Introduction
This Privacy Policy ("Policy") describes the information practices of 1jj9 ("the Platform", "we", "us" or "our") in connection with the website located at https://1jj9.cam and all associated services, tools and features. It applies to all users ("you", "your") who access or interact with the Platform in any capacity, whether as a registered account holder or as an unregistered visitor.
1jj9 is an English-language online betting and casino information platform serving Pakistani users. Given that our primary audience includes individuals in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities across Pakistan, we have written this Policy in plain, accessible English to ensure that our data practices are clearly understood by the people most directly affected.
This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform. By accessing or using 1jj9, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, you should discontinue use of the Platform.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, email address, IP address, device identifiers and financial account details.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction, whether by automated or manual means.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is 1jj9.
- "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller pursuant to a data processing agreement.
- "Sensitive Personal Data" means a subset of Personal Data that warrants heightened protection, including identity document numbers, financial details and KYC verification materials.
- "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, security and analytics.
- "KYC" (Know Your Customer) refers to mandatory identity and address verification procedures required under applicable anti-money laundering (AML) and regulatory compliance frameworks.
- "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
Personal Data We Collect
We collect Personal Data through several channels: information you provide directly during account registration or support interactions; data generated automatically through your use of the Platform; and data received from authorised third-party service providers as part of verification or payment processing. The categories of Personal Data we collect are set out below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Registration form; KYC verification submission |
| Contact Data | Email address, mobile number, residential address | Registration form; account settings updates |
| Financial Data | Payment method details (e.g. Easypaisa/JazzCash account reference, bank account details for Raast, HBL, UBL, Meezan Bank, Bank Alfalah or crypto wallet address); transaction history | Deposit / withdrawal requests; payment processor integration |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, geolocation (country/city level only) | Automatic collection via server logs and analytics tools |
| Usage Data | Pages visited, game categories accessed, betting market interactions, session timestamps | Platform analytics; server-side logging |
| Communication Data | Support ticket contents, live chat transcripts, email correspondence | Support interactions initiated by you |
| KYC Document Data | Copies of identity documents (CNIC, passport, utility bill) submitted for verification | Uploaded by you during KYC verification; third-party identity verification provider |
How We Use Your Personal Data
We process Personal Data only for specific, documented purposes. We do not use your data for purposes incompatible with those stated at the point of collection. The primary purposes for which we use Personal Data are as follows:
- Account Management: To create, maintain and administer your registered account, including authentication, session management and account security controls such as two-factor authentication.
- Identity Verification (KYC): To verify your identity, age and address in compliance with applicable anti-money laundering (AML) and know-your-customer regulatory requirements. Age verification is mandatory — we do not permit access by individuals under the minimum age threshold.
- Payment Processing: To process deposit and withdrawal transactions, verify payment method ownership, detect and prevent fraudulent transactions, and comply with financial crime prevention obligations.
- Service Delivery: To provide access to the platform's content, betting markets, game categories, live casino, bonus information and responsible gambling tools.
- Customer Support: To respond to your support queries, investigate complaints, process dispute resolution requests and maintain a record of support interactions for quality assurance purposes.
- Legal Compliance: To comply with applicable legal obligations, including record-keeping requirements under AML legislation, responding to lawful requests from regulatory authorities or law enforcement, and enforcing our Terms and Conditions.
- Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, account abuse, multi-accounting, bonus misuse, money laundering and other prohibited conduct.
- Platform Analytics & Improvement: To analyse aggregated usage patterns, identify technical issues, improve the platform's functionality and user experience, and inform content development decisions.
- Responsible Gambling: To monitor gambling behaviour for indicators of problem gambling and to administer self-imposed limit and self-exclusion requests. We may contact users proactively where responsible gambling indicators are identified.
- Communications: To send you transactional communications (account notifications, withdrawal confirmations, security alerts) and, where you have provided explicit consent, promotional communications about offers and platform updates.
Legal Basis for Processing
Where data protection law requires that processing be based on a defined legal ground, we rely on the following bases for our processing activities:
- Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have entered into with us, including account management, payment processing and service delivery.
- Legal Obligation: Processing required to comply with applicable law, including AML/KYC obligations, tax record-keeping and responses to lawful enforcement requests.
- Legitimate Interests: Processing carried out for our legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring and platform analytics. We conduct a balancing assessment before relying on legitimate interests.
- Consent: Processing based on your freely given, informed and specific consent — including promotional communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time by contacting our support team or by using the account settings controls available on the platform. Withdrawal of consent does not affect the validity of processing conducted prior to withdrawal.
Cookies & Tracking Technologies
The 1jj9 Platform uses cookies and similar tracking technologies to support essential platform functionality, security and performance analytics. We categorise our cookie usage as follows:
- Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens and security session identifiers. These cookies cannot be disabled without impacting platform functionality.
- Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including page visit counts, session durations and navigation paths. This data informs platform improvements. These cookies do not identify you personally.
- Functional Cookies: Used to remember your preferences, such as language settings, odds format selection and interface configuration, to provide a more personalised experience across sessions.
- Non-Essential / Marketing Cookies: We do not place third-party advertising cookies or cross-site tracking cookies without your explicit consent. Where we use any non-essential cookies, you will be presented with a clear consent mechanism upon first visit.
You may manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing core platform features. For guidance on managing cookies in common browsers (Chrome, Firefox, Safari, Edge), please refer to your browser's help documentation.
Data Sharing & Third-Party Disclosure
1jj9 does not sell, rent or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:
- Identity Verification (KYC) Providers: We share identity document data with authorised third-party KYC verification service providers to fulfil our regulatory obligations. These providers are bound by data processing agreements and may not use your data for their own purposes.
- Payment Service Providers: We share transaction-related data with payment processors to facilitate deposits and withdrawals. The specific data shared is limited to what is technically required to complete the transaction. Payment provider references such as Easypaisa, JazzCash, Raast and bank transfer systems (HBL, UBL, Meezan Bank, Bank Alfalah) are contextual references — sharing with specific providers only occurs where they are integrated into the live cashier.
- Fraud Prevention & AML Partners: We may share data with third-party fraud detection services and financial intelligence systems to comply with AML obligations and to protect the platform from financial crime.
- Legal & Regulatory Disclosure: We may disclose Personal Data to competent courts, law enforcement agencies, regulatory bodies or other public authorities where required to do so by applicable law, valid legal process or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
- Technology Service Providers: We engage third-party cloud hosting, analytics and cybersecurity providers who may process Personal Data on our behalf as Data Processors. All such providers are subject to contractual data protection obligations.
- Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets involving 1jj9, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. Users will be notified of any such transfer.
Your Data Rights
Subject to applicable law and certain exceptions (including our legal retention obligations under AML/KYC frameworks), you have the following rights with respect to your Personal Data held by 1jj9. To exercise any of these rights, contact our support team at the details set out in Section 15.
Right of Access
You have the right to request a copy of the Personal Data we hold about you, together with information about how we use it. We will respond to access requests within 30 days.
Right to Rectification
You have the right to request correction of inaccurate or incomplete Personal Data. You may also update certain information directly through your account settings.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to our legal retention obligations.
Right to Restriction
You have the right to request that we restrict processing of your Personal Data in certain circumstances, such as where you contest its accuracy or where you have objected to processing pending our assessment.
Right to Portability
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
Data Retention
We retain Personal Data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Our general retention periods are as follows:
- Account Data (active accounts): Retained for the duration of the account relationship plus a minimum post-closure period required by applicable AML and KYC regulations — typically five (5) years from account closure.
- KYC / Identity Documents: Retained for a minimum of five (5) years from the date of verification completion or account closure, whichever is later, in accordance with applicable AML record-keeping obligations.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for AML compliance purposes.
- Support Communications: Retained for a minimum of two (2) years from the date of the last interaction, or longer where a legal dispute is ongoing.
- Technical / Server Log Data: Retained for a maximum of twelve (12) months, after which it is either purged or anonymised.
- Marketing Consent Records: Retained until consent is withdrawn or the purpose for which consent was given is fulfilled, plus one (1) additional year for compliance evidence purposes.
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for aggregated analytical purposes.
International Data Transfers
As an internationally operated platform, 1jj9 may process and store Personal Data on servers located outside of Pakistan. Some of our third-party service providers — including cloud hosting, identity verification and fraud prevention partners — may also process data from servers in other jurisdictions.
Where Personal Data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include contractual data transfer mechanisms, standard contractual clauses or other legally recognised instruments.
Pakistan Regulatory Context: Pakistan does not have a comprehensive data protection statute equivalent to the EU GDPR as of the effective date of this Policy. We apply data protection principles consistent with international best practice regardless of the applicable legal framework in any given jurisdiction, and will update our practices if and when Pakistani data protection legislation comes into force.
Children's Privacy
18+ The 1jj9 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the applicable operator or licence jurisdiction. We do not knowingly collect Personal Data from individuals under the minimum age threshold.
If we become aware that Personal Data has been collected from a person below the minimum age, we will take immediate steps to delete that data and to close the associated account. Age verification is a mandatory step in our account registration process and is enforced through KYC procedures.
If you are the parent or guardian of a minor and have reason to believe that your child has submitted Personal Data to 1jj9, please contact us immediately at the details in Section 15. We take all such reports seriously and will respond promptly.
Security Measures
We implement a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These include:
- TLS Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) to prevent interception.
- Encryption at Rest: Sensitive Personal Data stored on our systems, including identity documents and financial details, is encrypted using industry-standard algorithms.
- Access Controls: Access to Personal Data is restricted on a need-to-know basis through role-based access controls. All staff with access to user data are subject to confidentiality obligations.
- Two-Factor Authentication: Two-factor authentication (2FA) is available for user accounts and is required for administrative access to backend systems.
- Regular Security Audits: Our infrastructure and applications are subject to periodic security assessments, including vulnerability scanning and penetration testing by qualified security professionals.
- Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify affected users and relevant authorities within the timeframes required by applicable law.
Third-Party Links & Services
The 1jj9 Platform does not include links to third-party websites as a matter of editorial policy, in order to maintain a controlled and transparent user environment. Where any integration with third-party services is necessary for platform operation (such as payment processors or KYC providers), those services are governed by their own privacy policies in addition to the data processing agreements we hold with them.
We are not responsible for the privacy practices of any third-party services that you access independently outside of the 1jj9 Platform. We encourage users to review the privacy policies of any third-party services they interact with in connection with their betting activities.
Amendments to This Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform functionality. We will publish the revised Policy on this page with an updated effective date.
Where changes are material — particularly those that expand the categories of data collected, introduce new processing purposes, or affect your rights — we will use reasonable efforts to notify registered users via email or on-platform notification prior to the change taking effect.
Your continued use of the 1jj9 Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated practices. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Privacy team through the following channel. We respond to all privacy-related enquiries in English.