At 2jay we take your privacy seriously. This Privacy Policy explains exactly what personal information we collect when you use the 2jay platform, how we use it, who we might share it with and what rights you have over your own data. Reading it will take a few minutes and we think it's worth your time before you register.
Six principles that guide how 2jay handles your personal information every single day.
Every connection between your device and 2jay is protected by industry-standard 256-bit SSL encryption. This means your login details, deposit information and personal data travel encrypted and cannot be intercepted by third parties during transit.
2jay only collects personal information that is genuinely necessary to operate your account, process your transactions and meet our legal obligations. We do not collect data for the sake of it. If information is no longer needed for its original purpose, it is deleted or anonymised.
Your personal data is never sold, rented or traded to any third party for commercial gain. 2jay does not operate data brokerage. The information you share with us stays within 2jay and its direct service providers who are bound by strict confidentiality agreements.
Payment details – including your Easypaisa, JazzCash or bank account information – are handled through secure, certified payment processors. 2jay does not store full card numbers or mobile wallet PINs on its own servers. Sensitive payment credentials are tokenised at the processor level.
Information collected for one purpose – for example, CNIC verification for KYC compliance – is not reused for an unrelated purpose such as targeted advertising. At 2jay, data collected for a specific reason is used only for that reason and no other without your explicit consent.
You have the right to access the personal data 2jay holds about you, correct inaccuracies, request deletion where applicable and withdraw consent for non-essential processing. All such requests are handled within 30 days. Contact support@2jay.im to exercise any of these rights.
All security measures active and up to date.
This Privacy Policy applies to 2jay, the online gaming and sports betting platform accessible at 2jay.im. 2jay is the data controller in respect of all personal information collected through the 2jay platform, mobile site and any related communications sent under the 2jay brand.
2jay operates as a Pakistan-facing online casino and sportsbook, offering products including cricket betting, slots, live casino games, poker and baccarat. In the course of providing these services, 2jay necessarily processes certain personal information about registered account holders. This Privacy Policy explains that processing in plain language so that you know exactly what is happening with your data.
If you have any questions about this Privacy Policy or about how 2jay handles your data, you can reach us at support@2jay.im. We will respond to all data-related enquiries within 30 days of receipt.
2jay collects personal information from you in several ways: directly when you register an account, when you make a deposit or withdrawal, when you contact support or when you use specific features of the platform. We also collect certain technical data automatically when you use the site. The categories of data we collect are set out below.
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Registration form, KYC verification |
| Contact Data | Mobile number, email address, city/province | Registration form, account settings |
| Financial Data | Deposit/withdrawal history, payment method identifiers, PKR amounts | Transactions, payment processor callbacks |
| Gaming Activity Data | Bets placed, games played, wins/losses, session duration | Platform activity logs |
| Technical Data | IP address, device type, browser, OS, session timestamps | Automatic collection via cookies and server logs |
| Communications Data | Support chat transcripts, email correspondence | Customer support interactions |
| Verification Documents | CNIC copy, selfie with ID, proof of payment method | KYC/AML verification process |
2jay does not knowingly collect sensitive personal data beyond what is required for identity verification (CNIC details) and does not collect biometric data, religious affiliation, political opinions or other sensitive categories beyond the standard KYC requirements applicable to licensed gaming operators.
Every piece of data that 2jay collects is used for a specific, documented purpose. We do not process data speculatively or for purposes that were not anticipated when the data was collected. The primary purposes for which 2jay uses your personal data are as follows.
2jay processes your personal data only where there is a valid legal basis for doing so. The legal bases we rely on are as follows, matched to the purposes described in Section 3.
| Purpose | Legal Basis |
|---|---|
| Account creation & management | Performance of a contract (the Terms and Conditions you accepted) |
| Transaction processing | Performance of a contract |
| Legal & regulatory compliance | Legal obligation |
| Fraud prevention & security | Legitimate interests (protecting 2jay and its players) |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Customer support | Performance of a contract and legitimate interests |
| Service improvement (anonymised) | Legitimate interests |
| Marketing communications | Consent (where provided) or legitimate interests |
Legitimate Interests: Where 2jay relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your fundamental rights or interests. You may object to processing carried out on this basis by contacting support@2jay.im.
2jay does not sell your personal data. We do not trade your information with advertising networks or data brokers. There are, however, specific circumstances in which 2jay shares data with third parties. These are set out fully below and we do not share data beyond these defined categories.
All third parties who process personal data on behalf of 2jay are required to sign data processing agreements that require them to: process data only on 2jay's documented instructions; implement appropriate security measures; not engage sub-processors without prior written approval from 2jay; and delete or return data at the end of the processing relationship.
Processing financial transactions and verifying player identities requires 2jay to handle sensitive financial and identity data. This section explains specifically how that data is handled.
Payment data: When you make a deposit via Easypaisa, JazzCash or any other payment method, the transaction is processed through a certified payment gateway. 2jay retains a record of transaction amounts, dates, payment method types and transaction reference numbers for accounting, fraud prevention and regulatory compliance purposes. 2jay does not store full mobile wallet PINs, card CVV numbers or complete card numbers on its own servers.
KYC documents: Documents submitted for identity verification – typically a CNIC copy and where requested a selfie with ID – are stored securely in an encrypted document management system. Access is restricted to 2jay's compliance team on a need-to-know basis. KYC documents are retained for the duration required by applicable anti-money-laundering regulations, typically a minimum of five years after account closure.
Important: 2jay will never ask for your full CNIC number via live chat, email or SMS as a standalone request outside the formal KYC process. If you receive such a request purportedly from 2jay, do not respond and contact support@2jay.im immediately to report it.
2jay uses cookies and similar tracking technologies to operate the platform, maintain your session while you are logged in, remember your preferences and analyse how the platform is used. This section explains the types of cookies used and how you can manage them.
Preferences shown above are for illustration. Actual cookie preferences are managed through your browser settings or your 2jay account privacy preferences.
You can control non-essential cookies through your browser settings or through the privacy preferences section of your 2jay account. Note that disabling certain functional cookies may affect the usability of some platform features. Essential cookies required for login sessions cannot be disabled without logging out.
2jay retains personal data for as long as it is necessary for the purpose for which it was collected, including to satisfy any applicable legal, regulatory or accounting requirements. The following retention periods apply as a general guide. Specific legal requirements may mandate longer retention in some cases.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML/KYC legal requirements |
| Transaction records | Duration of account + 5 years after closure | Financial regulation & audit |
| Gaming activity logs | Duration of account + 3 years after closure | Dispute resolution & responsible gaming |
| KYC documents (CNIC etc.) | 5 years after account closure | AML regulatory requirement |
| Support communications | 3 years from last interaction | Dispute resolution |
| Technical/log data | 13 months from collection | Security analysis & platform improvement |
| Marketing preferences | Until withdrawn or 3 years of inactivity | Consent management |
When data reaches the end of its retention period, 2jay securely deletes or anonymises it so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis.
2jay implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. No internet-based platform can guarantee absolute security, but 2jay applies measures that are appropriate to the nature and sensitivity of the data it holds.
Technical measures currently in place at 2jay include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; role-based access controls ensuring staff can only access data required for their specific job function; two-factor authentication requirements for all internal staff accounts with access to player data; continuous monitoring of system logs for unusual access patterns; regular penetration testing of platform infrastructure; and automated intrusion detection systems.
Organisational measures include: mandatory privacy and data security training for all 2jay staff who handle personal data; a documented data breach response procedure with defined notification timelines; data processing agreements with all third-party processors; and regular internal audits of data handling practices.
In the event of a data breach that is likely to result in a risk to your rights or interests, 2jay will notify affected players as quickly as reasonably practicable after the breach is identified and confirmed. Notification will be sent to the email address or mobile number registered on your 2jay account.
As a 2jay player, you have a number of rights in relation to the personal data we hold about you. These rights are not absolute and may be subject to applicable legal obligations in specific circumstances, but 2jay will process all requests promptly and respond within 30 days.
Request a copy of all personal data 2jay holds about you. We will provide it in a structured, readable format.
Request correction of any inaccurate or incomplete personal data 2jay holds about you, including contact details or name spelling.
Request deletion of personal data where it is no longer necessary, where consent has been withdrawn and there is no other lawful basis, or where you object to processing.
Request that 2jay restricts processing of your data while a dispute about accuracy or processing grounds is being resolved.
Receive data you provided to 2jay in a structured, machine-readable format and transmit it to another controller where technically feasible.
Object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. 2jay will cease that processing unless it can demonstrate compelling legitimate grounds.
To exercise any of these rights, email support@2jay.im with the subject line "Data Rights Request" and a brief description of your request. We may ask for identity verification before processing the request to protect against unauthorised access to account data. All requests are handled free of charge unless manifestly unfounded or excessive.
2jay is strictly an adult platform. No person under the age of 18 may register an account or use any part of the 2jay service. 2jay does not knowingly collect personal data from individuals under 18 years of age.
If 2jay becomes aware that personal data has been collected from a person under 18 – whether through registration, a parental notification or any other means – the account will be closed immediately and all associated personal data will be deleted, subject only to any retention obligations under applicable anti-money-laundering law in respect of any transactions that occurred.
Parents or guardians who believe their child may have registered on 2jay are encouraged to contact support@2jay.im immediately. 2jay will investigate and act promptly on all such notifications.
Age Verification: 2jay may request proof of age at any point during the account lifecycle, not only at registration. If age verification is requested and not satisfactorily completed within the stated timeframe, the account will be suspended until verification is received.
2jay may send you promotional emails and SMS messages about bonuses, new games, seasonal promotions (such as Eid specials) and personalised offers where you have provided consent or where 2jay has a legitimate interest in communicating with you about account-relevant promotions. The following rules govern marketing communications from 2jay.
2jay reviews this Privacy Policy regularly and will update it when our data processing practices change, when we introduce new services or when legal requirements mandate changes. The date at the top of this page reflects when the policy was last updated.
Material changes to this Privacy Policy – meaning changes that significantly affect your rights or the way your data is processed – will be notified to you via email to your registered address and via a notice displayed when you next log in to 2jay. Minor updates such as clarifications of existing practices may be made without individual notification, with the updated version published on this page.
Continued use of the 2jay platform after a change to this Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with a change, you should stop using 2jay and request account closure before the change takes effect.
If you have any questions about this Privacy Policy, about the data 2jay holds about you, or about how to exercise your data rights, please get in touch using the contact details below. We aim to respond to all privacy-related enquiries within 30 days.
If you are not satisfied with 2jay's response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority. 2jay will provide the applicable contact details on request. We would, however, appreciate the opportunity to address any concern directly before it is escalated.
Register your account in under two minutes. Instant PKR deposits via Easypaisa and JazzCash. 850,000+ Pakistani players already trust 2jay with their data and their winnings.
18+ · Responsible Gaming · Learn More