Bji Baji Privacy Policy — How We Handle Your Data

01 Introduction

This Privacy Policy explains how bji baji ("we", "us", "our") collects, uses, stores, and protects personal information belonging to users ("you", "your") of the bji baji website and mobile application (together, "the Platform").

We understand that handing over personal information requires trust, and we take that responsibility seriously. This policy is written in plain language so that every Pakistan player on bji baji can clearly understand what we do with their data — not just the legal teams reading fine print.

By registering an account, making a deposit, or using any feature of the Platform, you confirm that you have read and accepted this Privacy Policy. This policy works alongside the Terms and Conditions and the Responsible Gaming policy. Where there is a conflict between documents, this policy governs matters specifically relating to personal data.

We may update this policy from time to time. When we do, the revised version will be published on this page with an updated date at the top. Continued use of the Platform after changes are published means you accept the updated terms.

02 Information We Collect

bji baji collects information in three main ways: information you provide directly, information generated by your use of the Platform, and information received from third-party service providers.

Information you provide directly:

• Full name, date of birth, and gender at registration.
• Contact details including email address and phone number.
• Identity and address verification documents when requested (for example, CNIC, passport, or utility bill).
• Payment method details — for example, your JazzCash or Easypaisa mobile number, or bank account name — necessary to process deposits and withdrawals in PKR.
• Communications you send to our support team, including chat transcripts and email correspondence.

Information generated by your use of the Platform:

• Login activity including timestamps and IP addresses.
• Device information: device type, operating system version, browser type, and unique device identifiers.
• Betting and gaming activity: markets visited, bets placed, game sessions, deposit and withdrawal history.
• App usage patterns including session duration, screens visited, and feature interactions within the app.
• Crash reports and error logs that help us identify and fix technical issues.

Information received from third parties:

• Identity verification results from KYC (Know Your Customer) service providers.
• Transaction confirmation data from payment processors such as JazzCash, Easypaisa, Raast, and partner banks.
• Fraud screening signals from third-party risk management tools used to protect the integrity of the Platform.

03 How We Use Your Data

The personal information we collect is used for specific, legitimate purposes. The table below gives you a clear picture of what we use your data for and why:

We do not use your personal data to make fully automated decisions that have a significant legal or financial impact on you without human review. Where automated tools flag an account for review — for example, suspected fraud or responsible gaming thresholds — a member of our team will assess the case before any action is taken.

04 Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance: Processing your data is necessary to provide the services you have signed up for — creating your account, handling your PKR deposits and withdrawals, and resolving support queries.
• Legal obligation: In certain situations, we are required by applicable rules to verify your identity, maintain transaction records, or cooperate with fraud investigations.
• Legitimate interests: We process some data — such as device and usage information — to protect the security of the Platform, prevent fraud, and improve the experience for all players.
• Consent: Where we rely on your consent — for example, to send promotional messages about bonuses, PSL cricket betting offers, or new features — you can withdraw that consent at any time without affecting your ability to use the Platform.

05 Data Sharing

bji baji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your information only in the following limited circumstances and always with appropriate safeguards in place:

• Payment processors: When you make a deposit or request a withdrawal, relevant payment details are shared with your chosen payment provider — JazzCash, Easypaisa, Raast, bank transfer services, or card networks — solely to complete the transaction.
• Identity verification providers: To comply with age and identity verification requirements, we may share your identification documents with specialist KYC service providers. These providers process your data only for verification purposes and are bound by strict confidentiality obligations.
• Fraud and security partners: We use third-party risk management tools that may receive limited data such as IP addresses and device fingerprints to help detect and prevent fraudulent activity on the Platform.
• Technology and hosting providers: The companies that provide our server infrastructure, app hosting, and technical support may process data as part of delivering those services. They operate under data processing agreements that restrict how they can use the information.
• Legal requirements: If we receive a valid legal request or are required to disclose information to comply with applicable obligations, we will do so. We will notify you if we are permitted to do so in that situation.

06 Cookies & Tracking Technologies

bji baji uses cookies and similar tracking technologies on the website and in the app. These are small files or identifiers stored on your device that help the Platform function correctly and allow us to understand how players use our services.

We use the following types of cookies:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. Without these, core features like logging in, placing bets, or making deposits would not work.
• Performance cookies: Help us understand how players navigate the Platform — which pages are visited most, where errors occur, and how long sessions last. This data is collected in aggregated form and used to improve the experience.
• Functionality cookies: Remember your preferences such as language settings, preferred betting market, or display options so you do not have to reset them every visit.
• Analytics cookies: Used to measure overall Platform performance and user engagement. Analytics data is anonymised where possible and never used to identify individual players for marketing purposes.

You can manage cookie settings through your browser or device settings. Disabling essential cookies may prevent some features of the Platform from working correctly. Non-essential cookies can be disabled without affecting your ability to place bets or use your account.

07 Data Retention

We keep your personal data for as long as your account is active and for a reasonable period after account closure to handle any outstanding queries, dispute resolution, or legal obligations. In practice this means:

• Account registration and identity verification records are retained for the lifetime of your account plus a standard post-closure period.
• Financial transaction records including PKR deposits, withdrawals, and betting history are kept for the period required to maintain accurate financial records and handle disputes.
• Customer support communications are retained for a period sufficient to resolve the issue raised and handle any follow-up.
• Marketing consent records are kept until you withdraw consent, after which they are deleted or anonymised.

When data is no longer required, we securely delete or anonymise it so that it can no longer be linked back to you. If you would like more specific information about how long a particular type of data is held, contact our support team.

08 Your Rights

As a user of bji baji, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team through live chat or email and we will respond as quickly as possible:

• Right to access: Request a copy of the personal data we hold about you, including account details, transaction history, and communication records.
• Right to rectification: Ask us to correct any inaccurate or incomplete personal information linked to your account.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for us to retain it. Note that some data may need to be kept to comply with legal obligations even after your account is closed.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances — for example, while we are investigating a concern you have raised.
• Right to data portability: Request your personal data in a commonly used, machine-readable format so you can take it elsewhere if you choose.
• Right to withdraw consent: Where we rely on your consent to process data — such as for marketing messages — you can withdraw that consent at any time with immediate effect.
• Right to object: Object to our processing of your data where we rely on legitimate interests as the legal basis, particularly in relation to direct marketing.

09 Children's Privacy

bji baji is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the registration process and may be requested again at any point during your use of the Platform.

If we become aware that a registered account belongs to a person under 18, we will immediately close the account, void any bets placed, return any deposits where verifiable, and delete all associated personal data. If you have reason to believe a minor has registered on the Platform, please contact support immediately so we can investigate and take appropriate action.

10 Security Measures

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These include:

• SSL/TLS encryption on all data transmitted between your device and our servers, whether you are on the website or using the mobile app.
• Secure password hashing — your account password is never stored in plain text. Even our own team cannot read your password.
• Access controls limiting who within bji baji can view personal data to only those staff members with a legitimate need to access it for their role.
• Regular security reviews to identify and address vulnerabilities in the Platform's systems and infrastructure.
• Two-factor authentication options available for account logins to add an extra layer of protection beyond your password.

While we take every reasonable precaution, no digital system can be completely immune to risk. If you suspect any unauthorised access to your account, change your password immediately and contact support so we can investigate and take protective action promptly.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, changes in technology, or evolving best practices around data protection. When we make meaningful changes, we will notify registered users by email or via an in-app notification and update the "Last Updated" date at the top of this page.

We encourage you to review this page periodically. Your continued use of bji baji after any changes are published means that you accept the updated policy. If you do not agree with any changes, you should stop using the Platform and contact support to close your account — any balance will be returned to your registered payment method.

Minor changes such as clarifications, formatting corrections, or grammar improvements will be made without formal notification but will always be reflected in the updated date shown at the top of this page.

12 Contact & Support

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information is being handled, our support team is available 24 hours a day, seven days a week.

The quickest way to reach us is through the live chat feature on the website or in the bji baji app. For data-related requests, you can also reach us by email — our support address is shown in the footer below. Please include your registered username and a clear description of your request so we can handle it efficiently.

Data access, correction, and deletion requests are treated as a priority and we aim to respond within a reasonable timeframe. For responsible gaming-related matters, including self-exclusion or account limits, please visit the Responsible Gaming page or mention it directly to the support team.