2agam Privacy Policy

Personal Data We Collect

1.1 Registration Data. When you create a 2agam account, we collect the information you voluntarily provide, including your full legal name, date of birth, gender, residential address (including city and province within Pakistan), email address, and mobile phone number. This data is required to open and maintain your account and cannot be omitted.

1.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and our gaming licence conditions, we are required to verify your identity before processing withdrawals. KYC documents we may request include a copy of your Computerised National Identity Card (CNIC), passport, driver's licence, or other government-issued photo identification, as well as proof of your current residential address (such as a utility bill or bank statement).

1.3 Financial Data. We collect information about your deposits and withdrawals, including transaction amounts in PKR, payment method identifiers (such as your JazzCash or EasyPaisa mobile number, HBL or UBL account number, or Meezan Bank details), and transaction reference numbers. We do not store full payment card numbers or bank account credentials on our servers — such sensitive payment data is handled by our PCI-DSS compliant payment processing partners.

1.4 Gaming Activity Data. We record all bets placed, games played, amounts wagered and won, bonus credits used, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting.

1.5 Technical and Device Data. When you access 2agam, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, referring URLs, and pages visited. This data helps us maintain platform security and detect fraudulent activity.

1.6 Communication Data. If you contact our support team — via live chat, email, or any other channel — we retain records of those communications, including the content of messages, timestamps, and any attachments you provide. These records are used for quality assurance and dispute resolution.

How We Use Your Personal Data

2.1 2agam processes your personal data only where we have a lawful basis to do so. The primary bases on which we rely are: (a) performance of the contract between you and 2agam (i.e., operating your account and processing your bets and payments); (b) compliance with our legal and regulatory obligations; (c) our legitimate business interests, provided these do not override your fundamental privacy rights; and (d) your explicit consent, for instance in relation to marketing communications.

2.2 The specific purposes for which we use your data are as follows:

• Account Management: Creating, verifying, maintaining, and closing your 2agam account, including enforcing the single-account policy.
• Payment Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other supported methods.
• KYC & AML Compliance: Verifying your identity, screening against sanctions lists, and fulfilling our anti-money laundering obligations under applicable law.
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and money laundering on the platform.
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling and to apply responsible gaming tools where appropriate or required.
• Customer Support: Responding to queries, resolving disputes, and providing technical assistance through live chat and email.
• Platform Improvement: Analysing usage patterns and gaming data in aggregate to improve platform features, game selection, and user experience for Pakistani players.
• Marketing (with consent): Sending promotional emails, SMS notifications, and in-platform messages about bonuses, promotions, new games, and PSL / cricket betting markets where you have opted in.
• Legal Compliance: Fulfilling obligations to our gaming licence authority, responding to lawful requests from regulatory bodies, and defending legal claims.

Sharing and Disclosure of Your Data

3.1 2agam does not sell your personal data to any third party. We may, however, share your information with carefully selected third parties where necessary to operate the platform, meet our legal obligations, or protect the legitimate interests of 2agam and its users.

3.2 Payment Processors. We share the minimum necessary financial information with our payment processing partners — including JazzCash, EasyPaisa, and banking integrations — to facilitate your deposits and withdrawals. These partners operate under their own privacy policies and are contractually bound to process your data only for the purposes of completing your transaction.

3.3 Identity Verification Providers. We engage third-party KYC and identity verification services to assist in validating your CNIC, passport, and other documentation. These providers may retain copies of your documents in accordance with their own data retention policies, which we require to comply with applicable data protection standards.

3.4 Game Providers. Games available on the 2agam platform are powered by licensed third-party game studios. These providers may receive anonymised session and gameplay data for the purposes of game certification, RTP auditing, and technical support. No personally identifiable information is shared with game providers without your knowledge.

3.5 Regulatory and Law Enforcement Authorities. 2agam will disclose personal data to relevant regulators, law enforcement agencies, or government bodies where required to do so by law, court order, or in connection with an investigation into suspected criminal activity. We will notify you of such disclosures where legally permitted to do so.

3.6 Business Transfers. In the event of a merger, acquisition, or sale of all or part of 2agam's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

Cookies and Tracking Technologies

4.1 2agam uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.2 We use the following categories of cookies on the 2agam platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred odds format, and display options to personalise your experience.
• Analytical Cookies: Used in aggregate, anonymised form to understand how users navigate the platform, which pages are most visited, and where technical errors occur. No individual user behaviour is profiled for commercial purposes.
• Security Cookies: Help detect and prevent fraudulent activity, multi-accounting, and automated bot activity on the platform.

4.3 You may control cookie settings through your browser's privacy options. Please note that disabling strictly necessary cookies will prevent you from logging in to your 2agam account. Instructions for managing cookies in popular browsers are available in your browser's help documentation.

Data Retention

5.1 2agam retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations.

5.2 Account data and transaction records are retained for a minimum of five (5) years following the date of account closure, in compliance with anti-money laundering legislation and gaming licence requirements. KYC documents are retained for the same minimum period.

5.3 Communication records (support chat logs and emails) are retained for a maximum of three (3) years from the date of the communication, unless they are required in connection with an ongoing dispute or regulatory investigation, in which case they are retained until the matter is resolved.

5.4 Technical and device data collected for security purposes is retained for a maximum of twelve (12) months, after which it is anonymised or deleted.

5.5 When the retention period for any category of data expires, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

Data Security

6.1 2agam implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS Encryption: All data transmitted between your device and the 2agam platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• AES-256 Encryption at Rest: Sensitive personal data stored on our servers is encrypted using AES-256, the same standard used by financial institutions and government agencies globally.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based permissions and logged for audit purposes.
• Two-Factor Authentication: 2agam offers two-factor authentication (2FA) for all accounts and strongly encourages all users to enable it.
• Regular Security Audits: The platform undergoes regular penetration testing and vulnerability assessments by independent security professionals.
• Incident Response: We maintain a formal data breach response procedure. In the event of a breach that affects your personal data, we will notify you and the relevant regulatory authorities within the timeframes required by applicable law.

6.2 While we take all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying 2agam support immediately if you suspect unauthorised access to your account.

Your Privacy Rights

7.1 Subject to applicable law and our legitimate interests (including fraud prevention and AML compliance), you have the following rights in respect of the personal data we hold about you:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Basic account details can be updated directly through your account settings panel.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Note that we may be required to retain certain data for legal and regulatory compliance purposes, in which case we will explain what data must be retained and why.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: You have the right to receive certain personal data you have provided to us in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests and to withdraw consent for marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7.2 To exercise any of the above rights, please contact the 2agam support team via live chat or the support email address listed in the footer of this page. We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

Minors and Age Restriction

8.1 The 2agam platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not register an account, place any bet, or use any feature of the 2agam platform.

8.2 If 2agam becomes aware that personal data has been collected from a user who is under 21 years of age, we will immediately suspend the relevant account, delete or anonymise the associated personal data, and refund any real-money balance to the depositing payment method after completing the necessary verification steps.

8.3 Parents and guardians who believe that a minor may have created a 2agam account should contact the support team immediately. We treat all such reports with the highest priority. 2agam supports the use of parental control software to restrict access to gambling websites on shared or family devices.

Changes to This Privacy Policy

9.1 2agam reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the requirements of our gaming licence authority. When we make material changes to this Policy, we will notify registered account holders by email and/or by a prominent notice on the platform at least seven (7) days before the changes take effect.

9.2 The effective date at the top of this Policy will always reflect the date on which the current version came into force. We encourage you to review this page periodically to stay informed about how 2agam protects your personal data.

9.3 Your continued use of the 2agam platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your account before the effective date of the changes.

Contact Us About Privacy

10.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 2agam holds about you, please reach out to our support team. Our privacy team reviews all data-related inquiries and aims to respond within five (5) business days.

10.2 You can contact us via the live chat feature available 24/7 through your account dashboard, or via the support email address displayed in the footer of this page. Please do not send physical mail — all correspondence should be conducted electronically for fastest resolution.

10.3 If you believe your privacy rights have been violated and we have been unable to resolve your concern through our internal process, you may escalate your complaint to the relevant data protection authority or to the dispute resolution body specified by our gaming licence authority.