Baji Games Privacy Policy – How We Protect Your Personal Data

1. Who We Are

Baji Games operates the online gaming platform available at bajigames.app. For the purposes of this Privacy Policy, Baji Games is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used when you register and play on our platform.

This Privacy Policy applies to all users of Baji Games, including players who have registered accounts as well as visitors who browse the platform without registering. It covers all personal data collected through the bajigames.app website and any associated services, including customer support channels and marketing communications.

If you have any questions about how Baji Games handles your data, you can contact our data protection team at any time using the contact details provided in Section 14 of this Policy. We aim to respond to all privacy-related queries within 48 hours.

2. Data We Collect

Baji Games collects the following categories of personal data from and about players:

Identity and Contact Data

• Full legal name as it appears on your Pakistani CNIC
• Date of birth
• Pakistani mobile number (used as your primary account identifier)
• Email address (if provided)
• CNIC number and a copy of your CNIC document (collected during identity verification)
• Residential address in Pakistan

Financial and Transaction Data

• PKR deposit and withdrawal amounts and dates
• Payment method identifiers (e.g., your Easypaisa or JazzCash mobile number, last four digits of a bank card)
• Bank account details used for IBFT transfers (account number, bank name)
• Transaction reference numbers for audit and dispute resolution purposes

Gaming Activity Data

• Games played, bet amounts, outcomes, and session durations
• Bonus offers claimed and wagering progress
• Responsible gaming tool settings you have activated

Technical and Device Data

• IP address at the time of each login
• Device type, operating system, and browser type
• Session timestamps and navigation paths within the platform
• Cookie identifiers (covered separately in Section 8)

3. How We Collect Your Data

Baji Games collects personal data through the following channels:

• Direct registration: When you create a Baji Games account, you provide your name, mobile number, date of birth, and other registration details directly.
• Identity verification: When you submit documents for KYC verification (such as a photograph of your CNIC), this data is collected and processed as part of the verification workflow.
• Payment transactions: Each time you make a PKR deposit or withdrawal, our payment processing partners pass transaction data back to Baji Games for reconciliation and record-keeping.
• Automated technical collection: When you browse and play on Baji Games, our servers automatically log technical data including your IP address, device information, and session activity. This happens for all users, including unregistered visitors.
• Cookies and similar technologies: Baji Games uses cookies and similar tracking technologies as described in Section 8 below.
• Customer support interactions: When you contact Baji Games via live chat, email, or any other support channel, the content of that communication is collected and stored as part of your account record.

4. Why We Use Your Data

Every use of your personal data at Baji Games is based on one of the following legal grounds: performance of our contract with you, compliance with legal obligations, our legitimate interests (where these do not override your rights), or your consent.

The specific purposes for which Baji Games uses your personal data include:

• Account creation and management: Creating and maintaining your Baji Games account, verifying your identity, and ensuring the integrity of your account throughout its lifetime.
• Processing PKR transactions: Executing deposits, processing withdrawals to your Easypaisa, JazzCash, NayaPay, SadaPay, bank, or card, and maintaining accurate financial records.
• Delivering the gaming service: Operating game sessions, calculating results, applying bonuses, and maintaining your gaming history.
• Fraud and money laundering prevention: Monitoring account activity for patterns consistent with fraud, collusion, identity theft, or money laundering, and fulfilling our obligations under applicable anti-money laundering regulations.
• Customer support: Responding to your queries, resolving disputes, and maintaining a record of communications for quality assurance.
• Responsible gaming: Monitoring gaming patterns that may indicate problematic behaviour and facilitating the use of responsible gaming tools where appropriate.
• Platform improvement: Using aggregated, anonymised data to understand how the platform is used and to improve the Baji Games experience for all Pakistani players.
• Marketing communications: Sending you information about Baji Games promotions and offers where you have given consent. You can withdraw this consent at any time.

5. Sharing Your Data

Baji Games shares personal data with third parties only in the following circumstances:

• Payment processors: Your PKR transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and card payment gateways as necessary to process your deposits and withdrawals. Each of these processors operates under their own privacy and security frameworks.
• Game studios and providers: Game studios including Pragmatic Play, Evolution, PG Soft, and Spribe receive anonymised session data as necessary to operate their certified games. These studios do not receive your name, contact details, or CNIC information.
• Identity verification providers: Third-party KYC service providers process your CNIC documents to verify your identity. These providers operate under strict data security agreements with Baji Games and may not use your data for any purpose beyond the specific verification task.
• Regulatory and legal authorities: Baji Games will disclose personal data to law enforcement, financial intelligence units, or other regulatory authorities when required to do so by applicable law — without any obligation to notify you in advance if prohibited from doing so by the relevant authority.
• IT and infrastructure providers: The technical infrastructure on which Baji Games operates is provided by third-party cloud and hosting providers operating under data processing agreements that require them to protect your data to at least the same standard as this Policy.

6. PKR Payments and Financial Data

Given that all Baji Games transactions are conducted in Pakistani Rupees through local payment methods, it is worth explaining specifically how your financial data is handled.

What Baji Games Stores

When you make a deposit or withdrawal, Baji Games stores the transaction amount in PKR, the date and time, the payment method category (e.g., "Easypaisa" or "Bank IBFT"), a partial identifier for the payment method (e.g., the last four digits of a bank card or the first and last three digits of a mobile wallet number), and the transaction reference number. This information is stored for financial record-keeping, dispute resolution, and anti-money laundering compliance purposes.

What Baji Games Does Not Store

Baji Games does not store your full Easypaisa or JazzCash PIN, your mobile wallet password, your full bank account number (only a partial identifier is retained), your full card number (only the last four digits are stored), or your card CVV under any circumstances. Card transactions are processed through PCI-DSS Level 1 compliant gateways that handle the full card details entirely outside of Baji Games' own infrastructure.

Transaction History

Your full PKR transaction history is visible to you in your Baji Games account at any time. If you believe a transaction has been incorrectly recorded, contact our support team and we will investigate and correct any errors promptly.

7. Data Retention

Baji Games retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

When your data is no longer required, it is either securely deleted from Baji Games systems or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained for longer periods for statistical analysis and platform improvement purposes.

8. Cookies and Tracking Technologies

Baji Games uses cookies and similar technologies when you visit and use our platform. Cookies are small data files stored on your device that help us recognise you, remember your preferences, keep your session active while you play, and understand how the platform is being used.

Types of Cookies Baji Games Uses

• Essential cookies: Required for the platform to function. These include session cookies that maintain your login state while you are playing, security cookies that help detect suspicious activity, and cookies that remember your language or display preferences. You cannot opt out of essential cookies without stopping use of the platform entirely.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymised. Analytics cookies can be declined via the cookie preference centre accessible from the cookie notice that appears on your first visit.
• Marketing cookies: Used only where you have given explicit consent to receive personalised communications from Baji Games. These cookies help us understand which promotions are most relevant to you based on your platform activity. You can withdraw consent for marketing cookies at any time via the cookie preference centre or by contacting support.

Most web browsers allow you to manage cookie settings through the browser's privacy or security settings. Blocking all cookies may affect the functionality of Baji Games — some features, including the login session and game loading, require cookies to work correctly.

9. How We Protect Your Data

Baji Games has implemented a layered security architecture designed to protect your personal data from unauthorised access, accidental loss, alteration, and disclosure. The key security measures in place include:

• Encryption in transit: All data transmitted between your device and Baji Games is encrypted using TLS 1.2 or higher. The padlock in your browser address bar confirms this encryption is active during your session.
• Encryption at rest: Personal data stored in Baji Games databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within the Baji Games organisation is restricted to staff members who have a specific operational need for that data. Access rights are reviewed regularly and revoked promptly when no longer needed.
• Two-factor authentication: Baji Games offers two-factor authentication for all player accounts. We strongly recommend enabling it — it provides a significant additional layer of protection against unauthorised account access.
• Fraud monitoring: Automated systems monitor login and transaction patterns for indicators of unauthorised access, fraud, and money laundering. Suspicious activity triggers a human review and, where warranted, immediate account protection measures.
• Regular security assessments: Baji Games conducts regular security assessments of its platform, including penetration testing and vulnerability scanning, to identify and address security weaknesses proactively.

10. Your Privacy Rights

As a Baji Games player, you have specific rights over the personal data we hold about you. You can exercise any of these rights by contacting our support team. We will respond within 30 days in most cases.