ju55 Privacy Policy

1. Overview & Data Controller

ju55 ("we", "us", "our") operates the online gaming and sports betting platform accessible at ju55.net. For the purposes of data protection, ju55 acts as the data controller in respect of all personal data collected from users of the platform. As data controller, ju55 determines the purposes and means of processing personal data, and is responsible for ensuring that such processing complies with applicable data protection obligations under our international operating licence.

This Privacy Policy is intended to be transparent, plain, and genuinely useful — not a wall of impenetrable legal jargon. We want every player on ju55, whether based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan, to understand precisely how their personal information is handled. If anything in this document is unclear, our support team is available around the clock to explain.

2. Personal Data We Collect

ju55 collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the platform, and in limited circumstances from third-party service providers. The categories of data we collect are described below.

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identity document (CNIC or passport)
• Date of birth (used to verify you meet the 21+ age requirement)
• Residential address, city, and province
• Mobile number and email address
• Username and encrypted password
• Security questions and answers (where applicable)

2.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (CNIC, passport)
• Proof of address documents (utility bills, bank statements)
• Selfie or facial photograph submitted during enhanced KYC verification
• Source of funds declarations where required under anti-money laundering obligations

2.3 Financial & Transaction Data

• JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank account identifiers used for deposits and withdrawals
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers
• Account balance history and betting/wagering transaction records
• Bonus and promotional credit activity

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session timestamps, login history, and session duration
• Pages visited, games played, and features accessed within the platform
• Clickstream data and navigation patterns

2.5 Communications Data

• Records of correspondence with ju55 customer support, including live chat transcripts and email exchanges
• Feedback, complaints, and dispute records
• Responses to surveys or promotional communications where you have opted in

3. How We Use Your Personal Data

ju55 processes personal data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which ju55 uses your personal data are as follows:

• Account Creation & Management: To register and maintain your ju55 account, verify your identity, and provide you with access to all platform features.
• Age & Identity Verification: To confirm that you meet the mandatory 21+ age requirement and to complete Know Your Customer (KYC) checks as required under our licensing obligations.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported payment method, and to maintain accurate financial records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and any other security threats to the platform or its users.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, responsible gaming requirements, and any other legal or regulatory duties applicable under our international operating licence.
• Personalisation: To customise your gaming experience, surface relevant promotions, and recommend games or features that align with your usage patterns — only where you have not opted out of personalisation.
• Customer Support: To respond to your queries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the ju55 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent, and always with a clear opt-out mechanism.

4. Legal Basis for Processing

Every instance of personal data processing by ju55 rests on one of the following legal bases. We do not process data without a clearly identified lawful ground:

• Contractual Necessity: Processing required to perform the contract between ju55 and you — including account registration, transaction processing, and the delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML requirements and responsible gaming mandates.
• Legitimate Interests: Processing carried out for the legitimate business interests of ju55 — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

ju55 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. Data sharing with third parties occurs only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

5.1 Service Providers

ju55 engages carefully selected third-party service providers who assist in operating the platform. These include payment processors (such as JazzCash and EasyPaisa integration partners), identity verification providers, fraud detection services, customer support software providers, and cloud infrastructure partners. All service providers are contractually bound to process your data only on ju55's instructions and to maintain appropriate security standards.

5.2 Regulatory & Law Enforcement Bodies

ju55 may disclose personal data to relevant regulatory authorities, licensing bodies, or law enforcement agencies where required to do so by law, court order, or where we reasonably believe that disclosure is necessary to protect the rights, property, or safety of ju55, its users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of ju55 assets, personal data held by ju55 may be transferred to the relevant successor entity. In such circumstances, you will be notified via your registered email address and the updated Privacy Policy will be published on the platform.

5.4 Aggregated & Anonymised Data

ju55 may share aggregated, anonymised statistical data with partners, advertisers, or research bodies. Such data cannot be used to identify any individual user and does not constitute a disclosure of personal data.

6. Payments, KYC & AML

As an internationally licensed online gaming operator, ju55 is obligated to implement robust Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. This means we are required to verify the identity of all account holders, monitor transaction patterns for suspicious activity, and maintain records of financial transactions for defined retention periods.

All PKR payment data processed through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations is handled using industry-standard TLS 1.3 encryption in transit and AES-256 encryption at rest. ju55 does not store full payment account credentials on its own servers — payment data is tokenised through our certified payment processing partners.

Where enhanced due diligence is triggered — for example, by high-value transactions or unusual account activity — ju55 may request additional documentation including source-of-funds declarations or enhanced proof of identity. Failure to provide requested documentation within a reasonable timeframe may result in the temporary restriction of deposit or withdrawal functionality pending satisfactory verification.

7. Cookies & Tracking Technologies

The ju55 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored on your device when you visit the platform. We use the following categories of cookies:

You can manage your cookie preferences through your ju55 account settings or through your browser's cookie management tools. Note that disabling strictly necessary cookies will affect your ability to log in and use the platform. ju55 does not use third-party advertising cookies to serve ads on external websites based on your ju55 activity.

8. Data Retention

ju55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The general retention periods applied by ju55 are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years, consistent with financial record-keeping obligations under our operating licence.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless the record relates to an ongoing dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of your marketing opt-in plus two (2) years from the date of opt-out, to evidence compliance with consent obligations.
• Technical & Log Data: Typically retained for thirteen (13) months in rolling form, with aggregated anonymised analytics retained indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ju55's data destruction procedures.

9. Security Measures

ju55 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and the ju55 platform is encrypted using TLS 1.3. Sensitive data stored in our databases is encrypted at rest using AES-256.
• Access Controls: Personal data is accessible only to ju55 employees and contractors who have a genuine need to access it for their job function. Access is governed by strict role-based permissions and audit logging.
• Two-Factor Authentication: ju55 supports and encourages the use of two-factor authentication (2FA) for all account logins, adding an additional layer of protection to your account.
• Penetration Testing: The ju55 platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ju55 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, ju55 will notify affected users and relevant authorities in accordance with applicable legal requirements.
• Staff Training: All ju55 staff with access to personal data receive regular data protection and security training as part of our internal compliance programme.

While ju55 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for reporting any suspected unauthorised account access to our support team immediately.

10. Your Data Rights

As a user of the ju55 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". ju55 will respond to all verified requests within thirty (30) calendar days.