bajii Privacy Policy

1. Introduction

bajii ("we", "us", "our") takes the privacy of its players seriously. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bajii. We are committed to ensuring that your information is handled lawfully, fairly, and transparently, in accordance with applicable data protection principles and our obligations under our gaming licence.

This Privacy Policy should be read alongside the bajii Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and those documents, this Privacy Policy shall govern with respect to all data protection matters.

We encourage you to read this document carefully. If you have any questions about how bajii handles your personal data, please contact our support team at [email protected] before using the platform.

2. Data Controller

For the purposes of applicable data protection law, bajii is the data controller responsible for your personal data. bajii operates the online gaming platform accessible at bajii.ws and all associated digital interfaces. bajii processes personal data in connection with the provision of its gaming, betting, and customer support services.

If you have any questions, concerns, or requests relating to the processing of your personal data by bajii, please contact us using the details provided in Section 15 of this Privacy Policy.

3. Personal Data We Collect

bajii collects the following categories of personal data in connection with the registration and operation of your account and your use of our services:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (required for age verification — bajii is strictly 21+ only).
• National Identity Card (CNIC) number or passport number.
• Email address and mobile telephone number.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad) and postal code.

3.2 Financial Data

• Payment method details, including JazzCash or EasyPaisa mobile wallet identifiers, HBL, UBL, or Meezan Bank account references, and Visa or Mastercard card details (stored in tokenised form only — bajii does not store full card numbers in plain text).
• Transaction history, including deposit amounts, withdrawal requests, and bonus credits.
• Source of funds documentation where required under our KYC and anti-money laundering obligations.

3.3 Technical and Usage Data

• IP address, device identifiers, and browser type and version.
• Operating system and device type (desktop, mobile, tablet).
• Pages visited, time spent on page, click-stream data, and referring URLs.
• Game play data, including session duration, bet history, game preferences, and win/loss records.
• Login timestamps and account activity logs.

3.4 Communications Data

• Records of all communications between you and bajii customer support, including live chat transcripts, emails, and support ticket content.
• Responses to surveys, promotions, or feedback requests, where you choose to participate.

3.5 Responsible Gaming Data

• Deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion requests you have set or submitted.
• Responsible gaming assessments and any related communications.

4. How We Collect Your Data

bajii collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the bajii platform, including through cookies, web beacons, log files, and similar tracking technologies as described in Section 10.
• Third-party sources: Data received from identity verification providers, payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard), fraud detection services, and our gaming licence authority where required for compliance purposes.
• Publicly available sources: In limited circumstances, publicly available information may be used to verify identity or assess risk in connection with our anti-money laundering obligations.

5. How We Use Your Personal Data

bajii uses your personal data for the following purposes:

Purpose	Data Used
Account registration and identity verification (KYC)	Identity, contact, financial data
Processing deposits, withdrawals, and transactions	Financial, identity data
Providing gaming, betting, and live casino services	Usage, identity data
Customer support and dispute resolution	Identity, communications data
Anti-money laundering and fraud prevention	Identity, financial, technical data
Responsible gaming monitoring and intervention	Usage, responsible gaming data
Regulatory compliance and licence obligations	Identity, financial, usage data
Sending promotional communications (with consent)	Contact, usage data
Platform security, integrity, and abuse prevention	Technical, identity data
Platform analytics and service improvement	Technical, usage data (aggregated)

6. Legal Basis for Processing

bajii processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Performance of a contract: Processing necessary to provide you with the bajii gaming services you have requested, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required for bajii to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and reporting obligations under our gaming licence.
• Legitimate interests: Processing undertaken in pursuit of bajii's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, principally in connection with the sending of marketing and promotional communications. You may withdraw your consent at any time by contacting support or updating your account communication preferences.

7. Sharing Your Personal Data

bajii does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services engaged by bajii to fulfil its regulatory obligations.
• Fraud and AML screening services: Third-party risk management providers used to detect and prevent fraudulent activity and money laundering.
• IT and infrastructure providers: Cloud hosting, data storage, and security service providers who process data on bajii's behalf under strict data processing agreements.
• Gaming licence authority: bajii's licensing authority may require access to certain player data as part of its regulatory oversight function.
• Law enforcement and regulatory bodies: Where bajii is legally required or compelled by a court order or regulatory authority to disclose personal data.
• Professional advisers: Lawyers, auditors, and accountants engaged by bajii in connection with legal proceedings or compliance reviews, subject to professional confidentiality obligations.

8. International Data Transfers

bajii's operations and some of our third-party service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, bajii takes appropriate steps to ensure that such transfers are protected by adequate safeguards, including contractual protections equivalent to those required under applicable data protection standards.

By using the bajii platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. bajii will always ensure that such international transfers are conducted lawfully and with appropriate protective measures in place.

9. Data Retention

bajii retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming licence record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Customer support communications: Retained for three (3) years from the date of the relevant communication, or longer if connected to an ongoing dispute or legal matter.
• Technical and usage data: Retained for up to twenty-four (24) months from collection for analytics and security purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your marketing consent plus three (3) years, to demonstrate compliance with consent obligations.

Where personal data is no longer required, bajii will securely delete or anonymise it in accordance with our data disposal procedures.

10. Cookies & Tracking Technologies

bajii uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help us deliver a functional, secure, and personalised experience. bajii uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the bajii platform, including maintaining your session state, authentication, and security features. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, and to personalise your experience on bajii.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the bajii platform, helping us identify areas for improvement. This data does not identify you personally.
• Responsible gaming cookies: Used to support the delivery of responsible gaming tools, including session time tracking and limit enforcement.

You may control cookies through your browser settings. Disabling strictly necessary cookies may impair your ability to use the bajii platform. For all other cookie categories, you may update your preferences at any time through the bajii cookie preference centre, accessible from the platform footer.

11. Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by bajii:

• Right of access: You may request a copy of the personal data bajii holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by bajii.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where bajii is required to retain data for legal or regulatory reasons.
• Right to restriction: You may request that bajii restricts the processing of your personal data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on consent or contract, you may request that bajii provides your personal data in a structured, machine-readable format.
• Right to object: You may object to bajii's processing of your personal data where that processing is based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to bajii support at [email protected]. bajii will respond to verified requests within a commercially reasonable timeframe and may request additional information to verify your identity before processing your request.

12. Minors and Age Restriction

The bajii platform is strictly intended for adults aged 21 years and above. bajii does not knowingly collect personal data from individuals under the age of 21. If bajii becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the bajii platform or provided personal data without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

bajii employs age verification procedures during registration and reserves the right to request documentary proof of age at any time. Accounts that fail age verification will be suspended pending resolution.

13. Security Measures

bajii implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and bajii's servers.
• Encryption at rest for sensitive stored data, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing of bajii's platform infrastructure.
• Multi-factor authentication for internal systems that process personal data.
• Comprehensive audit logging of all access to personal data systems.
• Staff training on data protection obligations and information security best practices.

14. Amendments to This Privacy Policy

bajii reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Where material changes are made, bajii will notify you via your registered email address and/or by displaying a prominent notice on the platform at least fourteen (14) days prior to the changes taking effect.

Your continued use of the bajii platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with any amendment, you should cease using the platform and may request account closure in accordance with Section 12 of the bajii Terms & Conditions.

The current version of this Privacy Policy is always accessible at bajii.ws/privacy-policy. We encourage you to review it periodically.

15. Contact & Data Requests

If you have any questions, concerns, or complaints about this Privacy Policy or the way bajii processes your personal data, or if you wish to exercise any of your data protection rights as described in Section 11, please contact our support team using the details below:

Email: [email protected]

bajii aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) days of receipt. If you are not satisfied with bajii's response to your complaint, you may have the right to escalate the matter to the relevant supervisory authority in your jurisdiction.