2jbut Privacy Policy

Welcome to the 2jbut Privacy Policy. 2jbut ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who registers and participates on our Platform. This Privacy Policy has been written in plain, accessible English so that players across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan can clearly understand how their information is handled.

This Privacy Policy applies to all personal data collected through the 2jbut website at https://2jbut.net, including all sub-pages, account areas, gaming interfaces, support channels, and any communications between 2jbut and its registered players. By registering an account and using the 2jbut Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which form part of the overall agreement between you and 2jbut.

For the purposes of applicable data protection legislation, 2jbut acts as the data controller in respect of all personal data collected from players using the Platform. As data controller, 2jbut determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable privacy laws and the conditions of our international gaming license.

The 2jbut Platform is operated under an international gaming license. Our data processing practices are designed to align with internationally recognised data protection standards, including principles consistent with the General Data Protection Regulation (GDPR) framework, which we have adopted as a baseline standard of best practice for all players including those based in Pakistan.

2jbut collects personal data from players through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment service providers where required to fulfil our legal and regulatory obligations.

2jbut uses the personal data we collect for specific, legitimate purposes that are necessary to operate the Platform, comply with our legal obligations, and deliver the best possible gaming experience to players across Pakistan. We do not use your data for purposes that are incompatible with those disclosed in this Privacy Policy.

• Account Creation & Management: To register your account, verify your identity, and maintain your player profile, PKR wallet, and account preferences on the 2jbut Platform.
• Gaming Services: To process your bets and wagers, credit winnings to your PKR wallet, calculate bonus eligibility, and deliver the full range of 2jbut gaming products including cricket betting, live casino, and slots.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard in PKR, and to maintain transaction records in compliance with financial regulations.
• KYC & AML Compliance: To verify your identity, confirm your age (21+), and conduct anti-money laundering checks as required by the conditions of our gaming license.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and assist with account issues through our 24/7 support team.
• Responsible Gaming: To monitor gaming patterns, identify potential problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide proactive player protection interventions.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, money laundering, and other prohibited conduct on the Platform.
• Legal Obligations: To comply with applicable laws, regulatory requirements, licensing conditions, and lawful requests from relevant authorities.
• Platform Improvement: To analyse usage patterns, improve our website and gaming products, personalise your experience, and conduct internal research and analytics.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — only where you have given explicit consent, and always with the option to unsubscribe at any time.

Where 2jbut applies GDPR-aligned principles as a best practice standard, we rely on the following legal bases for processing your personal data:

• Contract Performance: Processing that is necessary to provide you with the services described in our Terms & Conditions — including account management, gaming services, and payment processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws, anti-money laundering regulations, KYC requirements, and gaming license conditions is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming oversight is carried out on the basis of our legitimate interests, balanced against your privacy rights.
• Consent: Processing for direct marketing communications, optional analytics, and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.

2jbut does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Your financial data is shared with our payment partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard processors — solely for the purpose of processing your deposits and withdrawals in PKR.
• Identity Verification Providers: Your identity documents and personal details may be shared with our KYC verification partners to fulfil our age verification (21+) and anti-money laundering obligations.
• Game Content Providers: Certain aggregated gameplay data may be shared with our licensed game content providers for technical purposes such as game fault resolution and RNG auditing.
• Regulatory and Legal Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or licensing authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to protect the safety or rights of any person.
• Fraud Prevention Networks: Anonymised or pseudonymised data may be shared with industry fraud prevention networks to detect and prevent cheating, bonus abuse, and multi-accounting across the online gaming sector.
• IT and Security Service Providers: Our hosting, cybersecurity, and IT infrastructure partners may have limited, controlled access to personal data as necessary to maintain and secure the Platform.

2jbut treats payment and financial data with the highest level of security and confidentiality. All PKR transactions on the Platform — whether via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Visa/Mastercard — are processed through PCI DSS compliant payment gateways and encrypted using industry-standard 256-bit SSL technology.

• No Card Storage: 2jbut does not store full payment card numbers on its servers. Card tokenisation is used where applicable, with tokens managed by our PCI-compliant payment processing partners.
• Mobile Wallet Security: JazzCash and EasyPaisa account details are handled exclusively through the APIs provided by those platforms and are not retained in plaintext on 2jbut's systems.
• Bank Transfer Details: Bank account numbers submitted for withdrawal purposes are stored in encrypted form and are accessible only to authorised finance team members on a need-to-know basis.
• Transaction Records: A record of all deposits, withdrawals, and bet settlements is maintained for compliance, dispute resolution, and AML monitoring purposes. These records are retained in accordance with our Data Retention policy (see Section 9).

The 2jbut Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how the Platform is used. Below is a summary of the cookie types used on the 2jbut Platform:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the 2jbut Platform, including the login and cashier functionality.

2jbut retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. Our general retention guidelines are set out below:

• Active Account Data: Personal data associated with an active 2jbut account is retained for the duration of the account's active status plus a minimum period following account closure as required by our gaming license.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five (5) years following account closure in accordance with standard AML compliance requirements.
• Financial Transaction Records: Records of all deposits, withdrawals, and bet settlements are retained for a minimum of five (5) years following the date of the transaction for financial compliance and dispute resolution purposes.
• Support and Communications: Support correspondence and complaint records are retained for three (3) years following resolution of the relevant matter.
• Marketing Data: Data used for marketing purposes is retained until you withdraw consent, at which point it is removed from all active marketing lists within 30 days.
• Anonymised Analytics: Anonymised and aggregated analytics data that cannot be traced back to any individual player may be retained indefinitely for Platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

2jbut implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL Encryption: All data transmitted between your device and the 2jbut Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Personal data and financial information stored on 2jbut's servers is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All 2jbut staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Regular Security Audits: The 2jbut Platform undergoes regular independent security audits and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: 2jbut maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, you will be notified promptly and in accordance with our regulatory obligations.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their 2jbut accounts to add an additional layer of protection against unauthorised access.

As a 2jbut player, you have a number of rights in relation to your personal data. 2jbut respects these rights and has put in place straightforward processes for you to exercise them. To exercise any of the rights below, please contact our support team at [email protected] with the subject line "Privacy Request".

• Right of Access: You have the right to request a copy of the personal data 2jbut holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data held by 2jbut is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that 2jbut delete your personal data. This right is subject to our legal and regulatory retention obligations.
• Right to Restriction: You have the right to request that the processing of your personal data be restricted in certain circumstances, for example while a complaint is being investigated.
• Right to Portability: Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

The 2jbut Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory part of our KYC process and is enforced without exception on every account registered on the Platform.

If 2jbut becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, any balance will be returned via the original deposit method (after verification), and the matter will be escalated in accordance with our responsible gaming and licensing obligations.

As an internationally licensed gaming platform serving players in Pakistan, some of 2jbut's data processing activities may involve the transfer of personal data to countries outside Pakistan. This may occur when we use cloud hosting infrastructure, payment processing partners, or KYC verification services that operate internationally.

Where personal data is transferred internationally, 2jbut ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries or organisations that provide an adequate level of data protection as recognised under applicable frameworks.
• Use of standard contractual clauses or equivalent data transfer mechanisms that impose GDPR-aligned obligations on the receiving party.
• Contractual requirements on international service providers to implement appropriate technical and organisational security measures.

2jbut reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered players by email and by posting a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this document will be updated whenever the Privacy Policy is revised. We encourage you to review this page periodically to stay informed of how 2jbut protects your personal data. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

The most current version of this Privacy Policy is always available at https://2jbut.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2jbut processes your personal data, please get in touch with our dedicated privacy support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request" for all data-related enquiries
• Support Hours: 24 hours a day, 7 days a week — Pakistan Standard Time
• Languages Supported: English and Urdu
• Response Commitment: Acknowledgement within 48 hours; substantive response within 30 days

For responsible gaming tools, deposit limit requests, or self-exclusion, please visit our Responsible Gaming page directly.