Privacy Policy — How 2jey Collects, Uses and Protects Your Data

This Privacy Policy ("Policy") describes how 2jey ("2jey", "the Platform", "we", "us", "our"), the operator of the website at https://2jey.cam, collects, processes, stores and discloses personal data relating to users ("you", "User", "Player") of our online entertainment platform.

2jey is committed to protecting the privacy and security of our users' personal data. We operate this Platform for adult users in multiple jurisdictions and recognise that privacy expectations and applicable law may vary by location. This Policy is designed to meet a high standard of transparency regardless of your jurisdiction.

This Policy applies to all personal data collected through the 2jey website, any associated mobile-optimised interfaces and all related services. It should be read alongside our Terms & Conditions and Responsible Gambling policy, both of which form part of the overall agreement between you and 2jey.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, government-issued identity number, IP address and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Policy, the Data Controller is the 2jey operator.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a written agreement.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC Data" — identity and verification documents provided for Know Your Customer purposes, including CNIC, passport, proof of address and liveness check data.
• "Cookies" — small text files stored on your device by our website for session management, analytics and user experience purposes.
• "Third-Party Service Providers" — companies engaged by 2jey to provide services such as payment processing, identity verification, fraud detection, analytics and customer support technology.

We collect the following categories of personal data from users of the 2jey Platform:

3.1 Registration Data

• Full legal name as it appears on your identity document
• Date of birth (for age verification)
• Email address and username
• Residential address (country, city and optionally street address)
• Phone number (where provided)
• Preferred currency and language settings

3.2 Identity Verification (KYC) Data

• Scanned copy or photograph of a valid government-issued ID (e.g., Pakistani CNIC or passport)
• Proof of address documentation where required
• Selfie or liveness-check image for biometric matching
• Payment method verification documentation

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates and payment method references
• Account balance history and bonus credit records
• Transaction identifiers and payment gateway reference numbers

3.4 Gaming & Betting Activity Data

• Game history, bet amounts, outcomes and session durations
• Sports markets accessed, wagers placed and in-play activity
• Bonus usage history and wagering requirement progression
• Responsible gambling tool settings and self-exclusion records

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser information
• Session timestamps, page views and click-path data
• Cookie identifiers and similar tracking technologies

3.6 Communications Data

• Support ticket content, live chat transcripts and email correspondence
• Feedback, complaint records and survey responses
• Marketing preference settings and consent records

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support or update your account profile.
• Automatically through the Platform — through cookies, server logs and analytics tools that record your interactions with the 2jey website and services.
• From third-party service providers — identity verification providers may return confirmed identity data to us following successful KYC checks; payment processors provide transaction confirmation data.
• From fraud detection and risk management systems — automated systems may generate risk scores, device fingerprints or behavioural signals that are stored against your account record.

We process the personal data we collect for the following purposes:

We do not use personal data for purposes incompatible with those listed above without first obtaining your consent or having another lawful basis for doing so.

All processing of personal data by 2jey is carried out on one or more of the following lawful bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you have agreed to, including account management, transaction processing and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements and financial reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, platform analytics and responsible gambling oversight — where these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent for processing — such as for marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team.

2jey does not sell, rent or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary and under appropriate data protection safeguards:

• Identity Verification Providers: Third-party KYC and liveness-check services used to verify your identity and age. These providers process data under written data processing agreements and are not permitted to use your data for their own purposes.
• Payment Processors: Financial technology providers that facilitate deposit and withdrawal transactions. The mention of payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — as contextual references does not imply a data-sharing relationship with those providers unless a specific cashier integration exists.
• Fraud Detection and Risk Management Services: Providers of automated fraud-scoring and device-fingerprinting services used to detect and prevent unauthorised account activity.
• Customer Support Technology: Live-chat and help-desk platform providers that facilitate support interactions. These providers do not have independent access to your gaming or financial data.
• Analytics Providers: Service providers that analyse aggregated Platform usage data to help us improve features and performance. We take steps to minimise the personal data shared in analytics contexts.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent authorities where required by applicable law, court order or lawful government request. We will notify you of such disclosure where legally permitted to do so.

2jey uses cookies and similar tracking technologies to operate the Platform, manage user sessions, detect fraud and understand how the Platform is used. The following categories of cookies may be set when you visit the 2jey website:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens and cookies required to maintain your logged-in state. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Store your preferences such as language settings, currency display and notification preferences to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated information about how users interact with the Platform, including page views, session duration and navigation paths. This data is used to improve Platform usability.
• Security & Fraud Prevention Cookies: Used by fraud detection systems to identify unusual patterns of behaviour and protect your account from unauthorised access.

Where applicable law requires consent for non-essential cookies, we will request your consent before setting them. You may manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality or performance of the 2jey Platform.

We retain personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory obligation to retain data for a longer minimum period.

• Account and KYC Data: Retained for the duration of your account plus the minimum period required by applicable AML and financial regulations following account closure, which may be five (5) years or longer depending on the governing jurisdiction.
• Transaction Records: Retained for the period required by financial regulatory obligations, typically five (5) to seven (7) years.
• Gaming Activity Data: Retained for the duration of your account plus a reasonable period thereafter for dispute resolution and responsible gambling purposes.
• Support and Communications Data: Retained for a period sufficient to resolve any open or foreseeable disputes, then deleted unless a longer retention period is required by law.
• Marketing Preference Data: Retained until you withdraw consent or request erasure, subject to any legal obligation to retain a record of your consent.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

2jey employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data fields (including identity document data and financial details) at rest.
• Access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular internal security reviews and monitoring of access logs.
• Use of reputable third-party security infrastructure providers.

No online platform can guarantee absolute security. If you have reason to believe that your account has been compromised, please contact our support team immediately at the email address in Section 15.

As an international online platform, 2jey may transfer personal data to service providers or infrastructure located in jurisdictions other than your own. Where such transfers occur, we take steps to ensure that adequate protections are in place, including:

• Entering into standard contractual clauses or equivalent data transfer mechanisms with service providers in jurisdictions that do not offer an equivalent level of data protection.
• Selecting third-party processors who operate under recognised certification frameworks or who are subject to equivalent data protection obligations.
• Limiting the personal data transferred internationally to the minimum necessary for the relevant processing purpose.

By using the 2jey Platform, you acknowledge that your personal data may be processed and stored outside your country of residence, including in jurisdictions where data protection laws may differ from those applicable in Pakistan.

Subject to applicable law and any legal obligations that require us to retain your data, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where we no longer have a lawful basis for processing it, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling, where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We will respond to rights requests within a reasonable period — typically within thirty (30) days — and will inform you if a longer period is required. We may ask you to verify your identity before processing a request to protect against fraudulent claims.

The 2jey Platform is strictly for adults aged 18 or older, or the higher minimum age required by the applicable license jurisdiction. We do not knowingly collect personal data from minors.

We use KYC verification procedures to confirm the age of users before processing withdrawals or unlocking certain account features. If we discover or have reason to believe that an account is held by a minor, we will immediately close the account, suspend any associated funds pending review and handle the matter in accordance with applicable regulatory requirements.

2jey reserves the right to amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or through a prominent in-Platform notice.

We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you should stop using the Platform and may request closure of your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how your personal data has been handled, please contact the 2jey Data Protection team:

Our support team is available to assist players across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — around the clock. Support is available in English and Urdu where available.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant data protection supervisory authority in the jurisdiction governing this Policy.