Skip to content

Legal

Privacy policy

Updated 27 October 2026

Draft for review. This page will be finalised before the public launch.

What we collect

When you book, sign in, register for an event or send an enquiry: your name, mobile number and, if you give it, your email address.

If you make an account with your email: that email address, and a password if you choose to set one. We keep only a scrambled form of the password, so no one at JBI can read it.

If you sign in with Google: Google shares only your name and email address with us. We never see your Google password.

Your bookings: what, when, who played (names and mobile numbers of the players registered for a game), payments and refunds.

Card and wallet details are entered on our payment partner's secure page. We never see or store them.

Technical data needed to run the website, such as a cookie that keeps your cart and sign-in, your internet (IP) address to stop too many sign-in attempts, and basic security and performance logs.

Your account and bookings are stored in JBI's own booking system, not by Google or the website host.

How we use it

To take and manage your bookings, check you in at the gate, set up your games, send confirmations and reminders, handle refunds, answer your questions and keep our accounts.

To email you a 6-digit code when you sign in. We send it only when you ask for one.

To send you event news and offers on WhatsApp, only if you tick the box at checkout. You can stop them at any time by replying STOP or messaging us.

To keep the website safe and working.

Who we share it with

We do not sell your data. We share only what each service needs to do its job for us:

PayFast, our payment partner, to take payments and refunds.

The Cricket Reborn game system, run with Google Firebase, which receives the names and mobile numbers of the players at a booking so their scores and games appear on the bay screens. Its staff tools are hosted by Vercel and Turso.

Hostinger, which hosts this website, and Cloudflare, which protects and speeds it up and collects anonymous performance measurements.

Resend, which sends our sign-in codes and booking emails from its servers in the EU.

Google, only if you choose Continue with Google: Google confirms who you are and tells us your name and email address.

Meta (WhatsApp), when you message us or opt in to updates.

The authorities, when the law requires it.

How long we keep it

Booking and payment records are kept as long as tax and accounting law requires. Enquiries and marketing preferences are kept until you ask us to delete them or they are no longer needed.

Your choices

Ask us for a copy of your data, to correct it, or to delete your account: [email protected] or WhatsApp +92 300 0192247. We may need to keep payment records that the law requires.