baji999 Privacy Policy — How We Handle Your Data

baji999 is the online gaming and sports betting platform operated at baji999-play.com, designed and built specifically for players in Pakistan. When this Privacy Policy refers to "baji999", "we", "us", or "our", it means the operator of the baji999 platform responsible for collecting and processing your personal data.

We act as the data controller in respect of personal information you provide when registering, depositing, placing bets, or otherwise using the baji999 platform. This means baji999 determines how and why your personal data is processed, and is responsible for keeping it secure and using it only for the purposes described in this Privacy Policy.

If you have any questions about how baji999 handles your data, or if you wish to exercise any of the rights described in this policy, you can contact us at any time via the details provided in Section 15. We will respond to all data-related enquiries within 30 days.

baji999 collects personal data that falls into several distinct categories. The specific data collected depends on how you interact with the platform — basic registration data is required for all players, while additional documentation is requested at the point of first withdrawal as part of our KYC obligations.

baji999 collects personal data through three main channels: information you provide directly, data generated automatically by your use of the platform, and information received from third-party payment and verification partners.

baji999 uses personal data only for specific, clearly defined purposes. We do not process your data for any purpose that is incompatible with the reasons listed below, and we do not use your data to make purely automated decisions that significantly affect you without human review.

baji999 processes your personal data only where there is a valid legal basis to do so. The primary legal bases on which baji999 relies are as follows.

Contract performance: The majority of data processing by baji999 is necessary to fulfil the contract between baji999 and you as a registered player — operating your account, processing your PKR deposits and withdrawals, settling your bets, and delivering customer support. Without this processing, baji999 could not provide the Services you have signed up for.

Legal obligation: baji999 is required by law to verify player identities, maintain records of financial transactions, and report suspicious activity. Processing your CNIC information, transaction history, and KYC documentation is mandatory for baji999 to comply with applicable anti-money laundering regulations. This processing cannot be refused by a player who wishes to use the withdrawal function.

Legitimate interests: baji999 processes certain data — such as technical usage data and fraud detection signals — on the basis of our legitimate interest in keeping the platform secure, preventing abuse, and improving the product experience for all players. This processing is balanced against your privacy interests and does not override your fundamental data rights.

Consent: For marketing communications, baji999 relies on your explicit opt-in consent. You can withdraw consent for marketing at any time by updating your account notification preferences or by contacting support. Withdrawing marketing consent does not affect the lawfulness of any processing that occurred before you withdrew consent.

baji999 does not sell, rent, or trade your personal data. We share personal data with third parties only where it is necessary to deliver the Services, comply with legal obligations, or protect against fraud. All third-party recipients of baji999 player data are contractually bound to handle it securely and use it only for the specified purpose.

baji999 does not transfer personal data to advertising networks, data brokers, or social media platforms for targeting or profiling purposes. Where game providers receive session data for game delivery purposes, they are not permitted to use that data independently for their own marketing or profiling.

All financial transactions on baji999 are processed in Pakistani Rupees through local payment infrastructure. When you make a deposit or request a withdrawal, your payment data passes through the gateway of the relevant provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank's IBFT system, or your card network.

baji999 does not store your full Easypaisa PIN, JazzCash PIN, card number, or bank account password at any point. Payment gateway interactions are handled through encrypted, tokenised systems that transmit only the minimum data necessary to authorise the transaction. baji999 retains transaction reference numbers, amounts, timestamps, and the last four digits or masked identifier of your payment method for fraud prevention and dispute resolution purposes.

If you believe you have received an unauthorised charge to your payment method associated with baji999, contact our support team immediately. baji999 will investigate promptly and cooperate fully with your payment provider in any dispute resolution process.

Know Your Customer (KYC) verification is a legal requirement for all licensed online gaming operators and is not optional for players who wish to withdraw funds from baji999. The KYC process exists to verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your deposits originate from legitimate sources.

baji999 requests the following documents to complete KYC verification: a clear scan or photograph of your CNIC (front and back) or valid Pakistani passport, a recent proof of address (utility bill or bank statement dated within three months), and confirmation of payment method ownership where relevant. All documents must be legible and must show the same name used during baji999 registration.

KYC documents submitted to baji999 are stored on encrypted servers with access restricted to trained compliance staff. Documents are not shared with third parties except where required to fulfil AML legal obligations or upon lawful request from a regulatory or law enforcement authority. baji999 retains KYC documentation for a minimum of five years from account closure as required by anti-money laundering regulations.

If your KYC verification is rejected due to illegible or inconsistent documentation, baji999 will contact you within 24 hours to explain the reason and provide an opportunity to resubmit. baji999 aims to complete the review of submitted KYC documentation within one business day.

baji999 uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how players navigate and use the site. The cookies baji999 uses fall into four categories.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent baji999 from functioning correctly. Blocking other cookie categories will not affect your ability to play but may result in a less personalised experience.

baji999 retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply to the main categories of data held by baji999.

After the applicable retention period expires, baji999 will securely delete or anonymise personal data so that it can no longer be attributed to any individual player.

As a player on baji999, you have a number of rights in relation to the personal data we hold about you. These rights can be exercised at any time by contacting baji999 through the details provided in Section 15.

baji999 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following measures form the core of the baji999 data security programme.

Encryption: All data transmitted between your device and the baji999 platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. Data stored on baji999 servers — including KYC documents and account information — is encrypted at rest using AES-256. Payment transaction data passes through PCI-DSS compliant gateways that do not persist sensitive card data on baji999 infrastructure.

Access Controls: Access to player personal data within baji999 is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific role. All internal data access is logged and audited. Access credentials are subject to multi-factor authentication requirements.

Monitoring: baji999 operates continuous security monitoring that alerts our security team to unusual access patterns, potential intrusion attempts, and anomalous data export activity. Security logs are retained and reviewed regularly.

Despite our security measures, no online system can guarantee complete security. If you believe your baji999 account has been compromised, contact support immediately and change your password. baji999 will investigate all reported security incidents promptly and will notify affected players in the event of a data breach that poses a meaningful risk to their rights.

baji999 is strictly an 18+ platform and does not knowingly collect personal data from individuals under the age of 18. If baji999 becomes aware that a minor has created an account or submitted personal data, the account will be immediately closed, all data will be deleted, and any deposits returned to the originating payment method where possible.

Parents and guardians who believe a minor has accessed or registered on baji999 should contact our support team immediately with the relevant account information. baji999 will prioritise all such reports and take immediate action upon verification. We encourage households with minors to implement device-level parental controls to prevent access to online gaming platforms.

baji999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or changes in the services we provide. The most current version of this policy is always accessible at baji999-play.com/privacy-policy and the "Last Updated" date at the top of this page indicates when material changes were last made.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect or use your data, or affects your privacy rights — baji999 will notify registered players via email to the address on file or through a prominent platform notification at least seven days before the change takes effect.

Continued use of the baji999 platform after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with a material change, you have the right to close your account and withdraw any remaining balance before the change takes effect.