bj326 Privacy Policy —
How We Protect Your Data

This Privacy Policy ("Policy") describes how bj326 ("bj326," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "User," or "Player") who access and use the bj326 online gaming platform at bj326.org, including all services, features, and content available therein.

bj326 serves a user base that includes Pakistani players across major cities including Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi, as well as players accessing the platform from other locations. This Policy reflects our obligations under applicable data protection frameworks, our licensing requirements, and our genuine commitment to user privacy.

By creating an account on bj326, making a deposit, or otherwise using any service offered on the bj326 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you should not create an account or use the bj326 platform.

bj326 collects personal data through multiple touchpoints during your interaction with the platform. The categories of data collected and the sources from which they are collected are described below.

bj326 does not collect any sensitive personal data beyond what is expressly required for identity verification and regulatory compliance purposes. We do not collect biometric data, health information, or religious or political beliefs.

bj326 uses the personal data it collects for the following specific purposes:

• Account Administration: To create, verify, maintain, and manage your bj326 account, including authentication, password reset, and session management.
• Service Delivery: To provide you with access to all bj326 gaming services, including cricket betting, slots, live casino, and fishing games, and to process your bets and game transactions accurately.
• Payment Processing: To process deposits and withdrawals through your chosen payment method (JazzCash, EasyPaisa, bank transfer, or card), including verifying the ownership and validity of payment instruments.
• Identity Verification (KYC/AML): To verify your identity, age, and payment method ownership as required by our licensing obligations and anti-money laundering (AML) compliance frameworks.
• Responsible Gaming: To implement and monitor the responsible gaming tools you have activated on your bj326 account, including enforcing deposit limits, loss limits, self-exclusion periods, and the 21+ age restriction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support services based on interaction history.
• Platform Improvement: To analyze aggregated and anonymized usage patterns to improve platform performance, game selection, payment flows, and user interface design.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have opted in to receive such communications. You may withdraw consent at any time.
• Legal Compliance: To fulfil bj326's obligations under applicable law, licensing conditions, and regulatory reporting requirements, including responding to lawful requests from authorities.

bj326 processes your personal data on the following legal grounds, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing required to perform the contract between bj326 and you — specifically, to operate your account, process transactions, and deliver gaming services. Without this processing, bj326 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, licensing conditions, age verification requirements, and responses to lawful regulatory or judicial orders.
• Legitimate Interests: Processing carried out for bj326's legitimate business interests, including fraud prevention, platform security, responsible gaming compliance monitoring, and analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bj326 does not sell your personal data to any third party. We share your personal information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: bj326 shares transaction data with JazzCash, EasyPaisa, Raast, participating banks (HBL, UBL, Meezan Bank), and card processors (Visa/Mastercard) solely for the purpose of processing deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual confidentiality obligations with bj326.
• Identity Verification Providers: bj326 may share identity documents and personal details with licensed KYC (Know Your Customer) and AML verification service providers for the purpose of age verification, identity confirmation, and fraud screening.
• Gaming Regulators and Licensing Authorities: bj326 may be required to share player data with its licensing authority or relevant regulatory bodies as part of compliance obligations, audit requirements, or in response to regulatory investigations.
• Law Enforcement and Courts: bj326 will disclose personal data to law enforcement agencies, courts, or other governmental bodies when required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Technology Service Providers: bj326 uses third-party technology providers for hosting, platform infrastructure, and analytics. These providers process data strictly on bj326's instructions and under data processing agreements that prohibit independent use of your information.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bj326's assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the successor entity.

bj326 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by law and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, bj326 will securely delete or permanently anonymize your personal data such that it can no longer be attributed to you as an individual. Anonymized, aggregated data may be retained indefinitely for platform analytics purposes.

bj326 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration.

• Encryption in Transit: All data transmitted between your browser or device and the bj326 platform is protected using TLS 1.3 / 256-bit SSL encryption. This includes login credentials, payment details, and personal account information.
• Encryption at Rest: Sensitive personal data stored on bj326 servers — including identity documents, payment references, and password hashes — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bj326's internal systems is restricted on a strict need-to-know basis. Employees are granted access only to the data required for their specific role and are required to authenticate via secure, individually audited credentials.
• Two-Factor Authentication: bj326 supports SMS-based two-factor authentication (2FA) for all user accounts. Users are strongly encouraged to enable 2FA in Account Settings to provide an additional layer of protection beyond the password.
• Fraud Monitoring: bj326's platform employs automated monitoring systems that detect unusual activity patterns indicative of account takeover, payment fraud, or identity misuse. Suspicious activity triggers account protection measures and investigation procedures.
• Third-Party Security Audits: bj326 engages independent third-party security firms to conduct periodic penetration testing and security audits of the platform infrastructure. Identified vulnerabilities are remediated according to defined severity-based timelines.

bj326 uses cookies and similar technologies to operate the platform, remember your preferences, analyze usage, and deliver a personalized experience. The categories of cookies used on bj326 are described below.

You may manage cookie preferences at any time through your bj326 account settings or through your browser's cookie management tools. Note that disabling essential cookies will impair your ability to use the bj326 platform.

As a bj326 user, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and your registered account identifier. bj326 will respond within 30 calendar days of receiving a valid request.

The bj326 platform is strictly intended for adults aged 21 and above. bj326 does not knowingly collect personal data from individuals under the age of 21 and does not knowingly provide any service to individuals below this age.

During the registration process, bj326 requires users to declare their date of birth and agree that they are of the minimum legal age to use the platform. Identity verification procedures — including CNIC checks — are conducted prior to the release of any withdrawal. Accounts found to belong to individuals under the age of 21 are closed immediately and the associated funds returned to the deposit source.

If bj326 discovers that it has inadvertently collected personal data from an individual under the age of 21, that data will be deleted immediately upon discovery without any retention for any purpose whatsoever.

bj326 operates under an international gaming license, and as a result, your personal data may be processed by bj326 systems and service providers located outside of Pakistan. In particular, platform infrastructure, payment processing systems, and KYC service providers may be hosted or operated in jurisdictions other than Pakistan.

• Transfer Safeguards: Where personal data is transferred outside of Pakistan, bj326 ensures that appropriate safeguards are in place — including contractual data processing agreements with service providers that impose data protection standards equivalent to those described in this Policy.
• Payment Processor Transfers: Data shared with JazzCash and EasyPaisa is processed and stored within Pakistan's financial infrastructure. Data shared with international card schemes (Visa/Mastercard) may be processed in international jurisdictions subject to those schemes' data protection standards.
• No Transfer for Commercial Purposes: bj326 does not transfer your personal data to any international party for commercial, marketing, or data monetization purposes. All international transfers are purely operational and necessary for service delivery or regulatory compliance.

bj326 reserves the right to update or modify this Privacy Policy at any time. Changes will be reflected by updating the "Last Updated" date at the top of this document and, where changes are material, by notifying registered users via email to their registered address or via a notice displayed upon login.

• Material Changes: Where a change materially affects your rights or how your data is used, bj326 will provide at least 14 days' notice before the change takes effect. Your continued use of the bj326 platform after the effective date of any change constitutes your acceptance of the updated Policy.
• Minor Changes: Non-material changes — such as typographical corrections, restructuring for clarity, or updates to reflect new services that do not change data processing practices — may take effect immediately upon publication.
• Policy Archives: Previous versions of this Privacy Policy are archived and available upon request by contacting the bj326 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by bj326, please use the contact channels below. Our support team handles privacy matters in both English and Urdu.

When submitting a privacy request, please include your registered email address or mobile number so that our team can identify your account and process your request efficiently. All privacy correspondence is handled with strict confidentiality and is accessible only to authorized bj326 data protection personnel.