Introduction
This Privacy Policy ("Policy") is published by 2jay, the operator of the online betting and live casino information platform available at https://2jay.cam ("Platform", "Site", "we", "us", "our"). This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, stored and protected.
2jay is committed to protecting your personal data. We process personal information in accordance with applicable data protection principles, including the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity and confidentiality. This Policy applies to all users of the Platform, including visitors, registered account holders and any other person who interacts with our services.
✅ Our Privacy Commitment: We do not sell your personal data to third parties. We collect only what is necessary to operate the Platform, process transactions, comply with legal obligations and protect the integrity of our services. You have specific rights over your data — these are explained in Section 11 of this Policy.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the Platform.
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings assigned to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person ("data subject") — including name, identification number, location data, email address, device identifiers or any other factor specific to that person's identity. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, 2jay is the Data Controller in respect of all personal data collected via the Platform. |
| "Data Processor" | Any third party that processes personal data on behalf of 2jay under written instruction, including payment service providers, KYC/AML verification services and analytics providers. |
| "User" / "You" | Any individual who accesses or uses the Platform, including visitors, registered account holders and persons interacting with any feature of the Site. |
| "KYC" | Know Your Customer — identity verification procedures required to confirm a user's identity, age and source of funds, as required by applicable anti-money laundering obligations. |
| "Cookies" | Small text files placed on your device by the Platform to store preferences, session information and analytical data. See Section 10 for full details. |
| "Consent" | Freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
Personal Data We Collect
We collect the following categories of personal data, depending on your interaction with the Platform:
3.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identification document;
- Date of birth (for age verification purposes);
- Residential address, including city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Faisalabad, Multan);
- Email address and telephone number;
- Pakistani Computerised National Identity Card (CNIC) number and scanned document copies, where submitted for KYC purposes.
3.2 Account and Transaction Data
- Account username and encrypted password credentials;
- Account registration date, login history and session activity logs;
- Deposit and withdrawal transaction records, including amounts (in PKR and any applicable converted currency), timestamps and payment method references;
- Betting and gaming history, including markets wagered on, stake sizes, outcomes and bonus usage records;
- Balance history and promotional bonus redemption records.
3.3 Payment and Financial Data
- Payment method identifiers as submitted in the cashier — for example, mobile wallet account references (such as Easypaisa or JazzCash account numbers), Raast linked account identifiers, or bank account details for HBL, UBL, Meezan Bank or Bank Alfalah transfers. 2jay does not store full card numbers or full bank account details in unencrypted form.
- Transaction reference numbers and confirmation records provided by payment processors.
3.4 Technical and Usage Data
- Internet Protocol (IP) address and derived approximate geolocation;
- Device type, operating system, browser type and version;
- Pages visited, features accessed, time spent on the Platform and navigation paths;
- Referral source data indicating how you arrived at the Platform;
- Error logs, crash reports and performance data submitted automatically by your device or browser.
3.5 Communications Data
- Records of support communications sent to or received from our team, including live chat transcripts and email correspondence;
- Responsible gambling communication records, including self-exclusion requests, limit adjustments and cooling-off period activations;
- Marketing preference records, including whether you have opted in to or out of promotional communications.
How We Collect Your Data
We collect personal data through the following channels:
- Direct Submission: Data you provide when creating an Account, completing KYC verification, making deposits or withdrawals, submitting support requests or communicating with our team;
- Automated Collection: Technical and usage data collected automatically through cookies, log files, and analytics tools when you browse the Platform — see Section 10 for cookie-specific information;
- Third-Party Sources: Identity verification data received from KYC/AML service providers during the verification process; fraud prevention data received from payment processing partners; and publicly available information used to verify the accuracy of data you have provided;
- Payment Processors: Transaction confirmation data received from payment service providers following deposit or withdrawal processing.
💡 Pakistani Payment Method Context: When you use payment methods familiar in Pakistan — such as Easypaisa, JazzCash or Raast — to deposit or withdraw, transaction data flows through the relevant payment processor's systems in addition to our own. These providers have their own privacy policies governing their data handling. 2jay receives only the transaction reference and status data necessary to process your transaction. None of these providers are affiliated with or endorse 2jay.
Legal Basis for Processing
We process your personal data on the following legal bases, depending on the purpose of processing:
| Legal Basis | Processing Activities |
|---|---|
| Contractual Necessity | Account registration and management; processing deposits and withdrawals; operating betting and gaming features; responding to support requests; enforcing Terms & Conditions. |
| Legal Obligation | KYC/AML identity verification; age verification; fraud detection and prevention; financial record-keeping; responding to lawful requests from competent authorities. |
| Legitimate Interests | Platform security and fraud prevention; improving Platform performance and user experience; analytics and aggregated usage reporting; responsible gambling monitoring to identify users who may be at risk. |
| Consent | Sending marketing communications and promotional notifications (where you have opted in); placing non-essential cookies on your device; processing data for purposes beyond those listed above where consent is required. |
How We Use Your Personal Data
We use your personal data for the following specific purposes:
6.1 Account Operations
To create, manage and maintain your Account; to authenticate your identity at login; to process deposit and withdrawal requests; to apply responsible gambling limits you have set; and to communicate with you about your Account status.
6.2 KYC and Compliance
To verify your identity and age in compliance with applicable regulations; to conduct AML checks on transactions; to screen against sanctions and politically exposed person (PEP) lists; and to maintain compliance records as required by applicable law.
6.3 Platform Security and Fraud Prevention
To detect and prevent fraudulent account activity, multi-accounting, bonus abuse and other forms of misuse; to monitor for unusual transaction patterns; and to protect the Platform and its users from harm.
6.4 Responsible Gambling
To record and apply deposit limits, loss limits, session time limits, cooling-off periods and self-exclusion requests; to monitor usage patterns that may indicate problem gambling; and to communicate responsible gambling guidance to users who may be at risk.
6.5 Customer Support
To respond to your support queries and complaints; to maintain records of communications for training and quality assurance purposes; and to provide language support including English and, on request, Urdu-language assistance for users across Pakistan.
6.6 Marketing (Consent-Based)
To send you promotional offers, bonus notifications and platform updates — but only where you have expressly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting our support team or using the unsubscribe option in any promotional communication.
6.7 Analytics and Platform Improvement
To analyse aggregated usage data to improve Platform performance, game selection, content relevance and user experience, particularly in the context of cricket and PSL betting features valued by Pakistani users.
Data Sharing and Disclosure
2jay does not sell your personal data to third parties. We may share your data in the following limited circumstances:
7.1 Service Providers (Data Processors)
We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include KYC/AML verification partners, payment processing intermediaries, fraud detection services, cloud infrastructure providers and customer support platform operators. All such processors are contractually required to process data only in accordance with our instructions and applicable data protection standards.
7.2 Payment Infrastructure Partners
When you make a deposit or request a withdrawal, necessary transaction data is shared with the relevant payment processor to complete the transaction. This may include processors linked to Pakistani payment methods such as mobile wallet providers (Easypaisa, JazzCash), Raast-connected systems, or bank intermediaries (HBL, UBL, Meezan Bank, Bank Alfalah). These entities are independent data controllers operating under their own privacy policies.
7.3 Legal and Regulatory Disclosure
We may disclose personal data to competent authorities, law enforcement agencies, regulators or courts where we are required to do so by law, court order or lawful regulatory demand. Where legally permissible, we will notify you of such disclosure.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets involving 2jay, personal data held by 2jay may be transferred to the acquiring entity as part of that transaction. Affected users will be notified of any such transfer and any material changes to this Policy that result from it.
⚠️ No Sale of Personal Data: 2jay does not sell, rent or trade your personal data to third-party advertisers, data brokers or marketing aggregators. Any data sharing that occurs is strictly for the purposes of operating and protecting the Platform as described in this Section.
Data Retention
We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:
- Active Account Data: Retained for the duration of your Account's existence and for a period thereafter as required by applicable AML, financial record-keeping and responsible gambling obligations;
- Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction, in accordance with standard AML record-keeping requirements;
- KYC Documentation: Identity verification documents are retained for the duration required by the applicable AML framework — typically five (5) years from the end of the customer relationship;
- Support Communications: Support interaction records are retained for a period sufficient to resolve any related disputes and to meet quality assurance requirements, typically two (2) to three (3) years;
- Self-Exclusion Records: Records of self-exclusion requests are retained for the duration of the exclusion period and for a defined period thereafter to prevent inadvertent re-registration;
- Technical Logs: Server logs and technical usage data are typically retained for up to twelve (12) months, unless a longer period is required for security investigation purposes.
When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to an identified individual.
Data Security
2jay implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols (HTTPS);
- Encryption at Rest: Sensitive data, including passwords and payment credentials, is stored in encrypted or hashed form. We do not store unencrypted full payment card numbers or bank account details;
- Access Controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis, with role-based permissions and audit logging;
- Intrusion Detection: Automated monitoring systems are in place to detect and respond to anomalous access patterns, potential data breaches and system intrusions;
- Regular Reviews: Our security practices are reviewed periodically and updated in response to emerging threats and evolving best practices.
Whilst we implement robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials. If you suspect that your Account has been compromised, please contact us immediately at [email protected].
Cookies and Tracking Technologies
The Platform uses cookies and similar tracking technologies to enhance your experience, support account functionality and enable us to understand how the Platform is used. A cookie is a small text file placed on your device when you visit a website.
10.1 Types of Cookies We Use
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential | Required for the Platform to function — including session management, login authentication and security tokens. Cannot be disabled without affecting Platform functionality. | No (Necessary) |
| Functional | Remember your preferences — such as language settings, display options and responsible gambling limit reminders — between sessions. | Optional |
| Analytics | Collect aggregated usage data (page views, navigation paths, time-on-page) to help us understand how the Platform is used and where improvements can be made. Data is aggregated and anonymised where possible. | Optional |
| Marketing | Track interactions with promotional content to measure campaign effectiveness. Only placed with your explicit consent and may be withdrawn at any time. | Consent Required |
10.2 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies and configure settings to notify you when cookies are placed. Note that disabling essential cookies may affect your ability to log in and use Account features. For instructions on managing cookies in your specific browser, refer to the browser's help documentation.
Your Data Rights
Subject to applicable law, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within a reasonable timeframe and in any case within thirty (30) days.
Right of Access
Request a copy of the personal data we hold about you, including the categories of data, the purposes for which it is processed and any third parties with whom it is shared.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you. We will investigate and update records promptly upon receipt of a valid rectification request.
Right to Erasure
Request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal retention obligations.
Right to Restrict Processing
Request that we limit the processing of your personal data in certain circumstances, such as while the accuracy of your data is disputed or a complaint is under review.
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, request a structured, machine-readable copy of the personal data you have provided to us.
Right to Object
Object to the processing of your personal data where that processing is based on our legitimate interests, including the right to object to direct marketing communications at any time.
Right to Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe your rights have been infringed. We encourage you to contact us first so we can resolve the matter directly.
Protection of Minors
The Platform is strictly for adults aged 18 years and over, or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals below the minimum age threshold. Age verification is a mandatory step in the Account registration and KYC process, and we will not process an Account registration without satisfactory age confirmation.
⚠️ If We Discover a Minor Has Registered: If 2jay discovers or is informed that personal data has been collected from a person below the minimum age, we will take immediate action to close the Account, void any associated activity and delete or anonymise the personal data as promptly as practicable. Any funds deposited by a minor will be returned through appropriate channels following verification. Please contact [email protected] immediately if you suspect a minor has accessed the Platform.
International Data Transfers
In the course of operating the Platform and providing our services, your personal data may be transferred to and processed in countries outside of Pakistan. This may occur when we use cloud infrastructure providers, KYC verification partners or payment processing intermediaries whose servers are located outside Pakistan.
Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with our service providers. We do not transfer personal data to countries or organisations that cannot provide an adequate level of data protection.
By using the Platform and submitting personal data to us, you acknowledge and agree that your data may be processed outside Pakistan in the manner described in this Policy.
Changes to This Privacy Policy
2jay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, operational requirements or the services we offer. The revised Policy will be published on this page with an updated "Last Updated" date.
Where changes are material — for example, where we introduce a new category of data processing or a new purpose for which data is used — we will notify registered users by email or by posting a prominent notice on the Platform prior to the changes taking effect.
We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with changes to this Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy — including requests to exercise your data rights under Section 11 — please contact the 2jay data team using the details below. We aim to acknowledge all privacy-related enquiries promptly and to resolve requests within thirty (30) days.
[email protected] — plain text, not a clickable link. Please include "Privacy Request" in your subject line.
Available 24/7 in English. For data subject access requests, our team will direct you to the appropriate email process to maintain a secure written record.
We aim to acknowledge privacy requests within 3 business days and to provide a substantive response within 30 days. Complex requests may require additional time, in which case we will notify you.