Baji Privacy Policy – How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how Baji collects, uses, stores, and protects the personal information of users who access or register on the Baji platform at baji.vin. By creating an account or continuing to use the platform, you acknowledge that you have read and understood this Policy.

Baji takes data privacy seriously. We understand that Pakistan users entrust us with sensitive information when they register, deposit funds via JazzCash or Easypaisa, place bets on Cricket or PSL markets, or interact with any part of our platform. This Policy is our commitment to being transparent about how that information is handled at every step.

This Policy applies to all users of the Baji platform, including registered members, visitors who browse without logging in, and any person who contacts our support team. It covers data collected through the website, any mobile app, and all associated services.

2. What Personal Data We Collect

We collect different types of information depending on how you interact with Baji. The main categories are outlined in the table below:

3. How We Use Your Personal Data

Baji uses collected data for the following specific purposes:

• Account Management: To create, verify, and maintain your Baji account, including processing your registration and confirming your identity.
• Transaction Processing: To handle deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods in PKR.
• Platform Personalisation: To remember your preferences, display relevant markets (such as PSL or T20 cricket), and improve your overall experience on the platform.
• Security & Fraud Prevention: To monitor for unusual activity, prevent unauthorised account access, and detect fraudulent or suspicious transactions.
• Legal Compliance: To meet anti-money laundering (AML) obligations, identity verification requirements, and other applicable legal duties.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance through our support channels.
• Platform Improvement: To analyse usage patterns, fix bugs, and develop new features based on how players interact with Baji.
• Communications: To send you important account updates, security alerts, and — where you have opted in — promotional offers relevant to your activity.

We do not use your personal data for purposes beyond those listed above without obtaining your prior consent or where we are required to do so by law.

4. Cookies & Tracking Technologies

Baji uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve user experience. Here is a breakdown of the types of cookies we use:

• Essential Cookies: These are required for the platform to operate. They manage your login session, remember your language preference, and keep your account secure. You cannot opt out of these.
• Performance Cookies: These help us understand which pages are visited most, how long users stay, and where they encounter issues. This data is aggregated and anonymised.
• Functional Cookies: These remember your settings and preferences across visits, such as your preferred sports markets or display options.
• Analytics Cookies: We use first-party analytics to track platform usage trends and improve our services. We do not use third-party advertising trackers.

You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies may affect the functionality of your Baji account. We do not use cookies to track your activity on websites outside of baji.vin.

5. Data Sharing & Third Parties

Baji does not sell your personal data to any third party. We share data only in the limited circumstances described below, and always with appropriate safeguards in place:

• Payment Processors: When you make a deposit or withdrawal, necessary transaction details are shared with your chosen payment provider (e.g., JazzCash, Easypaisa) to process the payment. These providers have their own privacy obligations.
• Identity Verification Providers: To verify your identity as part of our KYC process, we may share your submitted documents with trusted verification partners. This data is used solely for verification and is not retained by these partners beyond what is required.
• Technology & Hosting Partners: Our platform infrastructure is supported by hosting and cloud service providers. These partners are bound by strict data processing agreements and cannot use your data for their own purposes.
• Legal Authorities: If required by law, court order, or in connection with a regulatory investigation, Baji may disclose relevant user data to the appropriate authorities. We will only do so to the minimum extent required.

Any third party that processes data on Baji's behalf is contractually required to handle that data securely and use it only for the specific purpose for which it was shared.

6. Data Retention

Baji retains your personal data only for as long as it is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and compliance obligations.

• Active account data (name, contact details, transaction history) is retained for the duration of your account and for a period thereafter as required by financial record-keeping standards.
• Identity verification documents are retained for a minimum period as mandated by anti-money laundering regulations. After this period, documents are securely deleted.
• Communication records (support messages, dispute correspondence) are typically retained for up to three years after the last interaction.
• Usage and analytics data is anonymised and aggregated after a defined retention period, so it can no longer be linked to any individual user.

When data is no longer needed, it is securely deleted or anonymised using industry-standard methods. You may request early deletion of your data in certain circumstances — see Section 8 for your rights.

7. How We Secure Your Data

Baji implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse:

• All data in transit is encrypted using TLS (Transport Layer Security). Data at rest in our databases is encrypted using industry-standard algorithms.
• Access to personal data within Baji is restricted to authorised staff only, based on a strict need-to-know principle. All staff with data access undergo regular security training.
• We conduct periodic security reviews and vulnerability assessments of our platform infrastructure to identify and address potential risks.
• Two-factor authentication is available for your Baji account and is strongly recommended to add an extra layer of protection against unauthorised logins.
• Payment data is never stored in full on Baji servers. Card and mobile wallet credentials are tokenised and handled exclusively by our certified payment processing partners.

While we take all reasonable precautions, no online platform can guarantee absolute security. If you suspect any unauthorised activity on your account, please contact our support team immediately so we can take prompt action.

8. Your Privacy Rights

As a Baji user, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of all personal data Baji holds about you. We will respond to verified requests within a reasonable timeframe.
• Right to Correction: If any of your personal information is inaccurate or out of date, you can request that we update it. You can also update basic details directly from your account settings.
• Right to Deletion: In certain circumstances, you may request that we delete your personal data. Note that we may be required to retain some data to comply with legal obligations even after account closure.
• Right to Restrict Processing: You may ask us to limit how we use your data in specific situations, such as while a dispute is being investigated.
• Right to Withdraw Consent: Where your data is processed based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt Out of Marketing: You can unsubscribe from promotional messages at any time by contacting our support team or using the unsubscribe option in any email we send you.

To exercise any of these rights, please reach out to the Baji support team through the contact details available on the platform. We may need to verify your identity before processing your request to ensure your data is not disclosed to the wrong person.

9. Children's Privacy

Baji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on Baji or submitted personal information without your knowledge, please contact our support team immediately. We will investigate and take appropriate action, including deleting the account and all associated data without delay.

We strongly encourage parents and guardians to keep their Baji login credentials private and to use parental controls on shared devices to prevent minors from accessing gaming platforms.

10. Changes to This Privacy Policy

Baji may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date shown at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.

We encourage you to review this Policy periodically so you remain informed about how your data is being handled. Your continued use of the platform after any update constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should stop using Baji and may request account closure by contacting our support team.