jc92 Privacy Policy

01 Introduction

jc92 is Pakistan's premier online casino and sports betting platform, providing cricket betting, live casino, premium slots, fish arcade games, and lottery services to Pakistani players aged 21 and above. As part of delivering these services, jc92 necessarily collects and processes certain personal data about its users.

This Privacy Policy ("Policy") sets out how jc92 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the jc92 website at https://jc92.bio and any associated mobile or web applications (collectively, the "Platform").

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with jc92. In the event of any conflict between this Policy and those documents on the subject of personal data, this Privacy Policy shall take precedence.

We are committed to handling your personal data with the highest standards of integrity, transparency, and security. We do not sell your personal data to third-party marketers, and we only share your information in the specific, limited circumstances described in this Policy.

02 Data Controller

For the purposes of applicable data protection law, jc92 acts as the data controller in respect of all personal data collected from users of the Platform. This means that jc92 determines the purposes for which and the manner in which personal data is processed.

Where jc92 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or analytics platforms — those providers act as data processors operating under jc92's instructions and are contractually bound to comply with applicable data protection obligations.

03 Data We Collect

jc92 collects personal data that is necessary to provide our gaming and betting services, comply with legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for mandatory age verification — all users must be 21 or above).
• Pakistani CNIC number or passport number, as provided during KYC verification.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi).
• Email address and mobile phone number.

3.2 Financial Data

• Payment method details (JazzCash account number, EasyPaisa wallet, HBL, UBL, or Meezan Bank account details).
• Transaction history including deposits, withdrawals, and gaming account balance.
• Verification documents related to payment sources (e.g., bank statements).

3.3 Account & Gaming Data

• Username and encrypted account credentials.
• Gaming activity including bets placed, games played, session durations, win/loss records, and betting history.
• Bonus and promotion usage history.
• Responsible gaming settings including deposit limits, loss limits, and self-exclusion records.

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type, and version.
• Pages visited, features accessed, time spent on the Platform, and click-path data.
• Cookie identifiers and session tokens.

3.5 Communications Data

• Records of your communications with jc92 customer support, including chat logs, email correspondence, and support ticket content.
• Survey or feedback responses where voluntarily provided.

04 How We Collect Data

jc92 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion.
• Automatically: As you browse and use the jc92 Platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. This data is collected regardless of whether you are logged in.
• From third-party verification providers: During the KYC process, jc92 may receive confirmation or supplementary data from identity verification and anti-fraud service providers.
• From payment processors: When you make deposits or withdrawal requests via JazzCash, EasyPaisa, or partner banks, we receive transaction confirmation data from those providers necessary to credit or debit your account.
• From analytics platforms: Aggregated and anonymised usage analytics may be received from third-party analytics providers integrated into the jc92 Platform to help us understand how the Platform is used and to improve it.

05 Purpose & Legal Basis

jc92 processes your personal data only for specific, lawful purposes. The table below summarises the primary purposes for which we process personal data and the corresponding legal basis for each:

Where jc92 relies on "legitimate interest" as the legal basis, we have assessed that our interest in processing the data is not outweighed by your interests or fundamental rights, taking into account the nature of the data, the context of processing, and the safeguards applied.

06 Sharing Your Data

jc92 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following specific, limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposit or withdrawal requests. These providers operate under their own privacy policies and applicable financial regulations.
• KYC & Identity Verification Providers: Third-party KYC service providers receive your identity documents and personal details for the sole purpose of verifying your identity and age in compliance with our legal obligations.
• Anti-Fraud & AML Platforms: We may share relevant transactional and behavioural data with anti-fraud and anti-money laundering screening services to detect and prevent financial crime on the Platform.
• Technology & Infrastructure Providers: Cloud hosting, database, and security service providers that underpin the jc92 Platform may have access to data stored on the systems they maintain, under strict data processing agreements.
• Analytics Providers: Aggregated and, where possible, anonymised usage data is shared with analytics providers to help us understand platform performance. We do not share personally identifiable data for analytics purposes.
• Law Enforcement & Regulatory Authorities: jc92 will disclose personal data to government authorities, law enforcement agencies, or financial intelligence units where required to do so by law, court order, or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of jc92's business, personal data held by jc92 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

07 International Transfers

Some of jc92's third-party service providers may be located in, or process data from, countries outside Pakistan. Where personal data is transferred internationally, jc92 takes steps to ensure that the receiving party provides an adequate level of data protection through one or more of the following mechanisms:

• Contractual clauses that impose data protection obligations equivalent to those applicable under this Policy.
• Selection of service providers that maintain recognised international data security certifications (such as ISO 27001).
• Processing agreements that restrict the recipient's use of your data to the specific purpose for which it was shared.

Where technically and commercially feasible, jc92 prefers to use service providers that store and process data within Pakistan or in jurisdictions with comparable data protection standards.

08 Data Retention

jc92 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

Once the applicable retention period has expired, jc92 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where deletion is not immediately possible due to technical constraints (for example, data held in backup archives), jc92 will isolate the data from further processing until deletion can be completed.

09 Cookies & Tracking Technologies

jc92 uses cookies and similar tracking technologies (such as web beacons and session tokens) to operate the Platform, remember your preferences, maintain your logged-in session, and understand how users interact with our services.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in to your jc92 account. These cookies cannot be disabled without rendering the Platform unusable.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limit configurations so that you do not need to re-enter these on each visit.
• Analytics Cookies: Collect aggregated and anonymised data about how users navigate the jc92 Platform. This data helps us identify popular features, spot errors, and improve the overall user experience.
• Security Cookies: Assist in detecting and preventing fraudulent activity and unauthorised account access, including CSRF protection tokens and device fingerprinting for login anomaly detection.

You may manage or disable non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the jc92 Platform. A full cookie management option is also available through your jc92 account settings once logged in.

10 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by jc92. To exercise any of these rights, please contact jc92 support using the contact details in Section 15.

• Right of Access: You have the right to request a copy of the personal data that jc92 holds about you. We will respond to access requests within a reasonable timeframe and without undue charge in ordinary circumstances.
• Right to Rectification: If any personal data jc92 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update many account details directly from within your jc92 account dashboard.
• Right to Erasure: In certain circumstances, you may request that jc92 delete your personal data. Note that this right is not absolute — jc92 may be required to retain certain data for legal, regulatory, or AML compliance purposes even after your account is closed.
• Right to Restriction of Processing: You may request that jc92 restrict the processing of your personal data in specific circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that jc92 provide your personal data to you in a structured, machine-readable format.
• Right to Object: You may object to jc92's processing of your personal data where that processing is based on legitimate interests. jc92 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Children & Minors

jc92 is strictly an adult platform. All real-money gaming and betting services are exclusively available to users who are 21 years of age or older. jc92 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If jc92 becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation of age during registration or any other means — we will immediately suspend the account, delete all associated personal data to the extent permissible by our legal obligations, and forfeit any balance in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have created a jc92 account without your knowledge, please contact us immediately at [email protected] (plain text — not a link). We will investigate and take immediate action.

12 Security Measures

jc92 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the jc92 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when accessing jc92.bio.
• Password Hashing: Account passwords are stored using strong, one-way cryptographic hashing algorithms. jc92 staff cannot view your password in plain text at any time.
• Access Controls: Personal data is accessible only to jc92 staff members who have a legitimate business need to access it. Role-based access controls and audit logging are in place across all internal systems.
• Two-Factor Authentication: jc92 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of protection against unauthorised login.
• Regular Security Audits: jc92 conducts periodic security assessments and penetration tests on its Platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response: In the event of a data security incident, jc92 has a formal incident response procedure in place. Affected users will be notified in a timely manner where required by applicable law.

While jc92 takes all reasonable steps to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying jc92 immediately if you suspect any unauthorised access to your account.

13 Marketing Communications

jc92 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, sporting events (such as PSL matches), and platform updates. Marketing communications are sent only where you have provided your explicit consent to receive them, either during account registration or through your account communication preferences.

You may opt out of marketing communications at any time by:

• Updating your communication preferences directly in your jc92 account dashboard.
• Clicking the "Unsubscribe" link included at the bottom of any marketing email.
• Contacting jc92 support and requesting removal from marketing lists.

Please note that opting out of marketing communications does not affect the delivery of transactional or service-related notifications, such as deposit confirmations, withdrawal processing updates, account security alerts, or mandatory responsible gaming communications. These are sent as part of the contracted service and cannot be disabled while your account is active.

14 Changes to This Policy

jc92 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When a material change is made to this Policy, we will:

• Publish the updated Policy on this page with a revised effective date clearly displayed at the top of the document.
• Notify registered players via email or a prominent in-platform notification prior to the change taking effect, where the change materially affects how we use your personal data.

Your continued use of the jc92 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure in accordance with Section 10 of our Terms & Conditions.

We recommend reviewing this Privacy Policy periodically. The "Effective Date" at the top of this page will always reflect when the document was last updated.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by jc92, please do not hesitate to get in touch with our support team. We aim to respond to all privacy-related enquiries within 30 days of receipt.

You may also use the contact below to exercise any of the data subject rights described in Section 10 of this Policy, including requests for access, rectification, erasure, or portability of your personal data.

Please include your registered jc92 account email address in any privacy-related communication so that we can verify your identity and locate your account records promptly. jc92 will never ask you for your account password when responding to a privacy enquiry.