bjbaji Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how bjbaji ("we", "us", "our") collects, uses, stores, shares, and protects personal data belonging to individuals who register for and use the bjbaji platform at bjbaji.cam ("Platform").

By creating a bjbaji Account, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not create or continue to use a bjbaji Account.

This Policy applies to:

• All registered bjbaji players, regardless of which country or city in Pakistan they access the Platform from.
• Prospective players who submit registration enquiries or contact bjbaji support without completing registration.
• Former players whose data bjbaji continues to retain in accordance with its regulatory and legal obligations.

bjbaji is the data controller in respect of all personal data collected and processed through the Platform. As data controller, bjbaji determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

bjbaji operates under an internationally recognised gaming licence. As a licensed gaming operator, bjbaji is subject to data protection obligations imposed by its regulatory framework, including requirements for secure data handling, KYC data retention, and AML record-keeping.

All data protection queries, access requests, and complaints should be directed to bjbaji's designated Data Protection contact. Contact details are provided in Section 15 of this Policy.

bjbaji collects personal data through several channels, including the registration process, account verification, payment transactions, platform activity, customer support interactions, and automated technical processes. The categories of personal data we collect are as follows:

bjbaji uses your personal data for the following purposes:

bjbaji processes your personal data under the following legal bases:

• Contractual Necessity — Processing required to perform our obligations to you under the Terms & Conditions, including account management, bet settlement, and payment processing.
• Legal Obligation — Processing required to comply with bjbaji's regulatory duties under its gaming licence, including KYC, AML, and responsible gaming obligations.
• Legitimate Interests — Processing for fraud detection, security monitoring, platform improvement, and responsible gaming analytics, where such interests are not overridden by your privacy rights.
• Consent — Processing for marketing communications, where separate and specific consent has been obtained and can be withdrawn at any time without affecting your Account.

bjbaji does not sell your personal data. We share your personal data with third parties only in the following circumstances and only to the minimum extent necessary for each stated purpose:

bjbaji operates internationally and some of your personal data may be processed in jurisdictions outside Pakistan in connection with our gaming licence, payment processing infrastructure, or technology hosting. Where such international transfers occur, bjbaji implements appropriate safeguards to ensure that your data receives an equivalent level of protection to that described in this Policy.

These safeguards include contractual data protection clauses with all relevant third-party recipients, selection of service providers who meet internationally recognised data security standards, and regular review of third-party data handling practices.

bjbaji uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and analyse Platform performance. The categories of cookies used are:

• Strictly Necessary Cookies — Required for core Platform functionality including authentication, session management, and security. These cannot be disabled without breaking Platform access.
• Functional Cookies — Remember your language preferences, display settings, and last visited game categories to personalise your bjbaji experience.
• Analytics Cookies — Collect anonymised data about how players navigate the Platform to help bjbaji identify performance issues and improve the user experience, particularly on mobile devices.
• Marketing Cookies — Used only where you have provided specific consent. These help bjbaji measure the effectiveness of its promotions and avoid showing you offers you have already seen.

You can manage non-essential cookie preferences through the bjbaji cookie settings panel, accessible from the Platform. Withdrawing consent for non-essential cookies does not affect your Account functionality.

bjbaji implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bjbaji's servers.
• AES-256 encryption for personal data stored in bjbaji's database infrastructure.
• Two-factor authentication (2FA) available for all player accounts.
• Role-based access controls restricting employee access to player data on a strict need-to-know basis.
• Regular third-party security audits and penetration testing of the Platform.
• Automated monitoring systems detecting unusual account activity and potential data security incidents in real time.

In the event of a personal data breach that poses a risk to your rights and freedoms, bjbaji will notify affected players within 72 hours of becoming aware of the breach, in accordance with its regulatory notification obligations.

bjbaji retains your personal data for the periods required to fulfil the purposes described in this Policy and to meet its legal and regulatory obligations. The primary retention periods that apply are:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a bjbaji player, you have the following rights in respect of your personal data. These rights may be subject to limitations in certain circumstances, including where exercise of a right would conflict with bjbaji's regulatory or legal obligations.

To exercise any of these rights, please contact bjbaji's Data Protection team using the contact details in Section 15. bjbaji will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with prior notification to you.

bjbaji's Platform is strictly for individuals aged 21 years or older. bjbaji does not knowingly collect personal data from persons under the age of 21. If bjbaji becomes aware that personal data has been collected from an individual under 21, it will take immediate steps to close the associated account, return any deposited funds, delete the personal data, and report the incident to the relevant regulatory authority as required.

If you believe that a person under 21 has registered a bjbaji account, please report this immediately by contacting bjbaji support. Parental control software is available for households seeking to restrict access to gaming platforms.

The bjbaji Platform integrates third-party services including game content providers, payment processors, and analytics tools. Each of these third parties operates under its own privacy policy and data handling practices. bjbaji is not responsible for the privacy practices of third-party service providers, though all providers are contractually bound to process data shared by bjbaji in accordance with bjbaji's data protection standards and the purposes described in this Policy.

bjbaji does not include external links to third-party websites within the Platform beyond those necessary for the provision of its services. Where such links exist, following them will take you to services outside bjbaji's control, and this Policy will not apply to data processing carried out by those third-party services.

bjbaji may update this Privacy Policy from time to time to reflect changes in its data processing practices, regulatory requirements, or Platform services. Material changes to this Policy will be communicated to all registered players via the registered email address and/or a prominent Platform notification at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how bjbaji protects your personal data. Continued use of the Platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

For all privacy-related queries, data rights requests, or complaints about how bjbaji handles your personal data, please contact the bjbaji Data Protection team:

• Email: [email protected] — please include "Data Protection" or "Privacy Request" in your subject line.
• Support Hours: 9:00 AM – 1:00 AM (PKT), 7 days a week.
• Headquarters: Karachi, Pakistan.

bjbaji commits to acknowledging all privacy complaints within 48 hours and providing a substantive response within 30 calendar days. If you are not satisfied with bjbaji's response to your complaint, you have the right to escalate the matter to the data protection supervisory authority or gaming regulator under whose jurisdiction bjbaji operates. Details of the applicable authority are available upon request.