Baji Baji Privacy Policy – How We Handle Your Personal Information

This Privacy Policy applies to bajibaji.wine and all services provided by Baji Baji ("we", "us", "Platform"). It explains how Baji Baji collects, uses, stores and protects the personal information of every player and visitor who uses our website. It also explains the rights you have regarding your own data and how you can exercise them.

Baji Baji is committed to treating privacy seriously. We collect only the personal information we genuinely need to operate a safe and compliant platform, keep it secure, and do not use it for anything outside the purposes described in this Policy. By registering an account or using the Baji Baji website, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Baji Baji collects personal information in three main ways: information you provide directly during registration and account management, information generated automatically through your use of the Platform, and information received from third-party service providers such as payment processors.

Information You Provide Directly

• Full name as it appears on your identity document
• Date of birth (for age verification — players must be 18 or older)
• Mobile phone number and email address
• Residential address
• CNIC number or other identity document details when requested for KYC verification
• Payment method details — mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, or card details processed securely through our payment gateway
• Any information you provide to our support team during a query or complaint

Information Collected Automatically

• IP address and approximate geographic location
• Device type, operating system and browser version
• Pages visited, time spent on each page and navigation path through the website
• Betting and gaming activity — bets placed, games played, deposit and withdrawal history
• Login timestamps and session duration
• Cookies and similar tracking technologies — described in detail in Section 7

Information from Third Parties

• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay and banking partners
• Identity verification results from third-party KYC service providers where applicable
• Fraud detection signals from our payment processor security systems

Every piece of information Baji Baji collects has a specific, documented purpose. We do not collect data speculatively or store more than we need. The table below summarises the primary uses of your personal data on the Platform.

Baji Baji will never use your personal data to make automated decisions that have a significant legal or financial effect on you without providing a mechanism for human review upon request.

Baji Baji does not sell your personal data to any third party under any circumstances. We share data only with organisations that have a legitimate operational need to receive it in order to provide the services you use on the Platform. Every third party that receives data from Baji Baji is contractually bound to process it only for the stated purpose and to maintain appropriate security standards.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card payment gateway providers — receive transaction data necessary to process deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify identity documents — receive CNIC and identity data for the specific purpose of age and identity verification only.
• Fraud detection and security services: Receive technical data such as IP addresses and device fingerprints to identify suspicious activity and protect the Platform and its players.
• Game content providers: Some casino and esports game providers may receive a pseudonymous player identifier and game session data to deliver and audit game outcomes. No personally identifiable data beyond a session token is shared.
• Regulatory and law enforcement authorities: Where Baji Baji is legally required to disclose information — for example, in response to a lawful request from a regulatory body — we will comply. We will notify affected players of such disclosures where legally permitted to do so.

Baji Baji stores personal data on secure servers with access controls, encryption at rest and strict access permission management. Only authorised staff members whose role requires access to specific categories of personal data can view that data. Access logs are maintained and reviewed regularly for anomalies.

All data transmitted between your device and Baji Baji servers is encrypted using Transport Layer Security (TLS/SSL). This means that data intercepted in transit cannot be read by any third party. You can confirm the secure connection by checking for the padlock icon in your browser's address bar when visiting bajibaji.wine.

• Passwords are stored as salted cryptographic hashes — not in readable form. Baji Baji support staff cannot read your password.
• Payment card details are never stored by Baji Baji — they go directly through our gateway partner's PCI-DSS certified infrastructure.
• Identity documents submitted for KYC are stored in an encrypted document vault with access limited to compliance staff only.
• Regular security audits and penetration testing are conducted on the Baji Baji platform.
• In the event of a data breach that affects your personal data, Baji Baji will notify you via your registered email address as soon as practically possible.

Baji Baji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory retention obligations that require us to keep records for a defined period. The general retention periods applied by Baji Baji are described below.

• Active account data: Retained for the duration of your account being open and active on the Platform.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction to comply with financial record-keeping requirements. This applies even after account closure.
• Identity and KYC documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for up to three years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, and for one year thereafter as evidence of the consent record.
• Technical and usage logs: Retained for up to 12 months in active storage, then anonymised for aggregated analytics purposes.

When data reaches the end of its retention period, it is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual.

Baji Baji uses cookies — small text files stored on your device — and similar technologies to make the Platform work correctly, keep your session active when you are logged in, remember your preferences and analyse how the site is used so we can continue to improve it.

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in as you navigate between pages. You cannot disable these without breaking the site.
• Functional cookies: Remember your language preference, preferred stake size and similar settings to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how users navigate the site. This helps Baji Baji understand which pages are most useful and identify areas for improvement. No personally identifiable information is included in this data.
• Security cookies: Used to detect suspicious activity, prevent fraud and protect account security.

Baji Baji does not use advertising or retargeting cookies. No third-party advertising networks place cookies on bajibaji.wine. You can manage cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the Platform.

Baji Baji sends promotional emails and SMS messages to players who have explicitly opted in to receive them. These communications include information about new promotions, bonus offers, new game releases and platform updates. You are never automatically enrolled in marketing communications — consent is always requested explicitly during registration or through your account settings.

You can withdraw your consent to receive marketing communications at any time. To unsubscribe from email marketing, use the unsubscribe link included in every marketing email. To opt out of SMS messages, reply STOP to any marketing text. To manage all marketing preferences, log in to your Baji Baji account and visit the Communications section in your account settings. Changes take effect within 48 hours.

Baji Baji respects your rights over your personal information. Below is a plain-language description of each right and how to exercise it. To make a request, contact our support team at support@bajibaji.wine with the subject line "Data Rights Request" and describe what you are asking for. We will respond within 30 days.

Baji Baji may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or platform developments. When we make material changes, we will post the updated Policy on this page and update the "Last Updated" date at the top. For significant changes, we will also send a notification to your registered email address.

Your continued use of the Baji Baji Platform after a Privacy Policy update constitutes acceptance of the revised Policy. We encourage you to review this page periodically. If you have questions about any change, please contact our support team before continuing to use the Platform.

If you have any questions about how Baji Baji handles your personal data, want to exercise any of your data rights, or have a concern about a privacy matter, please get in touch. Our Data Protection contact is reachable through our general support channel — please mark privacy-related messages clearly.

• Email: support@bajibaji.wine — subject line: "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 directly within your Baji Baji account — ask to be connected to the compliance team for privacy-specific matters
• Response Time: We aim to respond to all data rights requests within 30 days. Complex requests may take longer — you will be kept informed.