bjbaj Privacy
Policy

bjbaj is Pakistan's premier online sports betting and casino platform, accessible at https://bjbaj.pro. For the purposes of this Privacy Policy, bjbaj is the data controller responsible for the personal data of users who access and use its platform.

bjbaj is designed and operated specifically for Pakistani users, with PKR-denominated accounts, native JazzCash and EasyPaisa payment integration, and customer support available around the clock. This Privacy Policy applies to all data processing activities conducted by bjbaj in connection with your use of the platform, whether via desktop browser or mobile device.

If you have any questions about this Privacy Policy or the data bjbaj holds about you, you can reach our dedicated privacy team at [email protected].

bjbaj collects different categories of personal data depending on how you interact with the platform. The categories below describe the types of information we may hold about you:

bjbaj collects personal data through several channels, all of which are disclosed below:

• Direct interactions: Data you provide when registering your bjbaj account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you browse or use the bjbaj platform, including cookies, server logs, and device fingerprinting for fraud prevention purposes.
• Third-party sources: Identity verification agencies, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud prevention services, and publicly available data sources where permitted by applicable law.
• Affiliated services: Where you access bjbaj through an affiliated partner or promotional link, limited referral data may be shared with us by that partner.

bjbaj does not purchase data from third-party marketing databases or data brokers. All personal data collected by bjbaj originates from the sources described above.

bjbaj processes your personal data for a number of clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account management: Creating, maintaining, and securing your bjbaj account, including password reset and account recovery processes.
• Identity verification: Verifying your age (minimum 21 years) and identity in compliance with KYC requirements, using CNIC, passport, or other government-issued documents.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, GrabPay, and cryptocurrency methods.
• Service delivery: Providing access to the bjbaj sportsbook, casino, live dealer games, PSL betting, and all other platform features.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, match-fixing, and unauthorised access.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying self-imposed limits or restrictions you have set.
• Legal compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and international gaming compliance requirements.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional offers relevant to your activity on bjbaj.
• Platform improvement: Analysing aggregated usage data to improve site performance, user experience, and the overall quality of bjbaj services.

bjbaj processes personal data on one or more of the following lawful bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between bjbaj and you — i.e., operating your account, processing bets, and handling payments.
• Legal obligation: Processing required to comply with KYC, AML, CTF, and international gaming regulatory requirements to which bjbaj is subject.
• Legitimate interests: Processing carried out for bjbaj's legitimate business interests — including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.

Where bjbaj relies on consent as a legal basis, withdrawal of that consent will not affect the lawfulness of any processing carried out prior to withdrawal.

bjbaj does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, GrabPay, and cryptocurrency transaction facilitators receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Accredited KYC and AML screening services receive the identity documents and personal details needed to complete verification checks.
• Game providers: Third-party casino and live dealer game studios may receive a pseudonymous player identifier and bet/session data to operate their games within the bjbaj platform.
• Regulatory and law enforcement authorities: bjbaj will disclose personal data where required by law, court order, or lawful request from a government or regulatory authority.
• Technology and infrastructure partners: Cloud hosting, cybersecurity, and analytics providers who process data on bjbaj's behalf under strict data processing agreements that prohibit independent use of your data.
• Fraud prevention networks: Shared industry fraud databases where bjbaj is a participant, to prevent cross-platform bonus abuse, money laundering, and multi-accounting.

Any third party that receives your data from bjbaj is contractually required to maintain its confidentiality and security and to use it only for the specific purpose for which it was disclosed.

bjbaj uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the platform. A cookie is a small text file placed on your device when you visit bjbaj. The types of cookies bjbaj uses are as follows:

• Strictly necessary cookies: Required for core platform functionality — including login session management, security token validation, and payment flow continuity. These cannot be disabled.
• Performance cookies: Collect anonymised data about how users interact with bjbaj (pages visited, time spent, errors encountered) to help us improve the platform. No personally identifiable information is collected via these cookies.
• Functional cookies: Remember your preferences such as language settings, odds display format, and responsible gaming limit configurations.
• Marketing cookies: Used only if you have opted in to receive personalised promotional communications from bjbaj. These cookies help us tailor offers to your betting and gaming preferences.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core bjbaj platform, though some personalisation features may be reduced. For full details on cookies used, refer to bjbaj's Cookie Notice accessible from the platform footer.

bjbaj retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, including legal, accounting, and compliance obligations. The general retention periods applied by bjbaj are as follows:

• Account and identity data: Retained for the duration of your active bjbaj account, plus a minimum of five years after account closure to meet AML and regulatory record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years following the date of the transaction, in line with international financial compliance obligations.
• Responsible gaming data: Self-exclusion records and limit-setting history are retained for the full duration of any restriction period and for five years thereafter.
• Technical and usage data: Typically retained in anonymised or aggregated form for up to two years for platform analytics purposes.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.

Where personal data is no longer required, bjbaj will securely delete or anonymise it in accordance with its internal data disposal policy.

bjbaj implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and bjbaj servers.
• AES-256 encryption for sensitive data stored at rest, including financial and identity information.
• Multi-factor authentication options for bjbaj account access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Strict access controls ensuring that bjbaj staff can only access personal data where there is a legitimate, documented business need.
• 24/7 monitoring of platform infrastructure for suspicious activity and potential data breaches.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bjbaj will notify affected users and relevant regulatory authorities in accordance with applicable law and without undue delay.

As a bjbaj user, you hold a number of rights with respect to the personal data we hold about you. bjbaj is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team at [email protected] with your registered username and a description of your request.

• Right of access: You may request a copy of the personal data bjbaj holds about you at any time.
• Right to rectification: If any personal data held by bjbaj is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bjbaj's legal retention obligations.
• Right to restriction: You may request that bjbaj restricts its processing of your data while a complaint or query is being investigated.
• Right to data portability: You may request that bjbaj provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to bjbaj processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to bjbaj demonstrating compelling grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bjbaj will respond to all valid rights requests within 30 calendar days. In complex cases, this may be extended by a further 60 days, with notification provided to you within the initial 30-day period.

bjbaj's platform is strictly restricted to users who are 21 years of age or older. bjbaj does not knowingly collect or process personal data from individuals under the age of 21 under any circumstances.

All users are required to confirm their age during the registration process. bjbaj actively verifies age using identity documentation (CNIC, passport, or driving licence) as part of its KYC process. Any account found to belong to a person under 21 will be immediately suspended, all funds will be held pending investigation, and personal data associated with that account will be handled in accordance with applicable child protection laws.

If you believe that a person under the age of 21 has registered on bjbaj using false information, please contact us immediately at [email protected]. bjbaj takes underage access extremely seriously and will take swift action upon notification.

The bjbaj platform integrates with a number of third-party services necessary for its operation, including payment gateways, game providers, and analytics tools. Each of these third parties operates under its own privacy policy. bjbaj is not responsible for the privacy practices of third-party services beyond what is governed by the data processing agreements between bjbaj and those parties.

• Payment providers such as JazzCash and EasyPaisa are independent data controllers with respect to data collected directly through their own applications and platforms.
• Casino and live dealer game providers may operate independently certified RNG systems and hold their own data relating to game outcomes and session activity.
• bjbaj does not embed social media tracking pixels or third-party advertising networks on the platform without clear disclosure.

bjbaj recommends that you review the privacy policies of any third-party service you interact with in connection with your use of the bjbaj platform, particularly payment providers you use for deposits and withdrawals.

bjbaj may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, bjbaj will notify registered users via the email address on file or by displaying a prominent notice on the platform prior to the update taking effect.

The effective date at the top of this page will be updated whenever the Privacy Policy is revised. Your continued use of the bjbaj platform following the effective date of any update constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or bjbaj's handling of your personal data, please reach out to our dedicated privacy and compliance team. We are committed to responding promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: bjbaj aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days.
• Language: Queries may be submitted in English. Our support team includes staff familiar with Pakistani-English usage and the local regulatory context.