2agam Privacy Policy

2agam collects personal data through multiple touchpoints across the platform lifecycle — from initial registration through to ongoing account activity. The categories of personal data we collect include:

1.1 — Registration & Identity Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (for mandatory 21+ age verification)
• Email address and mobile phone number
• Residential address (city, province, Pakistan)
• Username and encrypted password

1.2 — Identity Verification (KYC) Documents

• Copy of CNIC (Computerised National Identity Card), passport, or other government-issued identification
• Proof of address documentation where required
• Payment method ownership confirmation (e.g., JazzCash or EasyPaisa account screenshots)

1.3 — Financial & Transaction Data

• PKR deposit and withdrawal amounts and timestamps
• Payment channel identifiers (JazzCash wallet number, EasyPaisa account reference, HBL / UBL / Meezan Bank account partial references)
• Betting and gaming transaction history including stake amounts, odds, and settlement outcomes
• Bonus and promotional credit history

1.4 — Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, login timestamps, and platform navigation patterns
• Cookies and similar tracking technologies (see Section 7)

1.5 — Communications Data

• Support chat transcripts and email correspondence with the 2agam support team
• Responses to surveys, feedback forms, or promotional communications where you choose to participate

2agam processes your personal data for the following clearly defined purposes. Each purpose is supported by a lawful basis for processing:

We will not use your personal data for any purpose not listed above without first notifying you and, where required by law, obtaining your explicit consent.

2agam does not sell, rent, or trade your personal data to any third party. We may share your data with carefully selected third-party service providers and partners only to the extent necessary to operate the platform and fulfil our legal obligations. All third-party data processors engaged by 2agam are contractually bound to process your data only on our instructions and to maintain standards of security equivalent to our own.

Categories of third parties with whom your data may be shared include:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, and USDT TRC20 network processors — solely for the purpose of completing your deposit and withdrawal instructions.
• KYC & Identity Verification Providers: Certified identity verification services used to confirm your age, identity, and CNIC authenticity in compliance with our gaming licence obligations.
• Game Studio Providers: Third-party game studios supplying live dealer, slots, Tower, and Astar Live products — limited to the session and account data required to deliver and settle those games.
• Fraud Prevention & AML Tools: Specialist services that help us detect suspicious transaction patterns, prevent fraud, and comply with anti-money laundering obligations.
• IT Infrastructure & Security Providers: Cloud hosting, security monitoring, and CDN providers operating under strict data processing agreements.
• Regulatory Authorities: Where required by our international gaming licence or by valid legal process, we may disclose data to regulators, law enforcement, or courts.

2agam retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law and our gaming licence obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with your identity. Anonymised and aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform improvement purposes.

2agam employs a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, loss, disclosure, or misuse. Our technical and organisational security measures include:

• Transport Encryption: All data transmitted between your device and 2agam servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when using 2agam.net.
• Data Encryption at Rest: Sensitive data fields — including KYC documents, payment references, and authentication credentials — are encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Access Controls: Internal access to player data is strictly limited on a need-to-know basis. All 2agam staff with data access are subject to confidentiality obligations and role-based permission controls.
• Two-Factor Authentication (2FA): We strongly encourage all 2agam players to enable 2FA on their accounts. This adds a critical second layer of protection beyond your password.
• Fraud & Anomaly Detection: Automated systems continuously monitor account activity for suspicious login attempts, unusual transaction patterns, and other indicators of account compromise.
• Security Audits: 2agam's platform and infrastructure undergo regular independent security assessments and penetration testing to identify and remediate vulnerabilities proactively.

While 2agam takes all reasonable technical precautions, no online platform can guarantee absolute security. You play an important role in protecting your own account by following the guidance above.

As a 2agam player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "DATA RIGHTS REQUEST" along with your registered username and a description of your request. We will respond within 30 days.

• Right of Access: You may request a copy of all personal data that 2agam holds about you, including your account data, transaction history, and KYC records on file.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by 2agam. Corrections to core identity data will require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other lawful basis applies. Note that data subject to legal retention obligations (e.g., AML transaction records) cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that 2agam restrict processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request your data in a structured, commonly used, machine-readable format for transfer to another service.
• Right to Object: You may object to processing based on legitimate interest grounds, including direct marketing. Marketing opt-out can also be managed directly from your 2agam account settings.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

2agam uses cookies and similar technologies to operate the platform, remember your preferences, analyse usage patterns, and maintain session security. The following categories of cookies are used on 2agam.net:

You can manage your cookie preferences at any time through your browser settings or through the cookie preference centre accessible in your 2agam account settings. Disabling optional cookies will not affect your ability to place bets or access your account, though some personalisation features may be reduced.

2agam does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external platforms.

The 2agam platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the 2agam registration process, and we reserve the right to request CNIC or passport documentation to confirm your age at any point during your account lifecycle.

2agam operates under an international gaming licence, and some of our data processors and infrastructure providers may be located in jurisdictions outside Pakistan. Where your personal data is transferred internationally, 2agam ensures that such transfers are protected by appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data protection authorities
• Binding corporate rules where applicable within our group
• Adequacy decisions recognising the destination country's data protection standards

Details of the specific safeguards applied to any international transfer of your data are available upon request by contacting us at [email protected].

With your explicit consent at the time of registration or subsequently through your account settings, 2agam may contact you with information about promotions, bonuses, new game releases, PSL betting offers, and other platform updates relevant to Pakistani players.

• You may opt out of all marketing communications at any time by updating your preferences in your 2agam account settings or by including "UNSUBSCRIBE" in the subject line of an email to [email protected].
• Opting out of marketing communications will not affect transactional communications that are necessary for the operation of your account (such as deposit confirmations, withdrawal notifications, and security alerts).
• 2agam will not use your data for profiling-based marketing decisions that produce significant legal or similarly significant effects without your explicit consent.

2agam reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Where changes are material — affecting how your data is collected, used, or shared — we will notify registered players via email or through a prominent notice on the 2agam platform at least 14 days before the changes take effect.

The current version and effective date of this Policy are always displayed at the top of this document. Continued use of the 2agam platform after the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically at 2agam.net/privacy-policy.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by 2agam, please contact our Data Protection team directly. We are committed to responding promptly and transparently to all privacy-related enquiries.

When submitting a data rights request, please include your registered 2agam username, the email address on your account, and a clear description of your request to help us process it efficiently. We may need to verify your identity before fulfilling the request to ensure your data is protected.