01Introduction
Bji Baji ("we", "us", "the Platform") is committed to protecting the privacy of every player who registers and plays at bjibaji.im. This Privacy Policy explains how Bji Baji collects, processes, stores, and protects your personal information when you use the platform — whether you are placing a live cricket bet, spinning a jackpot slot, playing live baccarat, or simply browsing the site.
This policy applies to all users of bjibaji.im and is written specifically for our player base in Pakistan. It covers data processed in connection with account registration, deposits and withdrawals in PKR, sports betting, casino gaming, bonus claims, customer support interactions, and use of the Bji Baji website generally.
By registering an account or continuing to use Bji Baji after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy. If you have questions at any point, you can contact us at support@bjibaji.im.
This Privacy Policy should be read alongside the Bji Baji Terms and Conditions and Responsible Gaming Policy. Together, these three documents govern how Bji Baji operates and how it treats its players.
02Who We Are
The Bji Baji platform operates at bjibaji.im and is the data controller for personal information collected from its registered players. For the purposes of this Privacy Policy, Bji Baji is responsible for deciding how and why your personal data is processed.
Bji Baji is designed and operated primarily for the Pakistan market. All account balances, deposits, and withdrawals are handled in Pakistani Rupees (PKR). The platform's principal payment partners for Pakistani players include Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Pakistani-issued Visa and Mastercard bank cards.
If you need to contact Bji Baji in connection with any data privacy matter, please use the contact details in Section 15 of this policy.
03Data We Collect
Bji Baji collects personal information in three broad categories: information you provide directly, information generated by your use of the platform, and information received from third-party service providers we work with.
Information You Provide Directly
- Identity data: Full name, date of birth, and CNIC number (when required for KYC verification).
- Contact data: Phone number and email address provided at registration or updated subsequently.
- Payment data: Easypaisa or JazzCash account number, bank account number for IBFT, card details for Visa/Mastercard transactions. Note: card details are processed by our payment provider and are never stored in full on Bji Baji's own servers.
- KYC documentation: Copies of identity documents (CNIC front and back) submitted to fulfil verification requirements.
- Support communications: Messages, emails, and chat transcripts sent to the Bji Baji support team.
Data Generated by Platform Use
- Transaction data: Records of all deposits, withdrawals, bets placed, game sessions, and bonus activity on your account — with timestamps and PKR amounts.
- Device and technical data: IP address, browser type, operating system, device type, and screen resolution collected automatically when you access bjibaji.im.
- Usage data: Pages visited, time spent on sections of the platform, features used, game titles played, and navigation patterns.
- Geolocation data: Approximate location derived from your IP address, used to confirm access is from Pakistan and to apply region-appropriate settings.
Data from Third Parties
- KYC verification providers: Confirmation of identity verification results from third-party KYC service providers we engage for age and identity checks.
- Payment processors: Transaction confirmation, payment status, and fraud screening results from Easypaisa, JazzCash, and other payment partners.
- Fraud and risk providers: Risk scores and device fingerprinting data from fraud prevention services used to protect the platform and its players.
Bji Baji collects only the minimum data necessary for each stated purpose. We do not collect data speculatively or retain information beyond the periods described in Section 9 of this policy.
04How We Use Your Data
Bji Baji uses your personal data for the following purposes. Each purpose is tied to a specific lawful basis described in Section 5.
Bji Baji does not use your personal data for automated decision-making that produces significant effects on you without human review. Where automated systems flag an account for review (for example, in the context of responsible gaming monitoring or fraud detection), a human team member reviews the flagged case before any action is taken on the account.
05Legal Basis for Processing
Bji Baji processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:
- Contractual necessity: Processing required to deliver the services you have registered for — running your account, processing PKR transactions, settling bets, and resolving support queries. Without this processing, Bji Baji cannot provide the platform to you.
- Legal obligation: Processing required to comply with applicable legal requirements including anti-money laundering (AML) rules, age verification obligations, and record-keeping requirements.
- Legitimate interests: Processing carried out for Bji Baji's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and product improvement through anonymised analytics.
- Consent: Where Bji Baji sends you marketing communications or uses non-essential cookies, this is done only with your explicit consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
06Sharing Your Data
Bji Baji does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.
Payment Processing Partners
To process your deposits and withdrawals in PKR, Bji Baji shares relevant transaction and identity data with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, and card processors as applicable. These partners process your data only as directed by Bji Baji and in accordance with their own applicable security and privacy standards.
KYC and Identity Verification Providers
Where Bji Baji is required to verify your identity, your identity documents and personal details may be shared with a third-party KYC verification service. These providers process data solely for the purpose of identity verification and are contractually bound to data protection standards equivalent to those in this policy.
Fraud Prevention and Security Services
Technical data including device fingerprints, IP addresses, and behavioural signals may be shared with fraud detection and risk management services to protect the platform and its players from fraudulent activity. These services do not use the data for any purpose other than fraud screening on behalf of Bji Baji.
Game Software Providers
The casino games and live dealer games on Bji Baji are provided by third-party game studios. Minimal technical data (such as session tokens) may be transmitted to these providers to render game sessions correctly. No personally identifiable information beyond what is technically required is shared with game providers.
Legal Disclosures
Bji Baji may disclose your personal data to law enforcement, regulatory authorities, or other parties where required to do so by applicable law, court order, or regulatory obligation. We will notify you of any such disclosure where we are legally permitted to do so.
Bji Baji will never share your personal information with unaffiliated third parties for their own marketing purposes. If you receive unsolicited communications claiming to be from Bji Baji via a channel you did not sign up for, please report it to support@bjibaji.im immediately.
07Payment Data Security
Payments at Bji Baji are handled with particular care given the sensitivity of financial information. The following security measures apply specifically to payment data:
- Visa and Mastercard card details are processed directly by our PCI-DSS compliant payment processor. Full card numbers are never transmitted to or stored on Bji Baji's own servers.
- Easypaisa and JazzCash transaction data is transmitted over encrypted connections. Mobile wallet account numbers are stored in encrypted form in Bji Baji's systems.
- IBFT bank account details are used solely for the withdrawal you authorise and are not retained for future transactions without your explicit consent.
- All transaction records are logged with timestamps and stored in encrypted databases accessible only to authorised Bji Baji personnel with a legitimate operational need.
- Bji Baji applies transaction monitoring to detect unusual payment patterns that may indicate fraud or unauthorised account access, as part of our fraud prevention obligations.
Bji Baji will never ask you for your Easypaisa or JazzCash PIN, your bank internet banking password, or your card CVV via any communication channel including support chat or email. If you receive such a request claiming to be from Bji Baji, it is fraudulent — please report it immediately.
08Cookies & Tracking Technologies
Bji Baji uses cookies and similar tracking technologies on bjibaji.im. Cookies are small text files stored on your device when you visit the platform. They serve several different functions, described below.
You can manage your cookie preferences through your browser settings. Disabling essential cookies may prevent parts of the Bji Baji platform from functioning correctly. Disabling optional cookies will not affect your ability to play or place bets — it only affects Bji Baji's ability to remember your preferences and improve the platform based on usage patterns.
Bji Baji does not use cookies to serve third-party advertising or to track your activity on websites other than bjibaji.im.
09Data Retention
Bji Baji retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory requirements that mandate longer retention.
- Active account data: Retained for the duration of your account being open and active on the platform.
- Post-closure retention: Following account closure, identity data, transaction records, and KYC documentation are retained for five years to meet anti-money laundering and financial record-keeping obligations.
- Support communications: Customer support records retained for two years following the date of the last relevant interaction.
- Marketing consent records: Records of marketing consent and opt-out are retained for three years following the last consent event, to demonstrate compliance if questioned.
- Session and usage logs: Technical access logs retained for 90 days for security and fraud investigation purposes, after which they are deleted or fully anonymised.
When a retention period expires, Bji Baji deletes or anonymises your personal data in a secure manner. Anonymised data (which cannot be re-linked to you) may be retained indefinitely for aggregate analytics.
10Your Privacy Rights
As a player at Bji Baji, you have specific rights over your personal data. You can exercise any of these rights by contacting us at support@bjibaji.im. Bji Baji will respond to your request within 30 days. There is no fee for making a request.
- Right of access: You can request a copy of the personal data Bji Baji holds about you, along with information about how it is being used.
- Right to correction: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
- Right to deletion: You can request that Bji Baji delete your personal data, subject to any legal retention obligations that require us to keep certain records.
- Right to restrict processing: In certain circumstances you can ask us to pause the processing of your data while a dispute about accuracy or lawfulness is being resolved.
- Right to data portability: You can request a copy of the personal data you have provided to Bji Baji in a structured, machine-readable format for transfer to another service.
- Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to object: You can object to processing based on legitimate interests. Bji Baji will stop that processing unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, email support@bjibaji.im with the subject line "Privacy Rights Request" and describe what you are asking for. You may be asked to verify your identity before the request is processed, to protect your data from being accessed or deleted by someone other than you.
11Children's Privacy
Bji Baji is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under 18 years of age. Age verification is required as part of the registration process.
If Bji Baji discovers that an account has been registered by or on behalf of a person under 18, the account will be immediately closed, any funds forfeited in accordance with the Terms and Conditions, and all personal data associated with the account deleted unless retention is required by legal obligation.
If you have reason to believe that a minor has registered at Bji Baji using false information, please contact support@bjibaji.im immediately so the account can be reviewed and closed without delay.
12Security Measures
Bji Baji takes the security of your personal data seriously. The platform applies the following technical and organisational measures to protect your information:
- All data transmitted between your device and bjibaji.im is encrypted using TLS (Transport Layer Security).
- Personal data at rest in Bji Baji's databases is stored in encrypted form.
- Access to systems containing personal data is restricted to authorised personnel based on role, with access logs maintained and reviewed regularly.
- Bji Baji's infrastructure undergoes regular security assessments including vulnerability scanning and penetration testing.
- Staff with access to personal data receive regular training on data protection obligations and secure handling practices.
- In the event of a data breach that poses a risk to your rights and freedoms, Bji Baji will notify affected players without undue delay and take immediate steps to contain the breach and prevent recurrence.
No security system is impenetrable. While Bji Baji takes extensive measures to protect your data, we recommend you also protect yourself by using a strong, unique password for your Bji Baji account, enabling any available two-factor authentication, and never sharing your login credentials with anyone else.
13Third-Party Links
The Bji Baji website does not contain links to external third-party websites. All navigation links on bjibaji.im direct to pages within the Bji Baji platform itself. If you ever arrive at an external website through content that appears to be associated with Bji Baji, please treat that as a potential phishing attempt and report it to support@bjibaji.im.
Third-party payment interfaces (for example, the Easypaisa payment gateway) are accessed within the deposit and withdrawal flow. Once you interact with a third-party payment interface, that provider's own privacy policy governs the processing of your data within their system. Bji Baji recommends reading the privacy policies of Easypaisa, JazzCash, and any other payment provider you use.
14Updates to This Privacy Policy
Bji Baji reviews and updates this Privacy Policy periodically to reflect changes in how the platform operates, changes in applicable law, or changes in data processing practices. The date at the top of this page shows when the policy was last updated.
When material changes are made to this policy — changes that affect how your data is used or your rights as a player — Bji Baji will notify registered players by email and display a prominent notice on the platform for a reasonable period. For minor updates that do not materially affect your rights, the updated policy will be published without a separate notification.
Continued use of Bji Baji following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you object to any update, you have the right to close your account and request deletion of your personal data subject to retention obligations.
15Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Bji Baji handles your personal data, please contact us through any of the following channels:
- Email: support@bjibaji.im — use the subject line "Privacy Enquiry" for the fastest routing to the relevant team.
- Live Chat: Available 24/7 from the Bji Baji platform when you are logged in. Our support team can handle general privacy questions and initiate formal data rights requests on your behalf.
- Response time: Privacy rights requests (access, deletion, correction, portability) are acknowledged within 5 business days and completed within 30 days. Urgent security concerns are treated as priority.
Bji Baji is committed to resolving privacy concerns promptly and to the satisfaction of the player raising them. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through applicable dispute resolution channels.