1. Who We Are
baj baji operates the online casino and sports betting platform available at bajbaji.im. When this Privacy Policy refers to "baj baji", "we", "us" or "our", it means the operating entity responsible for the bajbaji.im platform and all services delivered through it, including casino games, sports betting, crash games, live casino, VIP Club and any other products accessible via your baj baji account.
For the purposes of data protection, baj baji acts as the data controller in respect of all personal data collected from players who register and use the platform. As data controller, we determine the purposes and means of processing your personal data, and we are responsible for ensuring that processing is carried out lawfully and transparently.
If you have any questions about this Privacy Policy or about how baj baji handles your personal data, you can contact our support team at support@bajbaji.im. We aim to respond to all privacy-related queries within 48 hours.
2. What Personal Data We Collect
baj baji collects only the personal data that is necessary for operating a responsible, secure online gaming and betting platform. The categories of personal data we collect are set out below.
2.1 Registration and Identity Data
When you create a baj baji account, we collect the information you provide during registration, which includes your full legal name, date of birth, residential address in Pakistan, mobile phone number and email address. This data is used to create and manage your account and to verify your identity as required for responsible gaming and payment processing purposes.
2.2 Identity Verification (KYC) Documents
As part of our Know Your Customer (KYC) obligations, we may ask you to provide copies of identity documents including your National Identity Card (CNIC), NICOP, or passport, and proof of address such as a utility bill or bank statement. These documents are handled with the highest level of security and are used solely for identity and age verification purposes.
2.3 Financial and Transaction Data
When you make deposits or withdraw funds, baj baji records transaction details including the amount, the payment method used, the date and time of the transaction, and the relevant payment reference. Payment method details — such as your Easypaisa or JazzCash mobile number, or the last four digits of a card — are stored in a tokenised form. We do not store full payment card numbers on our servers.
2.4 Gaming and Betting Activity
baj baji records your activity on the platform, including games played, bets placed, bet amounts, game outcomes, session duration and frequency of play. This data is used for account management, bonus processing, responsible gaming monitoring and dispute resolution. It also contributes to platform analytics that help us improve the baj baji experience.
2.5 Technical and Device Data
When you access baj baji, we automatically collect certain technical data about your device and connection, including your IP address, device type, operating system version, browser type and version, screen resolution, and general geographic location derived from your IP address. This data is used for security, fraud prevention and platform optimisation purposes.
2.6 Communications Data
If you contact the baj baji support team via live chat, email or WhatsApp, we retain records of those communications for quality assurance, dispute resolution and regulatory compliance purposes. Communications are kept on secure servers and accessed only by authorised staff.
baj baji applies the principle of data minimisation: we collect only what we genuinely need. If a piece of data is not necessary for running your account, processing your payments or meeting our legal obligations, we do not collect it.
3. How We Collect Your Data
baj baji collects personal data through the following channels:
- Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings
- Automatically through platform use — technical and device data collected via cookies, server logs and analytics tools when you browse or interact with bajbaji.im
- From payment providers — confirmation and reference data from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card networks, used to process and verify your transactions
- From identity verification services — where baj baji uses third-party KYC providers to assist with age and identity verification, those providers may share verification outcomes with us
- From fraud prevention services — we may receive signals from fraud detection systems used to protect the platform and its players
4. Why We Use Your Data – Purposes of Processing
The table below summarises the main purposes for which baj baji processes your personal data and links each purpose to its legal basis.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, identity data | Contract performance |
| Identity and age verification (KYC) | ID documents, date of birth, address | Legal obligation |
| Processing deposits and withdrawals | Financial and transaction data | Contract performance |
| Fraud prevention and security monitoring | Technical data, transaction data, gaming activity | Legitimate interest |
| Responsible gaming monitoring | Gaming activity, session data, communications | Legal obligation / legitimate interest |
| Bonus and promotion administration | Gaming activity, transaction data | Contract performance |
| Customer support and dispute resolution | Communications data, account data | Legitimate interest / contract performance |
| Platform analytics and improvement | Technical data, gaming activity (aggregated) | Legitimate interest |
| Marketing communications (with consent) | Contact details, gaming preferences | Consent |
| Regulatory and legal compliance | All categories as required | Legal obligation |
baj baji does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where required for fraud prevention or regulatory screening purposes, in which case you have the right to request human review of any such decision.
5. Legal Bases for Processing
baj baji processes personal data on the following legal grounds:
- Contract performance: Processing necessary to provide the services you have contracted for — creating your account, taking bets, processing payments and managing bonuses
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements and responsible gaming mandates
- Legitimate interests: Processing carried out for baj baji's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, analytics and improving the baj baji experience
- Consent: Where we process data on the basis of your consent — principally for marketing communications — you may withdraw that consent at any time by updating your preferences in your account settings or by contacting our support team
Withdrawing consent: Withdrawing your consent to marketing does not affect the lawfulness of processing carried out before withdrawal, and it does not affect our ability to process data on other legal grounds. Your account will continue to function normally.
6. Who We Share Your Data With
baj baji does not sell your personal data to any third party. We share personal data only where necessary, and only with the categories of recipient described below.
6.1 Payment Service Providers
To process your deposits and withdrawals, baj baji shares relevant transaction data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT transfers), or the card network (for Visa/Mastercard transactions). Each provider handles your data in accordance with their own privacy policies and applicable financial regulations. baj baji requires all payment partners to maintain appropriate security standards.
6.2 Identity Verification Providers
Where baj baji uses third-party identity verification services to assist with KYC checks, we share the minimum necessary personal data — typically name, date of birth and document details — with those providers solely for the purpose of completing the verification. Verification providers are required by contract to handle this data securely and to use it only for the stated verification purpose.
6.3 Game Software Providers
The casino and betting games available on baj baji are provided by licensed third-party software companies. These providers receive anonymised or pseudonymised session data to support game functionality. Personal identity data is not passed to game providers. Game providers have their own security and data handling obligations under their licensing conditions.
6.4 Fraud Prevention and Security Services
baj baji uses fraud prevention and cybersecurity services that may process technical and behavioural data about platform sessions. These services help protect baj baji and its players from fraud, account takeovers and money laundering. Data shared with these services is processed on the basis of legitimate interests and legal obligations.
6.5 Legal and Regulatory Authorities
baj baji may disclose personal data to law enforcement agencies, regulatory bodies or other public authorities where required to do so by applicable law, court order or regulatory direction. We will disclose only the minimum data required to satisfy the relevant legal obligation.
baj baji never shares your personal data with marketing agencies, data brokers or advertising networks. Your data is not used for profiling by or for third-party commercial purposes.
7. How Long We Keep Your Data
baj baji retains personal data for as long as it is necessary for the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. The main retention periods are as follows:
- Account and identity data: Retained for the duration of your account plus five (5) years after account closure, to meet anti-money laundering record-keeping requirements
- Transaction and financial data: Retained for seven (7) years from the date of the transaction, in line with financial record-keeping standards
- Gaming and betting activity: Retained for five (5) years from the date of the activity for responsible gaming, dispute resolution and regulatory purposes
- KYC documents: Retained for five (5) years after the end of the customer relationship
- Support communications: Retained for three (3) years from the date of the last communication in a thread
- Technical logs: Retained for twelve (12) months for security and fraud prevention purposes
- Marketing consent records: Retained for three (3) years from the date consent was given or last confirmed
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Data retained beyond the standard retention period will only be kept where there is a specific, documented legal justification for doing so — for example, where a regulatory investigation or legal proceeding is ongoing.
8. Your Data Rights
As a baj baji player whose personal data we process, you hold a number of rights in relation to that data. These rights are described below. To exercise any of them, please contact our support team at support@bajbaji.im. We will respond within 30 days of receiving a valid request.