bajiapp Privacy Policy

bajiapp ("the Platform," "we," "us," "our") is committed to protecting the privacy and personal data of every individual who accesses or uses bajiapp at bajiapp.im. This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we use it, how we store and protect it, and the rights you have in relation to your data.

This Policy applies to all users of the bajiapp platform, including registered account holders, visitors browsing the site, and individuals who contact our customer support team. By accessing bajiapp and creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

We periodically review and update this Policy to reflect changes in our practices, technology, legal requirements, and operational circumstances. The most current version of this Policy is always accessible at bajiapp.im/privacy-policy, and the "Last Revised" date at the top of this document indicates when the most recent update was made.

bajiapp collects personal data from users through various channels, including the account registration process, payment transactions, customer support interactions, and automated data collection through the platform itself. The categories of data we collect include:

2.1 Identity and Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification — users must be 21 years or older)
• Registered mobile number (Pakistani 03XX format or international)
• Email address
• Account username and password (stored in encrypted form)
• Country of residence and, where required, full residential address

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (CNIC, passport, or driving licence)
• Proof of address documentation
• Selfie or live verification image, where required by our KYC procedures
• Payment method verification documentation

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (JazzCash number, EasyPaisa number, bank account reference, SadaPay ID, USDT wallet address)
• Transaction history and account balance records
• Currency denomination (PKR or USDT) and applicable conversion records

2.4 Gaming Activity Data

• Wagers placed, games played, and outcomes
• Session durations, login timestamps, and activity logs
• Bonus usage and wagering requirement completion records
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geolocation derived therefrom
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Cookies and similar tracking technologies (see Section 6)
• Referral source and marketing attribution data where applicable

bajiapp uses the personal data we collect for the following purposes:

1. Account Administration: To create, manage, and maintain your bajiapp account, including verifying your identity and eligibility.
2. Age Verification: To confirm that you meet the minimum age requirement of 21 years before granting access to gaming features.
3. Payment Processing: To process deposits and withdrawals through your selected payment method (JazzCash, EasyPaisa, HBL, UBL, SadaPay, or USDT TRC20) and maintain accurate financial records.
4. Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) regulations.
5. Customer Support: To respond to your queries, complaints, and requests submitted through live chat or email.
6. Responsible Gaming: To monitor gaming behaviour and enforce responsible gaming tools including deposit limits, session controls, and self-exclusion where applicable.
7. Platform Improvement: To analyse aggregated usage data to improve platform performance, game selection, and user experience.
8. Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and violations of our Terms and Conditions.
9. Marketing Communications: To send you promotional offers, bonuses, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out at any time.

bajiapp processes your personal data on the following legal bases in accordance with internationally recognized data protection principles:

• Contractual Necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including AML, KYC, and gaming regulatory obligations.
• Legitimate Interests: Processing conducted for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests do not override your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

bajiapp does not sell your personal data to third parties. We may, however, share your data with the following categories of recipients in specific, limited circumstances:

5.1 Payment Service Providers

We share necessary financial data with payment processors including JazzCash, EasyPaisa, HBL, UBL, SadaPay, and cryptocurrency network operators for the purpose of processing your deposit and withdrawal transactions. These parties are bound by confidentiality obligations and may only use your data for the specific purpose of processing your transaction.

5.2 Identity Verification Partners

To comply with KYC and AML obligations, we may share identity documents and verification data with accredited third-party verification service providers operating under strict data processing agreements.

5.3 Regulatory and Law Enforcement Authorities

bajiapp may disclose personal data to gaming regulators, law enforcement agencies, tax authorities, or other government bodies where we are required to do so by law, court order, or regulatory directive.

5.4 Group Companies and Technology Partners

We may share data within our corporate group and with technology partners who provide essential platform infrastructure, analytics, and security services, all of whom are bound by data processing agreements consistent with this Policy.

bajiapp uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics that help us improve our service. Cookies are small text files stored on your device when you visit bajiapp.im.

The types of cookies we use include:

• Essential Cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in to your bajiapp account. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated data about how users interact with bajiapp, helping us identify areas for improvement. This data is anonymized where possible.
• Preference Cookies: Store your platform preferences such as language settings, game history, and responsible gaming configurations.
• Security Cookies: Help detect and prevent fraudulent activity and unauthorized access attempts on the bajiapp platform.

bajiapp retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations.

Specifically, we retain:

• Account and Identity Data: For the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: For a minimum of five (5) years following each transaction, as required by applicable financial regulations.
• Gaming Activity Logs: For a minimum of three (3) years following the recorded activity, for regulatory compliance and dispute resolution purposes.
• Customer Support Records: For a minimum of two (2) years from the date of each interaction.
• Marketing Consent Records: For as long as you remain opted in, plus a reasonable period following opt-out to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.

bajiapp employs a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive stored data including passwords and payment identifiers
• Two-factor authentication (2FA) available for all user accounts
• Automated intrusion detection and real-time security monitoring
• Regular third-party security audits and penetration testing
• Strict internal access controls — only authorized personnel with a business need may access personal data
• Staff training on data protection and security best practices

bajiapp respects your rights in relation to your personal data. Depending on your jurisdiction and the legal basis for processing, you may have the following rights:

To exercise any of the above rights, please contact the bajiapp support team via live chat or at the email address listed in Section 14. We will respond to your request within thirty (30) calendar days. We may need to verify your identity before fulfilling any data rights request.

The bajiapp platform is strictly intended for adults aged 21 years and above. bajiapp does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is an integral component of the bajiapp registration process, and we take this obligation seriously.

bajiapp operates on an internationally licensed basis. As a result, your personal data may be transferred to, stored in, and processed in countries other than Pakistan. These countries may have data protection laws that differ from those in your jurisdiction.

When transferring personal data internationally, bajiapp ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure that your data receives a level of protection consistent with this Policy and applicable international standards.

The bajiapp platform may reference or indirectly interact with third-party services, including payment processors, game providers, and analytics tools. bajiapp is not responsible for the privacy practices of any third-party service. We encourage users to review the privacy policies of any third-party service they interact with.

All third parties who process personal data on our behalf are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable data protection law.

bajiapp reserves the right to update, modify, or replace this Privacy Policy at any time. When we make material changes, we will update the "Last Revised" date at the top of this page. Where required by applicable law, we will provide prior notice of significant changes through the platform or by email.

Your continued use of the bajiapp platform after any revision to this Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed about how your data is being handled.

If you have any questions, concerns, or requests regarding this Privacy Policy or bajiapp's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the bajiapp platform — the fastest way to reach our team.
• Email: [email protected] — Please include "Privacy Enquiry" in your subject line.
• Response Time: We aim to acknowledge all data-related requests within five (5) business days and provide a substantive response within thirty (30) calendar days.

Support is available aligned with Pakistan Standard Time (PKT, UTC+5). For matters relating to the exercise of your data rights as described in Section 9, please submit your request in writing with sufficient detail to allow us to identify your account and the specific right you wish to exercise.