01Introduction
This Privacy Policy describes how biji baji ("we", "us", "the Platform") collects, uses, stores and protects the personal information of every person who registers an account, deposits funds, plays games, or otherwise interacts with the biji baji platform at bijibaji.im. It applies to all Pakistani players and any other users who access the Platform regardless of location.
biji baji takes privacy seriously. We are not a platform built by people who think of player data as a side revenue stream. Your information is collected because it is necessary to run a compliant, secure, and functional gaming service — full stop. We do not sell your data, we do not share it with advertisers, and we do not use it for purposes beyond what is described in this Policy.
By registering on biji baji, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should not create an account. If you have questions about anything in this document, please write to us at support@bijibaji.im before proceeding.
This Policy should be read alongside the biji baji Terms and Conditions and Responsible Gaming Policy, both of which are available in the footer links on every page of the Platform.
02Personal Data We Collect
The following categories of personal data are collected by biji baji in the course of providing its services to Pakistani players:
| Category |
Specific Data Points |
Mandatory? |
| Identity |
Full legal name, CNIC number, date of birth, gender, copy of ID document |
Yes |
| Contact |
Mobile number, email address, city and province of residence |
Yes |
| Financial |
Easypaisa / JazzCash number, IBFT account details, card last four digits, transaction history in PKR |
Yes |
| Account Activity |
Login times, game history, bet amounts, session durations, withdrawal requests |
Auto |
| Technical |
IP address, device type, operating system, browser, approximate location |
Auto |
| Communications |
Support chat transcripts, emails sent to or from biji baji |
Conditional |
We do not collect data that goes beyond what is necessary to operate the Platform safely and in compliance with applicable requirements. We do not collect biometric data beyond what may be required by a third-party identity verification provider during KYC.
03How We Collect Your Data
biji baji collects personal data through three primary channels:
- Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide information directly. This covers most of the identity and contact data we hold.
- Automatically during Platform use: Our servers record technical data including your IP address, device characteristics, session times, pages visited, games played, bets placed, and similar activity data whenever you interact with the Platform.
- From third-party service providers: Identity verification partners may share KYC results with us. Payment processors such as Easypaisa and JazzCash share transaction confirmation data. Fraud prevention services may provide risk assessments linked to your account activity.
We never purchase personal data lists from data brokers or marketing firms. All data held on biji baji accounts originates from the sources described above.
04Why We Use Your Data
Every use we make of your personal data serves a specific and legitimate purpose. The main purposes for which biji baji processes your data are set out below:
- Account management: Creating, maintaining, and securing your biji baji account, including login authentication, password resets, and account settings management.
- Identity verification: Confirming that you are who you say you are, that you are at least 18 years of age, and that your payment sources are in your own name. This is a core compliance obligation.
- Processing PKR transactions: Handling your deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. We share relevant transaction data with payment processors to complete these transfers.
- Fraud prevention and security: Monitoring account activity for signs of fraud, money laundering, multiple accounts, bonus abuse, or other prohibited conduct. This protects all players on the Platform, not just the individual account.
- Responsible gaming: Using your activity data to identify patterns that may indicate problem gambling behaviour. This allows biji baji to proactively reach out and offer support, limits, or cooling-off periods where appropriate.
- Customer support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance.
- Legal compliance: Meeting our obligations under applicable Pakistani laws, including financial regulations and anti-money laundering requirements, and responding to lawful requests from regulatory or law enforcement authorities.
- Platform improvement: Aggregated and anonymised usage data helps us understand how the Platform is used and where it can be improved. This analysis does not rely on individual personal data.
biji baji does not use your personal data for targeted advertising on third-party websites, social media platforms, or ad networks. We do not sell your data to any marketing company.
05Legal Basis for Processing
biji baji processes personal data on the following legal bases depending on the specific purpose:
- Contractual necessity: Processing required to fulfil our agreement with you — running your account, processing PKR deposits and withdrawals, and providing access to games.
- Legal obligation: Identity verification, anti-money laundering checks, and responses to regulatory or law enforcement requests.
- Legitimate interests: Fraud prevention, security monitoring, responsible gaming safeguards, and Platform analytics where these do not override your rights.
- Consent: Where we send you optional promotional communications about biji baji offers, you may withdraw that consent at any time by updating your account preferences or contacting support.
06Data Sharing with Third Parties
biji baji does not sell, rent, or trade your personal data with any third party for commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment processors receive transaction details necessary to complete your deposits and withdrawals. Each of these providers operates under its own privacy and security standards.
- Identity verification providers: KYC service providers receive copies of your identity documents and relevant personal details to confirm your identity and age. Results are returned to biji baji and the provider retains data in line with their own retention policy.
- Fraud and risk services: Anti-fraud and risk assessment providers may receive account and transaction data to flag potentially fraudulent patterns. This protects the entire biji baji player community.
- Legal and regulatory authorities: biji baji will disclose personal data to the Federal Board of Revenue (FBR), the Federal Investigation Agency (FIA), or other competent Pakistani authorities when required by law, valid court order, or lawful investigative request.
- Game providers: Third-party game studios such as Evolution Gaming and Pragmatic Play may receive anonymised session data for technical and analytical purposes. Personal identity data is not shared with game providers.
All third parties with whom biji baji shares data are contractually required to handle that data securely, use it only for the agreed purpose, and not share it further without authorisation. biji baji cannot be held responsible for the independent privacy practices of third-party services once data has been lawfully transferred to them.
07Payments & PKR Transactions
All financial transactions on biji baji are processed in Pakistani Rupees. When you make a deposit or submit a withdrawal request, transaction-specific data — including your payment method identifier (mobile number, IBFT account, card reference), transaction amount, and timestamp — is shared with the relevant payment processor to complete the transfer.
biji baji does not store full card numbers on its own systems. Card payment data is tokenised by our payment processor and handled according to industry security standards. For Easypaisa and JazzCash transactions, only the mobile account number and confirmed transaction ID are retained by biji baji.
A complete record of all PKR transactions on your account is maintained by biji baji and is available to you at any time within your account history. This record may also be provided to regulatory authorities in the event of a legal investigation.
08How Long We Keep Your Data
biji baji retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied are:
- Active account data: Retained for the full duration of your active account plus a minimum of five years after account closure to satisfy anti-money laundering and financial record-keeping obligations.
- Transaction records: All PKR deposit and withdrawal records are retained for a minimum of seven years after the transaction date in accordance with financial regulations.
- Identity verification documents: Retained for the period of account activity plus five years minimum. Copies of CNIC and other identity documents are stored securely and accessed only when required for verification or compliance purposes.
- Support communications: Chat transcripts and email exchanges are retained for two years from the date of the communication to support quality assurance and dispute resolution.
- Technical logs: Server and session logs are retained for 12 months for security monitoring and fraud investigation purposes.
When data is no longer required and no legal obligation prevents its deletion, biji baji will securely delete or anonymise it. You may request earlier deletion of certain data categories subject to the limitations set out in Section 11.
09Security Measures
Protecting your personal and financial data is a core operational priority at biji baji. The following technical and organisational measures are in place to safeguard all data we hold:
- SSL/TLS encryption: All data transmitted between your device and biji baji's servers is encrypted using current industry-standard protocols. This applies to login, gameplay, deposits, withdrawals, and all other Platform interactions.
- Two-factor authentication (2FA): All players are encouraged to enable 2FA on their accounts. VIP Club members at Gold tier and above are required to maintain active 2FA.
- Access controls: Internal access to player data is strictly limited to staff members who require it for their specific role. Access logs are maintained and reviewed. No general staff member can view financial or identity data without a documented reason.
- Penetration testing: The biji baji Platform undergoes regular independent security assessments to identify and address vulnerabilities before they can be exploited.
- Breach response: In the event of a data security incident that affects your personal information, biji baji will notify affected players and take immediate remedial action. Notification will be made by email to the address registered on your account.
No digital system can guarantee absolute security. If you become aware of any suspicious activity on your account — including unauthorised login attempts or unexpected transactions — please contact biji baji support immediately via live chat or email.
10Cookies & Tracking
biji baji uses cookies and similar technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly and allow us to understand how it is being used.
- Essential cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking core Platform functionality.
- Functional cookies: Remember your preferences such as language settings, game lobby view, and responsible gaming settings between sessions.
- Analytics cookies: Aggregated data about how pages and features are used. This data is anonymised and used solely to improve the Platform. No personal identity is associated with analytics data.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using biji baji but may affect some preferences being remembered between sessions. biji baji does not use third-party advertising cookies or tracking pixels connected to ad networks.
11Your Data Rights
As a biji baji player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at support@bijibaji.im with a clear description of your request. We will respond within 30 days.
Right of Access
You can request a copy of all personal data biji baji holds about you. We will provide this in a readable format within 30 days of a verified request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details directly through your account settings.
Right to Erasure
You may request that we delete your personal data. This right is subject to legal retention obligations — data that must be kept to comply with financial regulations cannot be deleted before its minimum retention period expires.
Right to Object
You may object to biji baji processing your data on the basis of legitimate interests. We will assess each objection and discontinue the processing if there are no overriding grounds to continue.
Right to Portability
You may request your personal data in a structured, machine-readable format where technically feasible and applicable to data processed on the basis of consent or contract.
Right to Restrict Processing
In certain circumstances, you can request that biji baji restricts how it processes your data — for example, while a correction request is being reviewed or an objection is being assessed.
12Minors
biji baji's services are strictly for adults aged 18 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18. If we discover or are notified that an account has been opened by a minor, we will immediately suspend that account, delete or quarantine the associated data, and refund any verifiable deposit amount to the original payment source at our discretion.
If you are a parent or guardian and believe a minor may have created a biji baji account using your details or their own, please contact us immediately at support@bijibaji.im so that we can investigate and take appropriate action.
Protecting minors from access to gambling is a legal obligation and a genuine priority at biji baji. Our identity verification process is designed specifically to catch underage registrations.
13Changes to This Policy
biji baji may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, we will notify registered players via email to the address on their account and by displaying a notice on the Platform. The updated Policy will be published at this URL with a revised effective date.
Continued use of the biji baji Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should stop using the Platform and request account closure by contacting support.
