Privacy questions? Email us at privacy@2jay.biz — we respond within 48 hours.
When you use 2jay — Pakistan's dedicated online gaming and sports betting platform — you share personal information with us. This Privacy Policy tells you exactly what we do with it. We have written it to be readable by an ordinary Pakistani player, not a data protection lawyer. If any part is unclear, please reach out to us directly before you register or deposit.
This policy covers the 2jay website at 2jay.biz, any 2jay mobile application and all related services operated under the 2jay brand. By creating a 2jay account or using the platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein.
2jay collects personal data in the categories listed below. We only collect data that is genuinely needed — either to provide you with the service, to meet our legal obligations or to keep the platform secure and fair for all users.
Identity and Contact Data
- Full name as it appears on your official identity documents
- Date of birth (required for age verification — 2jay is strictly 18+)
- Pakistani mobile phone number
- Email address
- National Identity Card number (CNIC) — collected for identity verification when required
- Residential address (requested for high-value account verification)
Financial and Transaction Data
- Easypaisa, JazzCash, NayaPay or SadaPay account numbers associated with deposits and withdrawals
- Bank account details provided for IBFT transfers
- Visa/Mastercard details where applicable (card numbers are not stored directly — they are tokenised by our payment processor)
- Transaction history — deposits, withdrawals, bet placements, game outcomes — for your 2jay account
Technical and Usage Data
- IP address and approximate location derived from it
- Device type, operating system and browser information
- Session duration, pages visited and features accessed within the 2jay platform
- Login timestamps and authentication activity
Communications Data
- Records of support chat conversations, emails and any other written communications with 2jay support
- Feedback, survey responses or complaint correspondence submitted to 2jay
2jay does not collect biometric data, does not record voice calls and does not access your device's camera, microphone or contacts. We do not collect data about your activities outside of the 2jay platform.
2jay collects personal data through three main channels:
Information you provide directly — when you register your 2jay account, complete identity verification, make a deposit or withdrawal, contact support or participate in any promotion.
Information collected automatically — when you browse or use the 2jay platform, our systems automatically collect technical data including your IP address, device information, session activity and cookie data. This happens for all visitors to 2jay.biz whether or not they have a registered account.
Information from payment processors — when you make a deposit or withdrawal, our payment partners (such as Easypaisa, JazzCash or bank partners) share transaction confirmation data with 2jay for reconciliation and fraud prevention purposes. They do not share data beyond what is required for payment processing.
Every piece of data 2jay collects has a specific reason behind it. Below is the complete list of purposes for which we process your personal data:
| Purpose | Data Used | Why It Is Necessary |
|---|---|---|
| Account Registration | Name, DOB, email, phone | To create and manage your 2jay account identity |
| Age & Identity Verification | CNIC, DOB, name | Legal obligation — 2jay is strictly 18+ only |
| Payment Processing | Payment method details, transaction data | To process deposits and pay out winnings in PKR |
| Fraud Prevention | IP, device data, transaction patterns | To protect all players from fraud and money laundering |
| Customer Support | Communications, account data | To resolve queries, disputes and technical issues |
| Responsible Gaming | Gaming activity, deposit history | To monitor for problem gambling indicators and apply limits |
| Platform Improvement | Usage and session data | To improve 2jay's performance, design and game offering |
| Marketing (opt-in only) | Email, phone, preferences | To send promotions to players who have actively opted in |
| Legal Compliance | Transaction and identity records | To meet regulatory and anti-money laundering obligations |
We never use your personal data for any purpose not listed in this table. If 2jay identifies a new use for your data in the future, we will update this policy and notify you before any new processing begins.
2jay processes your personal data based on the following legal grounds:
- Contractual necessity: Processing required to fulfil our obligations to you under the 2jay Terms and Conditions — including running your account, processing payments and providing customer support.
- Legal obligation: Processing required to comply with applicable laws — primarily anti-money laundering (AML) regulations, age verification requirements and financial record-keeping obligations.
- Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring and analytical purposes where our legitimate interest in operating a safe and fair platform is balanced against your privacy interests.
- Consent: Processing for direct marketing communications. You can withdraw this consent at any time by contacting support@2jay.biz or using the unsubscribe link in any 2jay marketing email.
2jay does not sell your personal data. We do not share it for third-party marketing or advertising purposes. The only circumstances under which your data is shared outside of 2jay are:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card processors receive the transaction data necessary to process your deposits and withdrawals. They are contractually bound to use this data only for payment purposes.
- Identity verification providers: Where CNIC or document verification is required, we may use a regulated third-party identity verification service. These providers process your documents under strict data handling agreements.
- Technology and infrastructure providers: Cloud hosting, database management and security services that underpin the 2jay platform. These providers operate under data processing agreements and cannot use your data for their own purposes.
- Regulatory and law enforcement authorities: Where legally required — for example, in response to a valid court order or regulatory investigation — 2jay will provide the minimum data necessary to comply with the legal obligation. We will not volunteer data beyond what is legally required.
Every third party that receives your personal data from 2jay is bound by a contract requiring them to protect it to the same standard as we do. No third party receives your data without a legitimate purpose and a contractual data protection obligation in place.
2jay retains personal data only for as long as necessary for the purposes for which it was collected — and for as long as required by applicable legal and regulatory obligations.
- Active account data — retained for the full duration of your 2jay account and for a period of five years after account closure. This is primarily driven by AML and financial record-keeping requirements.
- Transaction records — retained for a minimum of five years from the date of each transaction, consistent with standard financial record-keeping requirements.
- Identity verification documents — retained for the period of account activity plus five years. These records may be required by regulators in the event of an AML investigation.
- Customer support communications — retained for three years from the date of the last interaction, or longer if the communication is related to an unresolved dispute.
- Marketing consent records — retained for three years from the date consent was given, or until withdrawn. Records of consent withdrawal are kept indefinitely to demonstrate compliance.
- Technical and usage data — session logs and technical data are retained for 12 months, after which they are anonymised or deleted.
When data is no longer required for any retained purpose, 2jay permanently deletes or irreversibly anonymises it.
Data security is not a secondary concern at 2jay — it is built into every layer of the platform. The measures we use to protect your personal data include:
- Encryption in transit: All data transmitted between your device and the 2jay platform is encrypted using TLS (Transport Layer Security). This applies to all pages on 2jay.biz and all data exchanged with our servers.
- Encryption at rest: Sensitive data stored in 2jay's databases — including payment credentials and identity documents — is encrypted at rest using AES-256 standard encryption.
- Access controls: Access to personal data within 2jay is restricted to staff members who have a genuine operational need for it. Access is role-based, logged and reviewed regularly.
- Payment card tokenisation: Visa/Mastercard details are never stored directly on 2jay systems. Card details are tokenised by our PCI-DSS certified payment processor immediately upon entry. 2jay stores only the token reference, not the actual card number.
- Regular security reviews: 2jay's security infrastructure is reviewed and tested regularly by our internal security team. Identified vulnerabilities are patched promptly.
- Breach response: In the event of a data breach that affects your personal data, 2jay will notify affected players promptly and take immediate steps to contain and remediate the breach.
Technical security measures only work when account holders also protect their own login credentials. Use a strong, unique password for your 2jay account. Do not share your login details with anyone. If you suspect your account has been accessed without your authorisation, contact 2jay support immediately at support@2jay.biz.
2jay uses cookies and similar tracking technologies on 2jay.biz. Cookies are small text files stored on your device that help the platform function correctly and help us understand how players use the site.
The types of cookies used on 2jay are:
- Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of essential cookies — without them, the 2jay platform cannot work.
- Functional cookies: Remember your preferences — such as your preferred language setting, display preferences and your last accessed section of the platform. These improve your experience but are not strictly essential.
- Analytics cookies: Help us understand how players navigate the platform — which pages are visited most, where users spend time and where the experience can be improved. Analytics data is aggregated and does not identify individual players. You can opt out of analytics cookies.
You can manage cookie preferences through your browser settings. Blocking essential cookies will impair your ability to use the 2jay platform. Blocking functional and analytics cookies will not affect your ability to play games or manage your account.
You have specific rights over your personal data held by 2jay. Here is what each right means in practice and how to exercise it:
All data rights requests are handled within 30 days of receipt. Complex requests may take up to 60 days — we will notify you if this is the case. There is no charge for exercising any data right.
2jay is strictly an adult platform — no person under the age of 18 may register an account, deposit funds or participate in any real-money activity on 2jay. We do not knowingly collect personal data from anyone under the age of 18.
If we discover that a 2jay account was registered by a person under 18 years of age, we will immediately close the account, forfeit any balance and securely delete the personal data collected. The relevant payment method will be blocked from future registrations.
If you are a parent or guardian and believe that a person under 18 has registered on 2jay using false date of birth information, please contact us immediately at support@2jay.biz with as much detail as possible. We will investigate and act promptly.
2jay may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law or improvements to how we explain our practices. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
For material changes — those that meaningfully affect how we use your data or your rights over it — 2jay will notify registered account holders by email and display a prominent notice on the platform before the changes take effect. For minor editorial changes, the updated policy will be published without individual notification.
Continuing to use the 2jay platform after an updated Privacy Policy has been published constitutes acceptance of the revised policy. If you object to any changes, you may close your account and request deletion of your data as described in Section 9.
For all privacy-related queries, data rights requests and privacy complaints, please contact the 2jay privacy team:
- Privacy email: privacy@2jay.biz — for data rights requests, privacy queries and formal privacy complaints
- General support: support@2jay.biz — for account-related queries including marketing opt-outs
- Live chat: Available 24/7 within the 2jay platform for immediate assistance
We aim to acknowledge all privacy correspondence within 24 hours and provide a full response within 30 days. For data rights requests involving large volumes of data, we will notify you within 30 days if an extension is required.