JazzCash Privacy Notice 2026: What It Collects and How to Use Your Rights

JazzCash's September 2026 privacy notice says it collects your CNIC details, biometric data, transaction history, device details and approximate location. It shares data with SBP, SECP, credit bureaus and partners, and keeps transaction records for up to 10 years. You can ask it to correct your data, stop marketing and request deletion where the law allows: call 4444 or email complaints@jazzcash.com.pk.

Most people tap "I agree" on a wallet app without reading a line. We read the whole JazzCash Customer Privacy Notice on 9 October 2026. The file on the JazzCash website is named for September 2026 and runs to 13 pages.

JazzCash said in May 2026 that it had crossed 60 million registered customers. So this one document decides what happens to the data of millions of people in Pakistan. Here is what it says, in plain words, and what you can actually do about it.

JazzCash collects identity, money and device data

The notice lists five groups of data: identity and contact details, financial and transaction data, device and usage data, support records, and data from third parties. It includes biometric verification data, credit bureau information and approximate location.

Some of this is required by law. A wallet must know who you are under SBP's branchless banking and anti money laundering rules, and the notice names those rules. Other items go further than many users would guess.

Two lines stand out. JazzCash says it records your buying and spending behaviour, and it receives data from analytics and advertising partners. That is how a wallet learns which offers to push at you.

Automated systems and AI can help decide on you

The notice says JazzCash may use automated systems, analytics, artificial intelligence and machine learning for fraud checks, identity checks, credit scoring and eligibility. Human review is added only "where appropriate", so some decisions may be made mostly by software.

This matters most for loans. If a JazzCash loan offer is refused or a limit looks oddly low, a scoring model may be part of the reason. The notice does not promise to explain a single decision. It does give you the right to ask how your data is used, which is the place to start.

Your data goes to SBP, SECP, credit bureaus and partners

JazzCash says it shares personal data with the State Bank of Pakistan, the SECP, credit bureaus under the Credit Bureaus Act 2015, auditors, police and courts where the law requires, service providers and group companies.

The credit bureau line is the one to remember. Your repayment record on a JazzCash loan can follow you to a bank. Pay on time, or the record travels.

The notice also says some sharing with vendors, partners and group entities happens "as per applicable agreements". It does not name those partners. And it says tracking by third party cookies or pixels on its website and app is not covered by the notice at all.

JazzCash keeps transaction records for up to 10 years

The notice says JazzCash keeps transaction records for up to 10 years after each transaction, and identity records for 10 years after you close the account. Longer is allowed if an investigation, court case or authority needs them.

So closing your wallet does not erase your history. It ends the relationship, and the 10 year clock for your identity records starts then. If you were hoping a closed account wipes everything, it does not.

How to use your privacy rights with JazzCash

The notice lists your rights: to know how data is used, to see it, to correct or update it, to object to marketing, to withdraw consent, to ask for deletion where the law permits, and to complain. The listed contacts are the 4444 helpline and complaints@jazzcash.com.pk.

Here is a simple way to use them:

1. Write down what you want: a copy of your data, a correction, an end to marketing, or deletion.
2. Email complaints@jazzcash.com.pk from an address you can keep. Give your wallet number, but never your MPIN or any OTP.
3. Name the right from the privacy notice, for example "object to marketing" or "request deletion where permitted by law".
4. Call 4444 and quote the date of your email, then note the complaint number you are given.
5. To stop promotional messages, use the link or short code in any marketing message, which the notice says lets you change your preferences.
6. If JazzCash does not resolve a service complaint, take it to the State Bank through the SBP Sunwai portal.

Deletion has limits. The notice ties it to what the law permits, and the 10 year retention rule still applies. In practice, you can expect marketing to stop and wrong data to be fixed. Do not expect your transaction history to vanish.

Keep your PIN and OTP private, because the notice puts that on you

JazzCash says it follows PCI DSS and ISO 27001:2022, encrypts data and runs a security operations centre. But the notice also says you are responsible for keeping passwords, PINs and one time codes private.

That line matters if fraud happens. A wallet will point to it if you shared an OTP with a caller. Fake calls claiming to be from the bank, PTA or NCCIA are a common way people get tricked, and spotting a fake call with a spoofed number is the cheapest protection there is.

If money has already left your wallet without your consent, the steps to get an unauthorised JazzCash transfer refunded start with reporting it the same day. A forgotten PIN is a different problem, and you can reset a forgotten JazzCash MPIN in the app.

On data breaches, the notice says JazzCash will tell affected customers and regulators of material breaches "where required by applicable laws". Pakistan still had no data protection act in force when we looked at the data protection law gap in August 2026, so that duty is narrower than it would be in many countries.

Common questions

Does JazzCash track my location?

The notice says it may collect approximate location information automatically when you use its app or website. It does not say it collects your exact GPS location.

Does JazzCash share my data with credit bureaus?

Yes. The notice says personal information is shared with credit bureaus under the Credit Bureaus Act 2015, and with third parties that do credit referencing.

How long does JazzCash keep my data after I close my account?

Identity records are kept for 10 years after the relationship ends. Transaction records are kept for up to 10 years from each transaction, or longer if a court or investigation needs them.

Can I ask JazzCash to delete my data?

You can request deletion, but the notice limits it to what the law permits. Records that SBP rules require it to keep will stay for the retention period.

How do I stop JazzCash promotional messages?

Use the link or short code given in the marketing message. You can also email complaints@jazzcash.com.pk and object to processing for marketing, which the notice lists as your right.

Who do I complain to if JazzCash ignores me?

Complain to JazzCash first through 4444 or email. If it is not resolved, you can escalate to the State Bank of Pakistan through its Sunwai complaint portal.

How we verified this

What we checked, where we read it, and what we could not confirm.

Last checked on 9 October 2026, Pakistan time. We read the full JazzCash Customer Privacy Notice (September 2026), linked from the footer of the JazzCash website. The 60 million customer figure is from JazzCash's announcement of 14 May 2026. We did not send a data request to JazzCash for this page, so we cannot yet say how quickly it answers one. Quotes are taken from the notice as published; JazzCash can change it at any time.