bjbaj Privacy Policy

This Privacy Policy ("Policy") describes how bjbaj ("Platform", "we", "us", "our"), accessible at https://bjbaj.cam, collects, uses, stores, discloses and protects personal data relating to users ("you", "User", "Player") of the Platform.

bjbaj is an internationally operated online gaming and sports betting platform. It is not registered, licensed or authorised by any Pakistani governmental body, including the Pakistan Telecommunication Authority (PTA) or the State Bank of Pakistan. Pakistani users access the Platform at their own risk and remain solely responsible for compliance with applicable local law, including but not limited to the Prevention of Gambling Act, 1977. Nothing in this Policy constitutes legal advice.

By registering an account on bjbaj or otherwise using the Platform, you acknowledge that you have read this Policy in its entirety and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must immediately cease using the Platform and may request account closure by contacting us.

For the purposes of this Policy, the following terms have the meanings set out below:

bjbaj collects personal data in the following categories. We apply a principle of data minimisation — we collect only what is genuinely necessary for the identified processing purpose.

• Full legal name as it appears on your government-issued identification document.
• Date of birth — required to verify that you meet the minimum age requirement of 18 years (or the higher minimum applicable under the operator's licensing jurisdiction).
• Email address — used as your primary account identifier and communication channel.
• Residential address — required for KYC verification and AML compliance purposes.
• CNIC number, passport number or equivalent government-issued ID reference — collected as part of the KYC process for Pakistani users.

• Payment method details sufficient to process deposits and withdrawals, as submitted through the Platform's cashier interface. This may include partial bank card numbers, bank account references or mobile wallet account identifiers.
• Transaction history — records of all deposits, withdrawals, wagers and account adjustments associated with your account.
• Currency display preference — PKR or the default operating currency configured by the operator.

• IP address and approximate geolocation data derived from it.
• Device type, operating system, browser type and version.
• Session timestamps, session duration and pages visited within the Platform.
• Betting and gaming activity — markets accessed, bets placed, games played, wager amounts and outcomes.
• Referral source and UTM parameters where applicable.

• Content of support messages, live chat transcripts and email correspondence submitted to our support team.
• Responsible gambling tool selections, including any self-exclusion requests or deposit limit configurations you apply to your account.

bjbaj collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or configure responsible gambling settings.
• Automatically — through cookies, server log files and tracking technologies when you access and interact with the Platform.
• From third-party service providers — including KYC verification partners, payment processors, fraud detection services and geolocation providers who supply data necessary to verify your identity and process transactions securely.

The table below sets out each principal processing activity, the categories of data involved and the purpose for which that data is processed:

bjbaj processes personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our obligations under the User Agreement — including account management, payment processing and service delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering legislation, licensing conditions, KYC obligations and other regulatory requirements binding on the Platform.
• Legitimate interests: Processing conducted to pursue bjbaj's legitimate operational interests, including fraud prevention, security monitoring, Platform analytics and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for a specific processing activity — such as the use of non-essential cookies or optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bjbaj does not sell, rent or trade your personal data. We may share your data only in the following circumstances, and only to the extent strictly necessary for the identified purpose:

We engage trusted third-party processors to perform specific operational functions on our behalf, including KYC and identity verification providers, payment processing partners, fraud detection services, cloud infrastructure providers and customer support platform operators. All processors operate under contractual data processing agreements that restrict their use of your data to the agreed-upon purpose.

We may disclose personal data to licensing authorities, law enforcement agencies, tax authorities or courts of competent jurisdiction where we are legally required or compelled to do so. We will, where legally permissible, seek to notify you of any such disclosure.

In the event of a merger, acquisition, restructuring or sale of assets involving bjbaj, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

Where a User invokes a self-exclusion request that extends to participation in responsible gambling programmes operated under the Platform's licensing jurisdiction, limited personal data may be shared with the relevant scheme administrator for the purpose of enforcing that exclusion across participating operators.

bjbaj operates internationally and your personal data may be processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction. Where such transfers occur, bjbaj applies appropriate safeguards — such as standard contractual clauses approved by competent data protection authorities — to ensure that your data receives an equivalent level of protection regardless of where it is processed.

Pakistani users should note that Pakistan's personal data protection framework is developing. bjbaj applies its international data protection standards consistently to all users regardless of their country of residence.

bjbaj retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account's active status and for a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC documents: Retained for the duration required by the Platform's applicable licensing framework, typically no less than five (5) years following account closure or the final transaction, whichever is later.
• Support communications: Retained for up to three (3) years from the date of the communication, or longer where a dispute remains unresolved.
• Technical and usage data: Retained in identifiable form for up to twenty-four (24) months from collection; thereafter retained only in anonymised or aggregated form for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

bjbaj uses cookies and similar tracking technologies to support Platform functionality, improve user experience and gather analytical data about Platform performance. The following categories of cookies are in use:

• Essential Cookies: Strictly necessary for the Platform to operate. These include session authentication tokens, security cookies and load-balancing cookies. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Support Platform personalisation features, such as remembering your language preference, display settings and responsible gambling tool configurations between sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — pages visited, session duration, error rates — to inform Platform improvements. These do not identify you personally.

You may control non-essential cookies through your browser's cookie settings. Please note that disabling functional or analytics cookies may affect your user experience. Essential cookies cannot be disabled through browser settings without causing the Platform to malfunction.

Subject to applicable law and the specific processing circumstances, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected].

We will respond to all verifiable data rights requests within a reasonable period, typically thirty (30) calendar days. Complex requests may require up to an additional sixty (60) days, in which case we will notify you of the extended timeline. We reserve the right to verify your identity before processing any rights request. Requests that are manifestly unfounded or repetitive may be declined or subject to a reasonable administrative fee.

bjbaj implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include, without limitation:

• Encryption of personal data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest within secure database environments.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their designated function.
• Regular security audits, vulnerability assessments and penetration testing of Platform infrastructure.
• Incident response procedures governing the detection, reporting and remediation of data security incidents.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bjbaj will notify the relevant supervisory authority (and, where required, you directly) within the timeframes prescribed by applicable data protection law.

bjbaj is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18 (or the higher minimum age required by the operator's licensing jurisdiction). Age verification is a mandatory step in the account registration and KYC process.

If we become aware that personal data has been collected from a minor without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on this Platform, please contact us immediately at [email protected].

bjbaj reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or how we use your personal data — we will provide reasonable prior notice through a Platform notification or email to your registered address before the revised Policy takes effect.

The updated Policy will always be published at https://bjbaj.cam/privacy-policy with a revised "Effective Date". We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of any revised Policy constitutes your acceptance of those revisions.

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how your personal data is being handled, please contact the bjbaj data team using the contact details below. Support is available in English, with Urdu assistance also available upon request.

If you are dissatisfied with our response to a data rights request, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction governing the Platform's operations. Please contact us in the first instance so we have the opportunity to resolve your concern directly.