Privacy Policy — How ja88 Handles Your Data

This Privacy Policy ("Policy") is issued by ja88 ("we", "us", "our", "Platform") and governs the collection, processing, storage, use and disclosure of personal data relating to users ("you", "User", "Player") of the website located at https://ja88.cam and all associated services.

ja88 is committed to protecting the privacy of its users and to handling personal data responsibly, transparently and in accordance with applicable data protection legislation. This Policy has been drafted to give you a clear and complete picture of our data practices before you decide to use the Platform.

By accessing this website, registering an account, making a deposit, placing a bet or otherwise using any feature of the ja88 Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy.

For the purposes of this Policy, the following terms carry the meanings set out below:

ja88 collects Personal Data from you through a number of channels and circumstances, including account registration, KYC verification, your use of the Platform and communications with our support team. The categories of data we collect are set out below.

3.1 Data You Provide Directly

• Identity data: Full legal name, date of birth and, where required for KYC purposes, a copy of government-issued identification (e.g., National Identity Card (CNIC), passport).
• Contact data: Email address, telephone number and residential address (including city, e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar).
• Account credentials: Username and encrypted password. We do not store passwords in plain text.
• Financial data: Payment method details provided during deposit or withdrawal requests, including transaction references. We do not permanently store full payment card numbers.
• Communications data: Content of any messages exchanged with our support team, including responsible gambling requests, complaints or account queries.

3.2 Data Collected Automatically

• Usage data: Pages visited, features used, bets placed, games played, session durations and navigation paths within the Platform.
• Technical data: IP address, browser type and version, operating system, device type, time zone settings and screen resolution.
• Cookie data: Information stored via cookies and similar tracking technologies as described in Section 7.
• Log data: Server-side logs of access events, error reports and security-relevant activity.

3.3 Data from Third Parties

• Identity and address verification data from third-party KYC and anti-fraud service providers.
• Payment status confirmation data from payment processors.
• Self-exclusion register checks, where applicable under operator licensing obligations.

ja88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

We use the Personal Data we collect for the following purposes:

• Account creation and management: To register, verify, maintain and administer your ja88 account throughout its lifecycle.
• Service delivery: To operate the gaming platform, process bets and wagers, calculate outcomes, credit winnings and process withdrawals.
• KYC and compliance: To verify your identity and age, conduct required anti-money-laundering checks and fulfil other regulatory obligations applicable to the operator's licensing jurisdiction.
• Fraud prevention and security: To detect and prevent fraudulent activity, multiple account creation, bonus abuse, money laundering and other prohibited conduct described in our Terms & Conditions.
• Responsible gambling: To monitor gambling behaviour for indicators of problem gambling, to apply deposit limits, loss limits and self-exclusion tools, and to contact you where we have a duty of care concern.
• Customer support: To respond to your queries, process complaints and provide assistance via our English and Urdu support service.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates where you have provided consent. You may opt out at any time.
• Platform improvement: To analyse usage data, identify technical issues and improve the overall user experience.
• Legal obligations: To comply with applicable legal requirements, respond to lawful requests from authorities and maintain required records.

ja88 does not sell your Personal Data to third parties under any circumstances. We may share your data with the following categories of recipients, strictly for the purposes set out in this Policy:

• KYC and identity verification providers: Third-party services that assist us in verifying your identity, age and the authenticity of documents you submit.
• Payment processors: Entities that facilitate the processing of deposits and withdrawals. These processors receive only the data necessary to complete the transaction.
• Anti-fraud and AML service providers: Specialist providers that help us detect and prevent financial crime and fraudulent activity on the Platform.
• IT and cloud service providers: Providers that host or maintain our technical infrastructure, under data processing agreements that restrict their use of your data to instructed purposes only.
• Regulatory and law enforcement authorities: Where we are required by law, court order or binding regulatory instruction to disclose Personal Data.
• Responsible gambling organisations: Where operator licensing obligations require us to share data with self-exclusion registers or problem gambling support bodies.

All third-party Data Processors engaged by ja88 are subject to contractual data protection obligations. They are permitted to use your Personal Data only for the specified purposes and not for their own independent commercial ends.

The ja88 Platform uses cookies and similar tracking technologies to provide core functionality, remember your preferences and improve your experience. The categories of cookies we use are described below:

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential to service operation.

ja88 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory and reporting obligations. The following general retention principles apply:

• Active accounts: Personal Data is retained throughout the duration of your account with ja88.
• Closed accounts: Following account closure, we retain transaction records, identity documents and account data for a period determined by the operator's applicable legal and licensing obligations — typically a minimum of five years from the date of closure.
• KYC documentation: Identity and verification documents are retained for the period required under applicable anti-money-laundering regulations.
• Marketing consent records: Records of your opt-in consent are retained for the period necessary to evidence that consent, even after you have opted out.
• Support communications: Records of support interactions are retained for a period of at least three years to support complaint resolution and quality assurance.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

ja88 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, destruction or accidental loss. Our security measures include, but are not limited to:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and our servers.
• Encryption at rest for stored sensitive data, including identity documents and payment references.
• Role-based access controls ensuring that Personal Data is accessible only to staff who require it for specified legitimate purposes.
• Two-factor authentication availability for user account access.
• Regular security assessments, penetration testing and vulnerability monitoring of our infrastructure.
• Strict contractual requirements on all third-party processors regarding the security of data they handle on our behalf.

Notwithstanding the above, no electronic transmission or storage system is entirely immune from risk. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact our support team immediately.

ja88 operates internationally and may transfer your Personal Data to countries outside of Pakistan for the purposes of platform operation, data hosting or third-party service provision. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to applicable data protection requirements.

Such safeguards may include standard contractual clauses, data processing agreements with adequate protections, or reliance on the recipient jurisdiction's adequacy status under the applicable regulatory framework. Details of the specific safeguards applied to any international transfer are available upon request to our support team.

Subject to applicable law, you have the following rights in relation to your Personal Data held by ja88. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all valid requests within a reasonable timeframe and in any event within the period required by applicable law.

Please note that certain rights may be subject to limitations where retention is required by law or where the erasure of data would conflict with our legal obligations (e.g., AML record-keeping requirements). We will always explain any such limitation when responding to your request.

The ja88 Platform is strictly intended for adults who are 18 years of age or older — or the higher minimum age required by the operator or applicable licensing jurisdiction. We do not knowingly collect Personal Data from minors. Access by persons under the applicable minimum age is prohibited.

If we become aware that we have collected Personal Data from a minor, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be dealt with in accordance with applicable law and our Terms & Conditions.

If you believe that a minor has created an account on this Platform, please contact our support team immediately so we can investigate and take appropriate action.

The ja88 Platform may contain references to or contextual mentions of third-party services (such as payment method references). This Policy applies only to Personal Data processed by ja88 directly. We are not responsible for the privacy practices of any third-party services or organisations referenced on this Platform.

We recommend that you review the privacy policies of any third-party services you interact with independently of this Platform. ja88 accepts no liability for the data handling practices of any third party.

ja88 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or operational requirements. Material changes will be communicated to registered users by notice on the Platform or by email where reasonably practicable.

The effective date displayed at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the Platform following any amendment constitutes your acceptance of the updated Policy. If you do not accept the amended Policy, you must cease using the Platform and may request account closure.

The version of this Policy in force at the time of any processing activity shall be the version that governs that activity.

If you have any questions, concerns or requests relating to this Privacy Policy or to the Personal Data we hold about you, please contact the ja88 Data Privacy team. Our support service is available 24 hours a day, seven days a week, in both English and Urdu.

Support Email: [email protected] (plain text — not a clickable link)

Please include "Privacy Request" in the subject line of your email and provide sufficient information to allow us to identify your account and the nature of your request. We will acknowledge all privacy requests within five business days and aim to resolve them within thirty days, in line with standard data protection response timelines.

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version is always the version published at https://ja88.cam/privacy-policy.