jl18 Privacy Policy
At jl18, your personal data is treated with the same seriousness as your winnings — it belongs to you, and we keep it safe. This Privacy Policy explains exactly what information jl18 collects when you use our platform, how we use it, who we share it with, and what rights you have over your own data. We believe in plain-language transparency, not legalese for its own sake.
How jl18 Protects Your Privacy
Six principles that guide our approach to your personal data — every day, on every transaction.
Minimal Data Collection
jl18 only collects the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data we don't need, and we do not ask for information unrelated to delivering our services to you.
No Third-Party Data Sales
jl18 does not sell, rent, or commercially exploit your personal information. Data shared with third parties is limited exclusively to service providers who directly support platform operations — payment processors, KYC verification providers, and game software suppliers — all of whom are contractually bound to data protection standards.
Encrypted & Secure Storage
All personal data held by jl18 is stored on secure servers using industry-standard AES-256 encryption at rest. All data transmitted between your device and jl18 servers is protected by TLS encryption. Financial data — including payment method details — is tokenised and never stored in plain text on jl18 systems.
Your Rights, Always Honoured
You have the right to access a copy of the personal data jl18 holds about you, request corrections to inaccurate data, and in certain circumstances request erasure of your data. These rights can be exercised by contacting our support team — we respond to all data requests within 30 calendar days.
Marketing on Your Terms
jl18 will only send promotional communications — bonus offers, PSL betting highlights, new game launches — to users who have explicitly opted in to marketing at the time of registration or via Account Settings. Opting out of marketing communications takes effect within 24 hours and does not affect your ability to use the jl18 platform.
Clear Retention Periods
jl18 retains personal data only for as long as is necessary for the purpose it was collected, or as required by our international gaming licence and applicable regulatory obligations. Account data is typically retained for a minimum of five years following account closure to comply with anti-money-laundering and gaming audit requirements.
Scope of this Policy: This Privacy Policy applies to all personal data collected and processed by jl18 in connection with the jl18 website, mobile application, customer support interactions, payment transactions, and any other services provided under the jl18 brand. It should be read alongside the Terms & Conditions.
1. Who We Are
jl18 is the operator of the online casino and sports betting platform accessible at jl18.today. jl18 operates under an international gaming licence and is committed to responsible data handling practices as a condition of that licence. For the purposes of data protection law, jl18 is the data controller in respect of all personal data collected from users of the platform.
jl18 is built for Pakistani players — from Karachi to Lahore, Islamabad to Faisalabad — and we understand the sensitivity of personal financial data in the Pakistani market. Our local payment integrations (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB) require us to handle financial data with the highest care, and we do so under contractual obligations with each payment provider that are consistent with this Privacy Policy.
2. Personal Data We Collect
jl18 collects the following categories of personal data in the course of providing our services:
| Data Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, CNIC number, date of birth, selfie photograph, CNIC front and back image | Required (KYC) |
| Contact Data | Email address, Pakistani mobile number, city of residence | Required |
| Financial Data | JazzCash / EasyPaisa account number, bank account details (IBAN), transaction history, deposit and withdrawal amounts | Required |
| Gaming Data | Bet history, game session records, casino game play logs, sports betting selections, wagering totals | Automatic |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, device fingerprint | Automatic |
| Usage Data | Pages visited, time on site, navigation paths, search queries within jl18, feature interactions | Automatic |
| Communication Data | Live chat transcripts, support email correspondence, complaint records | When raised |
| Marketing Preferences | Email/SMS opt-in status, promotional communication preferences | Optional |
jl18 does not collect special category data (as defined under international data protection frameworks) such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming self-disclosed information), or biometric data beyond the CNIC photograph required for identity verification.
3. How We Collect Your Data
3.1 Directly from You
The majority of personal data jl18 holds is provided directly by you. This includes information entered during account registration (name, email, mobile number, date of birth), KYC documents uploaded to verify your identity and age, payment details entered when making a deposit or requesting a withdrawal, and messages or information shared with our support team via Live Chat or email.
3.2 Automatically During Platform Use
When you access jl18, our systems automatically collect technical and usage data. This is a standard feature of all web-based platforms. Technical data — including your IP address, device type, and browser version — is collected to enable the platform to function correctly on your device, detect potential fraud, and comply with our responsible gaming obligations. Gaming data — including bet history and session records — is automatically recorded for every wager placed on jl18, as required by our international gaming licence.
3.3 From Third Parties
jl18 may receive limited personal data from third parties in specific circumstances. Our KYC verification partner may return verification results (pass/fail status and document validity confirmation) that are linked to the identity data you provide. Our payment processors provide transaction confirmation data. Where jl18 uses fraud detection services, those providers may share risk signals derived from anonymised industry data that help us identify accounts engaged in prohibited activity.
4. How We Use Your Personal Data
jl18 uses your personal data for the following specific purposes:
- Account creation and management: Creating, verifying, and maintaining your jl18 Account, including processing login authentication and enabling self-service account management.
- Identity and age verification (KYC): Verifying your legal identity and confirming you are at least 21 years of age before processing withdrawal requests, as required under our gaming licence.
- Payment processing: Processing deposits and withdrawal requests via your selected payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB), and maintaining accurate transaction records.
- Service delivery: Enabling you to access and use jl18's games, betting markets, live casino, and other platform features.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, identity theft, bonus abuse, and account takeover attempts.
- Responsible gaming compliance: Monitoring gaming behaviour to identify potential problem gambling indicators, enforcing self-imposed limits, and applying account-level safeguards as required by our gaming licence.
- Customer support: Responding to your support requests, resolving complaints, and maintaining records of support interactions as required for quality assurance and dispute resolution.
- Legal and regulatory compliance: Meeting our obligations under anti-money-laundering regulations, gaming licence conditions, and applicable data protection requirements, including maintaining audit-ready records.
- Marketing communications (opt-in only): Sending promotional emails or SMS messages about jl18 offers, new games, cricket and PSL betting markets, and platform updates — but only where you have explicitly opted in.
- Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, user experience, and feature design.
5. Legal Basis for Processing
jl18 processes your personal data on one or more of the following legal bases:
- Contractual necessity: Processing required to fulfil our obligations to you under the jl18 Terms & Conditions, including account management, payment processing, and service delivery.
- Legal obligation: Processing required to comply with anti-money-laundering obligations, gaming licence conditions, and regulatory reporting requirements — including KYC verification and transaction record-keeping.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your right to privacy.
- Consent: Processing for optional purposes, including marketing communications — where your consent has been freely given, specific, informed, and unambiguous. Consent can be withdrawn at any time via Account Settings.
6. Data Sharing & Third Parties
6.1 Who We Share Data With
jl18 does not sell personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and MCB — to process your deposits and withdrawal requests. Each provider receives only the financial data necessary to execute the specific transaction.
- KYC verification providers: Third-party identity verification services that receive your CNIC data and selfie photograph for the purpose of verifying your identity and age. These providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than verification.
- Game software providers: Third-party casino game and sports betting software suppliers whose games are integrated into jl18. These providers may receive anonymised session data for technical support purposes. Game providers do not receive identifiable personal data beyond a player session identifier.
- Fraud detection and security services: Providers who assist jl18 in detecting account takeover, collusion, bonus abuse, and financial fraud. Data shared is limited to technical identifiers and transaction signals.
- Regulatory and law enforcement authorities: Where jl18 is required to disclose personal data in response to a lawful request from a regulatory body, law enforcement agency, or court order, we will do so. Where legally permitted, we will notify you of any such disclosure.
- Professional advisers: Legal, audit, and compliance advisers engaged by jl18 are bound by professional confidentiality obligations and receive personal data only where strictly necessary for the relevant advisory engagement.
6.2 No Cross-Border Data Sales
jl18 does not transfer or sell personal data to data brokers, advertising networks, or any organisation whose primary business involves the commercial exploitation of personal information. Any international data transfers to our service providers are governed by appropriate data transfer mechanisms consistent with our international gaming licence obligations.
Your data stays yours: jl18 has never sold, rented, or commercially licensed user personal data to any third party. This commitment is embedded in our company policies and reviewed annually as part of our gaming licence audit process.
7. Cookies & Tracking Technologies
7.1 How jl18 Uses Cookies
jl18 uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, remember your language and display preferences, and gather anonymised analytics about how the platform is used. Cookies are small text files placed on your device by your browser when you visit jl18.
7.2 Types of Cookies Used
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your deposit limits and responsible gaming settings. These cookies cannot be disabled without rendering the platform unusable.
- Functional cookies: Used to remember your preferences, such as your preferred game view layout, language setting, and notification preferences. Disabling these cookies will cause the platform to reset these preferences on each visit.
- Analytics cookies: Used by jl18's internal analytics tools to understand aggregated platform usage patterns — which games are most popular, where users encounter friction in the navigation flow, and how the platform performs across different device types. Data collected via analytics cookies is anonymised before processing.
7.3 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is placed. Please note that disabling strictly necessary cookies will prevent you from using jl18's core features, including logging in to your account. Disabling analytics cookies will not affect your ability to use the platform.
8. Data Security
jl18 implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- AES-256 encryption for all personal data stored on jl18 servers.
- TLS 1.2 or higher for all data transmitted between your device and jl18 servers.
- Tokenisation of all payment method details — jl18 never stores card numbers, bank account credentials, or mobile wallet credentials in plain text.
- Role-based access controls ensuring jl18 staff can only access personal data necessary for their specific job function.
- Regular penetration testing and vulnerability scanning of jl18 platform infrastructure.
- Two-factor authentication available for all jl18 user accounts.
- Annual independent security audits as required by our international gaming licence.
Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that affects your personal data, jl18 will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable regulatory requirements, and will take immediate steps to contain and remediate the incident.
Your responsibility: jl18's security measures protect data on our side of the connection. The security of your jl18 account also depends on you keeping your login credentials private. Never share your password. jl18 staff will never ask for your password. If you suspect your account credentials have been compromised, change your password immediately via Account Settings and contact our Live Chat team.
9. Data Retention
jl18 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any overriding legal, regulatory, or licence-based retention requirements. The following retention periods apply:
- Account and identity data (KYC): Retained for a minimum of five (5) years following permanent account closure, as required under anti-money-laundering obligations applicable to gaming operators.
- Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, consistent with our gaming licence audit requirements.
- Gaming session records: Retained for a minimum of three (3) years following the relevant session date, for licence compliance and dispute resolution purposes.
- Support communications: Retained for two (2) years following resolution of the relevant support request, for quality assurance and dispute evidence purposes.
- Marketing preference records: Retained for the duration of your account and for one (1) year following account closure, to evidence consent and opt-out decisions in case of regulatory inquiry.
- Technical and usage data (anonymised): Retained for up to two (2) years in anonymised, aggregated form for platform improvement analytics.
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Deletion requests submitted by users before the expiry of a mandatory retention period will result in the data being flagged for deletion at the earliest permitted date rather than immediate erasure.
10. Your Data Rights
As a user of jl18, you have the following rights in relation to your personal data. These rights can be exercised by contacting jl18 support via Live Chat or email. All requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.
- Right to access: You have the right to request a copy of the personal data jl18 holds about you. This is sometimes called a "Subject Access Request" (SAR). We will provide a comprehensive summary of the data categories and specific data points held, the purposes for which they are processed, and any third parties with whom they have been shared.
- Right to rectification: If any personal data jl18 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For CNIC-based identity data, corrections require submission of updated documentary evidence through the KYC portal.
- Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to overriding legal and regulatory retention requirements — for example, jl18 cannot delete transaction records that are required to be retained under anti-money-laundering obligations. Where immediate erasure is not possible, we will confirm the earliest date at which deletion can be completed.
- Right to restrict processing: You may request that jl18 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data while a rectification request is under review.
- Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time via Account Settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
- Right to object: You may object to processing based on jl18's legitimate interests. Where a valid objection is raised, jl18 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
11. Children & Minors
jl18 is strictly an adult platform. Registration is prohibited for anyone under the age of 21. jl18 does not knowingly collect, process, or store personal data from individuals under the age of 21. The CNIC-based KYC verification process is specifically designed to prevent underage registration by cross-referencing date of birth information against national identity document data.
If jl18 discovers or is notified that personal data from an individual under 21 years of age has been collected — for example, through a fraudulently completed registration — we will take immediate steps to close the account, delete the data, return any deposits to the originating payment method, and, where appropriate, notify relevant authorities. Parents and guardians who become aware that a minor has registered on jl18 should contact our support team immediately.
12. International Data Transfers
jl18 is operated under an international gaming licence, and some of our service providers — including KYC verification partners and game software suppliers — may process personal data in countries outside Pakistan. Where personal data is transferred internationally, jl18 ensures that appropriate safeguards are in place, including contractual data processing agreements that require receiving parties to maintain data protection standards consistent with our gaming licence obligations and this Privacy Policy.
jl18 does not transfer personal data internationally for purposes unrelated to platform operations. No personal data is transferred to jurisdictions with materially weaker data protection frameworks without appropriate contractual protections in place. Where required by applicable law, jl18 will seek your consent before transferring your personal data to a specific international destination.
13. Updates to This Privacy Policy
jl18 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform features. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — jl18 will notify registered users via the email address on their account and/or via an in-platform notification displayed upon next login, with a minimum of seven (7) calendar days' advance notice before the changes take effect. Non-material changes, such as clarifications or corrections, take effect upon publication without individual notice.
Continued use of jl18 following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised policy. If you disagree with any material change to this policy, you may request account closure and withdrawal of your remaining balance in accordance with the jl18 Terms & Conditions.
14. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how jl18 has handled your personal data, please contact us through the following official channels:
- Live Chat: Available 24/7 directly from the jl18.today homepage. Average response time under 5 minutes. This is the fastest channel for data access requests and consent withdrawal.
- Email: [email protected] (plain text — this is not a clickable link). Please include "Privacy Request" in the subject line and specify the type of request. Response within 24 hours on business days.
For responsible gaming related data requests — including self-exclusion records or responsible gaming limit history — please also refer to our Responsible Gaming page for additional guidance.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the jl18 Privacy Policy.
Licence & compliance: jl18's data practices are reviewed as part of our annual international gaming licence audit. For licence details and compliance information, please visit our About Us page or contact our support team.
You've read the full jl18 Privacy Policy. Our commitment to your data security is as solid as our game library. Log in, download the app, or explore what jl18 has to offer.