01 Introduction
This Privacy Policy describes how Bji Baji ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data belonging to registered users ("you", "the Player") of the website located at bjibaji.click and all associated gaming and betting services.
Bji Baji is committed to handling your personal data with care, transparency, and respect. When you create an account at Bji Baji, we ask for certain personal information — not because we want more data than we need, but because operating a licensed gaming platform requires us to verify who you are, process your PKR transactions securely, and meet our regulatory obligations. Every piece of data we collect has a clear purpose, and we don't keep it any longer than we have to.
This policy should be read alongside the Terms and Conditions and the Responsible Gaming policy, both of which form part of your agreement with Bji Baji. By registering an account, you confirm that you have read and understood this Privacy Policy and consent to the processing of your data as described herein.
This Privacy Policy applies to all users of Bji Baji regardless of how you access the platform — mobile browser, desktop browser, or any future application. All currency references in this document are in Pakistani Rupees (PKR) unless otherwise stated.
02 Who We Are
Bji Baji is an online gaming and sports betting platform operating under an international gaming licence. The platform is accessible at bjibaji.click and provides casino games, live dealer tables, sports betting, slots, card games, fishing games, and associated promotional services to registered users.
For the purposes of this Privacy Policy, Bji Baji is the data controller — meaning we are responsible for deciding what personal data is collected from you, why it is collected, and how it is processed. If you have any questions about how your data is handled, or if you wish to exercise any of your data rights described in this policy, you should contact us at the email address provided in Section 13.
Bji Baji's services are intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a user is under 18, we will immediately close their account and securely delete their personal data in accordance with Section 11 of this policy.
03 Data We Collect
Bji Baji collects personal data through several channels — directly from you when you register and use the platform, automatically through your device and browser when you access the site, and from third parties including payment providers and identity verification services. Below is a comprehensive breakdown of what we collect and when.
3.1 Data You Provide Directly
| Data Type | When Collected | Why We Need It |
|---|---|---|
| Full legal name | Account registration | Identity verification, KYC compliance |
| Mobile number | Account registration | Account access, OTP verification, support contact |
| Email address | Account registration | Account communications, security notifications |
| Date of birth | Account registration | Age verification (18+ requirement) |
| CNIC number and images | KYC verification | Identity verification, anti-money laundering |
| Payment method details | Deposit/withdrawal | Transaction processing, payment ownership verification |
| Source of funds information | Large transactions or request | Anti-money laundering compliance |
| Support correspondence | When you contact us | Resolving queries, improving service |
3.2 Data Collected Automatically
When you access the Bji Baji platform, our systems automatically record certain technical information about your session. This includes:
- IP address and approximate geographic location (city level)
- Device type, operating system version, and browser type
- Pages visited, time spent on each page, and navigation paths
- Game sessions accessed, bet amounts, and session duration
- Login timestamps and session activity logs
- Cookie identifiers and similar tracking data (see Section 8)
This automatically collected data is used for platform security, fraud detection, performance monitoring, and improving the user experience for Pakistani players.
3.3 Data from Third Parties
Bji Baji may receive personal data from third parties in the following circumstances: from payment providers like Easypaisa, JazzCash, or NayaPay when confirming transaction status; from identity verification service providers when processing CNIC documents; and from fraud prevention services when screening for suspicious account activity. All third-party data sharing arrangements are governed by data processing agreements that require the third party to handle your data in accordance with applicable data protection standards.
04 How We Use Your Data
Every piece of personal data that Bji Baji collects is used for a specific, defined purpose. We do not use your data for purposes beyond what is described in this policy without first obtaining your consent or updating this policy to reflect the new use. The primary purposes for which we use your data are:
- Account operation: Creating and managing your Bji Baji account, processing your PKR deposits and withdrawals, crediting bonuses, and maintaining your gaming history.
- Identity verification: Confirming that you are who you say you are, that you are over 18, and that your payment methods belong to you — all of which are required under our gaming licence conditions.
- Anti-money laundering (AML) compliance: Monitoring transactions for unusual patterns, verifying the source of large deposits, and filing required regulatory reports. These obligations apply to us regardless of your consent.
- Fraud prevention and security: Detecting and preventing unauthorised account access, payment fraud, multi-accounting, and other prohibited conduct described in the Terms and Conditions.
- Customer support: Responding to your queries, resolving account issues, and maintaining records of support interactions for quality and training purposes.
- Responsible gaming: Monitoring account activity for patterns that may indicate problem gambling behaviour, and facilitating deposit limits, cooling-off periods, and self-exclusion requests.
- Platform improvement: Analysing aggregate, anonymised data about how players use the Bji Baji platform to improve performance, design, and game selection.
- Legal compliance: Fulfilling our obligations under applicable law, responding to lawful requests from regulatory authorities, and defending against legal claims.
Bji Baji does not use your personal data to build advertising profiles or to serve you targeted advertisements outside of the Bji Baji platform itself. We may display relevant promotional offers within the platform based on your game activity, but this is done using internal platform data only — not through third-party advertising networks.
05 Legal Basis for Processing
Bji Baji processes your personal data on the following legal bases, depending on the specific type of processing involved:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and management | Contract — necessary to provide the service you've requested |
| KYC identity verification | Legal obligation — required by our gaming licence |
| Payment processing (PKR deposits/withdrawals) | Contract — necessary to execute your transactions |
| Anti-money laundering monitoring | Legal obligation — required by applicable AML regulations |
| Fraud prevention and account security | Legitimate interest — protecting our platform and other players |
| Responsible gaming monitoring | Legal obligation and legitimate interest — player welfare |
| Customer support communications | Contract and legitimate interest |
| Platform analytics (anonymised) | Legitimate interest — improving our service |
| Marketing communications (opt-in only) | Consent — you can withdraw this at any time |
06 Data Sharing and Disclosure
Bji Baji does not sell your personal data. We do not share it with third-party advertisers, data brokers, or any party that would use it to target you with advertising outside of our platform. The only circumstances in which we share your personal data with third parties are as follows:
6.1 Service Providers
We work with carefully selected service providers who process data on our behalf under strict data processing agreements. These include our identity verification partners (for processing CNIC documents), our payment processors (for handling Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card transactions), our game content providers (who receive anonymised session data for game performance monitoring), and our platform infrastructure providers. All service providers are contractually prohibited from using your data for any purpose beyond the specific service they provide to Bji Baji.
6.2 Regulatory and Legal Obligations
Bji Baji may disclose your personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by law, when responding to a valid legal process, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of Bji Baji, its players, or the public. We will always attempt to notify you of such disclosure requests unless we are legally prohibited from doing so.
6.3 Business Transfers
In the event that Bji Baji undergoes a merger, acquisition, or transfer of substantially all of its assets, your personal data may be transferred as part of that transaction. In such an event, we will notify affected users and the new data controller will be required to honour this Privacy Policy or provide you with a meaningful opportunity to opt out of the transfer.
Bji Baji will never sell your CNIC data, payment credentials, or gaming history to any third party under any circumstances. If you receive any communication claiming to be from Bji Baji requesting sensitive data through an unofficial channel, treat it as fraudulent and report it to our support team immediately.
07 Data Security
Bji Baji takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction.
7.1 Technical Measures
- Encryption at rest: All personal data — including CNIC images, payment method details, and account information — is stored using AES-256 encryption.
- Encryption in transit: All data transmitted between your device and the Bji Baji platform is protected by TLS 1.3 (Transport Layer Security). You can verify the secure connection via the padlock icon in your browser.
- Access controls: Access to personal data within Bji Baji's systems is strictly limited to staff who need it to perform their job function. All internal access is logged and reviewed regularly.
- Regular security audits: Bji Baji's platform infrastructure is subject to regular independent security assessments including penetration testing and vulnerability scanning.
- Two-factor authentication: We strongly recommend enabling two-factor authentication on your Bji Baji account for an additional layer of protection against unauthorised login.
7.2 Your Responsibilities
The security of your Bji Baji account also depends on steps you take on your side. You should never share your password or account credentials with anyone. You should use a strong, unique password for your Bji Baji account that you don't use elsewhere. If you believe your account has been compromised, contact our support team immediately and change your password.
7.3 Data Breach Response
In the unlikely event of a data breach that poses a risk to your rights and freedoms, Bji Baji will notify affected users as soon as reasonably practicable and will take all necessary remediation steps. We will also report the breach to the relevant supervisory authorities as required by our licence conditions.
08 Cookies and Tracking Technologies
Bji Baji uses cookies and similar technologies on our platform. A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to remember your preferences and activity over time. The Bji Baji platform uses cookies for the following purposes:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential cookies | Maintaining your login session, keeping your game state, enabling secure payment flows | Session / up to 30 days |
| Functional cookies | Remembering your language, display preferences, and lobby layout choices | Up to 12 months |
| Analytics cookies | Understanding how players navigate the platform (anonymised data only) | Up to 24 months |
| Security cookies | Fraud detection, identifying unusual login patterns, protecting against CSRF attacks | Session / up to 7 days |
Bji Baji does not use third-party advertising cookies or allow advertising networks to place tracking cookies on our platform. You can manage cookie preferences in your browser settings. Please be aware that disabling essential cookies may affect the functionality of the Bji Baji platform, particularly login sessions and payment processing.
09 Data Retention
Bji Baji retains your personal data only for as long as it is necessary for the purposes for which it was collected, and for as long as required to meet our legal and regulatory obligations. The following retention periods apply:
- Active account data: Retained for the duration of your account plus a minimum of 5 years after account closure, as required by anti-money laundering regulations applicable to licensed gaming operators.
- KYC and identity documents: Retained for a minimum of 5 years following your last transaction or account closure, whichever is later, in compliance with our licence conditions.
- Transaction records (PKR deposits and withdrawals): Retained for a minimum of 7 years to satisfy financial record-keeping obligations.
- Customer support correspondence: Retained for 3 years from the date of the final interaction.
- Technical logs (IP, session data): Retained for up to 12 months for security and fraud detection purposes.
- Marketing preference data: Retained until you withdraw consent or request deletion.
When data reaches the end of its retention period, Bji Baji will securely delete or anonymise it in a manner that makes recovery impossible. If you request account closure, your data will be retained for the minimum periods above but will not be used for any active marketing or communication purposes from the date of closure.
10 Your Rights
As a registered player at Bji Baji, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at the details in Section 13. We will respond to all data rights requests within 30 days of receipt.
11 Children's Privacy
The Bji Baji platform is strictly intended for adults aged 18 and over. We do not knowingly collect, process, or store personal data from anyone under the age of 18. If we become aware that a registered account belongs to a person under 18, we will immediately close the account, forfeit any balance in accordance with our Terms and Conditions, and securely delete all personal data associated with that account within 30 days of discovery.
If you are a parent or guardian and you believe that your child under the age of 18 has registered an account at Bji Baji, please contact us immediately at the email address in Section 13 with relevant details. We will investigate and take appropriate action as a priority.
Bji Baji uses CNIC-based age verification as part of the KYC process specifically to prevent underage users from accessing the platform. This is both a regulatory requirement and a commitment we take seriously as a responsible operator.
12 Changes to This Privacy Policy
Bji Baji may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes, we will notify registered users via a notification on the platform at login, or via a message sent to your registered contact details. The "Last Updated" date at the top of this page will always reflect when the most recent version was published.
Your continued use of the Bji Baji platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes, you may request account closure and the deletion of your data (subject to minimum legal retention periods) by contacting our support team.
We recommend reviewing this Privacy Policy periodically — particularly when you receive a notification from Bji Baji indicating that a material update has been made. Previous versions of the policy are available upon written request to the Bji Baji compliance team.
13 Contact Us
If you have any questions about this Privacy Policy, if you would like to exercise any of your data rights, or if you have a concern about how Bji Baji has handled your personal data, please contact us using the following details:
Email: support@bjibaji.click
Please include "Privacy Request" or "Data Rights" in the subject line of your email. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 calendar days. For urgent security concerns such as suspected unauthorised access to your account, please mark your email as urgent and contact us through the live support function in your account if available.
When submitting a data rights request, please provide your registered name, mobile number, and the nature of your request in as much detail as possible so we can process it efficiently. We may ask you to verify your identity before processing data access or deletion requests to ensure we are responding to the account owner.
This Privacy Policy is effective as of July 2025. It applies to all registered Bji Baji accounts. This policy should be read alongside our Terms and Conditions and Responsible Gaming policy, all of which are available through the links in the footer of every Bji Baji page.