Privacy Policy
How baj888 Protects Your Personal Data

1 Introduction

This Privacy Policy describes how baj888 ("we", "us", "our", "Operator") collects, processes, stores, uses and discloses personal information obtained from users ("you", "User", "Player") of the baj888 online betting platform (the "Platform"), accessible at baj888.cam and associated mobile-optimised interfaces.

By registering an Account, depositing funds, placing bets or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein, to the extent such consent is required under applicable data protection law.

This Privacy Policy should be read in conjunction with our Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail in relation to your use of the Platform, while this Privacy Policy shall prevail in relation to data protection matters.

2 Data Controller

The data controller responsible for your personal information is baj888, operating the Platform at baj888.cam. Where this Privacy Policy refers to "we", "us" or "our", it refers to baj888 as the data controller.

For the purposes of data protection law, baj888 determines the purposes and means of processing your personal data. If you have questions about how your data is processed or wish to exercise any of your data protection rights, please contact us using the details provided in Section 14 of this Privacy Policy.

3 Information We Collect

We collect different categories of personal information depending on how you interact with the Platform. The information collected falls into the following categories:

3.1 Information You Provide Directly

3.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, time zone settings.
• Usage Data: Pages visited, features accessed, bets placed (amount, market, outcome), games played, session duration, clickstream data.
• Location Data: Approximate geolocation derived from IP address (not precise GPS location).
• Cookies and Similar Technologies: See Section 10 for full details on cookies, web beacons and other tracking technologies.

3.3 Information from Third Parties

We may receive information about you from third-party service providers, including:

• Payment Processors: Transaction confirmation, payment method verification, fraud risk assessments.
• Identity Verification Providers: Results of automated identity checks, document authenticity verification, watchlist screening.
• Sports Data Providers: Aggregated, anonymised betting pattern data for the purposes of maintaining market integrity (does not identify individual users).

4 How We Use Your Personal Data

baj888 processes your personal information for the following purposes:

• Account Management: To create, maintain and administer your Account; to authenticate your identity when you log in; to process deposits and withdrawals; to communicate with you about your Account status.
• Transaction Processing: To process bets, settle winnings, apply bonus terms, calculate balances and maintain transaction records in PKR and any other currencies offered.
• KYC and AML Compliance: To verify your identity and age; to comply with anti-money-laundering (AML), counter-terrorist-financing (CTF) and other legal obligations; to detect and prevent fraud, collusion and other prohibited activities.
• Customer Support: To respond to your enquiries via live chat, email or other support channels; to troubleshoot technical issues; to investigate and resolve complaints.
• Responsible Gambling: To apply deposit, loss and time limits you have set; to enforce cooling-off periods and self-exclusion; to identify signs of problem gambling and offer appropriate support resources.
• Platform Improvement: To analyse usage patterns and improve the user experience; to develop new features, markets and game offerings; to conduct A/B testing and performance optimisation (using anonymised or aggregated data where possible).
• Marketing (with Consent): To send you promotional offers, bonus notifications and product updates where you have given explicit consent to receive marketing communications. You can withdraw consent at any time.
• Legal Compliance: To comply with applicable laws, regulations, court orders, regulatory requests and other legal processes; to enforce our Terms & Conditions; to protect our rights, property and safety and that of our users.

5 Legal Basis for Processing Your Data

Under applicable data protection law, we must have a lawful basis for processing your personal information. We rely on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) — for example, to operate your Account, process transactions and provide customer support.
• Legal Obligation: Processing is necessary to comply with legal obligations to which we are subject, including KYC/AML verification, age verification, tax reporting and cooperation with law enforcement or regulatory authorities.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and freedoms. Examples include fraud prevention, platform security, data analytics for service improvement and enforcement of our Terms.
• Consent: Where required by law, we process your data based on your explicit consent — for example, for marketing communications or the use of certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6 Data Sharing & Disclosure

baj888 does not sell, rent or lease your personal information to third parties for their own marketing purposes. We share your data only in the following circumstances:

6.1 Service Providers

We engage third-party service providers to perform functions on our behalf, including:

• Payment Processors: To process deposits and withdrawals. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah throughout the Platform are for contextual reference only. baj888 does not represent that these providers support gambling transactions or are affiliated with the Platform. Actual available payment methods are listed in the cashier.
• Identity Verification Services: To conduct automated KYC checks and document verification.
• Cloud Hosting and IT Infrastructure: To store data securely and maintain platform uptime.
• Customer Support Tools: To manage live chat, email ticketing and support workflows.
• Analytics and Performance Monitoring: To track platform performance and user experience metrics (using anonymised data where possible).

All service providers are contractually required to handle your data securely, use it only for the purposes for which it was disclosed, and comply with applicable data protection law.

6.2 Legal Disclosure

We may disclose your personal information where required or permitted by law, including:

• To comply with a court order, subpoena, warrant or other legal process.
• To respond to lawful requests from regulatory authorities, law enforcement agencies or government bodies.
• To protect the rights, property or safety of baj888, our users or the public.
• In connection with the investigation or prevention of fraud, money laundering, collusion or other illegal activity.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Privacy Policy.

7 Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, tax or reporting requirements.

Typical retention periods are as follows:

• Active Accounts: Personal data is retained for the duration of your Account's active status and for a period of time thereafter as required by law (typically 5–7 years after Account closure for financial records and KYC documentation).
• Closed or Self-Excluded Accounts: KYC records, transaction history and responsible gambling data are retained for the minimum period required under applicable AML and gambling regulations.
• Marketing Data: If you withdraw consent to marketing communications, we will stop sending promotional messages but may retain a suppression record to ensure we do not contact you again in future.
• Support Records: Chat transcripts and email correspondence are retained for up to 3 years for quality assurance and dispute resolution purposes.

Once the retention period has expired, personal data will be securely deleted or anonymised such that it can no longer be linked to you as an individual.

8 Data Security Measures

baj888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, damage or disclosure. These measures include:

• Encryption: Data in transit is encrypted using Transport Layer Security (TLS). Sensitive data at rest is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel only on a need-to-know basis. All staff handling personal data are subject to confidentiality obligations.
• Password Security: Your Account password is hashed using strong one-way cryptographic functions. baj888 staff cannot view your plaintext password.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans and penetration testing to identify and remediate potential weaknesses.
• Incident Response: We maintain an incident response plan to detect, respond to and recover from data breaches. In the event of a breach affecting your rights and freedoms, we will notify you and relevant authorities as required by law.

While we take all reasonable steps to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of your login credentials and should notify us immediately if you suspect unauthorised access to your Account.

9 Your Data Protection Rights

Depending on the jurisdiction in which you reside, you may have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data in certain circumstances, subject to our legal retention obligations (e.g., AML records must be retained for a minimum period even after Account closure).
• Right to Restriction of Processing: You may request that we suspend processing of your personal data in certain circumstances, such as while a dispute about accuracy or lawfulness is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format or transmit it directly to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to your request within the timeframe required by applicable law (typically 30 days). We may ask you to verify your identity before processing your request.

10 Cookies & Tracking Technologies

The Platform uses cookies and similar technologies (web beacons, pixels, local storage) to enhance your user experience, analyse usage patterns and deliver personalised content.

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They allow the website to recognise your device and remember information about your visit, such as your language preference, login status and session activity.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as secure login, Account access and payment processing. You cannot opt out of these cookies.
• Performance Cookies: These cookies collect anonymised information about how users interact with the Platform — which pages are visited most often, error messages encountered, loading times. This helps us improve performance and user experience.
• Functional Cookies: These cookies remember your preferences (e.g., language, currency, display settings) to provide a more personalised experience.
• Targeting / Advertising Cookies: These cookies (if used) track your activity across websites to deliver personalised advertising. We will only use targeting cookies with your explicit consent where required by law.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features.

For more information on managing cookies, visit your browser's help documentation or consult resources such as aboutcookies.org or allaboutcookies.org.

11 Children's Privacy

The Platform is intended for adults aged 18 years and above — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal information from anyone under the minimum legal age for gambling.

If we discover that we have inadvertently collected personal data from a person under the legal age, we will delete that information immediately and close the associated Account. No winnings will be paid to underage individuals; deposits will be returned subject to verification and AML procedures.

Parents and guardians are encouraged to monitor their children's online activity and prevent underage access to gambling platforms. If you believe a person under the legal age has registered on baj888, please contact us immediately at the email address provided in Section 14.

12 International Data Transfers

Your personal data may be transferred to, stored and processed in countries outside of Pakistan, including jurisdictions that may not provide the same level of data protection as your home country. Where we transfer data internationally, we ensure appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Ensuring the recipient country has been deemed to provide an adequate level of data protection.
• Binding corporate rules or other recognised transfer mechanisms.

By using the Platform, you acknowledge and consent to the transfer of your data as described above, where such consent is required under applicable law.

13 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last reviewed" date.
• Sending an email notification to the address associated with your Account.
• Displaying an in-platform notification upon your next login.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

14 Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data protection rights, or need to report a data security concern, please contact us using the following details:

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line for Privacy Enquiries: "Privacy Policy Enquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through the Platform (for general enquiries)
• Language: English (Urdu available on request)

When contacting us about a data protection matter, please include your full name, registered email address and Account username (if applicable) to help us locate your records. We will respond to your enquiry within the timeframe required by applicable data protection law.

For questions about our Terms & Conditions, please refer to that document or contact support. For responsible gambling support and self-exclusion requests, please visit our Responsible Gambling page.