JeetBaz Privacy Policy — Pakistan Data Protection & Your Rights

JeetBaz is an online betting and gaming platform serving players in Pakistan. When you create an account on JeetBaz, place a bet, make a deposit via Easypaisa or JazzCash, or simply browse the site, certain information about you is collected. This Policy is our commitment to being fully transparent about what that information is and how we handle it.

We understand that trust is everything in this industry. Pakistani players are sharing sensitive information — CNIC details, mobile numbers, payment accounts — and they deserve to know exactly what happens to that information. The answer is straightforward: we use it only to operate your account securely, comply with legal obligations, and improve the JeetBaz experience. We do not sell it. We do not share it with advertisers. We do not keep it longer than necessary.

If you have any question that this Policy does not answer clearly, please contact our support team at support@jeetbaz.bio. We will respond within 24 hours.

JeetBaz collects personal data across three broad categories: information you provide to us directly, information collected automatically as you use the platform, and information received from third parties in the course of verifying your identity and processing payments.

2.1 Information You Provide

• Registration data: full legal name, date of birth, gender, mobile number, email address, city of residence
• Identity verification (KYC): CNIC number, CNIC scan or photograph, selfie with document
• Payment information: mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, partial card numbers for Visa/Mastercard transactions. Full card numbers are handled exclusively by our certified payment processor and are never stored on JeetBaz servers.
• Support communications: any information you share when contacting our support team via live chat or email

2.2 Information Collected Automatically

• Device data: device type, operating system version, browser type, screen resolution
• Connection data: IP address, mobile network operator, approximate location (city-level only, derived from IP — never GPS)
• Usage data: pages visited, games played, bets placed, session duration, features accessed
• Cookies and similar tracking technologies (see Section 6 for full details)

2.3 Information from Third Parties

• Identity verification providers: confirmation of CNIC validity and name match from authorised verification services
• Payment processors: transaction confirmations, fraud signals, and payment method ownership verification
• Fraud and AML screening services: risk scores and watchlist status, used only for legal compliance purposes

Every use of your data on JeetBaz has a specific, documented purpose. The following table summarises the key uses:

JeetBaz does not use personal data to make fully automated decisions that have legal or similarly significant effects on players, without providing the ability to request human review of that decision.

JeetBaz processes your personal data only where we have a valid legal basis to do so. The four bases we rely on are:

• Contract: processing necessary to provide you with the JeetBaz services you have signed up for — account management, betting, payments, withdrawals
• Legal obligation: processing required to comply with applicable law — identity verification, anti-money laundering checks, record-keeping obligations
• Legitimate interest: processing necessary for JeetBaz's legitimate business interests that do not override your rights — fraud prevention, platform security, improving our products
• Consent: processing where you have given us specific, informed permission — marketing communications, personalised promotions. You may withdraw consent at any time without affecting processing carried out under a different basis.

JeetBaz shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners, and card-payment processors. These services receive transaction data to process your deposits and withdrawals. They are contractually bound to handle your data securely.
• Identity verification providers: authorised KYC services that confirm your CNIC validity and name match. Data shared is limited to what is required for verification.
• AML and fraud screening services: risk screening providers used to meet legal anti-money laundering obligations. Data shared is limited to what screening requires.
• Game providers: studios whose games are hosted on JeetBaz (such as Pragmatic Play) may receive a player session token. They do not receive your full account details, CNIC, or payment information.
• Regulatory and law enforcement bodies: where required by applicable law or court order, JeetBaz will share information with the relevant authority. JeetBaz will notify you of such requests unless legally prohibited from doing so.
• Cloud infrastructure providers: JeetBaz uses enterprise cloud hosting. Servers are located in data centres with ISO 27001 certification. Hosting providers have no access to player data for their own purposes and are bound by strict data processing agreements.

JeetBaz uses cookies and similar technologies on its website and platform. A cookie is a small text file stored on your device when you visit a website. Here is a breakdown of the types used:

6.1 Essential Cookies

These are required for the JeetBaz platform to function. They manage your login session, remember your language preference, and maintain security tokens. You cannot opt out of essential cookies without losing access to core platform functions.

6.2 Analytics Cookies

JeetBaz uses anonymised analytics data to understand how the platform is used — which pages load slowly, which games are most popular, where players encounter errors. This helps us improve the platform. Analytics cookies do not identify you personally; they use aggregated, anonymised data.

6.3 Functional Cookies

These remember your preferences — such as your last-used payment method or your selected bet stake — to make your experience smoother on return visits.

6.4 Marketing Cookies

If you have opted in to receive personalised promotions, JeetBaz may use cookies to understand your game preferences and tailor offers accordingly. These cookies are only active where you have given consent and can be disabled at any time from your account settings or by clearing your browser cookies.

You can manage cookie preferences through your browser settings. Note that disabling all cookies will affect platform functionality including login persistence.

JeetBaz retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal and regulatory obligations. The following general retention guidelines apply:

• Active account data: retained for as long as your account remains active
• Account data following closure: retained for a minimum of five years following account closure to comply with anti-money laundering and financial record-keeping obligations
• KYC documents: retained for five years following the end of the business relationship
• Betting history: retained for five years for regulatory compliance
• Support communications: retained for three years
• Marketing consent records: retained for three years following withdrawal of consent
• Analytics data: anonymised and aggregated — not subject to personal data retention limits

When the retention period expires, data is securely deleted or anonymised. JeetBaz conducts regular data audits to ensure retention schedules are followed correctly.

As a JeetBaz player and a data subject, you have the following rights in relation to your personal data. To exercise any of these rights, email support@jeetbaz.bio with the subject line "Data Rights Request" or contact us via live chat. We will respond within 30 days.

• Right of Access: request a copy of all personal data JeetBaz holds about you (Subject Access Request)
• Right to Rectification: request correction of inaccurate or incomplete data. Note that CNIC details, once verified, can only be corrected through the full KYC re-verification process.
• Right to Erasure ("Right to be Forgotten"): request deletion of your personal data. This right is subject to legal retention obligations — JeetBaz may be required to retain certain data for regulatory purposes even after account closure.
• Right to Restriction: request that JeetBaz limits its processing of your data in certain circumstances, for example while a rectification request is being resolved
• Right to Data Portability: request your personal data in a structured, machine-readable format so you can transfer it to another service if you wish
• Right to Object: object to processing based on legitimate interests, including direct marketing. Objection to marketing is always honoured immediately.
• Right to Withdraw Consent: withdraw consent for any processing based on consent (such as marketing) at any time without affecting previous processing

JeetBaz employs a comprehensive, layered approach to data security. The following measures are in place at all times:

• Transport Layer Security (TLS 1.3): all data transmitted between your device and JeetBaz servers is encrypted in transit
• AES-256 encryption at rest: all databases storing personal and financial data are encrypted at rest
• Access controls: personal data is accessible only to authorised JeetBaz staff on a strict need-to-know basis. Access logs are maintained and audited regularly.
• Two-factor authentication: available to all player accounts and required for JeetBaz staff accessing internal systems
• Regular security audits: penetration testing and vulnerability assessments conducted by independent security firms
• PCI DSS compliant payment processing: card payment data is handled exclusively by our PCI-DSS certified processor and is never stored on JeetBaz infrastructure
• Data breach response: JeetBaz maintains a documented incident response procedure. In the event of a data breach affecting player data, we will notify affected players within 72 hours of becoming aware of the breach.

JeetBaz is strictly an adult platform for persons aged 18 and above. We do not knowingly collect personal data from persons under 18. If we become aware that a registered account belongs to a person under 18, the account will be immediately closed, all funds returned, and all data deleted in accordance with our retention policy.

If you are a parent or guardian and believe a minor has registered on JeetBaz, please contact us immediately at support@jeetbaz.bio. We will act promptly to investigate and close the account.

JeetBaz reviews this Privacy Policy regularly and updates it when necessary — for example, when we introduce new data processing activities, when laws change, or when we update our technology stack in a way that affects data handling.

When material changes are made, JeetBaz will update the "Last Updated" date at the top of this page and, for significant changes affecting player rights, send a notification to your registered email address at least 14 days before the change takes effect. Your continued use of JeetBaz after the effective date of any changes constitutes acceptance of the updated Policy.

We recommend bookmarking this page and checking it periodically. The most current version is always published at jeetbaz.bio/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by JeetBaz, please get in touch through any of the following channels:

• Email: support@jeetbaz.bio — subject line "Privacy Enquiry" for fastest routing
• Live Chat: available 24/7 from your JeetBaz account dashboard, typical response under 3 minutes

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority.

Related policies that form part of the full agreement between you and JeetBaz: