1. Who We Are
Baji operates the online gaming and sports betting platform available at baji-win.net ("the Platform"). For the purposes of this Privacy Policy, Baji is the data controller – meaning we are responsible for deciding how and why your personal data is collected and processed.
This Privacy Policy applies to all users of the Baji platform, including visitors who have not registered an account and registered players who use any of Baji's services including sports betting, live dealer games, card games, Ludo, Teen Patti, and all associated features. It also applies to individuals who interact with Baji via customer support channels.
Baji is committed to protecting the privacy and personal data of every player, particularly those accessing the platform from Pakistan. We understand that Pakistani users may be accessing Baji on mobile connections through shared devices, and our data practices are designed with that context in mind. We collect only what we genuinely need and we hold it only for as long as necessary.
Short version: Baji collects your data to run your account, process your payments, and keep the platform secure. We do not sell your data. We do not share it with advertisers. Everything in this policy is about running a legitimate, secure gaming service.
2. Personal Data We Collect
Baji collects personal data in several categories, depending on how you interact with the platform. Below is a full breakdown of what we collect and why each category is necessary:
| Data Category |
Examples |
Why Collected |
| Identity Data |
Full name, date of birth, CNIC number, nationality |
Account registration, age verification, KYC compliance |
| Contact Data |
Mobile number, email address |
Account verification, OTP delivery, support communications |
| Financial Data |
Easypaisa/JazzCash account numbers, bank account details, transaction history |
Processing deposits and withdrawals, AML compliance |
| Gaming Data |
Bet history, game records, win/loss data, session duration |
Account management, dispute resolution, responsible gaming monitoring |
| Device & Technical Data |
IP address, device type, browser, operating system, time zone |
Platform security, fraud prevention, geolocation verification |
| Usage Data |
Pages visited, features used, session frequency, click patterns |
Platform improvement, personalisation of offers |
| Communications Data |
Support chat transcripts, email correspondence |
Dispute resolution, quality assurance, compliance records |
| Verification Documents |
CNIC copy, passport, selfie for liveness check |
KYC verification, age confirmation, AML obligations |
Baji does not collect sensitive personal data such as religious beliefs, political opinions, biometric data (beyond what is necessary for identity verification), or medical information. If you choose to disclose such information voluntarily in a support communication, it will be used only to resolve the specific query and will not be stored or processed for any other purpose.
3. How We Collect Your Data
Baji collects personal data through three main channels:
- Directly from you: When you register an account, complete identity verification, make a deposit, withdraw funds, contact customer support, or participate in promotions. Everything you type into a Baji form or send to our support team is data you provide directly.
- Automatically through the platform: When you browse baji-win.net, Baji's systems automatically record technical data including your IP address, device information, browser type, and session activity. This happens in the background and is standard practice for all secure online platforms.
- From third-party sources: Baji may receive data from payment processors (such as Easypaisa and JazzCash) confirming transaction completion, from identity verification service providers confirming the validity of your CNIC, and from fraud prevention services that help identify suspicious activity patterns. We only receive data from third parties that is directly relevant to your account and the services you have requested.
Mobile users in Pakistan: If you access Baji via a mobile browser on a Pakistani network, your mobile number may be logged as part of your session data for security purposes. This is used to detect and prevent unauthorised account access, not for marketing.
4. How Baji Uses Your Personal Data
Every piece of data Baji collects serves a specific, documented purpose. We do not collect data speculatively or for purposes we haven't defined. Here is a complete account of how your data is used on the Baji platform:
- Account management: Creating, maintaining, and securing your Baji account. This includes processing your registration, verifying your identity, sending account confirmations, and managing your preferences.
- Payment processing: Handling all PKR deposits and withdrawals through your chosen payment method. Baji shares only the minimum necessary financial data with payment processors to complete transactions.
- Regulatory compliance: Meeting Baji's legal obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) regulations. This includes verifying your age, identity, and source of funds where required.
- Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and multi-accounting. Baji uses automated systems alongside manual review for this purpose.
- Customer support: Responding to your queries, resolving disputes, and investigating complaints. Support communications are stored for a defined period to allow quality review and to protect both you and Baji in the event of a dispute.
- Responsible gaming monitoring: Baji's responsible gaming team uses gaming behaviour data – frequency of play, session length, deposit patterns – to identify players who may benefit from intervention or support. This processing is conducted in your interest, not for commercial gain.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and improve the experience. Individual player data used for this purpose is anonymised before analysis.
- Marketing communications: If you have opted in to receive promotional communications from Baji, we use your contact data to send you information about offers, bonuses, and promotions. You can opt out at any time by contacting support or updating your account preferences.
5. Legal Basis for Processing
Baji processes your personal data on one of four legal bases, depending on the specific processing activity. Understanding this helps you know when and how to exercise your rights (covered in Section 11):
- Contract performance: The majority of Baji's data processing is necessary to fulfil our contract with you – running your account, processing payments, and delivering gaming and betting services. Without this processing, Baji cannot provide the services you have registered for.
- Legal obligation: Some processing is required by law. KYC verification, AML record-keeping, and regulatory reporting fall into this category. Baji cannot waive these obligations even at your request.
- Legitimate interests: Certain processing activities serve Baji's legitimate business interests in a way that does not override your privacy rights. Fraud detection, security monitoring, and platform analytics fall into this category.
- Consent: Where Baji processes data for marketing communications or optional services, we do so on the basis of your consent. You can withdraw consent at any time without affecting any other aspect of your account or Baji's right to process your data on other legal bases.
6. Data Sharing
Baji does not sell, rent, or trade your personal data. We do not share your data with advertisers or data brokers. The only circumstances in which Baji shares your personal data with third parties are:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum financial data necessary to process your deposit or withdrawal. These providers are bound by their own data protection obligations.
- Identity verification providers: Third-party KYC and document verification services receive identity documents you submit during the verification process. These services process data solely to confirm the authenticity of your documents on Baji's behalf.
- Fraud prevention services: Baji shares device and behavioural data with fraud detection providers who help identify patterns associated with account fraud and money laundering. Data shared with these providers is used only for the purpose of protecting Baji's platform and its players.
- Gaming software providers: Game providers may receive anonymised session data necessary to deliver game content. Personal data is not shared with game providers beyond what is technically necessary to serve the game.
- Regulatory authorities: Baji is required by law to disclose certain data to regulatory authorities, law enforcement, and gaming licensing bodies upon valid legal request. We will always seek to verify the legitimacy of such requests before complying.
- Group companies: Baji may share data within its corporate group for internal administrative purposes, subject to the same protections described in this policy.
Important: Baji will never share your data with a third party for that third party's own commercial marketing purposes. If you receive marketing from an organisation claiming to be associated with Baji that you did not sign up for, please report it to us immediately at support@baji-win.net.
7. International Data Transfers
Baji's primary server infrastructure is located in secure data centres with appropriate data protection standards. However, some of Baji's service providers – including certain game providers and fraud prevention services – may process data outside of Pakistan. Where this occurs:
- Baji ensures that adequate contractual protections are in place before any international transfer takes place.
- Data transferred internationally is protected by standard contractual clauses or equivalent safeguards that require the recipient to protect your data to a standard equivalent to or higher than applicable law in Pakistan.
- Baji does not transfer your data to jurisdictions that do not provide adequate data protection safeguards without first implementing appropriate technical and contractual measures.
If you would like more information about the specific safeguards applied to any international transfer of your data, please contact us at support@baji-win.net.
8. Data Retention
Baji retains personal data for as long as is necessary to fulfil the purpose for which it was collected or as required by law. Our default retention periods are:
- Account data and transaction records: Retained for a minimum of five years from account closure to meet AML regulatory requirements.
- Gaming history: Retained for a minimum of three years from the date of each session, to allow for dispute resolution and regulatory review if needed.
- Identity verification documents: Retained for five years from account closure or the completion of the verification process, whichever is later.
- Customer support communications: Retained for two years from the date of the last communication in each support thread.
- Marketing preferences and opt-in records: Retained for as long as your account is active plus one year after closure.
- Technical and device data: Retained for up to 12 months for security monitoring purposes, after which it is aggregated or deleted.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.
9. How Baji Secures Your Data
Baji takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, or disclosure:
- Encryption in transit: All data transmitted between your device and Baji's servers is encrypted using TLS (Transport Layer Security). You will see the padlock icon in your browser when connected to baji-win.net.
- Encryption at rest: Sensitive data – including payment details and identity documents – is encrypted when stored on Baji's servers using industry-standard AES-256 encryption.
- Access controls: Access to personal data within Baji is restricted to staff who have a legitimate need to see it. All access is logged and audited.
- Two-factor authentication: Baji strongly recommends enabling two-factor authentication (2FA) on your account. This adds a second layer of security beyond your password.
- Regular security audits: Baji's platform undergoes regular security assessments by independent specialists to identify and remediate potential vulnerabilities.
- Incident response: Baji has a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected players and relevant authorities without undue delay.
While Baji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You can reduce your personal risk by using a strong, unique password for your Baji account and enabling 2FA.
10. Cookies & Tracking Technologies
Baji uses cookies and similar tracking technologies on baji-win.net to make the platform work correctly and to improve the experience. A cookie is a small text file placed on your device when you visit a website. Here is how Baji uses them:
| Cookie Type |
Purpose |
Can You Opt Out? |
| Essential |
Keeping you logged in, maintaining your bet slip, remembering your language setting. Without these, the platform cannot function. |
No – these are required for the service to work. |
| Security |
Detecting fraudulent login attempts, verifying that requests come from legitimate sessions, and supporting two-factor authentication. |
No – removing these would reduce account security. |
| Analytics |
Understanding how players navigate the platform so that Baji can improve the user experience. Data is aggregated and anonymised. |
Yes – contact support to opt out of analytics cookies. |
| Preference |
Remembering your preferred games, deposit method, and display settings so you don't have to reconfigure them each visit. |
Yes – clearing browser cookies will remove these. |
Baji does not use third-party advertising cookies or allow ad networks to place cookies on baji-win.net. You can manage cookies in your browser settings at any time, though disabling essential cookies will affect your ability to use the platform.
11. Your Privacy Rights
As a Baji player, you have clear rights regarding your personal data. These are not just legal obligations on our part – they are practical tools you can use to stay in control of your information. Here is what you can request and how:
