At baaji, the privacy and security of our members' personal data is not a compliance box to tick — it is a fundamental obligation we take seriously. This Privacy Policy explains, in clear and honest terms, exactly what personal information baaji collects from you, how we use it, who we share it with, how long we hold it, and what rights you have over your own data. Please read this document carefully before using the baaji Platform.
These principles summarise our approach to your data. The full legal text in the sections below constitutes the binding Privacy Policy.
baaji collects only the personal data that is strictly necessary for account management, payment processing, KYC verification, and regulatory compliance. We do not harvest data we do not need.
Every category of personal data baaji holds is used only for the specific purpose for which it was collected, as described in this Policy. We do not repurpose your data without informing you and obtaining appropriate consent where required.
Personal data at baaji is protected by 256-bit SSL encryption in transit and encrypted storage at rest. Access to personal data within the baaji organisation is restricted to personnel who require it to fulfil their role.
baaji will always tell you what data we hold about you, why we hold it, and who we share it with. We will not make material changes to this Policy without notifying you in advance and in clear language.
Access, correction, deletion, restriction, portability — your data rights under this Policy are genuine and exercisable. baaji has processes in place to respond to rights requests promptly and without obstruction.
baaji does not hold personal data indefinitely. Data is retained only for as long as it is required for the purpose for which it was collected or as required by our international gaming licence obligations — after which it is securely deleted.
In this Privacy Policy, "baaji," "we," "us," and "our" refer to the company that operates the baaji online betting and casino platform accessible at baaji.bio, including its parent company, subsidiaries, and appointed data processing agents. baaji is the data controller in respect of the personal information you provide when registering and using the Platform.
baaji holds an internationally recognised gaming licence that imposes specific obligations on how we collect, process, store, and protect personal data. Our privacy practices are shaped both by the requirements of that licence and by our own internal standards, which in several respects exceed the minimum regulatory requirements.
If you have any questions about this Privacy Policy or about how baaji handles your personal information, the contact details for our data team are provided in Section 16 of this document.
This Privacy Policy applies to all personal data that baaji collects and processes in connection with:
This Policy does not cover personal data processed by third-party Game Providers whose games appear on the baaji Platform. Where a Game Provider independently acts as a data controller for information you provide directly to them, their own privacy policy governs that processing.
baaji collects the following categories of personal data from members and prospective members:
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, photograph (for KYC) | Registration & KYC verification |
| Contact Data | Mobile number, email address, city/province of residence | Registration |
| Financial Data | JazzCash/EasyPaisa mobile number, bank account name (for withdrawal processing) | Deposit & withdrawal |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, game session records | Ongoing platform use |
| Technical Data | IP address, device type, browser type, operating system, session duration | Every platform access |
| Behavioural Data | Pages visited, games played, bet patterns, promotional interactions | Ongoing platform use |
| Communications Data | Content of live chat transcripts, email correspondence with support | Support interactions |
| Responsible Gaming Data | Self-imposed limits, cooling-off requests, self-exclusion status | RG tool use |
baaji does not collect Special Category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where strict regulatory necessity requires it — for example, where a responsible gaming assessment process requires understanding of a member's vulnerability status, with the member's explicit consent.
baaji collects personal data through the following channels:
4.1 Directly from You. The majority of personal data baaji holds is provided directly by members during account registration, KYC submission, payment processing, customer support interactions, and responsible gaming self-assessments.
4.2 Automatically During Platform Use. When you access the baaji Platform, our servers automatically log technical data including your IP address, device identifiers, browser configuration, and session activity. This data is collected via server logs and cookies (see Section 9 for full cookie details).
4.3 From Third Parties. baaji may receive data about you from the following third-party sources:
baaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
Note: Where processing is based on Contractual Necessity or Legal Obligation, you cannot opt out of that processing while remaining a baaji member, as the processing is inseparable from the service baaji provides and baaji's regulatory duties. You may, however, close your account if you do not wish your data to be processed for those purposes.
baaji uses the personal data we collect for the following specific purposes:
baaji does not sell, rent, or trade your personal data to third parties for their own marketing purposes. baaji shares personal data only in the following circumstances and with the following categories of recipient:
7.1 Service Providers. baaji engages third-party companies to provide specific services in support of Platform operations. These service providers act as data processors under written agreements that restrict how they may use your data. Categories of service provider include:
7.2 Game Providers. When you launch a game developed by a third-party Game Provider on the baaji Platform, baaji transmits session data — including your anonymised player ID, stake, and game result — to that provider for the purpose of game delivery, jackpot tracking, and regulatory audit purposes. Game Providers do not receive your name, contact details, or payment information.
7.3 Regulatory Authorities. baaji is required by our gaming licence conditions to share member data with our licensing authority, gaming regulators, financial intelligence units, and law enforcement agencies upon lawful request. baaji will comply with such requests to the extent required by law.
7.4 Legal Requirements. baaji may disclose personal data where required by applicable law, court order, or to protect the rights, property, or safety of baaji, our members, or third parties.
7.5 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of baaji's assets, member personal data may be transferred to the acquiring entity as part of the transaction. Where such a transfer occurs, baaji will notify affected members via the email address registered on their account prior to any data transfer taking effect.
baaji does not share your personal data with advertisers, data brokers, or third-party marketing platforms. Your personal information is not a revenue source for baaji beyond its direct use in delivering and improving the Platform.
baaji's primary data processing infrastructure is located within the jurisdiction of our gaming licence. However, certain service providers engaged by baaji (including cloud computing providers and KYC verification services) may process personal data in jurisdictions outside Pakistan.
Where personal data is transferred internationally, baaji ensures that appropriate safeguards are in place to protect the data to standards equivalent to those required by our licensing authority. These safeguards include:
Where you would like information about the specific safeguards in place for a particular international transfer, please contact baaji's data team at the address provided in Section 16.
The baaji Platform uses cookies and similar tracking technologies to deliver core functionality, remember your preferences, maintain your login session, and analyse Platform usage patterns. Cookies are small text files placed on your device by your browser when you visit a website.
9.1 Types of Cookies Used by baaji:
| Cookie Type | Purpose | Can Be Declined? |
|---|---|---|
| Strictly Necessary | Login session management, security tokens, fraud prevention. The Platform cannot function without these. | No |
| Functional | Language preferences, last-played games, account layout settings. | Yes |
| Analytics | Aggregated, anonymised data on page visits, session duration, and feature use — used solely to improve the baaji Platform. | Yes |
9.2 Managing Cookies. You can manage or delete cookies through your browser settings. Most modern browsers allow you to block or clear cookies entirely or on a per-site basis. Please note that disabling Strictly Necessary cookies will impair or prevent baaji from functioning correctly, including preventing login. For guidance on managing cookies in your specific browser, refer to your browser provider's support documentation.
baaji does not use advertising cookies or third-party tracking pixels that share your browsing behaviour with external advertising networks. The analytics data baaji collects is used only for internal Platform improvement and is not shared with or sold to advertising platforms.
baaji retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by our gaming licence obligations and applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | Gaming licence AML obligation |
| Transaction records (deposits, withdrawals, bets) | 7 years after account closure | Financial record-keeping requirement |
| Customer support communications | 3 years after interaction | Dispute resolution & quality assurance |
| Technical / server log data | 12 months on a rolling basis | Security monitoring & fraud prevention |
| Self-exclusion records | Permanently, or for the duration of the exclusion plus 5 years | Responsible gaming licence obligation |
| Marketing preference records | Until consent is withdrawn, then deleted within 30 days | Consent management |
Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual. baaji operates a data deletion schedule that is reviewed and executed on a quarterly basis.
baaji implements a comprehensive set of technical and organisational security measures to protect the personal data of our members against unauthorised access, loss, disclosure, alteration, or destruction. These measures include:
While baaji takes all reasonable measures to protect your personal data, no security system is completely impenetrable. You are responsible for maintaining the security of your baaji account credentials. Do not share your password with anyone, and contact baaji support immediately if you suspect your account has been accessed by an unauthorised party.
As a baaji member, you have the following rights in respect of the personal data that baaji holds about you. These rights may be subject to certain limitations where baaji has overriding legal obligations — for example, we cannot delete KYC records that we are required to retain under our gaming licence.
You may request a copy of all personal data baaji holds about you — commonly known as a Subject Access Request (SAR).
If any personal data baaji holds about you is inaccurate or incomplete, you may request that we correct it promptly.
You may request deletion of your personal data where we no longer have a legal basis to retain it, subject to our regulatory retention obligations.
You may request that baaji restricts the processing of your personal data in specific circumstances — for example, while a correction request is under review.
You may request a machine-readable copy of your personal data for transfer to another service, where technically feasible and applicable.
You may object to processing based on legitimate interests, including direct marketing. Objections to marketing will be honoured immediately upon receipt.
To exercise any of these rights, please contact baaji's data team using the contact details in Section 16 below. baaji will respond to data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, baaji may extend this period by a further thirty (30) days with prior notice to you.
There is no charge for exercising your data rights. Where a request is manifestly unfounded or excessive — for example, repeated requests for the same data within a short period — baaji may charge a reasonable administrative fee or decline to respond, with reasons provided.
The baaji Platform is strictly intended for adults aged twenty-one (21) years and above. baaji does not knowingly collect or process personal data from individuals under the age of 21. Account registration includes a date-of-birth declaration, and KYC verification requires proof of identity that confirms the member's age.
Where baaji discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, we will suspend the relevant account immediately, delete the minor's personal data from our records to the extent not required for regulatory retention purposes, and return any deposits made to the payment source.
If you believe that a person under 21 has accessed the baaji Platform, please notify us immediately using the contact details in Section 16. baaji takes its obligations regarding the protection of minors from gambling-related harm extremely seriously.
The baaji Platform may contain links to third-party websites — for example, links to responsible gaming support organisations. baaji does not control the content, privacy practices, or data handling of any third-party website. This Privacy Policy does not apply to any third-party website you access through a link on the baaji Platform.
baaji recommends that you read the privacy policy of any third-party website before providing personal information to that site. baaji accepts no responsibility or liability for the privacy practices of third-party websites.
baaji reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to our licensing obligations, or developments in applicable privacy law. Where changes are material — meaning they would significantly affect how we use your personal data — baaji will provide advance notice to active members via the email address registered on their account, and will display a prominent notice on the Platform, before the amended Policy takes effect.
For non-material changes — such as typographical corrections, clarifications that do not affect the substance of the Policy, or changes in contact details — baaji will update this page and revise the version number and effective date accordingly, without separate individual notification.
The date on which this Privacy Policy was last updated and the current version number are displayed prominently in the Hero section at the top of this page. baaji recommends reviewing this Policy periodically, particularly if your use of the Platform changes significantly.
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a complaint about how baaji has handled your personal information, please contact the baaji data team through one of the following channels:
Email: [email protected] (plain text — not a clickable link)
Subject Line: Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line to ensure prompt routing to the correct team.
Response Time: baaji will acknowledge all privacy-related enquiries within five (5) business days of receipt and will provide a substantive response within thirty (30) calendar days.
For general privacy enquiries, baaji's live chat support team is available daily from 9:00 AM to 2:00 AM PKT. For formal data rights requests or written complaints, please use the email channel above to ensure a proper written record is created and maintained.
Complaints Procedure: If you are not satisfied with baaji's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or to the dispute resolution mechanism specified under baaji's gaming licence. baaji will provide information on the applicable escalation route upon request.
Pakistani baaji members have clear and enforceable rights over their personal data. These rights are available to you at any time and can be exercised by contacting support — no legal assistance required.
Request a complete copy of all personal information baaji holds about you in a clear, readable format. Processed within 30 days.
If any information in your baaji account is inaccurate, you may request correction at any time. Many fields are editable directly within account settings.
Request deletion of personal data we are not legally required to retain. Processed promptly with confirmation provided once complete.
Withdraw consent for promotional communications at any time — from account settings or by contacting support. Opt-outs take effect immediately.
Receive a portable, machine-readable copy of your personal data for your own records or transfer to another service.
Object to data processing based on legitimate interests. Your objection will be reviewed and a reasoned response provided within 30 days.
Cricket betting in PKR. 500+ certified casino games. Instant JazzCash deposits. All on a licensed, SSL-secured platform that handles your personal data with the care it deserves. 21+ only. Play responsibly.