Baji Games Privacy Policy — How We Protect Pakistan Players' Data

1. Who We Are

This Privacy Policy applies to Baji Games, the online gaming platform accessible at bajigames.bet ("Baji Games", "we", "us", "our"). Baji Games is the data controller responsible for the personal information you provide when you register and use our platform.

We understand that privacy is not just a legal requirement — it is a matter of trust. Pakistani players share personal and financial information with Baji Games because they need to in order to use the platform. We take that responsibility seriously and this policy is designed to give you complete clarity over how that information is handled, from the moment you register right through to when you close your account.

This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy. All three documents together form the complete framework governing your relationship with Baji Games.

2. What Personal Information We Collect

Baji Games collects only the information that is necessary to provide a secure, functional gaming service and meet our legal obligations. Below is a clear breakdown of the categories of personal data we hold:

2.1 Registration Data

• Full name as it appears on your CNIC or other government-issued identity document.
• Pakistani mobile number used for OTP verification and account recovery.
• Date of birth (used to verify minimum age eligibility of 18 years).
• Email address, if provided during registration or added later.
• Username / account name chosen at registration.

2.2 Identity Verification (KYC) Data

• CNIC number or NICOP number.
• Copies of government-issued identity documents submitted for KYC verification.
• Proof of address documentation when requested.
• Selfie or video verification where required as part of enhanced identity checks.

2.3 Financial Data

• Easypaisa or JazzCash mobile wallet numbers associated with your account.
• NayaPay, SadaPay or IBFT bank account details used for transactions.
• Visa/Mastercard details (card number, expiry — CVV is never stored).
• Transaction history including deposits, withdrawals, bonuses and wagers.

2.4 Technical & Usage Data

• IP address and approximate geographic location.
• Device type, operating system and browser version.
• Session duration, pages visited and game activity logs.
• Cookies and local storage data as described in Section 6.

3. How We Collect Your Information

Baji Games collects personal information through the following channels:

• Direct registration — Information you enter when creating your account, completing KYC or updating your profile.
• Transactions — Details captured automatically when you make a deposit or withdrawal through any supported payment method.
• Platform usage — Technical data collected automatically when you browse or play on Baji Games, including device information, IP address and session logs.
• Support interactions — Information you share when contacting Baji Games customer support via live chat or email.
• Cookies and similar technologies — As described in Section 6 of this policy.
• Third-party verification providers — Identity verification services may share data with us to confirm the authenticity of documents you submit.

4. Why We Use Your Personal Data

Every piece of data Baji Games collects is used for a specific, legitimate purpose. Here is a plain-English table summarising what we do with your information and why:

5. Who We Share Your Data With

Baji Games does not sell, rent or trade your personal information to any third party. We share data only in the following specific circumstances and with parties bound by confidentiality and data protection obligations:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT operators and Visa/Mastercard processing networks receive only the transaction data necessary to complete your deposit or withdrawal.
• Identity verification providers — KYC and document verification partners receive identity documents solely to confirm authenticity.
• Game software providers — Providers such as Evolution Gaming, Ezugi, Pragmatic Play and JILI may receive session and gameplay data to operate their games on the Baji Games platform. These providers are not permitted to use this data for their own marketing purposes.
• Fraud prevention services — Anonymised or aggregated data may be shared with fraud detection services to identify suspicious patterns.
• Legal authorities — Baji Games will disclose personal data to law enforcement or regulatory authorities where legally required to do so, such as in response to a valid court order or legal investigation.

6. Cookies & Tracking Technologies

Baji Games uses cookies and similar browser-based technologies to make the platform work correctly and to understand how it is being used. Here is what each type does:

Essential Cookies

These cookies are necessary for the Baji Games platform to function. They maintain your login session, remember your game preferences and keep the platform secure. You cannot opt out of essential cookies while using the site, but they store no personally identifiable information beyond a session identifier.

Analytics Cookies

Baji Games uses anonymised analytics to understand how players navigate the platform — which games are most popular, how long sessions last, where players encounter difficulties. This data is aggregated and not linked back to individual identifiable players. You may opt out of analytics cookies via the cookie preference centre on the platform.

Preference Cookies

These remember your display preferences — such as language settings or preferred lobby view — so you do not have to reset them each visit.

7. How Long We Keep Your Data

Baji Games retains personal data for only as long as is necessary for the purposes described in this policy, or as required by applicable law. General retention periods are as follows:

• Account data — Retained for the duration of your active account plus a minimum of five years after account closure, to meet anti-money laundering and regulatory record-keeping requirements.
• KYC documents — Retained for a minimum of five years after your last transaction on the platform, in line with financial regulations.
• Transaction records — Retained for seven years for tax, audit and regulatory compliance purposes.
• Support correspondence — Retained for three years to maintain a record of resolved disputes and customer interactions.
• Technical / session logs — Typically retained for 12 months before deletion or anonymisation.
• Marketing consent records — Retained until consent is withdrawn, plus a short period thereafter for audit purposes.

When the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised so it can no longer be linked to you as an individual.

8. How We Protect Your Data

Baji Games implements a layered approach to data security. The following technical and organisational measures are in place to protect your personal information:

• 256-bit SSL / TLS encryption on all data in transit between your device and our servers.
• Encrypted storage for sensitive data including identity documents and payment details.
• Strict access controls — Baji Games staff can only access personal data on a need-to-know basis for their specific role. All access is logged.
• Regular penetration testing by independent security professionals to identify and address vulnerabilities.
• Two-factor authentication available for player accounts and mandatory for all platform administrators.
• Automated fraud detection that monitors account activity for unusual patterns and flags suspicious behaviour in real time.
• Separation of financial and personal data — payment processing systems are isolated from game and profile systems.

While Baji Games implements strong security measures, no internet-based platform can guarantee absolute security. We encourage all players to use strong, unique passwords and to enable any available two-factor authentication on their accounts.

9. Your Rights Over Your Personal Data

As a Baji Games player, you have the following rights regarding your personal information. To exercise any of these rights, contact us at support@bajigames.bet or via live chat:

10. Children's Privacy

Baji Games is strictly an 18+ platform. We do not knowingly collect personal information from anyone under the age of 18. If we discover that an account has been opened by a minor, that account will be closed immediately, all funds held will be refunded to the registered payment method after deducting any winnings generated during underage use, and all personal data associated with the account will be deleted from our systems.

If you believe a minor has opened a Baji Games account, please contact our support team immediately. For information on our responsible gaming and underage access prevention tools, visit our Responsible Gaming page.

11. International Data Transfers

Baji Games may process or store some personal data on servers located outside Pakistan — for example, game servers operated by our software partners may be hosted in other countries. Where this occurs, Baji Games ensures that appropriate safeguards are in place, including contractual data protection clauses with the receiving organisations that require them to apply equivalent security standards to those described in this policy.

We do not transfer personal data to jurisdictions that do not have adequate data protection frameworks without first implementing appropriate contractual protections.

12. Third-Party Services Embedded in the Platform

The Baji Games platform integrates software and services from third-party providers including game studios, live dealer platforms and payment processors. These providers have their own privacy practices, and Baji Games vets all platform partners to ensure they meet acceptable data protection standards before integration.

Key third-party data relationships on Baji Games:

• Game providers (Evolution Gaming, Ezugi, Pragmatic Play, JILI and others) — Receive session and gameplay data necessary to deliver their games. Not permitted to use this data for independent marketing.
• Payment processors — Handle transaction data under their own PCI-DSS compliant frameworks. Baji Games does not store raw card data.
• KYC providers — Receive identity document images for verification only. Documents are not retained by these providers beyond what is necessary for the verification process.

13. Changes to This Privacy Policy

Baji Games may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Baji Games platform for a minimum of 14 days.
• For significant changes affecting how we use personal data, send a direct notification to registered mobile numbers or email addresses where possible.

We recommend checking this page periodically. Your continued use of Baji Games after the effective date of any change constitutes acceptance of the revised policy.

14. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please reach out to the Baji Games privacy team through any of the following:

• Live Chat — Available 24/7 on the Baji Games platform. Mention "privacy request" in your opening message and you will be connected to the appropriate team member.
• Email — support@bajigames.bet. Include "Privacy Request" in your subject line for faster routing. We aim to respond within 5 business days for all privacy-related queries.

For requests to exercise formal data rights (access, erasure, portability), please include your registered mobile number and a brief description of your request. We will confirm receipt within 48 hours and fulfil verified requests within 30 days.