Privacy Policy – 2go Online Gaming Platform Pakistan

1. Who We Are

This Privacy Policy applies to the 2go online gaming platform, accessible at 2go.st and through the 2go Android app. When we say "2go", "we", "us" or "our" in this document, we are referring to the operator of the 2go platform.

2go is an online gaming and entertainment platform built specifically for players in Pakistan. All services are provided in Pakistani Rupees (PKR), and our platform integrates with local payment providers including JazzCash and Easypaisa to make deposits and withdrawals as seamless as possible for Pakistani users.

As the operator, 2go is the data controller for all personal information collected through the website and app. This means we determine how and why your data is processed, and we are responsible for keeping it secure.

2. Data We Collect

We collect personal data in three main ways: information you provide directly when registering or using the platform, information generated automatically as you use our services, and information we receive from third-party providers.

2.1 Information You Provide

• Registration details: Full name, date of birth, email address, phone number and country of residence (Pakistan).
• Identity verification (KYC): Government-issued photo ID (CNIC or passport), proof of address, and confirmation of your registered payment method when required for account verification or withdrawal processing.
• Payment information: Your JazzCash number, Easypaisa number, bank account details or card details as entered during deposit or withdrawal. Full card numbers are never stored on 2go servers — they are handled directly by our PCI-compliant payment processors.
• Communications: Any messages, queries or complaints you send to our support team, including chat logs and email correspondence.
• Responsible gaming preferences: Deposit limits, session limits, self-exclusion requests and cooling-off periods you set through account settings.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution and mobile network operator.
• Usage data: Pages visited, games played, session duration, bet amounts in PKR, game results, bonus activity, login timestamps and navigation paths within the platform.
• Cookies and similar technologies: Session identifiers, preference cookies and analytics cookies. See Section 7 for full details.
• Location data: General geographic location derived from your IP address. We do not collect GPS-level location data.

2.3 Information from Third Parties

• Payment providers: Transaction confirmation data, payment status and error codes from JazzCash, Easypaisa, Raast, banks and card networks.
• Identity verification services: Confirmation of ID document authenticity and fraud risk scoring from KYC providers where applicable.
• Fraud prevention services: Risk signals and fraud flags from third-party security tools we use to protect the platform.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Account management: Creating and maintaining your 2go account, verifying your identity and age, and keeping your account details accurate.
• Processing transactions: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, cards and other supported payment methods.
• Providing gaming services: Running games, calculating results, crediting winnings, managing bonus balances and processing wagering activity.
• Customer support: Responding to queries, resolving disputes, investigating complaints and improving our support quality.
• Security and fraud prevention: Detecting and preventing unauthorised access, multi-accounting, bonus abuse, money laundering and other fraudulent activity.
• Responsible gaming: Monitoring for signs of problematic gaming patterns, enforcing player-set limits and processing self-exclusion requests.
• Platform improvement: Analysing usage patterns to improve game performance, interface usability and overall player experience.
• Marketing communications: Sending promotional emails, in-app notifications or SMS messages about bonuses, new games and platform updates — only where you have opted in or where permitted by applicable rules. You can opt out at any time.
• Legal compliance: Meeting our obligations under applicable laws, including record-keeping requirements and responding to lawful requests from authorities.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: Processing is necessary to deliver the services you have signed up for — account management, gameplay, deposits and withdrawals.
• Legitimate interests: Fraud prevention, security monitoring , platform improvement and responsible gaming monitoring — where our interests do not override your rights.
• Legal obligation: KYC verification, age checks and record retention required by applicable laws.
• Consent: Marketing communications and non-essential cookies — where we rely on your explicit opt-in. You may withdraw consent at any time without affecting prior processing.

5. Sharing Your Data

2go does not sell your personal data to any third party. We share data only in the limited circumstances described below, and always with appropriate safeguards in place.

5.1 Service Providers

We work with carefully selected third-party service providers who process data on our behalf. These include payment processors, identity verification providers, fraud detection tools, cloud hosting providers and customer support platforms. All service providers are contractually required to handle your data securely and only for the purposes we specify.

5.2 Payment Partners

When you make a deposit or request a withdrawal in PKR, relevant transaction data is shared with the applicable payment provider — such as JazzCash, Easypaisa, Raast or your bank. These providers operate under their own privacy policies and security standards.

5.3 Legal and Regulatory Disclosure

We may disclose your data to law enforcement, regulatory bodies or other authorities when required by law or when we believe disclosure is necessary to protect the rights, safety or property of 2go, our players or the public. We will notify you where legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition or sale of all or part of the 2go business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

6. Payment Data & Financial Privacy

Because 2go handles real-money transactions in PKR, we take financial data privacy particularly seriously. Here is how your payment information is handled:

• Full card numbers are never stored on 2go's own servers. Card payment processing is handled entirely by our PCI DSS-compliant payment gateway partners.
• Your JazzCash and Easypaisa mobile wallet numbers are stored securely and used solely for processing deposits and withdrawals tied to your account.
• Bank account details provided for Raast or bank transfer withdrawals are stored in encrypted form and used only for disbursement to your verified account.
• Transaction records — amounts, dates, payment method used and status — are retained for the period required for financial record-keeping and fraud prevention purposes.
• Withdrawal requests are matched against the payment method on file for your account. Payments to third-party accounts or unregistered numbers are not processed.

7. Cookies & Tracking Technologies

2go uses cookies and similar technologies to make the platform work properly, remember your preferences and understand how players use the site so we can keep improving it.

7.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function — session management, login authentication and security tokens. These cannot be disabled.
• Preference cookies: Remember your display settings, language preference and notification choices across sessions.
• Analytics cookies: Collect anonymous usage data such as pages visited, game categories browsed and session duration to help us improve the platform. No personally identifiable information is included in analytics reports.
• Security cookies: Help detect and prevent fraudulent activity, bot traffic and suspicious login patterns.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect platform functionality — for example, preference settings may not be saved between sessions. Essential cookies required for security and login cannot be disabled without preventing access to the platform.

8. Data Retention

We retain personal data for as long as your account is active and for a defined period thereafter, depending on the type of data and the purpose for which it was collected:

• Account and identity data: Retained for the duration of your account and for a period of up to 5 years after account closure, to support dispute resolution, fraud investigation and legal compliance.
• Transaction records: Financial transaction logs in PKR are retained for a minimum of 5 years to meet standard record-keeping requirements.
• Support communications: Chat logs and email correspondence are retained for up to 3 years after your last interaction with our support team.
• Usage and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Individual-level usage data is retained for up to 2 years.
• Marketing data: Retained until you withdraw consent or unsubscribe from communications, whichever comes first.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to you.

9. Security Measures

Protecting your data is one of our core responsibilities. We have put in place technical and organisational measures designed to keep your personal information secure against unauthorised access, loss or misuse.

• Encryption in transit: All data exchanged between your browser or app and 2go servers is encrypted using TLS (Transport Layer Security).
• Encrypted storage: Sensitive data including payment details and identity documents is stored in encrypted form at rest.
• Access controls: Internal access to player data is restricted to staff members who need it to perform their job. All access is logged and audited.
• Two-factor authentication: Available for player accounts to add an extra layer of protection against unauthorised logins.
• Fraud monitoring: Automated systems continuously scan for suspicious activity, unusual login patterns, abnormal transaction behaviour and potential multi-accounting.
• Regular security reviews: Our systems and processes are reviewed regularly to identify and address potential vulnerabilities.

10. Your Rights

As a 2go player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered account details.

• Right of access: You can request a copy of the personal data we hold about you, including your account details, transaction history and communications.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it. For some data (like your registered name), we may need to verify your identity before making changes.
• Right to erasure: You can request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations. Note that transaction records must be kept for compliance purposes and cannot always be deleted on request.
• Right to restrict processing: You can ask us to pause processing of your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: You can object to processing based on legitimate interests or direct marketing at any time. We will stop processing unless we have compelling legitimate grounds to continue.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time without penalty.

We aim to respond to all data rights requests within 30 days. Complex requests may take longer, in which case we will keep you informed of the timeline.

11. Children's Privacy

2go is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or over, and we carry out age verification checks as part of our KYC process.

If we discover that an account has been created by someone under 18, we will immediately suspend the account, delete associated personal data where possible, and withhold any balance pending review. If you are a parent or guardian and believe a minor has registered on 2go, please contact us at [email protected] without delay.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable laws or improvements to our data practices. When we make material changes, we will notify registered players by email or through an in-platform notification.

The updated policy will be published on this page with a revised effective date at the top. We encourage you to review this page periodically. Continued use of the 2go platform after any changes have been posted constitutes your acknowledgement of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information is being handled, please get in touch with us:

For questions about your account, deposits or withdrawals in PKR, visit our FAQ page. For information about responsible gaming tools and self-exclusion, visit our Responsible Gaming page. For the full rules governing use of the platform, see our Terms and Conditions.