Last Updated: January 2025
Privacy · Data · Your Rights

2jay Privacy Policy — How We Handle Your Personal Data in Pakistan

At 2jay, your personal information is treated with the same seriousness as your money. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used and what rights you have as a player based in Pakistan.

2jay
Encrypted Storage
Industry-standard AES
No Data Selling
Never sold to third parties
Your Rights Respected
Access, correct, delete
No Unnecessary Tracking
Minimal essential data only

1Introduction — 2jay and Your Privacy

This Privacy Policy describes how 2jay ("we," "us," "the Platform") collects, processes, stores and protects the personal data of players and visitors who interact with the 2jay website at https://2jay.ws and its associated services.

Privacy at 2jay is not an afterthought. When you create an account, deposit money, play games or contact support, you share personal information with us. We take the responsibility of handling that information seriously — because you should be able to play at 2jay knowing exactly what happens to your data, not wondering whether it's being passed around to third parties or used for purposes you never agreed to.

By registering an account or using any part of the 2jay platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy forms part of your overall agreement with 2jay alongside the Terms and Conditions and the Responsible Gaming Policy.

Plain language commitment: We've written this policy to be readable by anyone — not just lawyers. If any section is unclear, contact our support team and we'll explain it directly. Transparency is part of how 2jay operates.

2Personal Data We Collect

2jay collects data in several categories, depending on how you interact with the platform. Here is a clear breakdown of what is collected and when:

Category Data Collected When Collected
Registration Data Full name, mobile number, date of birth, country of residence (Pakistan), preferred username At account creation
Identity Verification CNIC number, copy of CNIC or passport, selfie or liveness check image (when KYC is requested) When verification is triggered — typically before large withdrawals or when fraud signals are present
Financial Data Easypaisa/JazzCash/NayaPay/SadaPay account numbers, bank account details for IBFT, card numbers (last four digits only — full card numbers are not stored by 2jay), transaction history including deposits and withdrawals When you make a deposit or withdrawal
Game Activity Bets placed, games played, session durations, win/loss history, bonus usage Continuously while you play on 2jay
Device & Technical Data IP address, device type, operating system, browser type, screen resolution, approximate geographic location derived from IP Automatically when you access the platform
Communication Data Content of support chat conversations, emails sent to support@2jay.ws, any attachments or documents submitted via support channels When you contact 2jay support
Responsible Gaming Data Limit settings you have configured, self-exclusion status, cool-off periods, reality check preferences When you configure responsible gaming tools

2jay does not collect full card numbers, CVV codes, PINs or similar sensitive authentication credentials. Payment processing is handled via secure third-party payment gateways — 2jay receives confirmation of successful payments but not the underlying sensitive payment credentials.

3Why 2jay Collects Your Data — Legal Basis

Every piece of data 2jay collects has a specific reason behind it. We do not collect data speculatively or without purpose. Here are the legal bases on which 2jay processes your personal data:

  • Contract performance: To open your account, process your deposits and withdrawals, credit bonuses, maintain your game history and provide the core 2jay service — we need to process your registration and financial data. This is data processing necessary to deliver the service you signed up for.
  • Legal obligation: As an online gaming platform, 2jay is subject to anti-money laundering (AML) obligations and age verification requirements. Collecting identity documents, verifying age and retaining transaction records is required by applicable regulations — not optional.
  • Legitimate interests: 2jay processes device and technical data to detect fraud, prevent unauthorised account access and maintain platform security. We also use aggregated game activity data to improve the platform. These are legitimate interests that do not override your privacy rights.
  • Consent: Where 2jay sends you promotional communications (bonus offers, tournament announcements, new game alerts), this is done on the basis of your consent, which is collected separately during registration. You can withdraw consent for marketing communications at any time via account settings or by emailing support@2jay.ws.
You can always ask: If you want to know specifically why 2jay is processing any particular piece of your data, contact support and we will tell you clearly — the specific purpose, the legal basis and how long it will be retained.
2jay

4How 2jay Uses Your Data

Your personal data at 2jay is used for the following specific purposes — nothing more:

  • Account management: Creating and maintaining your 2jay account, verifying your identity, managing your balance and processing your transactions in PKR.
  • Game and betting services: Running games, settling bets, managing tournament entries, applying bonus terms and tracking wagering progress — all of which require your game activity data.
  • Payments processing: Verifying deposits received from your registered payment methods and routing withdrawals back to those same methods. Financial data is used only for transaction processing and AML compliance.
  • Fraud prevention and security: Analysing device fingerprints, IP addresses and behavioural patterns to identify suspicious activity, detect multiple account creation and prevent unauthorised access to your account.
  • Customer support: Using your account and transaction history to resolve support queries efficiently. Support conversations are retained for quality assurance and to protect both you and 2jay in case of disputes.
  • Responsible gaming: Monitoring your game activity against any personal limits you have set and sending reality check notifications when configured. This data use is in your direct interest.
  • Legal and regulatory compliance: Maintaining records required by AML regulations, responding to lawful requests from Pakistani authorities and retaining data for statutory retention periods.
  • Platform improvement: Using anonymised, aggregated data — not individual profiles — to understand how players use 2jay and identify areas for improvement. No individual player's data is used for profiling in a way that affects their account or game terms.
  • Marketing communications (consent only): Sending bonus offers, new game announcements and promotional emails to players who have opted in. You can unsubscribe at any time.

2jay does not use your personal data for automated decision-making that would have a significant effect on your account — for example, automatically refusing a withdrawal or blocking an account — without human review being available to you.

5Who 2jay Shares Your Data With

2jay does not sell your personal data. We do not share your data with advertisers, data brokers or unrelated third parties for their own marketing purposes. Sharing of your data is limited to the following categories of recipients, each serving a specific operational function:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
  • Identity verification providers: When KYC (Know Your Customer) verification is required, your identity documents and verification selfie are shared with our accredited identity verification partner. This partner is bound by confidentiality obligations and may only use your data for the verification task.
  • Game software providers: Where 2jay hosts games developed by third-party providers (such as live dealer game studios), the minimum technical data required to run the game session — including account token and bet amounts — is passed to that provider. These providers cannot independently identify you from this data and are contractually prohibited from using it beyond game delivery.
  • Legal and regulatory authorities: 2jay may disclose data to Pakistani law enforcement, financial intelligence units or regulators where required to do so by applicable law, court order or regulatory instruction. We will notify you of any such disclosure where we are legally permitted to do so.
  • Corporate transactions: In the event of a merger, acquisition or sale of substantially all of 2jay's assets, your data may be transferred to the acquiring entity. You will be notified of any change in data controller and your rights will be preserved.
Third-party links: The 2jay website contains links to other pages within the 2jay platform only. We do not link to external websites. If you navigate to any external site independently, that site's privacy policy governs your data there.

6Cookies and Technical Tracking

2jay uses cookies and similar technologies to operate the platform, maintain your session and improve your experience. A cookie is a small text file stored on your device that allows the website to recognise you between visits and maintain session state (such as keeping you logged in).

The categories of cookies 2jay uses are:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of essential cookies without disabling your ability to use the platform.
  • Functional cookies: Remember your preferences such as language settings, last-used payment method and responsible gaming configuration. These improve convenience and are not used for tracking across other sites.
  • Analytics cookies: 2jay uses anonymised analytics to understand how the platform is used in aggregate — which pages are visited most, where players drop off in registration and so on. This data is aggregated and never tied to your individual account profile.
  • Fraud prevention cookies: Technical identifiers that help 2jay detect suspicious behaviour such as multiple account creation from the same device. These are necessary for the security of the platform and the protection of all players.

2jay does not use third-party advertising cookies or allow external ad networks to place cookies on the platform. You will not see retargeted 2jay advertisements on other websites based on your activity at 2jay.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging into your account. Disabling functional cookies will mean your preferences are not remembered between sessions.

2jay

7How Long 2jay Retains Your Data

Different categories of data are held for different periods, depending on the purpose for which they were collected and the legal obligations that apply:

Data Category Retention Period Reason
Account registration data Duration of account + 5 years after closure AML regulatory requirement and dispute resolution
Transaction records 7 years from transaction date Financial regulatory retention requirement
Identity verification documents Duration of account + 5 years AML compliance and KYC audit trail
Game activity history Duration of account + 2 years Dispute resolution and responsible gaming monitoring
Support communications 3 years from conversation date Quality assurance and dispute evidence
Device and technical data 12 months on a rolling basis Fraud detection and platform security
Marketing consent records Until consent withdrawn + 1 year Evidence of consent for regulatory purposes

After retention periods expire, data is securely deleted or anonymised so it can no longer be associated with you. Where data must be retained for regulatory reasons, it is stored with restricted access — accessible only to compliance staff and auditors with a specific need.

8How 2jay Secures Your Data

Protecting the personal and financial data of 2jay players is a continuous operational responsibility, not a one-time setup. The following security measures are in place:

  • Encryption in transit: All data transmitted between your device and 2jay's servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser confirms this connection is active whenever you are on the 2jay platform.
  • Encryption at rest: Personal data and financial records stored on 2jay's servers are encrypted using AES-256 standard encryption. Even in the unlikely event of a server compromise, encrypted data cannot be read without the decryption keys, which are separately secured.
  • Access controls: Internal access to player data at 2jay is restricted on a strict need-to-know basis. Support agents can view the account information necessary to assist you. They cannot view your full payment details or change security settings without authentication.
  • Two-factor authentication: 2jay supports two-factor authentication (2FA) on player accounts. Enabling 2FA from your account security settings significantly reduces the risk of unauthorised account access even if your password is compromised.
  • Fraud monitoring: Automated systems monitor account activity for patterns associated with fraud, account takeover and money laundering. Alerts trigger human review before any funds are moved in suspicious circumstances.
  • Incident response: In the event of a data security incident affecting personal data, 2jay has an incident response procedure that includes prompt containment, investigation and notification to affected players where required.
You can help protect yourself too: Use a strong, unique password for your 2jay account. Never share your login credentials. Enable 2FA from your account settings. If you notice any unexpected activity on your account, contact support immediately via live chat.

9Your Rights as a Data Subject

As a 2jay player in Pakistan, you have the following rights with respect to your personal data. To exercise any of these rights, contact 2jay at support@2jay.ws with a clear description of your request. We will respond within 30 days.

Right of Access

You can request a copy of all personal data 2jay holds about you. We will provide this in a clear format within 30 days of your verified request. There is no charge for a first request.

Right to Rectification

If any personal data 2jay holds about you is inaccurate or incomplete — for example, a name spelling error or an outdated mobile number — you have the right to have it corrected. Contact support with the correction and supporting evidence if required.

Right to Erasure

You can request deletion of your personal data in certain circumstances — for example, if it is no longer necessary for the purpose collected. Note that regulatory retention obligations (AML, transaction records) mean some data must be kept for defined periods even after account closure.

Right to Restrict Processing

You can request that 2jay restrict how your data is used in certain situations — for example, while the accuracy of data is being contested. During restriction, we hold the data but do not actively process it beyond storage.

Right to Data Portability

For data you provided to 2jay on a consent or contract basis, you can request it in a structured, machine-readable format (CSV or JSON) so you can transfer it elsewhere. This applies to your account data and game history.

Right to Object

You can object to 2jay processing your data for marketing purposes at any time — just email support@2jay.ws or adjust your notification settings. You can also object to processing based on legitimate interests in certain circumstances.

10Children's Privacy

2jay is strictly for users aged 18 and above. The platform does not knowingly collect personal data from anyone under 18 years of age. If we discover that a person under 18 has created an account, the account will be immediately closed, the data deleted where not required for regulatory purposes and any deposited funds returned to the source payment method.

If you are a parent or guardian and believe your child may have accessed or registered on 2jay, please contact us immediately at support@2jay.ws. We take this seriously and will act quickly to investigate and close any underage account identified.

We also encourage parents and guardians to use device-level parental controls and monitoring tools to prevent minors from accessing gambling platforms. Our Responsible Gaming page includes guidance on tools available in Pakistan for this purpose.

11Changes to This Privacy Policy

2jay may update this Privacy Policy from time to time as the platform evolves, regulations change or new data processing activities are introduced. When we make material changes — changes that meaningfully affect how your data is used or what rights you have — we will notify you in advance by email to your registered address and by displaying a prominent notice on the platform before the updated policy takes effect.

Minor clarifications or wording improvements that do not change the substance of our data practices may be made without specific notification, but the "Last Updated" date at the top of this page is always updated to reflect when the current version was published.

Continuing to use 2jay after an updated Privacy Policy takes effect constitutes your acceptance of the changes. If you disagree with any material update, you may request account closure before the new policy takes effect, and your data will be handled under the previous version until that point.

Previous versions of this Privacy Policy are available on request by emailing support@2jay.ws.

12Contact 2jay About Privacy

For any question, concern or formal request relating to this Privacy Policy or the handling of your personal data at 2jay, please reach out through one of the following channels:

  • Email: support@2jay.ws — please mark the subject line "Privacy Request" for fastest routing to the appropriate team.
  • Live Chat: Available 24 hours a day, 7 days a week via the chat button on the 2jay platform. For complex data requests, following up by email is recommended so there is a written record.

We aim to respond to all privacy-related requests within 5 business days and to fulfil verified requests within 30 days. Where a request involves significant data retrieval or complex verification, we will keep you informed of progress within the 30-day window.

Complaints: If you are not satisfied with how 2jay has handled your data or responded to a privacy request, you have the right to escalate your complaint. Details of escalation options will be provided in our written response to your initial complaint.

2jay's Privacy Commitments at a Glance

Six principles that define how 2jay approaches player privacy — every day, not just in a policy document.

Your Data Stays at 2jay

2jay does not sell, rent or broker your personal data to third parties for their own purposes. Sharing happens only with payment processors, identity verifiers and legal authorities — each with a specific, defined purpose and appropriate data protection agreements in place.

Encrypted End-to-End

Data moving between your device and 2jay's servers travels over TLS-encrypted connections. Data at rest on 2jay servers is AES-256 encrypted. The combination means your information is protected both in motion and in storage without exception.

Minimum Necessary Data

2jay only collects data that is genuinely needed to operate the platform, process your transactions and comply with regulations. We do not collect data speculatively in case it becomes useful later — every data point has a defined purpose before collection begins.

Marketing Only With Consent

Promotional emails and bonus notifications from 2jay are sent only to players who have explicitly opted in to receive them. You can withdraw marketing consent at any time from your account settings or by emailing support — no hoops, no waiting period.

Clear Retention and Deletion

Every category of data 2jay holds has a defined retention period. When that period ends, data is deleted or anonymised. Players can also request data deletion outside the standard schedule, subject to regulatory retention obligations that 2jay cannot legally override.

Accessible Privacy Support

Privacy requests at 2jay are handled by real people — not an automated system that deflects with form letters. Whether you want to access your data, correct it, restrict processing or ask how a specific piece of data is used, support@2jay.ws will give you a direct, useful answer.

Your Privacy. Your Data. Your Choice.

Play at 2jay With Full Confidence in How Your Data Is Handled

Now you know exactly what 2jay collects, why we collect it, who can see it and how it's protected. Create your account, deposit in PKR and enjoy fair games — knowing your information is in safe hands at 2jay.

🔒