bjbaji Privacy Policy – How We Handle Your Personal Data in Pakistan

1Overview

bjbaji takes the privacy of its players seriously. This Privacy Policy describes how bjbaji — operating through bjbaji-bangla.com — collects, uses, stores and protects the personal information of players based in Pakistan. It also explains your rights in relation to your personal data and how you can exercise them.

When you use bjbaji — whether you are registering an account, placing a bet on a PSL match, spinning a slot, joining a live Baccarat table or depositing via Easypaisa — you are sharing certain personal information with us. We are committed to being transparent about what that data is, why we need it and what we do with it. This policy is written in plain language because we believe Pakistani players deserve to understand their privacy situation without having to wade through dense legal text.

By using the bjbaji platform you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of it, please stop using bjbaji and contact our support team to close your account and request deletion of your personal data where applicable.

2Data Controller

bjbaji is the data controller for all personal information collected through the bjbaji platform. As data controller, bjbaji determines the purposes and means of processing your personal data and is responsible for ensuring it is handled in accordance with applicable data protection principles.

If you have any questions about how bjbaji processes your personal data, you can contact us at support@bjbaji-bangla.com or via the 24/7 live chat function on the bjbaji platform. bjbaji will respond to data-related enquiries within 10 business days.

3What Personal Data bjbaji Collects

bjbaji collects the following categories of personal data. We only collect data that is necessary for a specific, legitimate purpose — we do not collect information on a "just in case" basis.

bjbaji does not collect biometric data beyond what is required for identity verification, does not collect location data beyond IP-derived country information, and does not collect data from your contacts list or social media profiles.

4How bjbaji Collects Your Data

bjbaji collects personal data through three main channels:

Data You Provide Directly

When you register on bjbaji, complete KYC verification, make a deposit, request a withdrawal, contact support or activate responsible gaming tools, you provide personal data directly to us. This is the most significant source of personal data bjbaji holds about you.

Data Collected Automatically

When you browse and use the bjbaji platform, technical and usage data is collected automatically. This includes your IP address, device fingerprint, browser type, pages visited, games played, time and duration of sessions, bet amounts and game outcomes. This data is collected using standard web technologies including server logs and cookies (see Section 9).

Data from Third-Party Partners

bjbaji may receive limited personal data from verified third-party partners in specific circumstances:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard) – transaction confirmation and wallet verification data
• KYC verification providers – identity and document verification results
• Fraud prevention services – risk scores and device reputation signals

bjbaji does not receive personal data from social media platforms, advertising networks or data brokers.

5Why bjbaji Uses Your Personal Data

Every piece of personal data bjbaji holds serves a specific purpose. The table below maps each use to the data it relies on.

• Account creation and management: Identity and contact data are used to create, maintain and secure your bjbaji account, process logins and authenticate you via OTP.
• Processing PKR transactions: Financial data and identity data are used to process deposits and withdrawals via Easypaisa, JazzCash and other methods, and to maintain accurate transaction records in PKR.
• Identity and age verification: CNIC data and verification documents are used to confirm that you are who you say you are and that you meet the 18+ age requirement before significant withdrawal activity is permitted.
• Fraud prevention and security: Technical data and usage data are analysed to detect and prevent fraud, account takeover, money laundering and other prohibited activity. Patterns that deviate from normal player behaviour are flagged for manual review.
• Responsible gaming compliance: Usage data and responsible gaming settings are used to monitor player behaviour and intervene where patterns consistent with problem gambling are detected, as well as to enforce self-exclusion and limit settings.
• Customer support: Communications data and account data are used to respond to queries, investigate complaints and provide account assistance.
• Platform improvement: Aggregated, anonymised usage data is used to understand which games are popular, where players encounter difficulties and how the bjbaji platform can be improved.
• Legal and regulatory compliance: Identity, financial and transaction data may be used to comply with anti-money laundering (AML) obligations, respond to lawful requests from regulatory authorities, or fulfil other legal obligations.
• Marketing communications: If you have opted into marketing communications, bjbaji may use your contact data to send information about promotions, new games and platform updates. You can opt out at any time through your account settings or by contacting support.

6Legal Basis for Processing

bjbaji processes your personal data on one or more of the following legal bases:

• Contract: Processing necessary to deliver the services you have signed up for — creating your account, processing your bets and PKR payments, providing customer support.
• Legal obligation: Processing necessary to comply with AML regulations, age verification requirements and other applicable legal obligations.
• Legitimate interests: Processing necessary for bjbaji's legitimate business interests including fraud prevention, platform security and improvement — where these interests are not overridden by your privacy rights.
• Consent: Marketing communications, certain non-essential cookies and optional data sharing are processed on the basis of your freely given consent, which you can withdraw at any time without affecting other services.

7Sharing Your Personal Data

bjbaji does not sell your personal data. bjbaji does not share your personal data with third parties for their own marketing purposes. Your data may be shared with the following categories of third parties only where necessary and proportionate:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the financial and identity data necessary to process your PKR deposits and withdrawals. These providers have their own privacy policies governing their handling of this data.
• Identity verification partners: KYC and document verification services receive identity and verification document data for the sole purpose of confirming your identity and age.
• Fraud prevention and security providers: Technical and identity data may be shared with fraud detection services to protect the platform and its players from abuse.
• Game providers: Where live casino tables or slots are provided by third-party studios (such as Evolution), your bet data and session data may be shared with those providers for the purpose of operating the game. These providers operate under strict data processing agreements with bjbaji.
• Legal and regulatory authorities: bjbaji may disclose personal data to law enforcement, regulatory bodies or other authorities where required by law or where bjbaji has a legal obligation to do so. bjbaji will not share more data than is strictly necessary in such circumstances.
• IT and infrastructure providers: Cloud hosting, database management and platform infrastructure providers may have access to personal data as part of their service delivery. These providers act as data processors under bjbaji's instructions and are bound by data processing agreements.

All third parties with whom bjbaji shares personal data are required to maintain the security and confidentiality of that data and to process it only for the specified purpose for which it was shared.

8Payment Data & KYC in Pakistan

Because bjbaji operates entirely in PKR and uses Pakistani mobile payment infrastructure, the handling of payment and identity data has some specific characteristics that are worth explaining clearly.

When you deposit via Easypaisa or JazzCash, your mobile wallet number is associated with your bjbaji account. This association is used to verify that deposits and withdrawals go to and from the same wallet — a standard anti-fraud and AML measure. bjbaji does not store your Easypaisa or JazzCash PIN or any other authentication credential — only the wallet number and transaction reference.

Your CNIC number is collected as part of KYC and is stored in encrypted form. It is used to verify your identity against official records and to ensure that you have not previously been subject to a bjbaji self-exclusion or account closure that bars re-registration. CNIC data is not shared with any party except authorised KYC verification partners and regulatory authorities where legally required.

bjbaji maintains a full transaction history for every PKR deposit, withdrawal, bonus credit and bet settlement on your account. This history is accessible to you from your account dashboard. It is also retained by bjbaji for AML compliance purposes for a minimum of five years from the date of the transaction, even after account closure.

9Cookies & Similar Technologies

bjbaji uses cookies and similar browser-based technologies to make the platform function properly and to understand how players use it. A cookie is a small text file stored on your device by your browser when you visit a website. bjbaji uses the following categories of cookies:

bjbaji does not use advertising or tracking cookies that follow you across other websites. You can manage non-essential cookies through your browser settings. Disabling essential cookies will prevent the bjbaji platform from functioning correctly.

10How Long bjbaji Keeps Your Data

bjbaji retains personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your account plus five years following account closure, to meet AML and regulatory requirements.
• Financial and transaction data: Retained for a minimum of five years from the date of each transaction, in line with AML compliance obligations.
• KYC and verification documents: Retained for five years from the date of submission or for the duration of the account, whichever is longer.
• Customer support communications: Retained for three years from the date of the last communication in a thread.
• Technical and usage data: Anonymised after 12 months. Anonymised aggregate data may be retained indefinitely for platform improvement analysis.
• Responsible gaming records (including self-exclusion): Retained indefinitely to prevent re-registration in breach of exclusion conditions.

After retention periods expire, personal data is deleted or irreversibly anonymised. You may request early deletion of non-regulated data through the process described in Section 12, though bjbaji cannot delete data that it is legally required to retain.

11How bjbaji Protects Your Data

bjbaji applies a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction or alteration. These include:

• All data in transit between your device and bjbaji servers is encrypted using TLS (Transport Layer Security)
• Sensitive data at rest — including CNIC numbers, payment wallet details and financial records — is encrypted using industry-standard encryption
• Access to personal data within bjbaji is restricted on a need-to-know basis with role-based access controls
• bjbaji servers are hosted in secure data centres with physical access controls, redundancy and 24/7 monitoring
• Regular security audits and penetration testing are conducted on the bjbaji platform
• Two-factor authentication is available to all players and is enforced for certain high-risk account actions

While bjbaji takes all reasonable precautions, no internet-connected system can guarantee absolute security. If bjbaji becomes aware of a data breach that affects your personal data in a material way, we will notify you through your registered contact details as quickly as possible.

12Your Data Rights as a bjbaji Player

bjbaji respects your rights over your personal data. The following rights are available to all registered bjbaji players:

To exercise any of these rights, contact bjbaji via live chat or email at support@bjbaji-bangla.com. bjbaji will verify your identity before processing the request and will respond within 30 days. There is no fee for exercising your data rights.

13Minors & Age Verification

bjbaji is strictly for adults aged 18 and above. bjbaji does not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step before withdrawal privileges are granted and may be required at other points during a player's lifetime on the platform.

If bjbaji discovers that an account has been created by someone under 18, the account will be immediately closed, all bets voided, all bonus funds forfeited and any deposited funds returned to the payment source after deducting any amounts already wagered. The personal data of the minor will be deleted as soon as the investigation is complete except where retention is required for legal compliance.

If you are a parent or guardian and believe that someone under 18 in your household has created a bjbaji account, please contact bjbaji support immediately so that the account can be investigated and closed without delay.

14Changes to This Privacy Policy

bjbaji may update this Privacy Policy from time to time. When material changes are made — changes that meaningfully affect how your data is collected or used — bjbaji will notify registered players via their registered mobile number or email at least 7 days before the changes take effect.

For minor updates such as clarifications or formatting corrections that do not change the substance of the policy, bjbaji will update the document and revise the effective date without advance notice. The current version of the Privacy Policy is always available at bjbaji-bangla.com/privacy-policy.

Continued use of the bjbaji platform after updated Privacy Policy terms take effect constitutes your acceptance of the updated version. If you do not agree with an update, please contact support to close your account before the changes take effect.

15Contact & Data Enquiries

For any questions, concerns or requests related to this Privacy Policy or how bjbaji handles your personal data, please use one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the bjbaji platform — fastest response time for urgent data concerns
• Email: support@bjbaji-bangla.com — bjbaji responds to data-related emails within 10 business days

When submitting a data request, please include your registered username and a clear description of your request. bjbaji will verify your identity via registered mobile OTP before processing any data access, correction or deletion request. This is to protect your privacy and ensure that personal data is only disclosed or altered following verified authorisation.

This Privacy Policy is governed by the principles applicable in the jurisdiction under which bjbaji operates. Any disputes regarding data handling that cannot be resolved through bjbaji's internal process will be subject to the applicable dispute resolution mechanism as communicated by bjbaji support.