jj17 Privacy Policy

This Privacy Policy ("Policy") is issued by jj17 ("we", "us", "our" or the "Platform"), accessible at https://jj17.cam. It applies to all users ("you", "your" or "User") who access or use the jj17 website, its mobile-optimised interfaces and any associated services or content.

jj17 is an English-language online gaming information platform designed for Pakistani users. We provide educational guides, operator reviews, bonus comparisons, payment method information and responsible gambling resources. We do not operate a real-money gambling service and do not accept deposits or wagers directly. Accordingly, some data processing activities described in this Policy relate to the informational and analytical functions of the Platform rather than to financial transaction processing.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together form the complete agreement governing your use of jj17.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• Personal Data means any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, device identifiers and location data.
• Processing means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• Data Controller means the entity that determines the purposes and means of processing Personal Data — in this case, jj17.
• Data Processor means a third-party service provider that processes Personal Data on behalf of and under the instructions of jj17.
• Cookies means small text files placed on your device when you access the Platform, used to store information about your visit.
• KYC Data means identity verification documentation including government-issued photo identification (such as a CNIC in Pakistan), proof of address and source-of-funds documentation.

For the purposes of this Privacy Policy, jj17 acts as the Data Controller in respect of Personal Data collected through the Platform. jj17 is responsible for determining the purposes and means of processing your Personal Data and for ensuring that such processing is carried out lawfully, fairly and transparently.

jj17 does not have a registered office in Pakistan. Users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or any other Pakistani city should be aware that their data may be processed in jurisdictions outside Pakistan. By using the Platform, you acknowledge and consent to such international processing where applicable.

jj17 collects Personal Data through two principal channels: data you provide to us directly and data we collect automatically through your use of the Platform.

4.1 Data You Provide Directly

4.2 Data Collected Automatically

jj17 processes Personal Data only where a lawful basis for doing so exists. The primary lawful bases we rely upon are as follows:

• Contract performance: Processing necessary to provide the services described in our Terms & Conditions, including account management and customer support.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, KYC verification and fraud prevention.
• Legitimate interests: Processing necessary for our legitimate interests in operating a secure, functional platform, preventing fraud and improving user experience — provided those interests do not override your fundamental rights.
• Consent: Where we rely on consent — for example, for non-essential cookies or marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing.

jj17 uses Personal Data collected from Users for the following purposes:

• To create and manage your jj17 user account;
• To process and verify your identity in accordance with KYC requirements;
• To provide customer support via email and live chat;
• To detect and prevent fraud, money laundering, collusion and other prohibited activities;
• To analyse Platform usage patterns and improve the user experience;
• To send transactional communications such as account confirmations and security alerts;
• To enforce our Terms & Conditions and other applicable policies;
• To comply with applicable legal and regulatory obligations;
• To support responsible gambling tools including limit-setting, self-exclusion and activity monitoring.

jj17 uses cookies and similar tracking technologies to operate the Platform effectively, analyse usage and personalise your experience. Cookies are small data files stored on your device when you visit a website. They do not harm your device and cannot access other files on it.

7.1 Types of Cookies We Use

You may manage cookie settings through your browser's built-in tools. Disabling strictly necessary cookies may impair Platform functionality. For further guidance on managing cookies, refer to your browser's help documentation.

jj17 does not sell Personal Data to third parties. We may share your Personal Data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Service Providers (Data Processors): Companies that provide services on our behalf, including analytics platforms, cloud hosting providers, customer support tools and identity verification services. These parties are bound by data processing agreements and may not use your data for their own purposes.
• Payment Processing Partners: Where deposit or withdrawal processing is facilitated, relevant transaction data may be shared with payment service providers. Payment provider names referenced on jj17 (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are contextual references only and are not data-sharing partners unless explicitly stated otherwise.
• Regulatory & Law Enforcement Authorities: Where required by law, court order or competent regulatory authority, jj17 may disclose Personal Data to comply with legal obligations, prevent fraud or protect the rights and safety of users and the Platform.
• Business Transfers: In the event of a merger, acquisition or sale of substantially all of jj17's assets, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

jj17 operates with cloud infrastructure and service providers that may be located outside Pakistan. Your Personal Data may therefore be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as applicable in your jurisdiction.

Where Personal Data is transferred internationally, jj17 takes reasonable steps to ensure that appropriate safeguards are in place, including the use of standard contractual clauses, data processing agreements with service providers and reliance on adequacy decisions where available.

jj17 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes and enforce our agreements.

• Account data is retained for the duration of the active account relationship and for a period following account closure as required by legal and regulatory obligations.
• KYC documentation is retained for a minimum period as required under applicable anti-money laundering regulations.
• Transaction records are retained as required by financial record-keeping obligations in the operator's licensing jurisdiction.
• Usage and analytics data is retained in aggregated or anonymised form indefinitely for platform improvement purposes.
• Marketing preference data is retained until consent is withdrawn or the account is closed.

When Personal Data is no longer required for any lawful purpose, it is securely deleted or anonymised so that it can no longer be attributed to any individual.

jj17 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Incident response procedures for detecting, reporting and addressing data security incidents.

Despite these measures, no data transmission over the internet or storage system is completely secure. jj17 cannot guarantee absolute security of your Personal Data and is not liable for unauthorised access resulting from circumstances beyond our reasonable control.

Subject to applicable law, you may exercise the following rights in respect of your Personal Data held by jj17 at any time:

• Access: Request a copy of the Personal Data we hold about you;
• Rectification: Request correction of inaccurate or incomplete Personal Data;
• Erasure ("Right to be Forgotten"): Request deletion of your Personal Data where there is no overriding legitimate interest or legal obligation to retain it;
• Restriction: Request that we restrict processing of your data in certain circumstances;
• Portability: Receive your Personal Data in a structured, machine-readable format for transfer to another controller;
• Objection: Object to processing based on legitimate interests or direct marketing purposes;
• Consent Withdrawal: Withdraw consent at any time where processing is consent-based, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact us using the details set out in Section 16. We will respond to all rights requests within 30 days of receipt. Where a request is complex or there are a large number of requests, we may extend this period by a further 30 days, in which case we will notify you accordingly.

jj17 is an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by the operator's licence jurisdiction. If you are under the applicable minimum age, you must not access or use jj17 or provide any Personal Data to us.

If jj17 becomes aware that it has inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have provided Personal Data to jj17, please contact us immediately using the details in Section 16.

The jj17 Platform may contain references to or contextual discussion of third-party platforms, payment providers and services. jj17 does not control the privacy practices of any third party and is not responsible for the content or privacy policies of any external platform.

Payment method names referenced on jj17 — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are familiar Pakistani financial references used for informational and contextual purposes only. These providers' own privacy policies govern how they handle data associated with their own services. jj17 does not represent that these providers endorse gambling or this Platform.

jj17 reserves the right to update or revise this Privacy Policy at any time. Material changes to the Policy will be communicated to registered Users via a notice on the Platform or by email to the registered account address, where applicable. The "Last updated" date at the top of this page will reflect the date of the most recent amendment.

Continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and may request closure of your account by contacting us as described in Section 16.

If you have any questions about this Privacy Policy, wish to exercise your data rights or have a concern about how jj17 handles your Personal Data, please contact our privacy team using the details below.

• Email (plain text — not a clickable link): [email protected]
• Live chat: Available 24/7 via the on-site chat widget (operator-provided). Please indicate in your opening message that your enquiry relates to a privacy or data subject request.

We aim to acknowledge all privacy enquiries within 5 business days and to provide a substantive response within 30 calendar days. For complex requests we may extend this to 60 days, with prior written notification.