2gbet Privacy Policy – How We Handle Your Data in Pakistan

This Privacy Policy explains how 2gbet collects, processes, stores and protects the personal information of people who visit and use the 2gbet platform at https://2gbet.biz. It applies to every Pakistani user who browses the site, registers an account, makes a deposit or interacts with any part of the platform — including cricket betting, football betting, Aviator, card games and virtual sports.

At 2gbet, we take your privacy seriously. Betting is a personal activity, and the information you share with us to open and manage your account is treated with exactly the discretion you would expect. We do not sell your data. We do not share it with advertisers. We use it to run your account, process your payments in PKR, keep the platform secure and comply with applicable regulations.

This policy is written in plain English because we believe you have the right to understand what happens to your information — not just to have access to a document full of legal terminology that nobody reads. If after reading this you still have questions, contact us at support@2gbet.biz and a member of our team will respond in plain English, in English or Urdu, within 24 hours.

2gbet collects only the personal information that is necessary to provide you with a functioning, secure and legally compliant betting service. The categories of data we collect are set out in the table below, along with the reason for collecting each type.

We do not collect sensitive categories of personal data — such as religious beliefs, political opinions or biometric data — and we do not require you to provide such information at any stage of the 2gbet registration or verification process.

Every piece of information 2gbet holds about you is used for a specific, legitimate purpose. The list below covers all the ways we use your personal data:

• Account management: Creating and maintaining your 2gbet account, processing logins and authentication, managing account settings and preferences.
• Payment processing: Handling PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments; processing withdrawals to your registered payment method; issuing transaction references and receipts.
• Identity verification: Confirming your age (18+) and identity as required by our operating standards and to prevent fraudulent account use.
• Betting and gaming services: Settling bets and card game outcomes, maintaining your transaction history, providing access to live scores, in-play markets and all other 2gbet product features.
• Bonus and promotion management: Tracking bonus eligibility, wagering progress and promotion compliance in accordance with the terms published on the Promotions page.
• Customer support: Responding to queries and complaints, verifying your identity when you contact support, resolving disputes about account activity or bet settlements.
• Fraud prevention and security: Monitoring for suspicious login activity, unusual betting patterns, potential account sharing or other indicators of platform abuse.
• Responsible gaming: Monitoring account activity to identify potential problem gambling indicators, applying deposit or loss limits you have set, and responding to self-exclusion requests.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory bodies or law enforcement agencies.
• Platform improvement: Analysing aggregate usage data to improve the 2gbet interface, performance and product range. This analysis is based on anonymised or aggregated data, not individual profiling.

2gbet processes your personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil the contract between you and 2gbet — for example, processing your bet, paying out your winnings or verifying your identity before a withdrawal.
• Legal obligation: Processing required to comply with applicable laws and regulations — for example, retaining transaction records or responding to lawful requests from authorities.
• Legitimate interests: Processing necessary for the legitimate operational and security interests of 2gbet — for example, fraud detection, platform security monitoring and aggregate analytics. Where we rely on legitimate interests, we balance those interests against your right to privacy and apply only the minimum data processing necessary.
• Consent: Where we send marketing communications, we do so on the basis of your consent (which you gave during registration). This consent can be withdrawn at any time without affecting any other processing.

2gbet does not sell your personal data. We do not share it with marketing companies, data brokers or any third party for commercial purposes unrelated to running your 2gbet account. The limited categories of third parties who may receive your data are set out below:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking systems and card payment processors receive only the transaction data necessary to complete your specific deposit or withdrawal. Each of these processors has its own data protection obligations.
• Identity verification providers: Where 2gbet uses a third-party service to assist with CNIC verification or age confirmation, we share only the minimum personal data necessary for the specific check. We do not store full CNIC numbers within the 2gbet platform itself.
• Technology and hosting providers: The infrastructure that runs 2gbet is operated by third-party hosting and cloud service providers. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, or where we receive a valid legal request, 2gbet may disclose personal data to a regulatory body, law enforcement agency or court. We will not disclose data beyond what is legally required.
• Anti-fraud networks: 2gbet may participate in industry anti-fraud networks where platforms share limited data about confirmed fraudulent accounts to protect the broader industry. This sharing is limited to confirmed cases and does not include betting history or financial data.

2gbet uses cookies — small text files stored on your device by your browser — and similar tracking technologies to make the platform work correctly and to understand how it is being used. Below is a summary of the types of cookies we use:

2gbet does not use advertising cookies or third-party tracking pixels. The analytical data we collect is used only to improve the 2gbet platform and is not shared with advertising networks.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary or security cookies may prevent you from logging in or using certain features of 2gbet.

2gbet applies multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss or disclosure. These measures include:

• 256-bit SSL/TLS encryption: Every page of the 2gbet platform, including all login, deposit, withdrawal and account management pages, is served over HTTPS with industry-standard encryption. Any data transmitted between your device and our servers is encrypted in transit.
• Encrypted data storage: Sensitive personal data — including payment details and identity information — is stored in an encrypted format at rest. Even in the highly unlikely event of a data breach, sensitive data would not be readable without the encryption keys.
• Access controls: 2gbet staff access to personal data is limited to those who need it to perform their specific job function. Access is logged and audited regularly.
• Two-factor authentication: 2gbet accounts support two-factor authentication (2FA) for login. We strongly recommend enabling this in your account security settings.
• Fraud monitoring: Our security systems continuously monitor for unusual account activity — including login from new devices, IP address changes and unusual withdrawal patterns — and will alert or pause an account if anomalies are detected.
• Regular security reviews: The 2gbet technical team conducts regular security reviews of the platform's infrastructure and code to identify and address potential vulnerabilities before they can be exploited.

2gbet retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The general retention periods we apply are:

• Active account data: Retained for the duration of your account and for a period of at least 5 years after the account is closed. This retention is required for regulatory compliance and to resolve any dispute that may arise after closure.
• Transaction records: Deposit and withdrawal records, bet histories and bonus transactions are retained for a minimum of 5 years from the date of the transaction, as required for financial record-keeping obligations.
• Identity verification documents: Retained for the duration of the account plus 5 years from closure, or longer where required by law.
• Support communications: Retained for 2 years from the date of the last communication in a support thread.
• Technical and analytical data: Aggregate analytical data is retained indefinitely in anonymised form. Session logs and raw access logs are retained for 90 days and then deleted.
• Marketing consent records: Retained until you withdraw consent, and for a period of 1 year thereafter to demonstrate compliance with your preference.

When the retention period for any data category expires, 2gbet deletes or anonymises that data securely. You may also request early deletion of your personal data — see Section 9 for your rights in this regard.

You have the following rights in relation to the personal data 2gbet holds about you. To exercise any of these rights, contact us at support@2gbet.biz. We will respond within 30 days.

2gbet is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process includes an age declaration and our verification process is designed to identify and reject underage registrations.

If you are a parent or guardian and believe that a minor has registered or used a 2gbet account, please contact us immediately at support@2gbet.biz with details. We will close the account, delete all associated personal data that is not required for regulatory purposes, and refund any deposits made by the minor to the original payment method where this is practically possible.

2gbet may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When we make changes, the "Last updated" date at the top of this page will be revised.

For material changes — those that significantly affect your rights or the way we process your data — we will send a notification to your registered email address at least 7 days before the change takes effect. You will also see a notice when you next log in to your 2gbet account.

For minor changes — such as clarifications to existing practices or updates to contact details — we may update the policy without prior notice. In all cases, the current version of the Privacy Policy on this page supersedes any earlier version. We recommend checking this page periodically, especially if you notice the "Last updated" date has changed.

If you have any question about this Privacy Policy, want to exercise any of your data rights, need to report a suspected security issue or want to make a complaint about how 2gbet has handled your personal information, please contact us by:

• Email: support@2gbet.biz — privacy and data-related queries are prioritised and handled by a dedicated team member. Include "Privacy Query" in the subject line.
• Live chat: Available 24/7 on the 2gbet platform. For complex data queries, the support team will escalate to email for a full written response.

2gbet will acknowledge your query within 24 hours and provide a full response within 30 calendar days. For complex data subject access requests, we may request additional identity verification to ensure we are releasing data to the correct person.