bajii Privacy Policy

1. Data Controller Information

For the purposes of this Privacy Policy, bajii acts as the data controller in respect of all personal data collected through the bajii.one platform. bajii operates under an international gaming licence and processes personal data in accordance with applicable international data protection legislation and the requirements of its licensing authority.

All data-related enquiries, including requests to exercise your rights under this Policy, should be directed to bajii's support team via the contact details set out in Section 13.

2. Personal Data We Collect

2.1 Registration Data

When you create a bajii Account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify the 18+ age requirement).
• Pakistani mobile number (used as your primary bajii login identifier and for SMS verification).
• Email address (if provided during registration).
• Chosen username and encrypted password.
• Country of residence.

2.2 KYC Verification Data

As part of bajii's identity verification obligations, we may collect:

• Copy of a valid government-issued identity document (CNIC, passport or driving licence).
• Proof of address document (utility bill, bank statement).
• Proof of payment method ownership (e.g. JazzCash or Easypaisa account screenshot).
• Selfie photograph for biometric identity matching where required.

2.3 Financial Data

bajii processes the following financial information in connection with deposits and withdrawals:

• JazzCash or Easypaisa mobile wallet number.
• Bank account details (IBAN, account title) for bank transfer methods including HBL, UBL, Meezan Bank and Bank Alfalah.
• Crypto wallet address for USDT TRC20 transactions.
• Transaction amounts, dates, reference numbers and currency amounts in PKR.

bajii does not store full Visa or Mastercard card numbers on its servers. Card-based transactions are processed via PCI-DSS compliant third-party payment processors.

2.4 Usage and Behavioural Data

bajii automatically collects certain technical and behavioural data when you use the platform:

• IP address and geolocation data (country and city level).
• Device type, operating system and browser information.
• Session duration, pages visited, games played and bets placed.
• Betting and gaming history, including stakes, outcomes and timestamps.
• Customer support interaction transcripts.

3. How We Collect Your Data

bajii collects personal data through the following means:

• Directly from you — when you register a bajii Account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a bajii promotion.
• Automatically — through cookies, server logs and analytics tools as you interact with bajii.one. See Section 8 for full cookie disclosure.
• From third-party payment processors — transaction confirmation data provided by JazzCash, Easypaisa, bank transfer services and other payment providers when you transact on bajii.
• From identity verification service providers — where bajii engages a third-party KYC verification platform to authenticate your identity documents.
• From fraud prevention and anti-money laundering databases — bajii may cross-reference your details against industry-standard watchlists as part of its regulatory compliance obligations.

4. Purposes and Legal Basis for Processing

bajii processes your personal data for the following purposes:

• Account creation and operation — to register and maintain your bajii Account, authenticate your bajii login, manage your PKR wallet and deliver the platform services you have requested. Legal basis: performance of contract.
• Age and identity verification (KYC) — to comply with bajii's obligations under its gaming licence to prevent underage gambling and verify player identity. Legal basis: legal obligation.
• Payment processing — to process your JazzCash, Easypaisa, bank transfer or USDT deposits and withdrawals. Legal basis: performance of contract.
• Fraud prevention and anti-money laundering — to detect, investigate and prevent fraudulent transactions and financial crime. Legal basis: legal obligation and legitimate interests.
• Responsible gaming compliance — to monitor gaming behaviour, apply deposit and loss limits, and action self-exclusion requests. Legal basis: legal obligation and legitimate interests.
• Customer support — to respond to your support queries via bajii live chat or email. Legal basis: performance of contract.
• Platform improvement and analytics — to analyse anonymous usage patterns and improve bajii's games, features and user experience. Legal basis: legitimate interests.
• Marketing communications — to send you promotional offers, bonus notifications and bajii news, where you have provided explicit consent. Legal basis: consent. You may withdraw consent at any time.

5. Sharing of Personal Data

bajii does not sell or rent your personal data to third parties. bajii may share your personal data with the following categories of recipients only where necessary and proportionate to the purpose:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller and USDT processors receive transaction data necessary to execute your deposits and withdrawals.
• Game providers — Evolution Gaming, Ezugi, JILI, PG Soft, Pragmatic Play and other studio partners receive limited session data (player identifier, stake amounts) to operate their games within bajii.
• KYC and identity verification providers — identity document data is shared with bajii's contracted KYC verification service providers solely for the purpose of document authentication.
• Fraud and AML service providers — transaction and identity data may be cross-referenced with industry fraud prevention databases.
• Regulatory and law enforcement authorities — bajii will disclose personal data to regulators, law enforcement agencies or courts when required to do so by applicable law or a binding legal order.
• Professional advisors — legal, accounting and audit professionals engaged by bajii may access personal data on a strictly need-to-know, confidential basis.

All third parties with whom bajii shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate security standards.

6. International Data Transfers

bajii's servers and some of its service providers are located outside Pakistan. By using bajii, you acknowledge that your personal data may be transferred to, stored and processed in jurisdictions other than your country of residence. bajii takes appropriate contractual and technical safeguards to ensure that any international transfer of personal data is conducted securely and in compliance with applicable data protection standards, including the use of standard contractual clauses and data processing agreements with all relevant service providers.

7. Data Retention

bajii retains your personal data for as long as your Account remains active and for a defined period after Account closure, in accordance with bajii's regulatory and legal obligations:

• Account and KYC data — retained for a minimum of 5 years following Account closure, as required by applicable anti-money laundering regulations.
• Transaction records — all deposit and withdrawal records are retained for a minimum of 5 years for financial audit and regulatory compliance purposes.
• Betting and gaming history — retained for a minimum of 2 years following Account closure for dispute resolution and responsible gaming review purposes.
• Customer support records — live chat and email interaction logs are retained for 2 years.
• Marketing consent records — records of your marketing preferences are retained for as long as your Account is active and for 1 year following Account closure.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with bajii's data disposal procedures.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. bajii uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your bajii login session and improve your experience.

8.2 Types of Cookies bajii Uses

• Strictly Necessary Cookies: Required for bajii to function. These include your authenticated session token (so you stay logged in to bajii), your language preference and your region detection. These cannot be disabled without breaking platform functionality.
• Performance and Analytics Cookies: Anonymous cookies that help bajii understand which pages and games are most popular, how users navigate the platform and where errors occur. This data is aggregated and not linked to individual identities.
• Functional Cookies: Remember your preferred game category, lobby layout or deposit method to personalise your bajii experience on return visits.

bajii does not use third-party advertising or behavioural targeting cookies. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair bajii platform functionality.

9. Security Measures

bajii implements the following technical and organisational measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bajii's servers.
• Encryption of personal data and KYC documents stored on bajii's infrastructure.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of bajii's platform infrastructure.
• Multi-factor authentication requirements for bajii operational staff accessing administrative systems.
• Incident response procedures for detecting, containing and notifying affected parties in the event of a data breach.

While bajii takes all reasonable measures to protect your data, no transmission over the internet or electronic storage system is 100% secure. bajii cannot guarantee absolute security but commits to promptly notifying affected Users in the event of a material data breach affecting their personal information.

10. Your Data Rights

Subject to applicable law and bajii's legitimate processing obligations, you have the following rights in relation to your personal data held by bajii:

• Right of Access: You may request a copy of the personal data bajii holds about you. bajii will respond within 30 days of receiving a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held on your bajii Account.
• Right to Erasure: You may request deletion of your personal data, subject to bajii's legal retention obligations (see Section 7). Erasure of data subject to a mandatory retention period will be carried out at the end of that period.
• Right to Restrict Processing: You may request that bajii restricts processing of your data in certain circumstances, for example where you contest the accuracy of the data.
• Right to Data Portability: You may request your personal data in a structured, commonly used machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where bajii processes your data on the basis of consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing based on bajii's legitimate interests. bajii will consider your objection and cease processing unless it can demonstrate compelling legitimate grounds.

To exercise any of these rights, contact bajii support via live chat or email at [email protected]. bajii may require identity verification before fulfilling a data rights request.

11. Children's Privacy

bajii is an adult platform and is strictly not intended for persons under 18 years of age. bajii does not knowingly collect or process personal data from minors. If bajii becomes aware that personal data has been collected from a person under 18, that Account will be immediately closed and all associated personal data deleted (subject only to any mandatory regulatory retention obligations). If you are a parent or guardian and believe that a minor has accessed bajii, please contact bajii support immediately via live chat or email.

12. Changes to This Policy

bajii reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, bajii's data processing practices or the platform's features. Where changes are material, bajii will notify registered Users via a notice on the bajii platform or via the email address associated with their Account at least 14 days prior to the changes taking effect. Continued use of bajii following notification of an updated Policy constitutes acceptance of the revised Policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

13. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or bajii's handling of your personal data, please contact bajii's Data Protection team using the following details:

• Live Chat: Available 24/7 directly on bajii.one — the fastest channel for urgent privacy or account data queries.
• Email: [email protected] — for written privacy requests, data subject access requests or formal complaints. bajii aims to acknowledge all written privacy requests within 5 business days and to respond fully within 30 days.

bajii takes all data protection enquiries seriously and is committed to providing Pakistani players with clear, timely responses to any concerns about how their personal information is handled on the bajii platform.