Baji Online Privacy Policy – How We Protect Your Data

This Privacy Policy applies to the Baji Online platform, accessible via the website at bajionline.app and the Baji Online Android app. It covers how we handle the personal information of all registered players and visitors, with particular attention to the needs and expectations of our Pakistani user base.

By creating an account on Baji Online — whether to play Live Casino games, Slot Games, Bingo, or to place bets on Cricket and other sports — you agree to the data practices described in this policy. This document should be read alongside our Terms and Conditions and Responsible Gaming guidelines.

We take our responsibility to your personal data seriously. The principles guiding our approach are straightforward: collect only what we need, use it only for stated purposes, store it securely, and never sell it. If our practices ever change in a way that affects your rights, we will notify you.

Baji Online collects personal information in the following categories. We collect only what is genuinely necessary to provide a secure, functional gaming experience.

We do not collect sensitive personal data beyond what is required for identity verification. We do not collect biometric data, medical information, or political opinions. Where identity documents such as a CNIC are requested, they are used solely for age and identity verification purposes.

Every piece of data collected by Baji Online is used for a specific, defined purpose. We do not use your data for anything that is not listed here without first seeking your consent.

• Account management: To create, maintain, and secure your Baji Online account, process logins, and apply your account preferences.
• Identity & age verification: To confirm that you meet the 18+ age requirement and that the identity details provided at registration are accurate.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers, and other supported payment methods.
• Platform delivery: To provide Casino games, Slots, Bingo rooms, and Sports Betting markets, and to ensure they function correctly on your device.
• Customer support: To respond to queries, investigate disputes, and resolve any issues raised through your account portal.
• Promotions & bonuses: To assess eligibility for active promotions, apply bonus credits, and track wagering requirement completion.
• Security & fraud prevention: To detect and investigate suspicious activity, protect against account takeovers, and prevent misuse of the platform.
• Platform improvement: Aggregated, anonymised usage data helps us identify technical issues, improve game performance, and enhance the overall user experience.
• Responsible gaming: To monitor gaming patterns and, where appropriate, flag accounts showing signs of problematic behaviour in line with our Responsible Gaming commitment.

Baji Online takes the security of financial data extremely seriously. All deposits and withdrawals are processed in PKR through trusted payment providers. The financial data involved in a transaction is handled as follows:

• JazzCash & Easypaisa: When you initiate a deposit or withdrawal via JazzCash or Easypaisa, you are redirected to the respective provider's secure interface to complete the transaction. Baji Online receives a transaction reference and confirmation — we do not store your JazzCash or Easypaisa PIN or mobile wallet password.
• Raast & Bank Transfer: For Raast and bank-to-bank transfers, Baji Online stores the bank account name and reference number necessary to process your withdrawal. Full account numbers are encrypted at rest.
• Cards: Card payment processing is handled by our payment gateway partner. Full card details are never stored on Baji Online servers. Only a tokenised reference is retained to facilitate future transactions where applicable.

Your full transaction history — deposits, withdrawals, bonus credits, and bets — is recorded on your account and is accessible to you at any time through your account portal. This record is maintained for financial accountability and to support any dispute you may raise.

Baji Online uses cookies and similar tracking technologies to keep the platform working properly and to understand how players use it. Here is a breakdown of the types of cookies we use and what each one does:

• Essential cookies: These are required for the platform to function. They manage your login session, keep you authenticated between pages, and remember your language and currency preferences. Without these, the platform cannot operate correctly. They cannot be disabled.
• Performance cookies: These collect anonymised information about how pages are used — which games are most visited, how long sessions last, where players encounter errors. This data helps us improve the platform. No personally identifiable information is captured through performance cookies.
• Functional cookies: These remember your preferences — for example, which game category you last browsed, your preferred deposit method, or whether you have previously acknowledged a notification. They improve your experience without identifying you to third parties.
• Analytics cookies: We use aggregated analytics to understand platform-wide trends. This data is anonymised before analysis and is never tied back to an individual account.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform. For non-essential cookies, disabling them may result in a slightly reduced experience but will not prevent you from playing.

Baji Online does not sell your personal data. We share data only in the following limited and specific circumstances:

• Payment providers: JazzCash, Easypaisa, Raast, banks, and card processors receive only the data necessary to complete your specific transaction.
• Identity verification partners: Where third-party verification services are used to confirm identity documents, only the information required for that check is shared, and it is not retained by the verification partner beyond the duration of the check.
• Game studios: Live Casino and Slot Game providers may receive a session token and game-related data to run the game on their certified platform. No personal identity data is passed to game studios.
• Legal obligations: If Baji Online is required by applicable law, a court order, or a financial authority to disclose certain data, we will comply with that requirement. Where legally permitted, we will notify the account holder that a disclosure has been requested.
• Business continuity: In the event of a merger, acquisition, or business restructuring, player data may be transferred to the new entity. Any such transfer will be subject to equivalent privacy protections and players will be notified in advance.

We retain personal data only for as long as it is needed to fulfil the purposes described in this policy, or as required by applicable financial and legal obligations. The general retention principles we follow are:

• Active accounts: All personal and account data is retained for as long as your account remains active and for a reasonable period following your last login or transaction.
• Closed accounts: Following account closure — whether voluntary or due to a breach of our Terms — core account data and transaction records are retained for a minimum period to comply with financial record-keeping standards and to support any outstanding dispute resolution.
• Verification documents: Identity documents submitted for age or identity verification are retained only for the period necessary to complete the verification process, after which they are securely deleted unless retention is required for compliance reasons.
• Support communications: Messages and chat transcripts with the support team are retained for a defined period to support ongoing queries and to train support staff on service quality.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

Baji Online implements a layered approach to data security. The measures we have in place include:

• SSL/TLS encryption: All data in transit between your device and Baji Online servers is encrypted using current SSL/TLS standards. This applies to every page of the website and every action within the app.
• Password hashing: Your account password is never stored in plain text. It is processed through a one-way cryptographic hash function, meaning that even Baji Online staff cannot read your password.
• Encryption at rest: Sensitive data fields — including financial details and identity document references — are encrypted when stored in our databases.
• Access controls: Internal access to player data is restricted on a need-to-know basis. Staff members can only access the specific data necessary to perform their role. All internal access is logged.
• Fraud monitoring: Automated systems monitor platform activity for patterns associated with account takeovers, bonus abuse, and suspicious financial activity. Flagged accounts are reviewed by the security team.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your personal data, Baji Online will notify affected players as quickly as reasonably practicable and will take immediate steps to contain and investigate the incident.

As a registered player on Baji Online, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team through your account portal.

• Right to access: You can request a copy of the personal data Baji Online holds about you. We will respond within a reasonable timeframe and provide the information in a clear, readable format.
• Right to correction: If any of your personal data is inaccurate or out of date, you can request that it be corrected. For most contact details, you can update these directly through your account settings.
• Right to deletion: You can request that your personal data be deleted. We will honour this request where we are not legally required to retain the data. Note that deletion requests may result in your account being closed, as we cannot maintain an account without the core data needed to operate it securely.
• Right to restrict processing: In certain circumstances — for example, while a dispute is being investigated — you can request that we temporarily stop processing your data beyond what is essential to maintain your account.
• Right to data portability: You can request a copy of the data you have provided to Baji Online in a structured, commonly used format, where technically feasible.
• Right to withdraw consent: Where we rely on your consent to process data — for example, for marketing messages — you can withdraw that consent at any time through your account settings. Withdrawal of consent does not affect any processing that took place before the withdrawal.

Baji Online is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If we discover — through age verification checks or any other means — that a registered account belongs to a minor, the account will be closed immediately and any associated personal data will be deleted, except where retention is required for legal or compliance reasons.

Parents and guardians are responsible for ensuring that children and teenagers do not access online gaming platforms. If you believe that a minor has registered on Baji Online, please contact our support team through the account portal immediately so the matter can be investigated and resolved without delay.

Baji Online may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, or updates required by evolving best practice in data protection. When we make changes, the "Last Updated" date at the top of this page will be revised.

For significant changes that materially affect your rights or how we handle your data, we will notify registered players through the platform or via your registered contact details before the changes take effect. Continuing to use the platform after a revised policy has been published constitutes your acceptance of the updated terms.

We encourage you to review this page periodically so you are always aware of the current practices. The version of this policy that was in effect at the time of any data-related dispute is the version that applies to the resolution of that dispute.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please reach out to the Baji Online support team through your account portal.

For general questions about privacy and data, the FAQ page is a good starting point — it covers the most frequently asked questions in straightforward language. For anything not covered there, our support team is available to help and will respond to data-related queries as a priority.