bjbaj Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by bjbaj ("bjbaj", "we", "us", "our") in connection with your use of the bjbaj website located at bjbaj.net and all associated services, games, sportsbook products, and platforms (collectively, the "Platform").

bjbaj is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside the bjbaj Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the Platform.

This Policy does not apply to third-party websites, payment processors, or services that may be linked from within the bjbaj Platform. bjbaj is not responsible for the privacy practices of such third parties.

2. Data Controller

For the purposes of this Policy, bjbaj acts as the data controller in respect of personal data collected from users of the Platform. The data controller is responsible for determining the purposes and means of processing personal data collected via bjbaj.net.

All data-related enquiries, access requests, and complaints should be directed to the bjbaj data team at the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

bjbaj collects the following categories of personal data from registered players and Platform visitors:

3.1 Identity & Account Data:

• Full legal name
• Date of birth
• Pakistani CNIC number or equivalent government-issued identification
• Username and account credentials (password stored in hashed form only)

3.2 Contact Data:

• Email address
• Pakistani mobile phone number (03XX format)
• Residential address (city, province, postal code)

3.3 Financial Data:

• JazzCash account identifiers
• Easypaisa account identifiers
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah) used for withdrawals
• USDT TRC20 wallet addresses
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment methods

3.4 Gaming & Behavioural Data:

• Bet history, game sessions, and wager amounts
• Game preferences and casino lobby navigation patterns
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Session durations and login timestamps

3.5 Technical Data:

• IP address
• Device type, model, and operating system
• Browser type and version
• Geolocation data (country and city level, where available)
• Cookie identifiers and session tokens

3.6 Communications Data:

• Records of correspondence with bjbaj support, including live chat transcripts and email exchanges
• Feedback, dispute submissions, and survey responses

4. How We Collect Your Data

bjbaj collects personal data through the following means:

• Registration: Data you provide directly when creating your bjbaj account, including name, email, mobile number, and date of birth.
• KYC Verification: Identity documents submitted during the verification process, including CNIC images and supporting documentation.
• Deposits & Withdrawals: Financial data provided or generated when you make payments through JazzCash, Easypaisa, bank transfer, or USDT TRC20.
• Platform Usage: Automatically collected technical and behavioural data as you navigate the Platform, place bets, play games, and interact with features.
• Communications: Data contained in messages you send to bjbaj support or feedback channels.
• Cookies & Similar Technologies: Data collected automatically via cookies, web beacons, and similar tracking technologies as described in Section 7.

5. Legal Basis for Processing

bjbaj processes personal data on the following legal grounds:

• Contract performance: Processing necessary to create and manage your account, execute transactions, settle bets, and provide the services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, analytics, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting bjbaj support.

6. How We Use Your Data

bjbaj uses the personal data described in Section 3 for the following purposes:

• Creating, managing, and maintaining your bjbaj account.
• Verifying your identity and age in compliance with KYC and responsible gaming requirements.
• Processing deposits and withdrawals through your selected payment method.
• Settling bets, crediting winnings, and managing bonus entitlements.
• Providing 24/7 customer support and resolving disputes.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities.
• Monitoring gaming behaviour to identify signs of problem gambling and applying responsible gaming interventions where appropriate.
• Complying with applicable legal, regulatory, and licensing obligations.
• Improving the Platform through analysis of aggregated, anonymised usage data.
• Sending account-related communications, including transaction confirmations, security alerts, and policy updates.
• Sending promotional communications where you have consented to receive them.

7. Cookies & Tracking Technologies

bjbaj uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming limit configurations, to improve your experience across sessions.
• Analytics cookies: Collect anonymised and aggregated data about how users interact with the Platform, enabling bjbaj to identify usability improvements. bjbaj uses only first-party analytics tools and does not share raw analytics data with external advertising platforms.
• Security cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of the bjbaj Platform.

You may configure your browser to block or delete cookies. Note that disabling essential cookies will impair your ability to use the Platform, including the bjbaj login function. bjbaj does not use third-party advertising cookies or sell behavioural data to advertisers.

8. Data Sharing & Third Parties

bjbaj does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. bjbaj may share your data with third parties only in the following limited circumstances:

• Payment processors: Financial data is shared with JazzCash, Easypaisa, and banking partners only to the extent necessary to process your transactions.
• Identity verification providers: KYC documentation may be shared with regulated identity verification services for the purpose of confirming your identity and age.
• Technology and hosting providers: bjbaj engages third-party infrastructure and software providers who process data on bjbaj's behalf under contractual data processing agreements. These providers are prohibited from using your data for their own purposes.
• Legal and regulatory authorities: bjbaj will disclose personal data to law enforcement, regulatory bodies, or other government authorities when required to do so by applicable law, court order, or regulatory obligation, including AML reporting requirements.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bjbaj's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

9. International Data Transfers

bjbaj may transfer personal data to servers or third-party processors located outside of Pakistan. Where such transfers occur, bjbaj takes appropriate measures to ensure that your data receives an adequate level of protection, including contractual safeguards with data recipients. By using the bjbaj Platform, you consent to the international transfer of your data as described in this Policy.

10. Data Retention

bjbaj retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. Specific retention periods include:

• Account data: Retained for the duration of your active account and for a minimum of five years following account closure, in compliance with AML and KYC recordkeeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Communications records: Retained for a minimum of two years following the resolution of the relevant interaction.
• Technical and analytics data: Aggregated anonymised analytics data may be retained indefinitely. Individual session-level technical data is retained for up to 12 months.

On expiry of the applicable retention period, bjbaj will securely delete or anonymise your personal data.

11. Data Security

bjbaj implements technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bjbaj Platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Passwords stored exclusively in hashed and salted form — bjbaj staff cannot retrieve plaintext passwords.
• Two-factor authentication available for all player accounts and mandatory for internal administrative access.
• Regular security assessments and penetration testing of Platform infrastructure.
• Strict access controls ensuring that only authorised bjbaj personnel with a legitimate business need can access personal data.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, bjbaj will notify affected users in accordance with applicable legal obligations.

12. Your Rights

As a bjbaj user, you have the following rights in respect of your personal data, subject to applicable law:

• Right of access: You may request a copy of the personal data bjbaj holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to bjbaj's legal obligations to retain certain data under AML and KYC requirements.
• Right to restrict processing: You may request that bjbaj limit the processing of your data in certain circumstances.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format where technically feasible.
• Right to object: You may object to processing of your data based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact bjbaj support as described in Section 15. bjbaj will respond to all valid data requests within 30 days of receipt. bjbaj may require identity verification before processing a data access or erasure request.

13. Children's Privacy

bjbaj does not knowingly collect personal data from individuals under the age of 18. The bjbaj Platform is strictly intended for adult users aged 18 and above. bjbaj employs age verification measures during registration and KYC to prevent underage access.

If bjbaj becomes aware that personal data has been collected from a minor, we will immediately delete that data and close the associated account. If you believe that a minor has registered on bjbaj, please contact us immediately at the details in Section 15.

14. Changes to This Policy

bjbaj reserves the right to update or modify this Privacy Policy at any time. Material changes to this Policy will be communicated to registered users via the email address or phone number on file, or by a prominent notice on the Platform, prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Continued use of the bjbaj Platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may close your account in accordance with the Terms & Conditions.

15. Contact & Data Enquiries

For all privacy-related enquiries, data access requests, erasure requests, or complaints, please contact the bjbaj data team. bjbaj commits to acknowledging all formal data enquiries within 5 business days and providing a substantive response within 30 days.

Contact email: [email protected]

Please include "Privacy Enquiry" in the subject line of your message and provide your registered account identifier so that we can locate your data efficiently.

bjbaj's support team is available 24 hours a day, 7 days a week. For routine account queries, live chat within the Platform is typically faster than email.