baaji Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, baaji.club ("baaji", "we", "us", "our") acts as the data controller in respect of personal data collected from players and visitors to the baaji Platform. "Platform" refers to the baaji.club website, mobile-optimised interface, game lobby, sportsbook, live casino, account services, and any other service operated under the baaji brand.

This Policy applies to all personal data collected through your registration, ongoing use of the baaji account, customer support interactions, payment transactions, and any other interaction with the baaji Platform.

2. Data We Collect

2.1 Registration and Identity Data

When you create a baaji Account, we collect the information you provide, including your full legal name, date of birth, email address, residential address, and phone number. This information is collected to create and manage your account, verify your identity, and comply with our Know Your Customer (KYC) obligations under applicable licensing requirements.

2.2 Identity Verification Documents

baaji may collect copies of identity documents including, but not limited to, your Computerised National Identity Card (CNIC), passport, or proof of address documents. These are processed solely for identity verification and anti-money laundering compliance purposes and are stored securely with access limited to authorised personnel only.

2.3 Financial Data

baaji collects transactional data related to deposits and withdrawals, including payment method details (such as JazzCash account references, Easypaisa references, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, or crypto wallet addresses for USDT), transaction amounts, timestamps, and processing outcomes. baaji does not store full payment credentials where these are handled directly by third-party payment processors.

2.4 Usage and Activity Data

We collect data about how you use the baaji Platform, including game sessions, bet history, win/loss records, login timestamps, device type, browser type, operating system, IP address, and referral source. This data is used to operate the Platform correctly, personalise your experience, monitor for fraud, and improve our services.

2.5 Communications Data

When you contact baaji support, submit a complaint, or correspond with us by any channel, we retain records of those communications, including the content and any attachments, for quality assurance, compliance, and dispute resolution purposes.

3. How We Use Your Data

baaji uses the personal data it collects for the following purposes:

• Account creation and management: Setting up, maintaining, and administering your baaji Account, including authentication of your baaji login sessions.
• Identity verification: Meeting KYC obligations required by our operating licence and anti-money laundering frameworks.
• Payment processing: Facilitating deposits and withdrawals via supported Pakistani payment methods and international options.
• Platform operation: Delivering games, sportsbook services, live casino, and all other baaji Platform features to you correctly and consistently.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other prohibited conduct on the baaji Platform.
• Customer support: Responding to your queries, complaints, and service requests efficiently.
• Legal and regulatory compliance: Meeting obligations under our operating licence, responding to regulatory enquiries, and fulfilling legal obligations including disclosure to authorities where required by law.
• Service improvement: Analysing Platform usage patterns to improve features, game selection, performance, and the overall baaji player experience.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling and providing appropriate responsible gaming interventions, in accordance with our obligations and our genuine commitment to player welfare.
• Communications: Sending transactional and service notifications, account alerts, security notices, and where you have consented, promotional communications about baaji offers.

4. Legal Basis for Processing

baaji processes personal data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform the agreement between baaji and you as a registered player, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and licensing obligations.
• Legitimate interests: Processing carried out in baaji's legitimate business interests, including fraud prevention, Platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on consent — such as receiving promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 Service Providers

baaji shares personal data with carefully selected third-party service providers who assist in operating the Platform, including payment processors (JazzCash, Easypaisa, HBL, and others), identity verification providers, game technology providers, cloud hosting services, customer support platforms, and fraud detection systems. These providers are contractually bound to process data only on baaji's instructions and to maintain appropriate security standards.

5.2 Regulatory and Legal Disclosure

baaji will disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. baaji will not notify a player of such disclosure where doing so would be unlawful or would compromise an investigation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of baaji's business, personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via the Platform or registered email address before their data becomes subject to a materially different privacy policy.

6. Cookies and Tracking Technologies

The baaji Platform uses cookies and similar tracking technologies to deliver and improve the service. Categories of cookies used by baaji include:

• Strictly necessary cookies: Required for the Platform to function, including session management, baaji login authentication, and security features. These cannot be disabled.
• Performance cookies: Collect anonymised data about how visitors use the Platform to help baaji identify areas for improvement. No personally identifiable information is collected by these cookies.
• Functional cookies: Remember your preferences — such as language settings and game lobby layout — to personalise your baaji experience.
• Analytics cookies: Help baaji understand aggregated usage patterns and measure the effectiveness of Platform features and promotions.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality. By continuing to use the baaji Platform, you consent to the use of cookies as described in this section.

7. Data Retention

baaji retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Account data is retained for the duration of the player's active relationship with baaji and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to licensed gambling operators.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents are retained in accordance with the applicable KYC retention requirements of our licensing jurisdiction.
• Customer support communications are retained for a period of three (3) years from the date of the final communication, unless a longer period is required for ongoing dispute resolution or regulatory compliance.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with baaji's data disposal procedures.

8. International Data Transfers

baaji operates internationally and may transfer personal data to countries outside your country of residence, including countries that may have different data protection standards. Where such transfers occur, baaji takes appropriate steps to ensure that adequate safeguards are in place, including the use of standard contractual clauses, data processing agreements with service providers, or other lawful transfer mechanisms recognised by the applicable data protection framework.

9. Your Rights

Subject to applicable law and licensing obligations, you have the following rights with respect to your personal data held by baaji:

• Right of access: You may request a copy of the personal data baaji holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request that baaji delete your personal data. This right is subject to overriding legal retention obligations.
• Right to restriction: In certain circumstances, you may request that baaji restrict the processing of your personal data.
• Right to object: Where processing is based on legitimate interests, you may object to that processing. baaji will consider your objection and cease processing unless compelling legitimate grounds exist.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to data portability: Where technically feasible and legally applicable, you may request that baaji provide your data in a structured, machine-readable format.

To exercise any of these rights, please contact baaji's data team at the email address listed in Section 14. baaji will respond to all verified data rights requests within a reasonable period not exceeding 30 calendar days.

10. Children's Privacy

The baaji Platform is strictly for persons aged 18 and over. baaji does not knowingly collect personal data from individuals under 18 years of age. If baaji becomes aware that an account has been created by or on behalf of a minor, it will close that account, delete the associated data to the extent permitted by law, and report the matter to relevant authorities where required. If you have reason to believe a minor has created a baaji Account, please contact our support team immediately.

11. Security Measures

baaji implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the baaji Platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments, vulnerability testing, and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, containing, and notifying affected parties of data security incidents, where required by applicable law.

While baaji takes all reasonable precautions to protect your data, no online system can guarantee absolute security. Players are responsible for maintaining the security of their baaji login credentials and should report any suspected unauthorised access to their Account immediately.

12. Third-Party Links

The baaji Platform may contain links to third-party websites for informational purposes. baaji has no control over the privacy practices or content of these external sites and accepts no responsibility for them. Accessing third-party sites through baaji is at your own risk, and you should review the privacy policies of any third-party site you visit.

13. Changes to This Privacy Policy

baaji reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the baaji Platform, with a minimum of 14 days' notice before the updated Policy takes effect where practicable. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the baaji Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. It is your responsibility to review this Policy periodically.

14. Contact Us

For any queries regarding this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact baaji's support team. Our team is available 24 hours a day, 7 days a week, including Pakistan Standard Time evenings and weekends.