bj326 Privacy Policy

1. Who We Are

bj326 is an online casino and sports betting platform accessible at bj326.bet, operated by the entity holding bj326's international gaming licence (referred to in this Policy as "bj326," "we," "us," or "the Operator"). bj326 serves Players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi, providing services including cricket betting, live dealer casino games, slot titles, and fishing arcade games.

For the purposes of applicable data protection law, bj326 acts as the data controller in respect of personal data collected from registered Players and visitors to the bj326 platform. This means bj326 determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions about how bj326 handles your personal data, or if you wish to exercise any of your data rights described in this Policy, you may contact us at any time at [email protected].

2. Data We Collect

bj326 collects personal data in the following categories. The specific data points collected depend on the nature of your interaction with the bj326 platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21+ age requirement);
• CNIC (Computerised National Identity Card) number or passport number;
• Nationality and country of residence;
• Username and encrypted password created at registration.

2.2 Contact Data

• Email address;
• Mobile phone number (used for account verification and security alerts);
• Residential address (for KYC verification and regulatory compliance).

2.3 Financial Data

• JazzCash or EasyPaisa mobile wallet number (where used for deposits or withdrawals);
• Bank account details — account title, IBAN, and bank name — for HBL, UBL, or Meezan Bank transfers;
• Transaction history: deposit amounts, withdrawal amounts, and timestamps, all denominated in PKR;
• Bet history, game session records, and win/loss summaries.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session duration, pages visited, and features accessed;
• Cookies and similar tracking identifiers (see Section 7).

2.5 KYC & Verification Documents

• Copies of government-issued identity documents submitted during the KYC process;
• Proof of address documents such as utility bills or bank statements;
• Proof of payment method ownership where required prior to a withdrawal.

2.6 Communications Data

• Records of correspondence with bj326 customer support via live chat or email;
• Feedback, complaints, and dispute records;
• Marketing preferences and communication opt-in/opt-out records.

3. How We Collect Data

bj326 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing the KYC process, making a deposit or withdrawal, contacting support, or responding to a promotion;
• Automated collection: Technical and device data collected automatically when you access the bj326 platform through cookies, server logs, and similar tracking technologies;
• Third-party verification services: Identity and document verification data returned by KYC service providers when processing your submitted documents;
• Payment processors: Transaction confirmation data returned by JazzCash, EasyPaisa, and banking partners upon completion of a deposit or withdrawal;
• Fraud and risk systems: Data flagged or returned by automated fraud detection systems that monitor platform activity for suspicious behaviour patterns.

4. How We Use Your Data

bj326 uses the personal data it collects for the following purposes:

5. Legal Basis for Processing

bj326 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to register your account, verify your identity, process transactions, and deliver the gaming and betting services you have requested from bj326;
• Legal obligation: Processing required to comply with bj326's obligations under its international gaming licence, including KYC verification, anti-money laundering (AML) record-keeping, and responsible gaming requirements;
• Legitimate interests: Processing carried out to detect and prevent fraud, protect platform security, resolve disputes, and improve the bj326 platform — provided such processing does not override your fundamental privacy rights;
• Consent: Processing for optional purposes such as marketing communications, where bj326 has obtained your prior consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

bj326 does not sell your personal data to third parties. We do not share your personal data with advertisers or data brokers. Your data is shared only in the following limited circumstances and with the following categories of recipients:

6.1 Payment Processors

bj326 shares the minimum financial data necessary with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your PKR deposits and withdrawals. These processors are bound by their own data protection obligations and are not permitted to use your data for any purpose other than processing the transaction in question.

6.2 Identity Verification Providers

KYC documentation — including copies of your CNIC, passport, or proof of address — is shared with certified third-party identity verification service providers engaged by bj326 solely for the purpose of completing the KYC process required under our gaming licence. These providers are contractually bound to handle your documentation confidentially and to delete it once the verification process is complete.

6.3 Regulatory and Law Enforcement Authorities

bj326 may be required to disclose personal data to regulatory authorities, law enforcement bodies, or courts where required to do so by law, court order, or the terms of our gaming licence. Such disclosures are made only to the extent strictly required and are logged internally as part of our compliance records.

6.4 Fraud Prevention and Security Services

Anonymised or pseudonymised data may be shared with industry-standard fraud prevention platforms to identify and block patterns of fraudulent activity. Where a confirmed case of fraud or money laundering is identified, relevant account data may be shared with appropriate financial intelligence units or law enforcement agencies.

6.5 Game Software Providers

Third-party game providers whose titles are available on bj326 — including slot, live casino, and fishing arcade game developers — may receive session identifiers and anonymised game-play data necessary to deliver and maintain their game services. These providers do not receive your full identity, contact, or financial data.

7. Cookies & Tracking Technologies

bj326 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in, and to understand how Players use the site so we can make improvements. The categories of cookies used on bj326 are as follows:

bj326 does not use advertising or third-party retargeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your bj326 account.

8. Data Retention

bj326 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account being open and active on bj326;
• KYC and identity documents: Retained for a minimum of five years following account closure, as required under anti-money laundering regulations;
• Transaction and financial records: Retained for a minimum of five years following the date of each transaction;
• Customer support communications: Retained for two years following the closure of the relevant support ticket or dispute;
• Marketing consent records: Retained until you withdraw consent, plus a further 12 months for audit purposes;
• Technical and session logs: Retained for 90 days for security and fraud detection purposes, then anonymised or deleted.

Following the expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. Where anonymised, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical purposes.

9. Data Security

bj326 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bj326 servers;
• Encrypted storage of passwords — bj326 stores only hashed, salted password values and never stores your password in plaintext;
• Access controls — only authorised bj326 personnel with a legitimate business need may access personal data, and all such access is logged;
• Two-factor authentication available on all bj326 accounts and mandatory for withdrawal requests above threshold amounts;
• Regular security audits and penetration testing of the bj326 platform and supporting infrastructure;
• Secure document handling for KYC materials, including encrypted transmission and access-restricted storage.

Despite these measures, no online platform can guarantee absolute security. bj326 strongly recommends that you use a unique, strong password for your bj326 account and that you never share your login credentials with any third party. If you suspect your account has been compromised, contact bj326 support immediately at [email protected].

10. Your Rights

As a data subject whose personal data is processed by bj326, you hold the following rights. You may exercise any of these rights at any time by contacting [email protected]:

• Right of access: You have the right to request a copy of the personal data bj326 holds about you, including the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared;
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected without undue delay. You may also update certain personal details directly through your bj326 account settings following login;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bj326's overriding legal obligations, including mandatory AML retention requirements;
• Right to restriction: You may request that bj326 restrict processing of your personal data in certain circumstances, such as where you contest its accuracy or where you have objected to processing and a determination is pending;
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format;
• Right to object: You have the right to object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling. bj326 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

bj326 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case bj326 will notify you of the extension and the reasons for it.

11. Children's Privacy

bj326 is strictly an adults-only platform. All Players must be 21 years of age or older to register an account and access any gaming or betting service on bj326. bj326 does not knowingly collect personal data from any person under the age of 21.

Age verification is a mandatory component of the bj326 registration process. Where bj326 has reasonable grounds to believe that a registered account belongs to a person under the age of 21, the account will be immediately suspended pending verification. If underage access is confirmed, the account will be permanently closed and all funds will be handled in accordance with applicable legal and regulatory requirements.

If you are a parent or guardian and believe that a minor in your care has registered an account on bj326, please contact [email protected] immediately so that appropriate action can be taken without delay.

12. International Data Transfers

bj326 operates under an international gaming licence, and certain data processing activities — including those carried out by KYC verification providers, game software suppliers, and platform infrastructure services — may involve the transfer of personal data to servers or processors located outside Pakistan.

Where such transfers occur, bj326 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements with all third-party processors that impose obligations equivalent to those bj326 assumes under this Privacy Policy.

bj326 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

13. Changes to This Policy

bj326 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. Where changes are material — meaning they significantly affect your rights or the way we process your personal data — bj326 will provide advance notice by email to your registered address and/or via a notification displayed upon your next bj326 login.

The effective date at the top of this document indicates when this version of the Privacy Policy was last reviewed and updated. It is your responsibility to review this Policy periodically. The current version is always accessible via the footer of every page on bj326.bet. Your continued use of the bj326 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bj326 handles your personal data, please contact our support team:

• Email: [email protected]
• Response time: All substantive privacy enquiries are responded to within two business days;
• Data rights requests: Handled within 30 days as described in Section 10.

If you are not satisfied with bj326's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or dispute resolution body designated under bj326's international gaming licence. Details of the applicable authority are available on request.