Baji365 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to all personal data collected by baji365 through the website baji365.plus, including when you register an account, make a deposit, place a bet, use live chat, contact our support team or interact with any part of the platform. It covers every Pakistani player who uses or has used baji365, regardless of whether you are a current or former account holder.

Baji365 takes the privacy of its players seriously. We understand that Pakistani players are increasingly aware of how their data is handled online, and we believe you deserve a clear, honest explanation of exactly what happens to your personal information when you use baji365. This document is written to be readable — not to bury important information in legal language that most people would skip.

This Policy should be read alongside the baji365 Terms and Conditions, which govern your use of the platform more broadly. By registering at baji365 or using any part of the platform, you confirm that you have read and understood this Privacy Policy.

Baji365 collects personal data in two main ways: information you provide directly to us, and information collected automatically when you use the platform. Here is a full breakdown of both categories.

Information you provide directly

• Registration data: Full name, date of birth, mobile phone number, email address (if provided) and account password. This is the minimum required to create a baji365 account
• Identity verification (KYC) data: CNIC or passport number, copies of government-issued photo ID, selfies with ID where required for enhanced verification, and proof of address documents such as utility bills or bank statements
• Payment information: Your Easypaisa or JazzCash registered mobile number, bank account details for IBFT transfers, or the last four digits of cards used for Visa/Mastercard deposits. Full card numbers are not stored by baji365
• Communications: The content of messages sent to baji365 via live chat or email, including support queries, complaints and feedback
• Responsible gaming data: Any limits, cooling-off periods or self-exclusion requests you set through your account settings at baji365

Information collected automatically

• Device and connection data: IP address, device type, operating system version, browser type and version, screen resolution and mobile carrier information
• Session data: Login times, session duration, pages visited within baji365, games played, bets placed, cash-out actions and navigation patterns
• Transaction history: A complete log of all deposits, withdrawals, bonus claims and bet settlements associated with your account
• Cookies and tracking technologies: Information gathered through cookies, local storage and similar technologies as described in Section 7
• Geolocation data: Approximate location inferred from your IP address, used to detect access from restricted jurisdictions and to apply appropriate responsible gaming measures

Every piece of personal data collected by baji365 is used for a specific, legitimate purpose. We don't collect data speculatively or in ways that don't directly serve you or our operational requirements. Here is a complete explanation of how your information is used at baji365.

• Operating your account: Your registration data allows baji365 to create, manage and secure your account, process your deposits and withdrawals in Pakistani Rupees, apply bonuses, track your betting history and provide you with access to all games on the platform
• Identity verification: KYC documents are used to verify that you are who you say you are, that you meet the 18+ age requirement and that payments are being made from accounts registered in your name — all essential for a responsible gambling platform operating in Pakistan
• Fraud and security monitoring: Device data, IP addresses and session patterns are analysed by baji365's automated security systems to detect unusual account activity, potential account takeover attempts, multi-accounting and other forms of abuse
• Customer support: When you contact baji365 for help, your account history, transaction records and previous communications are used by our support agents to resolve your query quickly and accurately
• Responsible gaming: Baji365 uses your betting and deposit history to identify patterns that may indicate problem gambling. If our responsible gaming systems detect concerning behaviour, we may contact you proactively to offer support tools or information
• Legal and regulatory compliance: Transaction and identity data is retained to comply with anti-money-laundering obligations and to respond to lawful requests from regulatory authorities or law enforcement agencies
• Platform improvements: Aggregated, anonymised usage data is analysed by baji365 to understand how Pakistani players use the platform, which features are most popular and where improvements can be made. This analysis does not involve individually identifiable data
• Marketing communications: If you have opted in to marketing communications at baji365, we may send you information about new promotions, game launches or special offers. You can opt out at any time through your account settings or by contacting support

Baji365 processes your personal data under one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contract performance: Processing your registration data, payment information and betting history is necessary to operate your baji365 account and provide the services you have requested. Without this processing, baji365 cannot function as a platform for you
• Legal obligation: Retaining KYC documents, transaction records and betting history for defined periods is required to comply with applicable anti-money-laundering and know-your-customer obligations. Baji365 cannot waive these obligations at a player's request
• Legitimate interests: Baji365 processes device and session data for fraud prevention, security monitoring and platform analytics — activities that are in the legitimate interests of both baji365 and its players, without overriding individual privacy rights
• Consent: Where baji365 processes your data for optional purposes — such as sending marketing emails about new promotions — this is done only with your explicit consent. You may withdraw consent at any time without affecting the legality of processing that occurred before withdrawal

Baji365 does not sell, rent or trade your personal data to third parties for commercial purposes. Period. However, there are specific circumstances where data is shared with carefully selected partners or authorities as part of running the platform lawfully and securely. Here is a complete and honest list of those circumstances.

• Payment processors: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, baji365 shares the minimum necessary payment data with the relevant payment provider to process the transaction. These providers have their own privacy policies and security obligations
• Game providers: Software providers including Evolution Gaming and Pragmatic Play may receive your player ID and session data to facilitate live casino and slot games. These providers process this data as data processors on behalf of baji365 and are contractually bound to protect it
• Fraud prevention services: Baji365 uses third-party fraud detection tools that may process your IP address, device fingerprint and behavioural data to identify suspicious patterns. These services act as processors under baji365's instruction
• Identity verification services: Where automated ID verification is used during KYC, a specialist verification provider may process images of your identity documents. Document images are not retained by baji365 after verification is complete unless required for audit purposes
• Law enforcement and regulators: Baji365 will disclose personal data to government authorities, regulators or law enforcement agencies where required to do so by law, court order or in response to a lawful regulatory request
• Business transfers: In the event of a merger, acquisition or sale of baji365 as a business, player data may be transferred to the acquiring entity as part of that transaction. You would be notified in advance of any such transfer and given the opportunity to close your account if you did not wish your data to be transferred

Given that baji365 handles real money transactions in Pakistani Rupees, we want to be especially clear about how financial data is handled. The protection of your payment information is one of our highest priorities.

• What baji365 stores: We retain the mobile number associated with your Easypaisa or JazzCash wallet for the purpose of processing withdrawals to the correct account. For card payments, we retain only the last four digits of your card number and the card type — never the full 16-digit number, CVV or expiry date
• What baji365 does not store: Full card numbers, CVV codes, Easypaisa or JazzCash PINs, online banking credentials or any other authentication secrets are never stored on baji365 servers. These are handled entirely by our certified payment processing partners
• Payment security: All payment transactions at baji365 are processed over encrypted connections. Our payment partners use tokenisation to represent your payment credentials — meaning that even internally, a payment is processed against a secure token rather than raw account details
• Source of funds checks: If baji365 requests documentation to verify the source of funds for a deposit, the documents you provide are handled in accordance with this Privacy Policy and retained only for the period required by AML obligations

Baji365 uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Baji365 uses cookies for the following specific purposes:

You can control cookie settings through your browser settings. Disabling required cookies will impair the functionality of baji365 — for example, you may not be able to stay logged in or complete deposits. Disabling optional analytics cookies will not affect your ability to use the platform.

Baji365 retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable legal and regulatory obligations. The specific retention periods are set out in the data table in Section 2. Here are the general principles that govern our retention approach:

• Active accounts: As long as your baji365 account is open and active, we retain all data associated with it. This is necessary to operate your account and provide you with a continuous, consistent service
• After account closure: Following voluntary account closure, baji365 retains your registration data and transaction records for a minimum of 5–7 years depending on data category. This is driven primarily by anti-money-laundering obligations that require financial institutions and gaming platforms to maintain records for defined periods after a customer relationship ends
• Self-excluded accounts: Where you close your account for responsible gaming reasons via self-exclusion, baji365 retains a record of your self-exclusion to ensure you cannot re-register during the exclusion period. This record is kept for the duration of the exclusion plus an additional period to allow for any appeals or disputes
• When retention ends: Once the applicable retention period for a piece of data has expired and there is no ongoing legal obligation or legitimate interest requiring further retention, baji365 will securely delete or anonymise the data

Baji365 implements a layered security approach to protect personal data from unauthorised access, loss, alteration or disclosure. The following technical and organisational measures are in place across our platform and systems.

• Encryption in transit: All data exchanged between your device and baji365 servers travels over TLS 1.2/1.3 encrypted connections. The padlock icon in your browser confirms this protection is active every time you visit baji365
• Encryption at rest: Sensitive personal data stored in baji365's databases is encrypted using AES-256 encryption. This means that even if database files were accessed without authorisation, the data would be unreadable
• Access controls: Access to personal data within baji365's systems is restricted on a strict need-to-know basis. Staff who do not need access to specific data categories to perform their job functions do not have it. Access permissions are reviewed regularly
• Intrusion detection: Baji365's systems are monitored continuously for unusual access patterns, potential intrusion attempts and anomalous data movements. Alerts are investigated promptly by our security team
• Two-factor authentication: Baji365 offers two-factor authentication (2FA) for player accounts. We strongly encourage all Pakistani players to enable 2FA in their account settings. This significantly reduces the risk of unauthorised account access even if your password is compromised
• Employee training: All baji365 staff who handle personal data receive data protection training as part of onboarding and annually thereafter. Handling procedures, access policies and incident response protocols are covered in this training

As a player at baji365, you have a number of rights regarding your personal data. Here is a clear explanation of each right and how to exercise it.

To exercise any of these rights, contact baji365 at support@baji365.plus with your registered mobile number and a description of your request. We will respond within 30 days. We may need to verify your identity before processing certain requests to ensure data is not released to the wrong person.

Baji365 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. The minimum registration age at baji365 is 18, and age verification is part of our standard KYC process. If baji365 discovers that an account has been registered by a person under 18, that account will be immediately closed, all funds will be returned to the payment method used for deposit, and all personal data associated with the account will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered at baji365, please contact us immediately at support@baji365.plus. We take these reports seriously and will act on them promptly.

Baji365 reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in technology, or changes in applicable legal requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered baji365 players by email or in-platform notification at least 7 days before the updated Policy takes effect
• In cases where changes are required urgently for legal or security reasons, updates may take effect immediately with notification provided as soon as practicable

Your continued use of baji365 after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should stop using baji365 and may request account closure with return of your deposited balance.

If you have any questions, concerns or requests relating to this Privacy Policy or the way baji365 handles your personal data, please use the following contact channels:

• Email: support@baji365.plus — for formal privacy requests, data subject access requests and complaints, email is preferred so a written record is maintained
• Live Chat: Available 24/7 through the baji365 website — for general privacy questions that don't require formal documentation, live chat is the fastest option

Baji365 will acknowledge privacy-related contacts within 24 hours and provide a substantive response within 30 days for formal data rights requests. For general privacy queries, we aim to respond within 5 business days. Our support team handles privacy queries in both Urdu and English.