2agame Privacy Policy — How We Protect Your Personal Data

This Privacy Policy applies to 2agame, the online betting and gaming platform accessible at 2agame.im. References to "2agame", "we", "our" or "us" in this document refer to the company that operates the platform and acts as the data controller for the personal data of registered players.

This policy explains how 2agame collects, uses, stores, and protects the personal data of users who register an account or otherwise interact with the platform, including visitors who browse without registering. It applies to data collected through the website, any mobile browser experience, and any direct communications you have with our support team.

By registering an account on 2agame, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, you should not register or use the platform. If you already have an account and wish to have your data deleted, you may close your account and submit a data deletion request as described in Section 9.

2agame collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information from third-party verification services.

We do not collect financial account passwords, full card numbers, or CVV codes. Payment details for Easypaisa and JazzCash are routed through their own secure APIs — 2agame stores only the account identifier and transaction reference, not the full payment credential.

Every piece of data 2agame collects is used for a defined purpose. We do not process personal data in ways beyond those listed below without first notifying you and, where required, obtaining your consent.

• Account management: Your registration data is used to create and maintain your 2agame account, authenticate your login, and manage your account settings.
• Identity verification: KYC data — CNIC and full name — is used to verify that you are who you say you are, that you are at least 18 years old, and that your withdrawal payment method belongs to you. This protects both you and the platform from fraud.
• Payment processing: Your payment method details are used solely to process deposits and withdrawals in PKR. We do not use payment data for any purpose beyond transaction processing.
• Fraud prevention and security: Technical data including IP addresses and device fingerprints is used to detect suspicious login attempts, identify multi-account activity, and prevent unauthorised access to your account.
• Regulatory compliance: Transaction records and identity data are retained to comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations applicable to licensed gaming operators.
• Platform improvement: Anonymised, aggregated gameplay and technical data is used to understand how the platform is used, identify technical issues, and prioritise product improvements. This data cannot be used to identify individual players.
• Customer support: Communication data from support interactions is used to resolve your queries, investigate complaints, and improve support quality.
• Marketing communications: If you have opted in to receive marketing, your contact details are used to send you information about promotions, VIP Club updates, and new features on 2agame. You may opt out at any time.
• Responsible gaming: Gameplay data including session duration and wagering patterns may be analysed to identify potential signs of problem gambling, in line with our Responsible Gaming commitments.

2agame processes your personal data under the following legal bases:

• Contract performance: Processing your registration data, payment information, and account activity data is necessary to fulfil the contract between you and 2agame — i.e., to run your account and provide the services you signed up for.
• Legal obligation: Identity verification and transaction record-keeping are required by the licensing and financial compliance obligations under which 2agame operates. We cannot operate a licensed gaming platform without these processes.
• Legitimate interests: Fraud detection, security monitoring, and platform analytics are processed under our legitimate interest in keeping the platform safe and improving it over time — as long as those interests do not override your privacy rights.
• Consent: Marketing communications are processed based on your explicit opt-in consent. You may withdraw this consent at any time without affecting your account status.

2agame does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share data only with the following categories of verified service providers, and only to the extent necessary for those providers to perform their service:

All third-party service providers that process data on behalf of 2agame are bound by data processing agreements that restrict them from using your data for any purpose other than the specific service they are contracted to provide. They may not share your data further without our written authorisation.

We do not keep your personal data indefinitely. Retention periods are tied to the purpose for which each category of data was collected:

After the applicable retention period, your data is permanently deleted or irreversibly anonymised. Deletion requests submitted before the end of a retention period are fulfilled subject to our legal obligation to retain certain records — in such cases, the mandatory record categories are retained in a restricted-access archive and deleted as soon as the obligation expires.

2agame uses multiple layers of security to protect your personal data. No security system is 100% impenetrable, but our approach reflects industry best practice and is regularly reviewed and updated.

• 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted in transit using Transport Layer Security (TLS). This prevents interception during transmission.
• Password hashing: Your account password is never stored in a readable format. We use a strong one-way cryptographic hash algorithm — if our database were ever compromised, your actual password would remain unknown to any attacker.
• Access controls: Personal data is accessible only to 2agame staff who have a specific business need to access it, verified through role-based access controls. Access is logged and audited regularly.
• Firewall and intrusion detection: Our infrastructure is protected by enterprise-grade firewall systems and continuous intrusion detection monitoring. Suspicious access patterns trigger automatic alerts and account protections.
• Regular security testing: Our platform undergoes regular penetration testing and vulnerability assessments conducted by independent security professionals.

You also play a role in keeping your account secure. Use a unique, strong password for your 2agame account and do not share it with anyone. If you suspect unauthorised access to your account, contact support immediately via live chat or email at [email protected].

2agame uses cookies and similar tracking technologies to keep you logged in, remember your preferences, and understand how the platform is being used. We do not use advertising or cross-site tracking cookies. Below is a breakdown of the cookie types we use:

2agame does not use advertising cookies, retargeting pixels, or any technology that tracks your activity on websites other than 2agame.im. You can manage cookie preferences through your browser settings. Clearing cookies will log you out of your current session and reset your display preferences.

You have the following rights over the personal data that 2agame holds about you. To exercise any of these rights, send a request to [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise. We acknowledge all requests within 72 hours and fulfil them within 30 days.

2agame is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has registered an account on 2agame, please contact us immediately at [email protected] with any information you can provide. We will investigate and, if confirmed, close the account and delete all associated personal data without delay.

Age verification is a mandatory step before any withdrawal is processed. If our KYC process reveals that an account holder is under 18, the account will be closed immediately, no winnings will be paid out, and deposited funds will be returned to the originating payment method where possible.

2agame may update this Privacy Policy from time to time to reflect changes in how the platform operates, new features, changes in payment processing arrangements, or updates to legal requirements. When material changes are made, we will notify registered players by email and update the "last updated" date at the top of this page.

Minor changes — such as clarifications or formatting corrections that do not affect how your data is used — may be made without individual notification. The date shown on this page always reflects the most recent update. We encourage you to review this policy periodically.

If you disagree with a material change to this policy, you may close your account and submit a data deletion request. Continued use of 2agame after the effective date of a material change constitutes acceptance of the updated policy.

If you have any question about this Privacy Policy, want to exercise a data right, or have a concern about how 2agame has handled your personal data, please contact us:

• Email (data requests & privacy queries): [email protected] — subject line "Privacy Policy" or "Data Rights Request"
• Live chat: Available 24/7 on the 2agame website. Our support team can handle initial queries and direct data rights requests to the compliance team.
• Response commitment: All privacy-related correspondence is acknowledged within 72 hours. Data rights requests are fulfilled within 30 days of receiving all necessary information from you.

We take every privacy concern seriously and handle each one individually. If you are not satisfied with the response you receive, you may escalate the matter to our senior compliance team by requesting an escalation in your email.