baj888 Privacy Policy
Your Data, Your Rights

1 Who We Are

baj888 is an internationally licensed online gaming platform accessible at baj888.im. We offer cricket betting, live casino, colour game, slots, and a range of other betting and gaming services primarily to players based in Pakistan. References to "baj888", "we", "us", "our" in this Privacy Policy refer to the operator of the baj888 platform and its duly authorised data processing representatives.

For data privacy matters, baj888 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party processors (such as KYC verification providers, payment gateways, or fraud prevention services), those parties process data on our behalf and under our instruction, in accordance with written data processing agreements.

If you have any questions about this Privacy Policy or the way baj888 processes your personal data, please refer to Section 15 for our contact details.

2 Personal Data We Collect

The categories of personal data baj888 collects from players include, but may not be limited to, the following:

3 How We Collect Your Data

baj888 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or submit a complaint.
• Automatically — through cookies, server logs, and analytics tools when you browse or interact with the baj888 platform. This includes technical data such as your IP address, device identifiers, and session activity.
• From third parties — from KYC verification service providers, fraud detection agencies, payment processors (such as JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK), and, where applicable, from publicly available sanctions and politically exposed persons (PEP) screening databases.

Where we receive data about you from third parties, we take reasonable steps to verify that the third party had a lawful basis for sharing that data with us.

4 Why We Use Your Personal Data

baj888 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your baj888 player account, including authentication and security.
• Identity Verification (KYC): To verify your identity, age (21+), and the source of funds in compliance with our international gaming licence obligations and applicable anti-money-laundering requirements.
• Payment Processing: To process deposits, withdrawals, and refunds via your chosen Pakistani payment method in PKR.
• Regulatory Compliance: To meet our legal and regulatory obligations, including the maintenance of transaction records and the reporting of suspicious activity to relevant authorities where required.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, money laundering, and other prohibited conduct on the platform.
• Customer Support: To respond to your support queries, process complaints, and maintain records of our communications with you.
• Responsible Gaming: To administer deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools that you activate from your account dashboard.
• Service Improvement: To analyse aggregated, anonymised usage data in order to improve our platform features, game offerings, and user experience for Pakistani players.
• Direct Communications: To send you transactional messages (e.g., deposit confirmations, withdrawal notifications, password reset emails) and, where you have provided consent, promotional communications about baj888 bonuses and offers.

5 Legal Basis for Processing

baj888 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to at registration — including account management, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering laws, our international gaming licence conditions, and any lawful orders from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for our legitimate business interests — such as fraud prevention, platform security, and internal analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Where we rely on your consent (for example, to send you promotional communications), you may withdraw that consent at any time by contacting our support team or updating your account communication preferences.

6 Data Sharing & Disclosure

baj888 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• KYC & Identity Verification Providers: Licensed third-party providers who verify identity documents, CNIC details, and age confirmation on our behalf.
• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK — to process your financial transactions in PKR. These providers are subject to their own privacy policies and regulatory obligations.
• Fraud & Risk Management Services: Specialist third-party providers who assist baj888 in detecting suspicious activity, multi-accounting, and money laundering on the platform.
• Regulatory & Law Enforcement Authorities: Where baj888 is legally required to disclose data to a licensing authority, financial intelligence unit, or law enforcement agency, we will do so in accordance with applicable legal requirements.
• Professional Advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations and who require access to data in the performance of their services for baj888.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of baj888's business assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third-party processors engaged by baj888 are required to process your data only in accordance with our written instructions and to implement appropriate technical and organisational security measures.

7 Cookies & Tracking Technologies

baj888 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow baj888 to recognise your browser, maintain your session, and understand how you use our platform.

The types of cookies baj888 uses are as follows:

• Strictly Necessary Cookies: These are essential for the baj888 platform to function correctly — including session authentication, security tokens, and load-balancing. These cookies cannot be disabled without significantly affecting platform functionality.
• Functional Cookies: These remember your preferences (such as your preferred language, odds format, or display settings) so that you do not have to re-enter them each time you visit.
• Analytics Cookies: These help baj888 understand aggregated usage patterns — such as which games are most popular among players in Karachi, Lahore, or Faisalabad — so that we can continually improve the platform experience. Analytics data is processed in anonymised or pseudonymised form.
• Security Cookies: Used to detect and prevent fraudulent sessions, bot activity, and unauthorised account access attempts.

You can control cookie preferences through your browser settings. Note that disabling cookies may impair the functionality of certain baj888 platform features. baj888 does not use third-party advertising or behavioural targeting cookies.

8 Data Retention

baj888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by our international gaming licence conditions and applicable anti-money-laundering regulations.

As a general guide, our standard retention periods are as follows:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of each interaction, unless a longer period is required for ongoing dispute resolution or regulatory inquiry purposes.
• Cookie and analytics data: Typically retained for no more than thirteen (13) months from the date of collection, after which it is anonymised or deleted.

Where retention beyond these periods is required by a legal hold, regulatory investigation, or unresolved dispute, data will be retained for the duration of that requirement and then securely deleted.

9 International Data Transfers

baj888 is an internationally operated platform. Your personal data may be processed on servers located in jurisdictions outside Pakistan. Where data is transferred internationally, baj888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded within the jurisdiction of our gaming licence.

Such safeguards may include contractual data transfer agreements with third-party processors, binding corporate rules, or reliance on recognised adequacy decisions by the applicable supervisory authority.

10 Your Data Rights

As a baj888 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 15. baj888 will respond to all valid data rights requests within thirty (30) calendar days.

11 Children & Minors

baj888 is strictly an adults-only platform. Our services are available exclusively to individuals who are aged 21 years or older. baj888 does not knowingly collect personal data from anyone under the age of 21.

Where baj888 discovers or has reasonable grounds to believe that a player account belongs to a person under 21 years of age, that account will be immediately suspended, all funds will be withheld pending investigation, and the matter will be escalated to the relevant regulatory authority in accordance with our licence conditions.

If you are a parent or guardian and you believe your child has registered an account with baj888, please contact our support team immediately so that we can investigate and take appropriate action without delay.

12 Security Measures

baj888 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL Encryption: All data in transit between your device and baj888 servers is encrypted using industry-standard TLS protocols.
• AES-256 Encryption at Rest: Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. baj888 staff are granted access only to the data required to perform their specific job functions.
• Multi-Factor Authentication: Internal baj888 systems that handle player data require multi-factor authentication for all staff access.
• Penetration Testing & Audits: Our platform undergoes regular independent security assessments and penetration testing to identify and address potential vulnerabilities.
• Incident Response: baj888 maintains a documented data breach response procedure. In the event of a breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.

While baj888 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your baj888 account and to keep your device and browser software up to date.

13 Third-Party Services

The baj888 platform may contain links to or integrations with third-party services — such as payment gateways operated by JazzCash, EasyPaisa, or Raast — that have their own, independent privacy policies. baj888 is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policy of any third-party service you access in connection with your use of the baj888 platform.

Where baj888 engages third-party data processors, those processors are contractually bound to process data only on baj888's instructions, to implement appropriate security measures, and to delete or return data upon termination of their engagement with baj888.

14 Amendments to This Policy

baj888 reserves the right to amend this Privacy Policy at any time. Where a material change is made to the way we process your personal data, we will notify you by email to your registered address, or via a prominent notice on the baj888 platform, prior to the change taking effect.

The current version of the Privacy Policy, including the effective date, is always available on this page. We recommend that you review this page periodically. Your continued use of the baj888 platform following notification of a change to this Privacy Policy constitutes your acknowledgment of the updated terms.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about the way baj888 has handled your personal data, please contact our Data Privacy team using the details below:

We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a full response within thirty (30) calendar days of receipt. Where a request is particularly complex or voluminous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with baj888's response to your complaint, you have the right to escalate your complaint to the supervisory authority or regulatory body responsible for data protection oversight in the jurisdiction of our gaming licence. Details of the relevant authority are available on our About Us page.