GJ888 Privacy Policy – How We Handle Your Personal Data

1 Introduction

GJ888 ("we", "us", "the Platform") operates the online gaming website at gj888.win and the GJ888 mobile application. We take the privacy of every player seriously. This Privacy Policy sets out what personal data we collect, why we collect it, how we store and protect it, who we share it with and what rights you have over it.

This policy applies to all users of the GJ888 platform, including registered account holders, unregistered visitors to gj888.win, and users of the GJ888 Android application. It should be read alongside the GJ888 Terms and Conditions.

If you have questions about anything in this policy that aren't answered below, you can reach the GJ888 support team via live chat inside the platform at any time. Live chat is the fastest way to get a response.

2 Data We Collect

GJ888 collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers involved in payment processing or identity verification.

Information You Provide

• Full legal name and date of birth (required at registration)
• Email address and mobile phone number
• Home address (required for KYC verification)
• CNIC or other government-issued identity document details
• Payment method details (account names, partial identifiers — not full card numbers)
• Communications sent to GJ888 support, including live chat transcripts and emails

Information Generated by Your Use

• Login timestamps, session durations and IP addresses
• Device type, operating system and browser information
• Games played, bet amounts, results and transaction history
• Promotions claimed and wagering progress
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Clickstream data and navigation patterns within the platform

Information From Third Parties

• Identity verification data from KYC providers (confirmation of document authenticity)
• Transaction confirmation data from payment processors (JazzCash, Easypaisa, Raast, banks)
• Fraud and risk signals from payment gateway providers

3 How We Use Your Data

GJ888 uses your personal data for the following purposes:

GJ888 does not use your personal data for purposes beyond those listed above without first updating this policy and, where required, obtaining your renewed consent.

4 Legal Basis for Processing

GJ888 processes your personal data under the following legal bases depending on the specific purpose:

• Contract performance: Processing necessary to operate your account, settle bets and process payments.
• Legitimate interests: Fraud detection, security monitoring, platform analytics and responsible gaming enforcement.
• Legal obligation: Identity verification, record-keeping and responding to lawful requests from relevant authorities.
• Consent: Marketing communications, which you can withdraw at any time from account settings.

5 Third-Party Sharing

GJ888 does not sell or rent personal data to third parties. We share data only with service providers who are directly involved in operating the platform or fulfilling legal obligations. All third-party providers who process data on GJ888's behalf are bound by data processing agreements.

Categories of third parties who may receive data include:

• Payment processors: JazzCash, Easypaisa, Raast infrastructure providers, card networks and banking partners — receiving only the data needed to process a specific transaction.
• KYC / identity verification providers: Receiving identity document details to confirm player identity during account verification.
• Game content providers: Pragmatic Play, Evolution and other studios receive session data to settle game rounds but not personal registration information.
• Analytics and platform providers: Receive aggregated or pseudonymised usage data to help improve platform performance.
• Regulatory or law enforcement bodies: Where GJ888 is legally required to disclose information in response to a lawful request.

6 Payment Data

When you deposit or withdraw via JazzCash, Easypaisa, Raast, bank transfer or card, your payment details are handled by the relevant payment processor or gateway — not stored in full by GJ888.

For card payments, GJ888 uses a PCI-DSS compliant payment gateway that tokenises card data. GJ888 stores a payment token (a reference identifier) and partial card details (e.g. last four digits and card type) for the purpose of identifying your payment method in future. The full card number, CVV and expiry date are never stored by GJ888.

For mobile wallet payments (JazzCash, Easypaisa), GJ888 stores your registered mobile number and a transaction reference for each payment. Your wallet PIN and account balance are never visible to or stored by GJ888.

Transaction history — deposit amounts, withdrawal amounts, dates and payment method identifiers — is retained in your account for your own reference and for compliance record-keeping purposes.

7 Cookies and Tracking

GJ888 uses cookies and similar tracking technologies on the website. Cookies are small text files stored on your device that help the platform function correctly and remember your preferences.

Types of Cookies Used

• Essential cookies: Required for login sessions, navigation and basic platform functionality. These cannot be disabled without breaking core features.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, how long sessions last and where errors occur. This data is aggregated and not tied to identifiable individuals.
• Preference cookies: Store your language and display preferences so you don't have to reset them on every visit.

GJ888 does not use third-party advertising cookies or cross-site tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect how the platform functions.

8 Data Security

GJ888 applies a range of technical and organisational measures to protect the personal data it holds:

• 256-bit SSL/TLS encryption for all data in transit between your device and GJ888 servers
• Encrypted storage of sensitive personal data at rest
• Role-based access controls limiting internal staff access to personal data to those who need it to perform their job
• Regular security assessments and penetration testing of the platform infrastructure
• Two-factor authentication options for account access
• PCI-DSS compliant payment gateways handling all card and mobile wallet transactions

No data transmission over the internet is completely risk-free, and GJ888 cannot guarantee absolute security. However, the measures above reflect industry standards for online gaming platforms. If you believe your account has been compromised, contact support immediately via live chat.

9 Data Retention

GJ888 keeps personal data for as long as it is needed for the purposes it was collected, and for as long as required to meet compliance obligations.

• Active accounts: All account data is retained for the duration of account activity.
• Closed accounts: Basic identity, account history and transaction records are typically retained for a period after account closure to meet compliance record-keeping requirements. Specific retention periods depend on the nature of the data.
• Marketing data: Retained only while you are opted in to marketing communications. Removed promptly upon opt-out.
• Support communications: Live chat logs and email correspondence are retained for a standard period to allow for dispute resolution and quality review.

When data is no longer required, it is securely deleted or anonymised in a way that prevents re-identification.

10 Your Rights Over Your Personal Data

As a GJ888 player, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact the support team via live chat or email.

GJ888 will respond to data rights requests within a reasonable timeframe. Requests involving identity verification may take longer if additional confirmation is required to confirm the requester's identity before data is disclosed or deleted.

11 Children's Privacy

GJ888 is an adult platform and is not directed at, nor intended to be used by, anyone under the age of 18. GJ888 does not knowingly collect personal data from individuals under 18. If GJ888 becomes aware that an account belongs to a minor, the account will be permanently closed and all data associated with it will be reviewed and deleted in accordance with this policy.

If you believe a minor has registered an account on GJ888, please notify the support team immediately so the account can be investigated and closed.

12 Changes to This Policy

GJ888 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in technology, or changes in applicable legal requirements. When material changes are made, registered players will be notified via the email address on their account or through an in-platform notification.

The date shown at the top of this page reflects the most recent revision. Your continued use of GJ888 after a policy update has been communicated constitutes your acknowledgement of the updated policy. If you disagree with any change, you should stop using the platform and request account closure.

13 Contact and Data Queries

For any questions about this Privacy Policy, requests to exercise your data rights, or concerns about how your personal data is being handled, please contact the GJ888 support team:

GJ888 aims to respond to all privacy-related enquiries within 48 hours. Complex data rights requests may require additional time where identity verification is involved.