2gbit Privacy Policy — Your Data, Our Responsibility

Introduction & Scope

This Privacy Policy ("Policy") is issued by 2gbit ("we," "us," "our," or "the Platform") and applies to all personal data processed by 2gbit in connection with the operation of its online casino and sports betting platform accessible at 2gbit.org. This Policy applies to all registered Users, prospective Users, and visitors to the 2gbit website, regardless of location.

2gbit is committed to protecting the privacy and security of personal data belonging to all individuals who interact with our Platform. This Policy describes what personal information we collect, the purposes for which it is used, how it is protected, with whom it may be shared, and the rights you hold in relation to your data.

By registering a 2gbit Account, depositing funds, placing wagers, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should discontinue use of the 2gbit platform immediately.

Data Controller Identity

For the purposes of applicable data protection law, 2gbit acts as the Data Controller in respect of the personal data of its registered Users and website visitors. As Data Controller, 2gbit determines the purposes and means of processing personal data collected through the Platform.

2gbit operates under an international gaming licence and is subject to the data protection requirements imposed by that regulatory framework, as well as any applicable data protection legislation in the jurisdictions in which it operates. All data processing activities undertaken by 2gbit are governed by and conducted in accordance with the obligations of that regulatory framework.

For all data protection enquiries, requests to exercise data rights, and notifications of data concerns, Users may contact 2gbit's data team using the contact information set out in Section 15 of this Policy.

Information We Collect

2gbit collects personal data through several channels, including your direct provision of information during registration, through your interaction with the Platform, and through automated technical means. The categories of personal data we collect include the following:

2gbit does not knowingly collect or process sensitive personal data beyond what is strictly required for KYC compliance, such as government-issued identity document details. Special category data is not sought or processed for marketing or profiling purposes.

How We Use Your Data

2gbit uses the personal data it collects for the following purposes, each of which is underpinned by a lawful basis for processing described in Section 5:

• Account Management: To create, maintain, authenticate, and administer your 2gbit Account, including processing your login credentials and managing your PKR wallet balance.
• Identity & Age Verification (KYC): To verify your identity, confirm your age as 21 or above, and satisfy our obligations under applicable anti-money laundering (AML) and gaming regulatory requirements.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels, including verifying payment method ownership.
• Service Delivery: To provide access to the 2gbit game library, sportsbook, live casino, and instant game titles, and to record and display your gaming history and account activity.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, collusion, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour, enforce self-imposed deposit and session limits, and apply self-exclusion orders as requested.
• Customer Support: To respond to your support queries, investigate complaints, and maintain records of our support interactions with you.
• Marketing Communications: To send you promotional offers, bonus notifications, and game announcements — subject to your communication preferences and applicable consent requirements.
• Legal & Regulatory Compliance: To comply with applicable gaming regulations, AML obligations, tax reporting requirements, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregate usage data to improve the performance, security, and user experience of the 2gbit platform over time.

Legal Bases for Processing

All personal data processing carried out by 2gbit is founded upon one or more of the following lawful bases in accordance with applicable data protection law:

• Contractual Necessity: Processing required to perform the contract between you and 2gbit, including account creation, deposit processing, game delivery, and withdrawal execution. Without this processing, 2gbit cannot fulfil its obligations to you under the Terms and Conditions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification mandates, gaming licence conditions, and responses to lawful regulatory enquiries.
• Legitimate Interests: Processing necessary for 2gbit's legitimate business interests, including fraud detection, security monitoring, Platform analytics, and responsible gaming oversight, where such interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent as the basis for processing — most commonly for direct marketing communications — you have the right to withdraw that consent at any time by contacting our support team or updating your communication preferences within your 2gbit Account settings.

Data Sharing & Disclosure

2gbit does not sell, rent, or trade your personal data. We may share your personal information with the following categories of third parties only to the extent strictly necessary for the purposes identified in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — to facilitate deposit and withdrawal transactions. These providers process only the data necessary to execute the specific payment instruction.
• KYC & Identity Verification Partners: Third-party identity verification service providers engaged to assist with CNIC and document verification as part of the KYC process. All such providers are contractually bound to process data only for the verification purpose.
• Game Content Providers: Casino game studios and sports data feed providers whose software is integrated into the 2gbit platform. These providers may receive technical session data necessary to render game content but do not receive your identity or financial data.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or lawful regulatory request, 2gbit will disclose personal data to competent authorities. We will notify affected Users of such disclosures where permitted by law.
• Professional Advisers: Legal counsel, auditors, and accountants engaged by 2gbit who are bound by professional confidentiality obligations and process personal data solely in the context of their advisory services to 2gbit.

Cookies & Tracking Technologies

2gbit uses cookies and similar tracking technologies to operate the Platform, maintain your session state, detect fraud, and analyse aggregate usage patterns. The following categories of cookies are used on the 2gbit platform:

• Strictly Necessary Cookies: Essential for the basic operation of the 2gbit platform, including maintaining your authenticated login session, loading game content, and processing transactions. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your Platform preferences, such as your preferred game lobby layout, notification settings, and responsible gaming tool configurations. These enhance your 2gbit experience but are not essential to core functionality.
• Analytics Cookies: Used to collect anonymised data about how users navigate and interact with the 2gbit platform. This information is used in aggregate form to identify performance issues and improve the user experience. No individual user is identified through analytics data.
• Security Cookies: Used as part of 2gbit's fraud detection and session security systems, including tokens that help identify and block suspicious login attempts and bot activity.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing certain core features of the 2gbit platform, including your Account and the gaming lobby.

Data Security

2gbit implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• AES-256 Encryption: All personal data stored within 2gbit's systems is encrypted using AES-256 encryption. Data transmitted between your device and 2gbit's servers is protected by SSL/TLS protocol, ensuring that data in transit cannot be intercepted in readable form.
• Access Controls: Access to personal data within 2gbit's systems is restricted on a strict need-to-know basis. All staff with data access are subject to background screening, confidentiality obligations, and regular security training.
• Penetration Testing: 2gbit's platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 2gbit maintains a documented data security incident response plan. In the event of a breach affecting personal data, the plan specifies internal escalation procedures, regulatory notification timelines, and User communication protocols.

Data Retention

2gbit retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, including the satisfaction of any applicable legal, regulatory, accounting, or reporting obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active 2gbit Account is retained for the full duration of the account relationship and for a minimum period thereafter as required by applicable gaming regulations and AML obligations — typically five (5) years from the date of account closure.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following the date of the transaction, in accordance with standard AML record-keeping requirements.
• KYC Documents: Identity and verification documents submitted in connection with the KYC process are retained for a minimum of five (5) years following account closure or the date of the last KYC review, whichever is later.
• Support Communications: Records of customer support interactions are retained for a period of three (3) years following the resolution of the relevant enquiry or complaint, to enable review in the event of subsequent disputes.
• Marketing Data: Where you have consented to receive marketing communications from 2gbit, your marketing preferences data is retained until you withdraw consent or for a period of two (2) years following your last interaction with a 2gbit marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to any identifiable individual. Where anonymisation is not feasible, secure deletion using industry-standard protocols is employed.

Your Rights

Subject to applicable data protection law and certain legal limitations, you hold the following rights in respect of the personal data that 2gbit holds about you. To exercise any of these rights, please contact 2gbit using the details set out in Section 15:

• Right of Access: You have the right to request a copy of the personal data that 2gbit holds about you, together with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that 2gbit holds about you. Where technically feasible, you may update certain Account details directly within your 2gbit Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 2gbit's overriding legal obligations to retain certain data categories as described in Section 9.
• Right to Restrict Processing: You may request that 2gbit restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on 2gbit's legitimate interests, unless 2gbit can demonstrate compelling legitimate grounds for the processing that override your rights.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

2gbit will respond to all valid data rights requests within 30 calendar days of receipt. In exceptional circumstances involving complex or multiple requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

Children's Privacy

The 2gbit platform is strictly an adult service. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. Our registration process incorporates CNIC-based age verification to prevent account creation by minors.

If 2gbit becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data, permanently close the associated Account, and where appropriate, report the matter to the relevant regulatory authority.

International Data Transfers

As an internationally operating platform, 2gbit may process and store personal data on servers located outside Pakistan. Where personal data is transferred to countries that do not provide an equivalent level of data protection to that available under applicable law, 2gbit ensures that appropriate safeguards are in place before making such transfers.

Such safeguards may include, depending on the nature of the transfer and the recipient jurisdiction: contractual clauses that impose data protection obligations on the recipient equivalent to those required of 2gbit; binding corporate rules where the recipient is part of 2gbit's group of companies; or reliance on recognised adequacy decisions or equivalent frameworks recognised under applicable data protection law.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting 2gbit's data team as described in Section 15.

Third-Party Services

The 2gbit platform may contain references to, or integrate with, third-party services including payment processors, game content providers, and data feed suppliers. Each of these third parties maintains its own independent privacy policy and data processing practices.

When you make a JazzCash or EasyPaisa deposit, for example, you are also interacting with those providers' own systems, which are governed by their respective privacy policies. 2gbit is not responsible for the data practices of third-party payment providers, game studios, or any other external service provider. We recommend that you review the privacy policies of any third-party service you interact with in connection with your use of the 2gbit platform.

2gbit does not integrate third-party social media widgets, advertising trackers, or cross-site behavioural profiling tools into its platform. The Platform does not share your gaming activity or account data with social media platforms.

Policy Amendments

2gbit reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document will be revised to reflect the date on which any amendment takes effect.

Where amendments are material — meaning they significantly affect the manner in which we process your personal data or the rights available to you — 2gbit will provide advance notice to registered Users via the Platform's in-app notification system or by email to your registered address, at least 14 days before the amended Policy takes effect.

Your continued use of the 2gbit platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the amended Policy, you must cease use of the Platform and may request closure of your Account in accordance with the process set out in the 2gbit Terms and Conditions.

Contact & Data Rights Requests

For all privacy-related enquiries, data rights requests, and data security concern notifications, you may contact 2gbit through the following channels:

• Live Chat Support (24/7): The fastest way to raise a privacy concern or initiate a data rights request. Accessible directly within the 2gbit platform after login. Our support team will record your request and route it to the data team for handling.
• Email: Privacy and data rights requests may be submitted to [email protected]. Please include "Privacy Request" in the subject line and provide your registered mobile number and full name so we can locate your Account. Note that this is a plain-text address — do not include sensitive documents as email attachments unless specifically requested by our team.