bajii Privacy
Policy

1. Introduction

bajii ("we", "us", "our") operates the online gaming and sports betting platform accessible at bajii.lat ("the Platform"). We are committed to protecting the privacy and personal information of all players, visitors, and users who interact with the bajii Platform ("you", "your").

This Privacy Policy explains the categories of personal data bajii collects, the purposes for which it is processed, the legal basis for that processing, how long data is retained, who it may be shared with, and the rights you hold as a data subject. This Policy applies to all bajii products and services, including the sportsbook, casino, live dealer tables, payment services, customer support, and any promotional activities.

By registering a bajii account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not create a bajii account or continue using the Platform.

2. Data Controller

bajii acts as the data controller for personal data collected through the bajii Platform. As data controller, bajii determines the purposes and means of processing personal data in accordance with applicable data protection laws and the requirements of its international gaming licence.

Where bajii engages third-party service providers — such as payment processors, KYC verification vendors, game studios, and technology infrastructure providers — those parties act as data processors under bajii's instruction and are bound by contractual obligations that meet applicable data protection standards. bajii remains responsible for ensuring that any third-party processors engaged maintain appropriate data protection safeguards.

3. Data We Collect

bajii collects personal data from you directly when you register, use the Platform, or contact support, and automatically through your device and browser when you access bajii.lat. The categories of data bajii may collect are set out in the table below:

bajii does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where specifically required by applicable anti-money laundering regulations or responsible gaming obligations.

4. How We Use Your Data

bajii uses the personal data it collects for the following purposes:

• Account Registration and Management: To create, verify, and maintain your bajii player account, process login authentication, and manage account settings and preferences.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other supported payment methods; to detect and prevent payment fraud; and to comply with financial transaction reporting requirements.
• Identity Verification (KYC/AML): To verify your identity and age in compliance with bajii's anti-money laundering, counter-terrorist financing, and responsible gaming obligations. bajii is required to carry out this verification by its international gaming licence conditions.
• Gaming Services: To provide access to the bajii sportsbook, casino games, live dealer tables, and other platform features; to calculate and record betting outcomes; and to administer bonuses and promotional offers.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance and training purposes.
• Platform Improvement: To analyse how players use the bajii Platform, identify technical issues, and improve the overall performance, design, and functionality of bajii.lat.
• Marketing Communications: To send promotional emails, SMS messages, or in-platform notifications about bajii offers, new games, and PSL and cricket betting promotions — where you have provided consent or where bajii has a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, to apply responsible gaming tools you have configured on your account, and to fulfil bajii's duty-of-care obligations.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, licensing conditions, court orders, and requests from competent regulatory or law enforcement authorities.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct on the bajii Platform.

5. Legal Basis for Processing

bajii processes personal data on the following legal grounds depending on the specific processing activity:

• Contractual Necessity: Processing required to deliver the services described in bajii's Terms and Conditions to you as a registered player — including account management, payment processing, and gaming services.
• Legal Obligation: Processing required to comply with anti-money laundering laws, KYC requirements, licensing conditions, and any other applicable legal or regulatory obligations.
• Legitimate Interest: Processing carried out for bajii's legitimate business interests — including fraud prevention, platform security, customer support quality assurance, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including marketing communications where applicable. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Third-Party Sharing

bajii does not sell your personal data. bajii may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, and partnered banking institutions — to process deposits and withdrawals and verify payment instrument ownership.
• KYC and Identity Verification Providers: Licensed third-party vendors who process identity documents and perform age and identity verification on bajii's behalf.
• Game Studios and Software Providers: Companies such as Evolution Gaming, Pragmatic Play, and other certified game studios — whose platforms deliver casino and live dealer content through bajii's interface. These studios receive only the technical session data required to operate their games.
• Technology and Hosting Providers: Cloud infrastructure, cybersecurity, and platform technology vendors who host and support bajii's technical operations under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: bajii will disclose personal data to competent authorities where required by law, court order, or as part of bajii's anti-money laundering and counter-terrorist financing obligations.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by bajii — subject to professional confidentiality obligations.

All third-party processors engaged by bajii are required to maintain appropriate technical and organisational security measures and to process personal data only as instructed by bajii and permitted under this Policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit bajii.lat. bajii uses cookies and similar technologies (including local storage and session tokens) to maintain your login session, remember your platform preferences, and understand how players interact with the Platform.

7.2 Types of Cookies bajii Uses.

• Essential Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing Platform access.
• Functional Cookies: Enable bajii to remember your language preferences, game display settings, and other personalisation choices across sessions.
• Analytics Cookies: Allow bajii to understand aggregate usage patterns — which pages are visited, how long sessions last, and which features are used most. Analytics data is processed in aggregate and does not identify individual players.

7.3 Third-Party Cookies. bajii does not deploy third-party behavioural advertising or social media tracking cookies on bajii.lat. Game studio content delivered through bajii's casino interface may set limited technical cookies required for game functionality — these are governed by the respective studio's privacy practices.

7.4 Managing Cookies. You may configure your browser to block or delete cookies at any time. Note that blocking essential cookies will prevent you from accessing your bajii account. bajii's cookie settings allow you to manage non-essential cookie preferences from within your account.

8. Data Security

bajii implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bajii's servers;
• Encryption of sensitive personal data at rest within bajii's database infrastructure;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication for all internal administrative systems accessing player data;
• Regular independent security audits and penetration testing of bajii's platform infrastructure;
• 24/7 intrusion detection and anomaly monitoring systems;
• Formal data breach response procedures aligned with bajii's licensing obligations.

In the event of a personal data breach that poses a risk to affected players, bajii will notify the relevant supervisory authority and affected individuals in accordance with applicable legal requirements and timelines.

9. Data Retention

bajii retains personal data for the period necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active bajii account relationship plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 7 years following the date of each transaction, as required by applicable financial record-keeping regulations.
• KYC verification documents: Retained for a minimum of 5 years following the end of the account relationship or completion of the transaction to which they relate.
• Customer support communications: Retained for a minimum of 3 years following the closure of each support case, for quality assurance and dispute resolution purposes.
• Marketing preferences and consent records: Retained for the duration of the account relationship and for 2 years following withdrawal of consent or account closure.

Once the applicable retention period expires, bajii securely deletes or permanently anonymises personal data in accordance with its internal data disposal procedures.

10. Your Rights

As a bajii player, you hold the following rights in relation to your personal data. bajii will respond to all valid rights requests within 30 days:

To exercise any of the above rights, please contact bajii's support team via live chat or by email at support at bajii.lat. bajii may need to verify your identity before processing certain requests. Some rights requests may be subject to limitations where bajii has overriding legal obligations — for example, bajii cannot delete financial transaction records within mandatory AML retention periods.

11. Children's Privacy

bajii's Platform is strictly restricted to individuals aged 21 years and above. bajii does not knowingly collect personal data from individuals under 21 years of age. If bajii becomes aware that a player account has been created by or on behalf of an individual under the eligible age, that account will be immediately closed, all associated data will be deleted to the extent permitted by law, and any funds held will be returned to the source payment method.

If you believe that a minor has accessed bajii's Platform, please notify bajii immediately via live chat so that appropriate action can be taken.

12. International Data Transfers

bajii's operations involve the storage and processing of personal data on servers located in multiple jurisdictions. Where personal data is transferred outside of Pakistan, bajii ensures that such transfers are subject to appropriate safeguards — including contractual data protection clauses that meet internationally recognised standards — to ensure that your data receives a level of protection consistent with this Policy.

Third-party service providers engaged by bajii who process data internationally — such as cloud infrastructure providers and KYC vendors — are required to maintain equivalent data protection standards as a condition of their engagement with bajii.

13. Responsible Gaming & Data

bajii uses gaming activity data — including bet frequency, session duration, deposit patterns, and game selection — to power its responsible gaming monitoring systems. This includes automated alerts when activity patterns suggest elevated problem gambling risk, and the application of any self-imposed limits or restrictions you configure on your bajii account.

Responsible gaming-related data is treated with the highest level of sensitivity within bajii's systems. It is not shared with third parties for commercial purposes and is used exclusively for player welfare, regulatory compliance, and bajii's internal duty-of-care obligations. Players seeking help with gambling-related concerns can access self-exclusion tools and additional resources via bajii's Responsible Gaming page.

14. Changes to This Privacy Policy

bajii reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable laws, regulatory requirements, platform operations, or data processing practices. Material changes to this Policy will be communicated to registered players via their registered contact details or via a prominent notice on the bajii Platform, with a minimum of 14 days' notice before the revised Policy takes effect.

The version number and effective date shown at the top of this document will be updated each time this Policy is revised. Your continued use of the bajii Platform following any change to this Policy constitutes your acknowledgement of the updated version. If you object to any change, you should cease using the Platform and request account closure before the revised Policy takes effect.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bajii's handling of your personal data, please contact bajii through the following channels:

• Live Chat: Available 24/7 directly on the bajii Platform — the fastest route for all privacy enquiries and data subject requests.
• Email: support at bajii.lat — for formal written privacy requests, data subject access requests, and complaints.

When submitting a data subject rights request by email, please include your registered bajii mobile number and a brief description of your request so that bajii can verify your identity and process your request efficiently.