable regulations.
• Staff training: All IJJGame staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.

IJJGame retains personal data for only as long as necessary for the purpose it was collected, or as required by law. Our standard retention periods are:

• Active account data: Retained for the duration of your account plus 5 years after account closure, to meet anti-money laundering and gaming licence record-keeping obligations.
• Transaction records: Minimum 5 years from the date of the transaction, as required by financial regulations applicable to our licensing jurisdiction.
• Identity verification documents: Retained for the duration of your account plus 5 years after closure. Documents are securely deleted once the retention period expires.
• Support communications: Chat transcripts and email correspondence are retained for 2 years from the date of the interaction, then securely deleted.
• Technical logs (IP, session data): Retained for 12 months for security monitoring purposes, then automatically purged.
• Marketing consent records: Retained for the duration of your consent plus 2 years after withdrawal, as evidence of compliance with marketing consent requirements.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual player.

As an IJJGame player, you have the following rights over your personal data. You can exercise any of these rights by contacting support@ijjgame.app with the subject "Data Rights Request":

IJJGame will not charge a fee for exercising your data rights and will not penalise you in any way — including restricting your account — for making a rights request. If your request is refused, we will explain why in writing and inform you of any available escalation routes.

IJJGame does not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been registered by or is being used by a person under 18, the account will be immediately suspended, all balances will be forfeited, and — where the circumstances suggest parental unawareness — the parent or guardian will be notified.

If you are a parent or guardian and believe your child has registered an account at IJJGame, please contact support@ijjgame.app immediately with "Minor Account" in the subject line. We will investigate and take appropriate action as a priority.

IJJGame will only send you promotional communications — including bonus offers, new game announcements and special event notifications — if you have explicitly opted in during registration or through your account settings. We do not send unsolicited marketing messages.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from IJJGame.
• Updating your communication preferences in your IJJGame account settings.
• Contacting support@ijjgame.app with "Unsubscribe" in the subject line.

Opting out of marketing does not affect transactional communications — you will still receive account notifications, deposit confirmations, withdrawal updates and security alerts, as these are necessary for operating your account rather than promotional in nature.

IJJGame does not share your contact details with third parties for their own marketing purposes. The same opt-out provisions apply across all communication channels including SMS, email and in-platform notifications.

IJJGame may update this Privacy Policy from time to time as the platform evolves, regulations change or our data practices are refined. The "Last Updated" date at the top of this page always reflects when the most recent version took effect.

For material changes — ones that meaningfully affect how your data is used or your rights in relation to it — IJJGame will provide at least 7 days' notice via your registered email address and/or an in-platform notification before the changes take effect.

Minor changes such as clarifications, corrected links or formatting updates may be made without notice but will be reflected in the updated date. Continued use of the IJJGame platform after a policy update takes effect constitutes acceptance of the revised Policy.

We recommend revisiting this page periodically so you always know exactly how your data is being handled. The policy is written to be genuinely readable — not to obscure anything.

For any privacy-related query, data rights request or concern, reach the IJJGame team through the following channels:

• Email: support@ijjgame.app (subject: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 through the IJJGame platform for urgent matters
• Response time: Privacy queries are handled within 48 hours; formal data rights requests within 30 days as required by applicable data protection standards

If you are not satisfied with IJJGame's response to a privacy concern after going through the internal process, you may escalate the matter to our licensing authority's player dispute resolution service. Details are available on request from the support team.