Baji Online Privacy Policy

1. Introduction

This Privacy Policy applies to the Baji Online platform operated at bajionline.win. When you visit the website, create an account, make a PKR deposit, place a bet or use any feature of the platform — including sports betting, slots, live casino, crash games, bingo or the VIP programme — you are sharing certain personal data with us. This policy explains what that data is, how it is used and how it is protected.

Baji Online is committed to handling your personal data responsibly. We collect only what we need to operate the platform and provide you with a secure, functional gaming experience. We do not sell your personal data to third parties for marketing purposes, and we do not share it with anyone outside of what is described in this policy.

By registering an account on Baji Online, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not create an account or use the platform. For any privacy-related questions, you can contact our support team at the email address provided at the end of this document.

2. Data We Collect

The personal data we collect falls into several categories depending on how you interact with the platform. Below is a clear breakdown of what we collect and why.

We do not collect data that is not necessary for operating the platform and serving your account. We do not purchase third-party marketing lists or combine your Baji Online data with data from external sources for profiling purposes.

3. How We Use Your Data

Your personal data is used exclusively for the purposes set out below. We do not use your data for any purpose that is not connected to the operation of your Baji Online account and the delivery of platform services.

• Account management: To create and maintain your account, verify your identity, process password resets and manage account settings.
• Processing transactions: To receive PKR deposits, process withdrawal requests and maintain an accurate record of your financial activity on the platform. This applies to all supported methods including JazzCash, Easypaisa, Raast, bank transfers and cards.
• Platform operation: To deliver sports betting, slots, live casino, crash games and bingo services — and to ensure your bet placements, game results and PKR balances are recorded accurately.
• Fraud prevention and security: To detect and prevent unauthorised account access, suspicious transaction patterns, bonus abuse and any activity that may constitute fraud or a breach of our Terms and Conditions.
• Customer support: To respond to your queries, resolve account issues and process any complaints or responsible gaming requests you raise with our support team.
• Responsible gaming compliance: To monitor gaming patterns and apply any self-exclusion, deposit limit or session control settings you have activated through the Responsible Gaming tools.
• Platform improvement: To analyse aggregated, anonymised usage data that helps us identify technical issues, improve the user experience and develop new platform features.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates, security alerts and responses to your support enquiries. Promotional communications are only sent where you have not opted out.

4. Payment Data & PKR Transactions

All financial transactions on Baji Online are processed in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal — whether through JazzCash, Easypaisa, Raast, a bank transfer or a debit/credit card — we collect and process the transaction details necessary to complete that payment.

We do not store full card numbers, CVV codes or complete bank account credentials on our servers. Payment processing is handled via secure payment gateway partners who are bound by their own data protection and security standards. What we retain is a transaction reference, the payment method type, the PKR amount and the timestamp — sufficient to maintain your account ledger and resolve any disputes.

Your payment data is used only to:

• Process your PKR deposits and credit them to your account wallet.
• Process withdrawal requests back to your registered payment method.
• Maintain an accurate transaction history accessible to you through your account dashboard.
• Investigate and resolve any payment discrepancies or disputed transactions.
• Comply with anti-money laundering checks where transaction patterns require review.

Payment data is never used for marketing purposes and is never shared with third parties outside of the payment processing chain required to complete your transaction.

5. Cookies & Tracking

Baji Online uses cookies and similar tracking technologies to make the platform function correctly and to understand how it is being used. A cookie is a small text file placed on your device when you visit the site. Cookies do not contain your personal details such as your name or PKR balance — they contain identifiers that help the platform recognise your session and preferences.

The types of cookies we use are as follows:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference and ensure the betting slip and account wallet operate correctly. The platform cannot function without these.
• Analytics cookies: Used to collect anonymised data about how users navigate the platform — which pages are visited most, where users drop off and how long sessions last. This data is aggregated and not linked back to individual accounts.
• Functional cookies: Remember your preferences such as odds format, notification settings and responsible gaming tool configurations so you do not have to reset them every session.
• Security cookies: Help detect fraudulent login attempts, bot activity and session hijacking by tracking unusual access patterns.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the platform from functioning correctly. Disabling analytics or functional cookies will not affect your ability to use core platform features such as betting, deposits or withdrawals.

6. Sharing Your Data

Baji Online does not sell, rent or trade your personal data. We share data only where it is strictly necessary and only with the categories of recipient described below.

• Payment processors: JazzCash, Easypaisa, Raast, bank transfer partners and card payment gateways receive the minimum data needed to process your PKR transactions. They operate under their own privacy and security policies.
• Game providers: Third-party game providers whose slots, live casino or crash games appear on the platform may receive anonymised session identifiers to deliver game content. They do not receive your name, mobile number or PKR financial data.
• Fraud and security partners: We may share data with security service providers who help us detect bot activity, account takeover attempts and suspicious betting patterns. All such partners are contractually bound to use this data only for the stated security purpose.
• Legal obligations: Where we are required by applicable law, court order or lawful authority to disclose data, we will do so. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or transfer of the platform's assets, your data may be transferred as part of that process. You will be notified in advance of any such change that materially affects how your data is handled.

No third party we work with is permitted to use your personal data for their own marketing purposes or to share it further without our explicit written consent.

7. How We Protect Your Data

We take the security of your personal data seriously. Baji Online implements a range of technical and organisational security measures to protect your data against unauthorised access, alteration, disclosure or destruction.

• Encryption in transit: All data transmitted between your device and the Baji Online platform is protected using TLS (Transport Layer Security) encryption. This applies to login sessions, PKR deposit flows, game sessions and support communications.
• Encrypted password storage: Passwords are never stored in plain text. They are hashed using a strong, industry-standard algorithm. Even our own team cannot read your password — only you know it.
• Access controls: Internal access to user data is restricted on a strict need-to-know basis. Staff members can only access the data relevant to their specific role. All internal access is logged and audited.
• Session security: Inactive sessions are automatically timed out. Suspicious login activity — such as access from a new device or an unusual location — triggers additional verification steps.
• Regular security reviews: Our platform infrastructure undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. If you believe your account has been compromised, contact our support team immediately so we can take protective action.

8. How Long We Keep Your Data

We retain your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable legal obligations. Below is a general guide to our data retention approach.

• Active account data: Retained for as long as your account remains open and active on the platform.
• Transaction records: PKR deposit and withdrawal records, along with associated payment method data, are retained for a minimum of five years from the date of the transaction. This is consistent with standard financial record-keeping requirements.
• Gaming history: Bet records, game history and session data are retained for a minimum of three years from the date of activity.
• Identity verification documents: Where identity documents have been submitted for account verification, these are retained for as long as your account is open and for a minimum of five years following account closure.
• Support communications: Records of support interactions, including live chat transcripts and email correspondence, are retained for up to two years from the date of the interaction.
• Closed accounts: When an account is closed, most personal data is anonymised or deleted within a reasonable period, except for data that must be retained under legal obligations as described above.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9. Your Privacy Rights

As a Baji Online account holder, you have rights over your personal data. These rights can be exercised at any time by contacting our support team with your registered account details for identity verification purposes.

To exercise any of these rights, contact our support team with your registered mobile number and username so we can verify your identity before processing the request. We aim to respond to all privacy rights requests within a reasonable timeframe.

10. No Data from Minors

Baji Online is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their age, and we reserve the right to request identity verification at any time to confirm that an account holder meets the minimum age requirement.

If we discover or have reason to believe that a registered account belongs to someone under 18, we will immediately suspend the account, delete any associated personal data to the extent permitted by law and forfeit any balance held in the account. We strongly encourage parents and guardians to take appropriate steps to prevent underage individuals from accessing online gaming platforms.

11. Changes to This Policy

Baji Online may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable laws or improvements to our data handling practices. When material changes are made — meaning changes that significantly affect how your data is used or your rights over it — we will notify registered account holders through the platform or via your registered contact details before the changes take effect.

The date displayed at the top of this page indicates when the policy was last updated. We encourage you to review this page periodically. Continued use of the platform following any update constitutes your acknowledgement of the revised Privacy Policy. If you disagree with any changes, you should close your account before the revised policy takes effect.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal data has been handled, please get in touch with our support team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available directly within the platform when you are logged into your account.
• FAQ: Visit our FAQ page for answers to the most common questions about accounts, data and privacy settings.

When contacting us about a privacy matter, please include your registered username and mobile number so we can verify your identity before discussing any account-specific data. All privacy enquiries are handled with full confidentiality by our support team.