j1999 Privacy Policy

This Privacy Policy is issued by j1999 ("j1999", "we", "us", "our"), the operator of the online sportsbook and casino platform accessible at j1999.bet and all associated subdomains, mobile-optimised versions, and applications (collectively, the "Platform").

For the purposes of this Policy, j1999 is the data controller in respect of personal data collected from players, prospective players, and visitors to the Platform. This means j1999 determines the purposes and means by which your personal data is processed.

j1999 operates under an internationally recognised gaming licence and is subject to the anti-money-laundering, know-your-customer, and data protection obligations applicable within its licensing jurisdiction. Where Pakistani law imposes additional data protection requirements on operators processing the data of Pakistani residents, j1999 will comply with those requirements to the extent they are applicable.

j1999 collects personal data from you in three main ways: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party sources such as payment processors and identity verification providers.

j1999 does not collect special categories of sensitive personal data (such as health information, biometric identifiers beyond a selfie for identity verification, racial or ethnic origin, or political opinions) except where this is strictly required by anti-money-laundering regulations — for example, where a Politically Exposed Person (PEP) screening check returns a positive result and enhanced due diligence documentation is required.

j1999 uses your personal data only for the purposes set out below. We do not use your data for automated decision-making that produces significant legal effects on you without human review.

• Account Management: To create, operate, and maintain your j1999 player account, including processing login authentication and maintaining account history.
• Identity Verification (KYC): To verify your identity and age (21+) as required by our licensing obligations and anti-money-laundering regulations applicable in our operating jurisdiction.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20, and to maintain accurate financial records of all transactions on your account.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the j1999 Terms and Conditions.
• Legal Compliance: To comply with our obligations under applicable gambling regulations, anti-money-laundering laws, and any court orders or regulatory directions issued to j1999.
• Customer Support: To respond to your enquiries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to contact you if our responsible gaming systems flag a concern.
• Platform Improvement: To analyse aggregated usage data to improve the Platform's functionality, content, and user experience. This analysis uses anonymised or pseudonymised data where possible.
• Marketing Communications: To send you promotional offers, PSL season bonuses, and platform updates — but only where you have provided your explicit consent. You can withdraw this consent at any time.

j1999 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you as a registered j1999 player — including account creation, transaction processing, and KYC verification. Without this processing, j1999 cannot operate your account.
• Legal Obligation: Processing required for j1999 to comply with its obligations under applicable anti-money-laundering legislation, gaming regulations, and tax reporting requirements.
• Legitimate Interests: Processing conducted for j1999's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — this applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

j1999 does not sell your personal data. We share data only where necessary to deliver Platform services, comply with legal obligations, or protect the integrity of the Platform. The categories of recipients with whom j1999 shares personal data are as follows:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 gateway providers receive the transaction reference and account identifier data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: j1999 uses third-party identity verification services to process CNIC and passport verification requests. These providers receive your KYC documents and return a verification status to j1999. They do not retain your data beyond the period required to complete verification.
• Game Providers & Software Licensors: Where you access live casino tables or slot games powered by third-party providers, certain usage data (session ID, game round outcomes) is shared with those providers for game integrity and auditing purposes. These providers do not receive your personally identifiable information beyond a pseudonymous session identifier.
• Fraud & AML Screening Services: j1999 uses third-party screening tools to check account holders against sanctions lists, PEP databases, and known fraud registers as required by AML regulations.
• Regulatory Authorities & Law Enforcement: j1999 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or as necessary to protect the safety and rights of j1999 or its players.
• Professional Advisors: j1999's legal, audit, and compliance advisors may access limited personal data in the course of providing professional services to j1999. All such advisors are bound by confidentiality obligations.

All third-party data processors engaged by j1999 are required to process personal data only on j1999's documented instructions, to maintain appropriate security standards, and to comply with applicable data protection requirements. j1999 conducts due diligence on data processors before engagement and reviews these arrangements periodically.

j1999 uses cookies, web beacons, local storage, and similar technologies on the Platform. Cookies are small text files stored on your device that allow the Platform to recognise you, maintain your session, and remember your preferences.

You can manage your cookie preferences at any time through the cookie preference centre accessible from the footer of the Platform. You may also configure your browser to refuse cookies entirely; however, doing so will likely impair the functionality of the j1999 Platform, including the ability to log in and maintain an active session.

j1999 does not use cross-site tracking technologies that follow your browsing activity on third-party websites outside the j1999 Platform.

j1999 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account & KYC Records: Retained for a minimum of five (5) years following account closure, as required by anti-money-laundering regulations. Where a legal hold is in place in connection with an investigation or litigation, records will be retained for the duration of that hold.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for AML reporting and financial audit purposes.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to allow for dispute resolution and regulatory enquiries.
• Marketing Consent Records: Retained for as long as you hold an active j1999 account, and for one (1) year following account closure, to demonstrate compliance with consent requirements.
• Technical & Usage Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted. Anonymised aggregate data may be retained indefinitely for analytical purposes.
• Self-Exclusion Records: Retained indefinitely following a self-exclusion request to ensure that excluded players cannot re-register, in line with responsible gaming obligations.

Where j1999 no longer has a legitimate purpose or legal obligation to retain your personal data, it will be securely deleted or irreversibly anonymised.

j1999 implements a layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Encryption in Transit: All data transmitted between your device and j1999 servers is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data stored on j1999 servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. j1999 staff who handle personal data are subject to background screening and binding confidentiality obligations.
• Two-Factor Authentication: j1999 offers two-factor authentication for all player accounts. We strongly recommend that all players enable 2FA from within their account security settings.
• Regular Security Audits: j1999 conducts periodic penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident Response: j1999 maintains a data breach incident response plan. In the event of a breach that poses a risk to your rights and freedoms, j1999 will notify the relevant supervisory authority and, where required, the affected players in accordance with applicable notification requirements.

Depending on your jurisdiction and the legal basis on which j1999 processes your data, you may hold some or all of the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data j1999 holds about you. j1999 will provide this within thirty (30) calendar days of a valid request.
• Right to Rectification: If any personal data j1999 holds about you is inaccurate or incomplete, you have the right to request its correction. You can update most personal details directly from within your account profile.
• Right to Erasure: In certain circumstances you may request the deletion of your personal data. Note that j1999 may be unable to fully comply with deletion requests where it is legally required to retain the data — for example, AML-mandated transaction records.
• Right to Restriction of Processing: You may request that j1999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that j1999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of j1999's legitimate interests. j1999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team by email at [email protected], using the subject line "Data Rights Request". j1999 will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days. In complex cases, this period may be extended by a further two months, in which case j1999 will notify you of the extension and the reasons for it.

j1999 reserves the right to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised third party.

The j1999 Platform is strictly restricted to individuals aged 21 years and above. j1999 does not knowingly collect personal data from individuals under the age of 21. The 21+ restriction applies without exception to all registration, deposit, betting, gaming, and bonus-claiming activities on the Platform.

If j1999 becomes aware that personal data has been collected from an individual under the age of 21, it will immediately suspend the relevant account, delete the personal data concerned to the extent permitted by applicable law, and refund any deposits made, less any applicable fees, in accordance with the applicable terms.

Parents and guardians who believe that a minor in their care has registered on j1999 are encouraged to contact our support team immediately at [email protected]. j1999 takes age restriction enforcement seriously and will act promptly on any such report.

j1999 operates under an international gaming licence and its servers and data processors may be located in jurisdictions outside Pakistan. When j1999 transfers your personal data to a jurisdiction that does not provide an equivalent level of data protection to that applicable in your home jurisdiction, j1999 will implement appropriate safeguards to protect your data, which may include:

• Standard contractual clauses approved by the relevant regulatory authority;
• Binding corporate rules where transfers are made within the j1999 group;
• Reliance on recognised adequacy decisions where the destination country has been determined to provide an adequate level of data protection.

By creating and using a j1999 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. j1999 will always maintain appropriate contractual and technical protections for any such transfers in line with the safeguards described in this Section.

If you would like further information about the international transfer mechanisms j1999 relies on, please contact our Data Protection team at [email protected].

j1999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the j1999 Platform. When we make changes that are material — meaning they substantively affect how we process your personal data or the rights available to you — we will provide reasonable advance notice by:

• Displaying a prominent notification on the Platform at the time you next log in; and/or
• Sending a notification to the email address registered on your j1999 account.

Minor changes — including typographical corrections, clarifications that do not alter the substantive meaning of any provision, or updates required to reflect new payment methods or Platform features — may take effect immediately upon publication without prior individual notice.

The "Last Updated" date displayed at the top of this Policy reflects the date on which the current version was published. You are encouraged to review this Policy periodically. Your continued use of the j1999 Platform following the publication of a revised Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which j1999 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available directly on the Platform 24 hours a day, 7 days a week

j1999 will acknowledge privacy-related enquiries within five (5) business days and provide a substantive response within thirty (30) calendar days. Where a complaint relates to a data rights request, the timeframes set out in Section 9 apply.

If you are not satisfied with j1999's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or gaming regulator in j1999's licensing jurisdiction. j1999 will cooperate fully with any such regulatory investigation.