jw7 Privacy Policy

jw7 operates jw7.lol as a licensed online gaming platform serving Pakistani players. In the course of operating this platform, jw7 necessarily collects and processes certain categories of personal data. This Privacy Policy has been drafted to give you full transparency over those practices in accordance with applicable data protection standards and jw7's obligations under its international gaming licence.

This policy should be read alongside the jw7 Terms & Conditions and Responsible Gaming Policy. Defined terms used in this Privacy Policy carry the same meaning as in the Terms & Conditions unless the context requires otherwise.

jw7 acts as the data controller in respect of all personal data collected through the Platform. This means jw7 determines the purposes for which your data is collected and the manner in which it is processed. Where jw7 engages third-party processors to handle data on its behalf, those processors are bound by contractual obligations that meet the standards required under jw7's licensing obligations.

jw7 collects personal data in several categories depending on how you interact with the Platform. The categories are set out below:

jw7 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when completing the jw7 registration form, submitting KYC documents, making deposits or withdrawal requests, or contacting customer support.
• Automated collection: Technical and behavioural data collected automatically as you use the Platform, including through server logs, session tracking, and our internal analytics systems.
• Cookies and similar technologies: First-party cookies and local storage tokens used to maintain your login session, remember your language preference, and measure Platform performance. See Clause 7 for full details.
• Payment processors: Confirmation data received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK following successful payment authorisation. jw7 receives only the minimum data necessary to confirm, reconcile, and support payment transactions.
• Identity verification providers: Where jw7 uses a third-party KYC verification service to validate your CNIC or passport, that service returns a verification result and a confidence score to jw7. Raw document images are handled in accordance with that provider's own privacy controls, which are contractually required to meet the standards of this Policy.
• Responsible gaming monitoring: jw7's responsible gaming systems automatically monitor account activity for patterns associated with problem gambling, such as rapid session escalation or repeated failed deposit attempts. This monitoring is conducted in the legitimate interests of Player welfare.

jw7 processes personal data only where a lawful basis exists for doing so. The primary legal bases on which jw7 relies are as follows:

jw7 uses the personal data it collects for the following specific purposes:

• Account provisioning: Creating, maintaining, and securing your jw7 Account, including processing your login credentials and session management.
• Payment processing: Facilitating PKR deposits via JazzCash, EasyPaisa, Raast, and bank transfer, and processing withdrawal requests to verified Pakistani payment accounts.
• KYC and age verification: Confirming that you are at least 21 years of age and that your identity matches your registration data, as required under jw7's international gaming licence obligations.
• AML compliance: Monitoring transaction patterns for indicators of money laundering or financial crime as required by applicable regulations. Suspicious activity may be reported to relevant authorities without prior notice to the Player.
• Fraud prevention: Detecting and preventing account fraud, bonus abuse, identity theft, payment fraud, and multi-accounting through automated risk-scoring systems and manual review.
• Responsible gaming: Monitoring session patterns, deposit velocity, and wagering behaviour to identify players who may be at risk of developing gambling-related harm. jw7 may intervene proactively where risk indicators are triggered, consistent with its responsible gaming obligations.
• Customer support: Responding to live chat inquiries, email queries, and formal complaints in Urdu and English. Support interactions are recorded for quality assurance and dispute resolution purposes.
• Marketing (with consent): Sending emails and SMS messages about jw7 promotions, including Eid and Ramadan festive bonuses and PSL cricket betting offers, where you have given express opt-in consent. You can withdraw this consent at any time.
• Platform improvement: Analysing aggregate user behaviour data to optimise the jw7 website performance, improve game selection, and personalise your Platform experience.
• Legal compliance: Responding to court orders, regulatory information requests, and law enforcement inquiries as required by applicable law.

jw7 shares personal data with carefully selected third-party organisations only to the extent strictly necessary to operate the Platform and meet legal obligations. The categories of recipients and the data shared with each are set out below:

• Payment processors (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK): Name, account reference, and transaction amount to complete your deposit or withdrawal in PKR.
• KYC and identity verification providers: CNIC / passport data and selfie images submitted for age and identity verification. These providers are contractually bound to process your data solely for verification purposes on jw7's behalf.
• Game software providers: Anonymised or pseudonymised Player ID and session data required by licensed RNG game providers to authenticate game sessions and return results. These providers do not receive your name, CNIC, or payment details.
• Fraud and AML monitoring services: Technical and transactional data shared with specialist fraud-detection systems to identify and prevent financial crime.
• IT infrastructure and hosting providers: Encrypted personal data processed on secure servers by jw7's hosting and cloud infrastructure partners operating under strict data processing agreements.
• Regulatory and law enforcement bodies: Personal and transactional data shared where jw7 is legally required to do so by a court order, regulatory direction, or law enforcement request. jw7 will seek to notify affected Players where legally permitted.

jw7 requires all third-party processors to maintain data security standards at least equivalent to those described in this Privacy Policy, and to process personal data only for the specific purpose for which it was shared.

jw7 uses cookies and similar local storage technologies to operate the Platform effectively. A cookie is a small text file placed on your device by the jw7 web server. Cookies do not access other files on your device and cannot carry viruses or malware.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into jw7. Disabling analytics or marketing cookies will not affect your ability to use the Platform but may mean that jw7 cannot correctly attribute bonus offers to your account.

jw7 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised aggregate data may be retained indefinitely for analytical and statistical purposes.

jw7 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jw7 servers, including login sessions, deposit flows, and KYC document uploads.
• Encryption at rest for sensitive data categories including identity documents and financial account references stored in jw7 databases.
• Role-based access controls ensuring that jw7 staff can only access personal data categories relevant to their specific job function. No single employee has unrestricted access to all data categories.
• Two-factor authentication for all jw7 internal system administrators accessing production environments containing personal data.
• Regular penetration testing and security audits conducted by qualified independent security professionals to identify and remediate vulnerabilities.
• Intrusion detection systems monitoring jw7 infrastructure for unusual access patterns, data exfiltration attempts, and credential stuffing attacks.
• Incident response procedures including defined escalation paths and notification timelines in the event of a data breach affecting Player personal data.

Despite these measures, no internet-based system is completely immune to security incidents. jw7 will notify affected Players promptly in the event that a data breach occurs that poses a significant risk to their rights and interests.

As an internationally licensed online gaming platform, jw7 may process or store certain categories of personal data on servers or through service providers located outside Pakistan. Where such international transfers occur, jw7 ensures appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards used by jw7 for international transfers include contractual data processing agreements that bind the receiving party to data protection obligations at least equivalent to those under jw7's licensing regime, and technical measures such as end-to-end encryption for data in transit. jw7 does not transfer personal data to jurisdictions that lack adequate legal or contractual protections for personal data.

jw7 recognises and respects your rights over your personal data. The following rights are available to all jw7 players and can be exercised by contacting jw7 support via live chat or email:

• Right of Access: You may request a copy of all personal data jw7 holds about you. jw7 will respond within 30 days of a verified request.
• Right to Rectification: If any personal data jw7 holds about you is inaccurate or incomplete, you have the right to request its correction. For most contact data, you can update this directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data. jw7 will comply where deletion does not conflict with legal retention obligations (e.g., AML record-keeping requirements for financial transaction records, which jw7 is obligated to retain for five years regardless of account closure).
• Right to Restrict Processing: You may request that jw7 restrict processing of your data in certain circumstances, for example while a rectification request is being investigated.
• Right to Data Portability: You may request that jw7 provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing of your personal data carried out on the basis of jw7's legitimate interests, including profiling for responsible gaming purposes. jw7 will cease such processing unless compelling legitimate grounds override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

jw7 sends promotional communications including deposit bonus offers, free bet promotions, PSL cricket betting alerts, and festive Eid and Ramadan campaign messages only to Players who have given express opt-in consent at registration or through their Account settings.

• Marketing emails and SMS messages are sent to the email address and Pakistani mobile number registered on your Account.
• You can withdraw your marketing consent at any time by updating your notification preferences in the Account settings dashboard, or by clicking "unsubscribe" in any marketing email.
• Withdrawal of marketing consent may take up to 48 hours to take full effect across all communication channels.
• Withdrawing marketing consent does not affect your ability to use the jw7 Platform or claim bonuses for which you otherwise qualify.
• Transactional and account-security communications (e.g., deposit confirmations, withdrawal notifications, OTP messages, and security alerts) are not marketing communications and will be sent regardless of your marketing preference settings.

The jw7 Platform is strictly intended for individuals aged 21 years and above. jw7 does not knowingly collect personal data from any person under the age of 21 and actively uses age verification technology at registration to prevent underage access.

If jw7 becomes aware that personal data has been collected from a person under the age of 21 — including where a minor has used an adult's identity to register — jw7 will immediately suspend the Account, delete all associated personal data that is not subject to mandatory legal retention, and report the incident as appropriate. Any funds deposited by or on behalf of a minor will be returned to the source payment account following verification.

The jw7 Platform does not contain links to third-party websites operated by parties unrelated to jw7. Where jw7 integrates third-party services — such as licensed game providers and payment processors — those integrations occur within the jw7 Platform environment. jw7 is not responsible for the privacy practices of any game provider's own standalone website or any external payment platform you access independently.

jw7 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, new regulatory requirements, or updates to Platform functionality. Where amendments are material — meaning they significantly affect how your personal data is used or your rights in relation to it — jw7 will notify registered Players by email to their registered address and will display a prominent notice on the Platform for a minimum of 30 days following publication of the revised policy.

The effective date displayed at the top of this page reflects the date on which the current version of this Privacy Policy came into force. Your continued use of the jw7 Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the Platform and contact jw7 support to close your Account.

For any questions, concerns, data rights requests, or complaints relating to this Privacy Policy or jw7's data practices, please contact the jw7 Data Team through the following channels:

• Live Chat: Available 24/7 in Urdu and English via the chat widget on jw7.lol — fastest route for urgent data concerns.
• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Response Time: Data rights requests are acknowledged within 48 hours and substantively responded to within 30 days.

jw7 takes data privacy seriously and will engage transparently and promptly with all legitimate privacy-related enquiries submitted by Players. If you remain dissatisfied with jw7's response to a data complaint, you may refer your complaint to the dispute resolution mechanism available under jw7's international gaming licence.