bjbaj Privacy Policy

1. Introduction

bjbaj ("bjbaj," "we," "us," "the Platform," "bjbaj.app") is committed to protecting the privacy of all individuals who access or use our online casino and sports betting platform. This Privacy Policy ("Policy") describes how bjbaj collects, processes, stores, shares, and protects personal information in connection with your use of the bjbaj website at bjbaj.app and all related services.

This Policy applies to all registered players, prospective players who browse bjbaj.app without registering, and any individual whose personal information bjbaj receives in the course of providing its services to Pakistani and international users. By accessing bjbaj.app or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside bjbaj's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, bjbaj acts as the data controller in respect of personal data collected directly from users through bjbaj.app. Where bjbaj engages third-party service providers to process personal data on its behalf, those providers act as data processors under contractual data processing agreements that require them to handle data securely, use it only for the specified purpose, and comply with applicable privacy obligations.

All privacy-related queries, data subject requests, and complaints should be directed to bjbaj's support team at the contact details set out in Section 14 of this Policy.

3. Information We Collect

3.1 Registration and Account Data

When you create a bjbaj account, we collect the following information that you provide directly:

• Full legal name as it appears on your Pakistani CNIC or other valid identity document.
• Date of birth (used for mandatory age verification — 18+ requirement).
• Email address and Pakistani mobile phone number.
• Residential address.
• Username and encrypted password credentials.

3.2 Identity Verification (KYC) Data

In compliance with anti-money laundering and responsible gaming requirements, bjbaj collects the following verification documents prior to processing any withdrawal:

• A scanned or photographed copy of your valid CNIC (Computerised National Identity Card).
• A live selfie photograph for facial comparison against identity document.
• Proof of payment method ownership where required (e.g., screenshot of JazzCash or Easypaisa wallet associated with the account).

3.3 Financial Transaction Data

bjbaj records all deposit and withdrawal transactions associated with your account, including transaction amounts in PKR, payment method used, timestamps, and transaction reference numbers. bjbaj does not store full payment card numbers or mobile wallet PINs on its servers.

3.4 Gameplay and Betting Activity Data

bjbaj collects records of all gaming activity on your account, including bets placed, games played, stakes, wins, losses, and session durations. This data is used for account management, responsible gaming monitoring, fraud prevention, and dispute resolution purposes.

3.5 Technical and Device Data

When you access bjbaj.app, our servers automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URL, pages visited, and session duration. This information is used for platform optimisation, security monitoring, and fraud detection.

3.6 Communications Data

bjbaj retains records of communications between you and our support team, including live chat transcripts, emails, and any documentation submitted in connection with a query or complaint.

4. How We Use Your Data

bjbaj processes personal data for the following purposes:

• Account creation and management: Registering your bjbaj account, authenticating your identity at login, and maintaining your account in good standing.
• Service delivery: Enabling your participation in sports betting (including cricket and PSL markets), live casino games, slots, Hi-Lo, Dragon Tiger, and all other bjbaj platform features.
• Payment processing: Executing deposits and withdrawals in PKR via your selected payment method, and maintaining accurate transaction records.
• KYC and age verification: Confirming that all players are 18 years of age or older and that identity information is genuine.
• Responsible gaming compliance: Monitoring play patterns for indicators of problem gambling and administering self-exclusion, cool-off, and deposit limit requests.
• Fraud and financial crime prevention: Detecting and investigating suspicious activity, including potential money laundering, multi-account abuse, and bonus fraud.
• Customer support: Responding to queries, resolving disputes, and providing account assistance.
• Platform improvement: Analysing aggregated, anonymised usage data to improve bjbaj's products, interface, and overall player experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and PSL season promotions where you have opted in to receive marketing communications. You may opt out at any time.
• Legal and regulatory compliance: Meeting applicable legal obligations, responding to lawful regulatory inquiries, and maintaining records as required by applicable law.

5. Legal Basis for Processing

bjbaj processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between bjbaj and a registered player — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC, anti-money laundering obligations, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where bjbaj's legitimate business interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. Consent can be withdrawn at any time without affecting prior processing.

6. Data Sharing

bjbaj does not sell, rent, or trade your personal information to third parties for their own marketing purposes. bjbaj may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers necessary to execute your transactions.
• KYC and identity verification providers: Third-party identity verification services used to confirm age and identity in compliance with responsible gaming and anti-money laundering obligations.
• Fraud and security providers: Services that assist bjbaj in detecting, investigating, and preventing fraud, bonus abuse, and financial crime.
• Game content providers: Licensed casino game studios whose software powers bjbaj's slot and live casino offerings. These providers may receive limited session data necessary for game operation.
• Regulatory and law enforcement authorities: Where bjbaj is legally required or compelled by a court order or regulatory directive to disclose personal data.

All third-party service providers engaged by bjbaj are required to handle personal data in accordance with applicable data protection standards and are contractually prohibited from using bjbaj player data for any purpose beyond the specific service they provide.

7. Cookies & Tracking Technologies

bjbaj uses cookies and similar technologies on bjbaj.app for the following purposes:

• Essential cookies: Required for basic platform functionality, including maintaining your login session, remembering your preferences, and enabling secure account access.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with bjbaj.app, enabling bjbaj to improve the platform experience. This data is not linked to individual identifiable players.
• Security cookies: Used to detect and prevent fraudulent access, bot activity, and other security threats to the bjbaj platform.

You may configure your browser to refuse or delete cookies, but please note that disabling essential cookies may impair your ability to use bjbaj's services, including logging in to your account. bjbaj does not use third-party advertising cookies or tracking pixels for cross-site behavioural advertising.

8. Data Retention

bjbaj retains personal data for as long as your account remains active and for such additional period as may be required to comply with applicable legal and regulatory obligations. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction or account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• KYC documentation is retained for the period required by applicable regulatory obligations from the date of account closure.
• Support communications are retained for a minimum of two (2) years from the date of the communication.
• Technical and device data logs are retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, bjbaj will securely delete or anonymise personal data in accordance with its internal data deletion procedures.

9. Data Security

bjbaj implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players' devices and bjbaj servers.
• Encrypted storage of passwords — bjbaj never stores passwords in plaintext.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the bjbaj platform infrastructure.
• Two-factor authentication available to all registered bjbaj account holders.

While bjbaj takes data security seriously, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to your rights and freedoms, bjbaj will notify affected players and relevant authorities in accordance with applicable legal obligations.

10. Your Rights

Subject to applicable data protection law and bjbaj's legal obligations, you have the following rights in respect of your personal data held by bjbaj:

• Right of access: To request a copy of the personal data bjbaj holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to bjbaj's legal retention obligations.
• Right to restriction: To request that bjbaj restrict processing of your personal data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, machine-readable format where technically feasible.
• Right to object: To object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the bjbaj support team. bjbaj will respond to data subject requests within a reasonable timeframe and in accordance with applicable law. Requests will be subject to identity verification to protect account security.

11. Children's Privacy

bjbaj's platform is strictly for individuals aged 18 and above. bjbaj does not knowingly collect personal data from anyone under 18 years of age. If bjbaj discovers that personal data has been collected from a minor, that account will be immediately closed, all associated data deleted or handled in accordance with applicable law, and the registration reported as appropriate. If you are a parent or guardian and believe your child has registered on bjbaj, please contact [email protected] immediately.

12. International Data Transfers

The bjbaj platform serves players primarily in Pakistan. Where personal data is transferred to or processed in jurisdictions outside Pakistan — for example, by third-party service providers whose infrastructure operates in other countries — bjbaj takes steps to ensure that such transfers are subject to appropriate safeguards, including contractual data protection clauses, consistent with internationally recognised data protection standards. By using bjbaj, you acknowledge and consent to such transfers where necessary for the provision of bjbaj's services.

13. Policy Updates

bjbaj reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or bjbaj's data practices. Material changes will be communicated to registered players via the email address on file or via a prominent notice on bjbaj.app, with a minimum of seven (7) days' advance notice before the revised Policy takes effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of bjbaj following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14. Contact

For all privacy-related enquiries, data subject access requests, or complaints regarding bjbaj's handling of your personal data, please contact the bjbaj privacy team. Contact details are provided as plain text — these are not clickable links.

Privacy & Data Enquiries: [email protected]

bjbaj aims to respond to all privacy-related requests within a reasonable timeframe. For urgent account security concerns, 24/7 live chat support is available to registered players after logging in to bjbaj.