Privacy Policy

This Privacy Policy ("Policy") describes how jt888 ("jt888", "we", "us", "our"), the operator of the online gaming platform accessible at https://jt888.cam ("the Platform"), collects, uses, stores, discloses and protects the personal data of individuals who register for or access the Platform ("User", "you", "your").

jt888 is an English-language online gaming platform designed primarily for Pakistani users. We understand that privacy is a fundamental concern, particularly for users accessing digital financial and gaming services. This Policy sets out our data practices transparently so that you can make informed decisions about your use of the Platform.

By registering an account, accessing the Platform, or otherwise providing personal data to jt888, you acknowledge that you have read and understood this Policy and consent to the data practices described herein, to the extent that consent is required as a legal basis for any specific processing activity.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. In the event of any inconsistency between this Policy and those documents on a data-privacy matter, this Policy prevails.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Controller" means the entity that determines the purposes and means of processing personal data — in this case, jt888.
• "Data Subject" means the identified or identifiable natural person to whom personal data relates — in this context, you as a registered or prospective User.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, CNIC number, financial details, IP address, device identifiers, and usage data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, deletion and any other handling activity.
• "Processor" means a third party that processes personal data on behalf of jt888 under a data processing agreement.
• "Sensitive Data" means a subset of personal data warranting heightened protection, including identity document numbers, financial account details and data related to health or vulnerable circumstances (e.g., responsible gambling flags).
• "KYC" means Know Your Customer — the identity and document verification process carried out before withdrawal processing or upon jt888's compliance request.
• "PKR" means Pakistani Rupee, the display currency used for Pakistani users on the Platform.

jt888 collects personal data from multiple sources and in several categories, as described in the table below. Collection occurs at registration, during ongoing platform use, through KYC verification, and automatically through your device and browser.

We do not intentionally collect sensitive personal data beyond what is strictly required for identity verification and responsible gambling monitoring. Where such data is collected, it is handled with heightened care and access controls.

jt888 processes personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are as follows:

• Contractual necessity: Processing required to enter into or perform the contract between you and jt888 — for example, account registration, transaction processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements — for example, anti-money-laundering (AML) obligations, KYC verification requirements imposed under the operator's license, and record-keeping mandates.
• Legitimate interests: Processing necessary for jt888's legitimate business interests, provided those interests are not overridden by your privacy rights — for example, fraud detection, security monitoring, platform analytics, and internal reporting.
• Consent: Processing based on your freely given, specific and informed consent — for example, sending promotional emails and SMS notifications. You may withdraw consent for consent-based processing at any time through your account settings without affecting the lawfulness of prior processing.
• Vital interests: In rare circumstances, processing may be necessary to protect your vital interests — for example, flagging responsible gambling concerns where there is evidence of serious harm.

Where processing is based on consent and you withdraw that consent, jt888 will cease the relevant processing activity promptly. Withdrawal of consent does not affect the validity of any processing carried out before the withdrawal.

jt888 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your account; authenticating your identity at login; managing password resets and security alerts.
• Transaction processing: Processing deposits and withdrawals in PKR; verifying payment method ownership; maintaining accurate financial records.
• KYC and compliance: Verifying your identity, age and address to meet regulatory obligations; conducting AML and counter-terrorism financing (CTF) screening; satisfying record-keeping requirements under the applicable operating license.
• Platform operations: Delivering gaming services, maintaining platform functionality, resolving technical issues, and providing customer support in English (with Urdu assistance available on request).
• Fraud and security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse and unauthorised access; monitoring for suspicious betting patterns or financial activity.
• Responsible gambling: Monitoring gameplay for indicators of problem gambling; applying deposit, loss and session limits; facilitating self-exclusion requests; maintaining self-exclusion records to prevent re-registration during an exclusion period.
• Analytics and improvement: Analysing aggregated usage data to understand how the Platform is used, identify areas for improvement, and enhance the overall user experience.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to Users who have opted in. You may opt out at any time through your account settings or by following the unsubscribe instructions in any communication.
• Legal compliance: Responding to lawful requests from regulatory authorities, law enforcement agencies or courts; asserting or defending legal claims.

jt888 does not use personal data for automated decision-making that produces significant legal effects, except where required by AML or fraud-screening systems, in which case you have the right to request human review of any automated decision that adversely affects your account.

jt888 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

• Payment processors: Third-party payment service providers who facilitate deposits and withdrawals on the Platform. These processors receive only the data necessary to complete your transaction and are bound by data processing agreements. Payment method references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided as contextual orientation only; these references do not imply that any such provider endorses jt888 or processes transactions on our behalf.
• Identity verification providers: Third-party KYC and document verification services that process identity documents and perform liveness checks on our behalf.
• Fraud and AML screening services: Providers of anti-fraud, AML and CTF screening tools that help jt888 meet its compliance obligations.
• IT and infrastructure providers: Cloud hosting, content delivery and technical infrastructure providers who process data solely on jt888's instructions.
• Regulatory and law enforcement authorities: Applicable regulatory bodies, law enforcement agencies and courts where disclosure is required by law or by jt888's operating license conditions.
• Professional advisers: Legal, financial and compliance advisers acting under confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party Processors are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with jt888's documented instructions.

jt888 operates as an online platform that may process data using infrastructure and service providers located in multiple countries. As a result, your personal data may be transferred to and stored in jurisdictions outside your country of residence, including jurisdictions that may not have data protection laws equivalent to those in your home country.

Where personal data is transferred internationally, jt888 takes reasonable steps to ensure that appropriate safeguards are in place, including:

• Contractual clauses with service providers that impose data protection obligations aligned with recognised international standards.
• Transferring data only to processors operating in jurisdictions or under certification frameworks that provide adequate data protection.
• Implementing technical controls such as encryption in transit and at rest to protect data regardless of storage location.

Pakistani users should be aware that Pakistan's domestic data protection framework is evolving. jt888 does not operate under a Pakistani data protection license and does not represent that its data practices are specifically regulated by any Pakistani authority. Users are encouraged to review applicable local law regarding cross-border data transfers.

jt888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and help us understand how users interact with the site.

jt888 does not use third-party advertising cookies or cross-site tracking cookies for purposes unrelated to platform operations. You can manage cookie preferences through your browser settings. Note that disabling essential or security cookies may prevent you from accessing certain features of the Platform or may impair its correct operation.

jt888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting requirements. The general retention principles applied by jt888 are as follows:

• Active account data: Retained for the full duration of your account's existence on the Platform.
• Post-closure retention: Following account closure, core account and transaction records are retained for a minimum period required under the applicable operating license and AML regulations, typically five (5) years from the date of closure or the date of the last transaction, whichever is later.
• KYC documents: Retained for a period consistent with the above AML retention requirement, after which they are securely deleted or irreversibly anonymised.
• Support communications: Retained for a period sufficient to resolve any ongoing disputes or complaints, and for a reasonable period thereafter for quality and legal purposes.
• Marketing preference records: Retained for as long as necessary to honour your opt-out preferences and to demonstrate compliance with marketing consent requirements.
• Responsible gambling records: Self-exclusion and limit records are retained for the full exclusion period and for a defined period after its expiry to prevent re-registration in breach of exclusion terms.

When personal data is no longer required for any lawful purpose, jt888 will either securely delete it or irreversibly anonymise it so that it can no longer be linked to any identified or identifiable individual.

jt888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest.
• Password security: User passwords are stored as salted hashes; jt888 staff cannot access your plaintext password.
• Access controls: Access to personal data is restricted to jt888 personnel and authorised Processors who have a legitimate need to access it. Role-based access controls and audit logging are in place.
• Two-factor authentication: jt888 supports and encourages the use of two-factor authentication (2FA) on user accounts as an additional security layer.
• Vulnerability management: jt888 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in platform infrastructure.
• Incident response: jt888 maintains documented procedures for detecting, responding to and notifying affected parties of personal data breaches in accordance with applicable regulatory requirements.

Whilst jt888 takes data security seriously, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying jt888 support immediately if you suspect unauthorised access to your account.

Depending on the jurisdiction in which you are located and the legal basis applicable to any specific processing activity, you may have some or all of the following rights regarding your personal data held by jt888:

• Right of access: You may request confirmation of whether jt888 processes your personal data and, if so, a copy of that data together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where processing is unlawful. This right is subject to jt888's legal retention obligations, which may require certain data to be retained notwithstanding an erasure request.
• Right to restrict processing: You may request that jt888 restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used and machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. jt888 will cease direct marketing processing immediately upon receipt of a valid objection.
• Rights related to automated decision-making: You have the right not to be subject to decisions with significant legal effects based solely on automated processing, and the right to request human review of any such decision.

To exercise any of the above rights, please contact jt888 support using the contact details provided in Section 15. jt888 will respond to verifiable requests within a reasonable timeframe. We may need to verify your identity before processing a data rights request. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable fee or decline manifestly unfounded or excessive requests.

jt888 is strictly an adults-only platform. We do not knowingly collect or process personal data belonging to individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction or applicable local law, whichever is greater.

Age verification is conducted as part of the account registration and KYC process. If jt888 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the associated account will be immediately suspended, the data will be reviewed in accordance with our compliance obligations, and access to any funds will be handled in accordance with applicable regulatory requirements.

Parents and guardians are encouraged to make use of parental control software and to monitor the online activities of minors in their care. If you believe a minor may have accessed the Platform or provided personal data to jt888, please contact our support team immediately.

The Platform may contain references to third-party services, such as payment method providers or responsible gambling resources. Where any hyperlinks to third-party websites are included, jt888 has no control over the data practices of those third parties. Each third-party site operates under its own privacy policy, and jt888 accepts no responsibility or liability for the data practices of any third-party site you visit.

The mention of payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on the Platform is for contextual orientation only. These references do not imply affiliation, endorsement, partnership or any shared data-processing arrangement between jt888 and those providers unless explicitly confirmed in a separate agreement.

We recommend reviewing the privacy policies of any third-party services you use in connection with your jt888 account, including your chosen payment method providers, to understand how they handle your data independently of jt888.

jt888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated review date. Where a change is material — for example, where we introduce a new category of data use or a new type of data sharing — we will make reasonable efforts to notify registered Users via their registered email address or via an in-platform notification before the change takes effect.

Your continued use of the Platform following the posting of any amended Policy constitutes acceptance of the changes. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically to remain informed of how jt888 handles your personal data.

If you have any questions, concerns or complaints regarding this Privacy Policy, wish to exercise any of your data rights, or need to report a suspected data security incident, please contact the jt888 support team:

Support is available 24 hours a day, 7 days a week. All privacy-related communications are handled in English. Urdu-language assistance is available on request.

When submitting a data rights request, please include your registered username, the nature of your request (e.g., access, rectification, erasure), and sufficient information to allow jt888 to verify your identity. jt888 will acknowledge your request within a reasonable period and provide a substantive response as soon as practicable.

For formal complaints regarding jt888's data handling that cannot be resolved through direct support contact, you may seek recourse through the applicable dispute resolution or regulatory complaint mechanism associated with jt888's operating license jurisdiction.