Privacy Policy

1Introduction

This Privacy Policy ("Policy") is issued by bjbagi ("bjbagi", "we", "us", "our") and applies to all users ("you", "User") of the bjbagi website, mobile-optimised platform and associated services (collectively, the "Platform").

bjbagi operates an online casino and sports betting platform targeted at adult users, including players across Pakistan — from Karachi and Lahore to Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. The Platform processes personal data in connection with account registration, identity verification, deposits, gameplay, withdrawals and customer support.

This Policy describes the types of personal information we collect, the purposes for which we use it, who we may share it with, how long we retain it, the security measures we apply and the rights available to you. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read in conjunction with bjbagi's Terms & Conditions and Responsible Gambling Policy.

2Definitions

3Data We Collect

bjbagi collects the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Registration and Identity Data

• Full legal name — as it appears on your government-issued ID;
• Date of birth — to verify you meet the minimum age requirement (18+ or higher);
• Residential address — including city (e.g., Karachi, Lahore, Islamabad) and postal code;
• Email address — used for account communication and notifications;
• Mobile phone number — for account security and support contact;
• Government-issued ID details — CNIC number and document scan, submitted during KYC.

3.2 Financial and Transaction Data

• Deposit and withdrawal amounts, timestamps and transaction reference numbers;
• Payment method details submitted through the cashier — which may include mobile wallet identifiers (e.g., Easypaisa or JazzCash account references), bank account or IBAN details, or cryptocurrency wallet addresses where applicable;
• Source-of-funds information where required under due diligence obligations.

Note: Payment provider names are referenced as familiar Pakistani payment infrastructure. bjbagi does not represent that these providers endorse or support gambling transactions.

3.3 Gameplay and Betting Data

• Game sessions, bet history, win/loss records and wagering patterns;
• Sports markets accessed — including cricket, PSL T20 or ICC event betting activity — for responsible gambling monitoring purposes;
• Responsible gambling limit settings you apply to your Account.

3.4 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system and browser version;
• Session duration, pages visited and in-Platform navigation paths;
• Cookie identifiers and similar tracking technologies (see Section 10).

3.5 Communication Data

• Support tickets, live chat transcripts and email correspondence with bjbagi;
• Feedback and survey responses submitted voluntarily.

4How Data Is Collected

We collect Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC, make a deposit or withdrawal, contact support or update your Account settings;
• Automatically — through cookies, server logs and analytics tools as you use the Platform;
• From third parties — including identity verification providers, payment processors and fraud prevention services, where permitted by law and necessary to deliver our services;
• From publicly available sources — where relevant to fraud prevention or compliance obligations.

5Data Processing

bjbagi processes your Personal Data for the following purposes:

6Legal Basis for Processing

bjbagi processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform the services you have contracted for, including Account management, game play and financial transactions;
• Legal obligation: Processing required to comply with the operator's license conditions, anti-money laundering obligations and other applicable law;
• Legitimate interests: Processing necessary to detect fraud, prevent prohibited conduct, improve the Platform and maintain security — where these interests are not overridden by your rights;
• Consent: Where you have given specific, informed consent — for example, for direct marketing communications. You may withdraw consent at any time without affecting processing carried out before withdrawal.

7Data Sharing

bjbagi does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Identity verification providers: Third-party KYC and age-verification services that process identity documents on our behalf under strict data processing agreements;
• Payment processors: Entities that facilitate deposits and withdrawals, including where relevant, services operating in the Pakistani payments ecosystem. These processors receive only the data necessary to complete your transaction;
• Fraud prevention and security services: Providers that analyse transaction and behavioural data to detect suspicious activity;
• Technology infrastructure providers: Cloud hosting, content delivery and analytics service providers that process data on our behalf under contractual obligations;
• Regulatory and law enforcement authorities: Where we are legally required to disclose data pursuant to a court order, regulatory request or applicable law;
• Responsible gambling organisations: Where you have activated self-exclusion or where we have a regulatory obligation to refer patterns of harmful play to an appropriate body.

8Data Retention

bjbagi retains your Personal Data for as long as your Account remains active and for a defined period thereafter, in accordance with the following principles:

• Account data and KYC records — retained for the lifetime of your Account plus a minimum period following closure, as required by the operator's license obligations and applicable anti-money laundering requirements;
• Transaction records — retained for a minimum period after each transaction for regulatory, audit and dispute resolution purposes;
• Communication records — support transcripts and correspondence retained for a defined period for quality assurance and dispute handling;
• Technical and device data — retained for a shorter period consistent with the operational purpose (e.g., security monitoring, Platform analytics);
• Marketing data — retained only while you have an active marketing consent or until you withdraw consent, whichever is earlier.

When Personal Data is no longer required for the purpose for which it was collected, it is securely deleted or anonymised so that it can no longer be associated with an individual.

9Data Security

bjbagi implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform;
• Encrypted data storage for sensitive data fields, including identity documents and payment details;
• Two-factor authentication (2FA) available and encouraged for all Account holders;
• Access controls — internal access to Personal Data is restricted on a need-to-know basis with role-based permissions;
• Regular security reviews — our infrastructure is reviewed against current security standards on a periodic basis;
• Incident response procedures — in the event of a data breach, bjbagi has procedures in place to assess, contain and notify affected parties as required by applicable law.

While bjbagi takes data security seriously, no digital system can be guaranteed as fully secure. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect unauthorised access to your Account, contact support immediately.

10Cookies & Tracking Technologies

bjbagi uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, maintain session state and gather aggregated analytics on Platform usage. Cookies are small text files stored on your device by your browser.

You can manage or disable cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

11International Data Transfers

bjbagi may transfer your Personal Data to countries outside your country of residence, including for the purpose of cloud hosting, payment processing or identity verification services. Where such transfers occur, bjbagi ensures that appropriate safeguards are in place, such as contractual data protection clauses with the receiving party, to ensure your data receives a level of protection consistent with applicable data protection principles.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Pakistan where necessary to deliver the services described in this Policy.

12Minors

The bjbagi Platform is strictly for adults aged 18 and over, or the higher minimum age required by the operator's license jurisdiction. bjbagi does not knowingly collect Personal Data from individuals below the minimum age. If we become aware that a minor has created an Account or provided Personal Data, that Account will be immediately closed, all data will be deleted, and any deposits will be returned where procedurally possible.

We encourage parents and guardians in Pakistan to make use of internet parental control and content filtering software to prevent underage access to gambling platforms.

13User Rights

Subject to applicable law and the operator's regulatory obligations, you have the following rights in relation to your Personal Data held by bjbagi:

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond within a reasonable timeframe. In some cases we may need to verify your identity before processing your request.

Please note that certain rights may be limited where bjbagi has overriding legal obligations — for example, we cannot delete KYC records that we are legally required to retain under anti-money laundering regulations.

14Third-Party Links & Services

The bjbagi Platform may reference third-party services in an informational context — for example, mentioning familiar Pakistani payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah as contextual payment references. bjbagi does not control these third-party providers' data practices, and this Policy does not apply to data collected directly by those providers through their own platforms.

If the Platform contains links to any third-party websites or services, clicking those links will take you outside the bjbagi Platform. bjbagi is not responsible for the privacy practices of external sites. We encourage you to review the privacy policy of any site you visit.

15Policy Amendments

bjbagi reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. Where changes are material, we will provide notice through the Platform or to your registered email address before the changes take effect.

The "Last reviewed" date at the top of this document indicates when the Policy was most recently updated. Your continued use of the Platform after a revised Policy is published constitutes your acknowledgement of the updated terms. We recommend reviewing this Policy periodically.

16Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way bjbagi processes your Personal Data, please contact our support team:

Please include your full registered name and Account email address in any privacy-related request so we can verify your identity and locate your records efficiently. Do not include your Account password or full financial account numbers in correspondence.