BJBaji Privacy Policy – How We Protect Your Data

BJBaji operates the online gaming and sports betting platform available at bjbaji.plus. Throughout this Privacy Policy, references to "BJBaji", "we", "us", or "our" mean the platform and its operating entity. References to "you" or "your" mean any person who visits, registers on, or uses the BJBaji platform in any capacity.

BJBaji is the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your personal data. We take that responsibility seriously, and this Privacy Policy describes exactly how we fulfil it.

If you have any questions about this policy or your data, please contact us at support@bjbaji.plus. We are available 24/7 and will respond to privacy-related queries within 7 business days.

BJBaji collects several categories of personal information, all of which serve specific and legitimate purposes related to operating your account and complying with legal obligations. Here is a complete breakdown of what we collect.

2.1 Registration Information

When you create a BJBaji account, we collect: your full name, date of birth, email address, Pakistani mobile number, and the payment method details you choose to use. This information is necessary to create and manage your account. You cannot register without providing accurate information in all required fields.

2.2 Identity Verification Documents

Before processing your first withdrawal or in response to a regulatory or security requirement, BJBaji may request copies of identity documents. This typically includes a copy of your CNIC (Computerised National Identity Card) and may include a selfie alongside your CNIC for verification purposes. We also collect proof-of-payment documentation to confirm that deposit methods are registered in your name. This is standard KYC (Know Your Customer) procedure and is a legal requirement for financial services operations.

2.3 Transaction and Financial Data

BJBaji records all financial transactions associated with your account: deposits, withdrawals, bonus credits, bet placements, and win/loss records. This data is essential for the accurate operation of your account, for resolving disputes, and for financial compliance purposes. Transaction records are retained for a minimum period as required by applicable law.

2.4 Usage and Behavioural Data

We collect data about how you interact with the BJBaji platform: which games you play, how long your sessions last, what device and browser you use, your IP address, and page interaction patterns. This data is used to improve the platform, personalise your experience, and for responsible gaming monitoring purposes as described in Section 4.

BJBaji collects your personal information through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or interact with the platform in any way that requires you to provide information.
• Automatically through the platform: When you visit or use bjbaji.plus, our systems automatically collect technical data including your IP address, device type, operating system, browser type, and pages visited. This happens through standard web server logs and session management technology.
• Through cookies and similar technologies: As described in Section 10, BJBaji uses cookies to maintain your session, remember your preferences, and monitor platform performance. You can control cookie settings through your browser, though disabling essential cookies may affect your ability to use the platform.
• From payment providers: When you transact through Easypaisa, JazzCash, NayaPay, SadaPay, or bank transfer, our payment processing systems receive transaction confirmation data from those providers to verify and reconcile your account transactions.
• From identity verification services: Where BJBaji uses third-party KYC services to assist with identity verification, those services may provide verification results and flags back to us — but we do not receive raw data beyond what we requested.

Every piece of data BJBaji collects has a specific, documented purpose. We do not collect data speculatively or hold it for undefined future uses. The purposes for which we use your personal information are:

• Account management: Creating, maintaining, and securing your BJBaji account. Processing deposits, withdrawals, and bets. Sending account notifications and statements.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years. This is both a legal requirement and a player protection measure.
• Payment processing: Processing deposits to your BJBaji balance and withdrawals to your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard account. Reconciling transactions and resolving payment disputes.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML) laws and financial regulations, including maintaining transaction records for the required retention period.
• Fraud detection and security: Monitoring account activity to detect and prevent fraud, multi-account abuse, bot usage, money laundering, and other rule violations. Protecting the integrity of the platform for all legitimate players.
• Responsible gaming: Using your play data to identify patterns that may indicate problem gambling behaviour. Proactively reaching out to players who may benefit from responsible gaming tools or support.
• Customer support: Using your account information and communication history to resolve support queries efficiently and accurately.
• Platform improvement: Using aggregated, anonymised usage data to understand how the platform is used and to improve functionality, design, and game selection for Pakistani players.
• Marketing communications: Sending you promotional information about BJBaji offers and new games — but only if you have opted in to receive such communications. See Section 12 for full details.

BJBaji processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Contract performance: Processing your registration details, transactions, and gameplay data is necessary to fulfil the contractual agreement between you and BJBaji as set out in our Terms and Conditions.
• Legal obligation: Identity verification, age checks, AML record-keeping, and fraud prevention are legal requirements that BJBaji must fulfil regardless of individual consent.
• Legitimate interests: Fraud detection, security monitoring, platform improvement, and responsible gaming monitoring are carried out on the basis of BJBaji's legitimate interest in operating a safe, fair platform — balanced against your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only with your explicit consent. You may withdraw consent at any time as described in Sections 10 and 12.

BJBaji does not sell your personal data. We share data with third parties only in the specific and limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: Your name, contact details, and transaction information are shared with Easypaisa, JazzCash, NayaPay, SadaPay, and bank systems as necessary to process your deposits and withdrawals. These providers are independently governed by their own privacy policies and are regulated financial service providers in Pakistan.
• Identity verification providers: Where third-party KYC services are used, your identity documents may be shared with those providers solely for the purpose of verification. These providers are bound by strict data processing agreements.
• Game providers: The game software providers whose titles appear on the BJBaji platform may receive anonymised session data (not your name or contact details) to facilitate gameplay, detect cheating, and ensure game integrity.
• Legal and regulatory authorities: BJBaji will disclose your information to law enforcement, financial regulators, or other competent authorities when legally required to do so or when necessary to prevent fraud, money laundering, or serious harm.
• Professional advisers: In specific circumstances, BJBaji may share relevant data with lawyers, auditors, or financial advisers under strict confidentiality obligations, where necessary to protect BJBaji's legal interests.

Some of BJBaji's service providers operate servers located outside Pakistan. Where your personal data is transferred outside Pakistan to process it, BJBaji ensures that appropriate safeguards are in place to protect your information. These safeguards include contractual data processing agreements that bind the recipient to standards of data protection equivalent to those applied within Pakistan.

BJBaji will not transfer your data to any jurisdiction or entity that cannot provide adequate protection for your personal information. Where required by applicable law, BJBaji will seek your explicit consent before any transfer that falls outside standard operational necessity.

BJBaji takes data security seriously and applies multiple layers of technical and organisational protection to your personal information. The key measures in place include:

• SSL/TLS encryption: All data transmitted between your device and bjbaji.plus is encrypted using industry-standard TLS protocols. This protects your login credentials, personal data, and financial information in transit.
• Encrypted storage: Sensitive data — including identity documents and financial details — is stored in encrypted form in our databases. Encryption keys are managed separately from the data they protect.
• Access controls: Your personal data is accessible only to BJBaji staff members who require it to perform specific job functions. Access is granted on a minimum-necessary basis and audited regularly.
• Two-factor authentication: BJBaji supports two-factor authentication for player accounts using your registered Pakistani mobile number. We strongly recommend enabling this feature to protect your account.
• Penetration testing: BJBaji's platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response: BJBaji maintains a formal data breach response plan. In the event of a breach affecting your data, we will notify you and relevant authorities as required and take immediate remediation action.

While BJBaji takes every reasonable measure to protect your data, no online platform can guarantee absolute security. You also have a role to play — keep your password strong, do not share your login details, and contact us immediately if you suspect your account has been compromised.

BJBaji retains your personal data for as long as is necessary for the purposes described in this policy and as required by applicable law. The general retention periods are:

• Account and transaction data: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later. This is required by financial regulations and AML obligations.
• Identity verification documents: Retained for a minimum of 5 years from submission. These records are required for AML and KYC compliance.
• Customer support communications: Retained for 3 years from the date of the interaction. After this period, communications are anonymised or deleted.
• Usage and behavioural data: Retained for 2 years from collection for platform improvement purposes. After this period, data is aggregated and anonymised — it can no longer be linked back to an individual player.
• Marketing preferences: Retained until you change or withdraw your preferences, plus a short period for audit purposes.

When the retention period for any data category expires, BJBaji will securely delete or permanently anonymise that data. You may request earlier deletion of non-legally-required data as described in Section 11.

BJBaji uses cookies — small text files stored on your device — to make the platform function correctly and to improve your experience. We use the following categories of cookies:

• Essential cookies: These are necessary for the platform to function. They maintain your login session, remember your security settings, and enable basic navigation. You cannot opt out of essential cookies without breaking the platform.
• Performance cookies: These collect anonymised data about how pages are used — which pages load slowly, where errors occur, which features are most used. This data helps us improve the platform. No personal information is collected through performance cookies.
• Preference cookies: These remember your language and display preferences so you do not have to reset them each visit.

BJBaji does not use third-party advertising or cross-site tracking cookies. We do not track your activity on other websites after you leave bjbaji.plus. You can control cookie settings through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in to your BJBaji account.

As a BJBaji player, you have the following rights over your personal data. These are genuine rights, not formalities. To exercise any of them, contact support@bjbaji.plus — we will respond within 7 business days.

BJBaji will only send you promotional communications — including bonus offers, game announcements, and seasonal promotions — if you have explicitly opted in to receive them. Opt-in is not assumed; you must actively tick the relevant box during registration or through your account settings.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we have sent you.
• Updating your communication preferences in your BJBaji account settings.
• Contacting support@bjbaji.plus and requesting removal from all marketing lists.

Unsubscribing from marketing will not affect the operational communications that BJBaji must send you — such as account security alerts, withdrawal confirmations, and important policy updates. Those communications are sent regardless of marketing preferences because they are necessary to manage your account.

BJBaji will never send marketing communications to players who are under self-exclusion, regardless of any marketing preferences previously recorded.

BJBaji is strictly an adult platform. No person under the age of 18 years may register or use the platform, and we do not knowingly collect personal information from anyone under 18. If we discover or have reason to believe that personal data has been collected from a person under 18, we will immediately suspend the relevant account and delete all associated personal data, returning any deposits made after deducting costs of services already consumed.

If you are a parent or guardian and believe your child may have registered on BJBaji, please contact us immediately at support@bjbaji.plus. We will investigate and act promptly.

BJBaji may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When material changes are made, we will update the "last updated" date at the top of this page and, where appropriate, notify registered players via email or in-app notification before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your data. Your continued use of the BJBaji platform after any update constitutes acceptance of the revised policy. If you do not agree with the updated policy, please contact us to discuss your options — including account closure if you wish to stop using the platform.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how BJBaji is handling your personal information, please reach out. We are transparent about our practices and happy to explain any aspect of this policy in plain language.

• Email: support@bjbaji.plus (subject: "Privacy Query" for fastest routing)
• Live chat: Available 24/7 at bjbaji.plus — ask to speak to our privacy or compliance team for sensitive matters
• Response time: General queries within 24 hours; formal rights requests within 7 business days