Privacy Policy – JeetBaz Pakistan Betting Platform

1. Introduction

This Privacy Policy explains how JeetBaz ("JeetBaz," "we," "us," "our"), the online gaming and sports betting platform available at jeetbaz.online, collects, uses, stores, shares, and protects the personal data of its registered users ("you," "your," "the Player").

JeetBaz is built for Pakistani players. That means our data practices are tailored to the realities of the Pakistani digital landscape — mobile wallets like Easypaisa and JazzCash, CNIC-based identity verification, and PKR-denominated transactions. We only collect the information we genuinely need to provide you with a safe, functional, and fair betting experience.

By registering a JeetBaz account or using any part of the JeetBaz platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms and Conditions, which govern your use of the platform more broadly.

2. Data We Collect

JeetBaz collects personal data through three main channels: information you give us directly, information generated by your use of the platform, and information received from third parties involved in processing payments or verifying identity.

2.1 Information You Provide Directly

• Registration data: full legal name, date of birth, mobile number, and email address (if provided).
• Identity verification data: CNIC number, CNIC photographs (front and back), and a selfie for liveness verification. This is collected once during the KYC (Know Your Customer) process before your first withdrawal.
• Payment data: mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details (for IBFT transfers), and masked card numbers (for Visa/Mastercard). JeetBaz does not store full card numbers; these are handled by our certified payment processors.
• Support communications: any information you share when contacting JeetBaz support via live chat or email, including the content of messages and any attachments.

2.2 Information Generated by Your Use of JeetBaz

• Transaction records: deposit amounts, withdrawal requests, bet history, game results, and bonus usage — all linked to your account and stored for regulatory and dispute-resolution purposes.
• Device and technical data: IP address, device type, operating system, browser version, and screen resolution. This data is used for fraud detection and platform optimisation.
• Session data: pages visited within JeetBaz, features used, time spent on each section, and click patterns. This helps JeetBaz understand how the platform is used and where it can be improved.
• Location data: approximate geographic location derived from IP address. JeetBaz does not collect GPS location from your device.

2.3 Information from Third Parties

• Payment processors: confirmation of payment status, transaction reference numbers, and fraud scoring from Easypaisa, JazzCash, and other payment partners.
• Identity verification services: confirmation of CNIC validity from authorised verification services.
• Fraud prevention partners: risk scores and flags associated with IP addresses, device fingerprints, or payment methods, used to protect the platform and its players.

3. How We Use Your Data

JeetBaz uses your personal data for specific, defined purposes. We do not process data for purposes beyond those described here without separately informing you and, where required, obtaining your consent.

4. Legal Basis for Processing

JeetBaz processes your personal data on the following legal grounds:

• Contract performance: most data processing is necessary to fulfil our obligations to you under the JeetBaz Terms and Conditions — including account management, bet settlement, and payment processing. Without this data, the service cannot function.
• Legal obligation: identity verification, transaction records, and AML (Anti-Money Laundering) reporting are required by applicable financial regulations. JeetBaz must retain certain data to comply with these obligations regardless of your preferences.
• Legitimate interests: fraud prevention, platform security, and responsible gaming monitoring are carried out in the legitimate interests of JeetBaz and its player community. These interests are balanced against your privacy rights and do not override them.
• Consent: sending you promotional communications is done only with your consent. You can withdraw consent for marketing communications at any time by contacting JeetBaz support or using the opt-out mechanism in any message sent to you.

5. Data Sharing

JeetBaz does not sell your personal data. Period. We share data only in the following limited and controlled circumstances:

5.1 Payment Processors

To process your deposits and withdrawals, JeetBaz must share relevant payment data with Easypaisa, JazzCash, NayaPay, SadaPay, Pakistani banks (for IBFT), and Visa/Mastercard networks. These parties are bound by their own regulatory obligations and privacy standards. JeetBaz shares only the minimum data necessary for each transaction.

5.2 Identity Verification Partners

Your CNIC data may be shared with authorised identity verification service providers to confirm validity. These providers operate under strict data processing agreements with JeetBaz and are not permitted to use your data for any purpose other than the verification task.

5.3 Fraud Prevention Services

Device identifiers, IP addresses, and transaction patterns may be shared with specialist fraud prevention platforms. This sharing is necessary to protect all JeetBaz players from fraudulent activity and account takeovers.

5.4 Legal and Regulatory Authorities

JeetBaz may be required by law to disclose your data to law enforcement, financial intelligence units, or regulatory bodies. JeetBaz will comply with valid legal orders and will notify you where legally permissible before disclosing your data to authorities.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of JeetBaz's assets, player data may be transferred to the acquiring entity. In such circumstances, JeetBaz will inform players in advance and ensure that the receiving party is bound by equivalent privacy protections.

6. Cookies and Tracking Technologies

JeetBaz uses cookies and similar tracking technologies to operate the platform effectively. A cookie is a small text file stored on your device by your browser when you visit a website.

6.1 Types of Cookies Used

• Essential cookies: required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core functionality.
• Functional cookies: remember your preferences such as language settings, odds format (decimal or fractional), and display preferences. These improve your experience but are not strictly necessary.
• Analytics cookies: collect anonymised data about how players use the platform — which pages are visited most, where players leave the registration flow, and which games are played most frequently. This data is used exclusively for improving JeetBaz and is not shared with advertisers.
• Security cookies: help JeetBaz identify suspicious login patterns, unusual transaction volumes, or device anomalies that may indicate fraud or account compromise.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using the JeetBaz platform. Disabling functional or analytics cookies will not prevent access but may reduce the quality of your experience. JeetBaz does not use third-party advertising cookies or track you across other websites.

7. Data Storage and Security

JeetBaz takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:

• Encryption in transit: all data transmitted between your device and JeetBaz servers is encrypted using 256-bit SSL (TLS 1.2 or higher). The padlock icon in your browser confirms this encryption is active.
• Encryption at rest: sensitive data fields — including CNIC numbers, bank details, and passwords — are encrypted in our databases. Even in the unlikely event of a database breach, this data cannot be read in plaintext.
• Password hashing: JeetBaz does not store your password. It is hashed using a one-way algorithm (bcrypt with a unique salt per account) so that even JeetBaz staff cannot read your password.
• Access controls: access to player personal data within JeetBaz is restricted on a need-to-know basis. Customer support agents can view account information necessary to resolve your query but cannot access payment credentials or KYC documents beyond what is needed.
• Penetration testing: JeetBaz undergoes regular security assessments by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response: in the event of a data breach, JeetBaz has a documented incident response procedure. Affected players will be notified promptly and appropriate authorities informed where required by law.

8. Data Retention

JeetBaz retains personal data for as long as it is necessary to fulfil the purposes described in this Policy, and for as long as required by applicable legal and regulatory obligations.

• Active account data: retained for the duration of your account and for a minimum of five years after account closure, to comply with AML and financial record-keeping requirements.
• Transaction records: retained for a minimum of five years as required for financial audit purposes and to resolve any disputes.
• KYC documents (CNIC data): retained for the duration of your account and for five years following closure. This is a legal requirement under anti-money-laundering regulations.
• Support communications: retained for two years after the conversation closes, to allow for review in the event of an escalated complaint.
• Analytics and session data: aggregated and anonymised analytics data may be retained indefinitely for platform improvement purposes. Individual session logs are deleted after 12 months.
• Marketing consent records: retained for three years after consent is withdrawn, as evidence of your consent history.

When data is no longer required, JeetBaz uses secure deletion processes to destroy it. Physical documents (if any exist) are shredded. Digital data is overwritten to prevent recovery.

9. Your Privacy Rights

As a JeetBaz player, you have the following rights over your personal data. To exercise any of these rights, contact JeetBaz at [email protected] with your registered mobile number and a description of your request. JeetBaz will respond within 30 days.

10. Children's Privacy

JeetBaz is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Every registration requires a CNIC number, which is a document issued only to adults in Pakistan — this serves as the primary mechanism for enforcing the age restriction.

If JeetBaz discovers that personal data has been collected from an individual who is under 18, that account will be immediately closed, any deposits returned to the payment method used, winnings forfeited, and all data associated with the account securely deleted except where retention is required for regulatory purposes.

Parents and guardians are encouraged to use parental control software and to have open conversations with young people about the risks of online gambling. If you believe a minor has registered on JeetBaz using false information, please report it immediately to [email protected].

11. Third-Party Links

The JeetBaz platform does not contain links to third-party websites for advertising or affiliate purposes. Any links that appear within JeetBaz — for example, to payment processor websites during a transaction — are there solely to facilitate your use of the service.

JeetBaz is not responsible for the privacy practices of any third-party services you access independently. If you visit any external website, you should read that site's privacy policy separately. JeetBaz's Privacy Policy applies only to the JeetBaz platform at jeetbaz.online.

12. Changes to This Privacy Policy

JeetBaz may update this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or platform features. When significant changes are made, JeetBaz will notify registered players via their registered mobile number or email address, and the "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Policy periodically. Continued use of the JeetBaz platform after a notified change takes effect constitutes your acceptance of the updated Policy. The most current version of this Privacy Policy is always available at jeetbaz.online/privacy-policy.

If a change to this Policy materially reduces your rights or increases the ways in which JeetBaz uses your data, we will seek fresh consent where required rather than relying on existing consent.

13. Contact JeetBaz on Privacy Matters

For any questions, concerns, or requests relating to your personal data and this Privacy Policy, please contact the JeetBaz privacy team directly. Our support team is available 24/7 in both Urdu and English.

If you are not satisfied with how JeetBaz has handled your privacy concern after going through our internal process, you have the right to escalate the matter to the relevant data protection authority in Pakistan. JeetBaz will cooperate fully with any such investigation.