Privacy Policy — Your Data on Biji Baji

01 Introduction

Biji baji ("we", "us", "our") operates the online gaming platform at bijibaji.fun. This Privacy Policy explains how we collect, use, store, and protect personal information when you register for an account, make deposits or withdrawals in PKR, place bets, play games, or interact with our support team.

We take your privacy seriously. This policy is written in plain English so you can understand exactly what happens with your data — not just in the sense of legal compliance, but because we believe players deserve transparency about how their information is handled.

This policy should be read alongside our Terms and Conditions. Definitions used in the Terms and Conditions apply equally here.

02 Data We Collect

We collect personal data in several ways: directly from you when you register and use the platform, automatically through your device and browser, and from third parties such as payment processors.

Information you provide directly:

• Full name, date of birth, and gender
• Email address and mobile number
• Residential address and city
• Username and password (stored in encrypted form)
• Identity verification documents when requested (such as a CNIC copy)
• Preferred payment method details (JazzCash number, Easypaisa number, bank account details, or card information)

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on the platform, and navigation patterns
• Game session data including bet amounts, game titles played, and session duration
• Cookie identifiers and similar tracking technologies (see Section 9)

Information from third parties:

• Transaction confirmation and status data from payment processors such as JazzCash, Easypaisa, and Raast
• Fraud risk signals from identity and payment verification services

03 How We Use Your Data

The personal information we collect is used for the following purposes:

We do not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review.

04 Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity — processing your registration details, managing your account, and handling deposits and withdrawals is necessary to provide the service you signed up for.
• Legitimate interests — fraud detection, platform security, and analytics are carried out on the basis of our legitimate interest in keeping the platform safe and operational.
• Legal obligation — verifying user identity and maintaining transaction records may be required to meet applicable obligations.
• Consent — where we send you marketing communications or use non-essential cookies, we do so on the basis of your consent, which you may withdraw at any time.

05 Sharing Your Data

Biji baji does not sell your personal data to third parties for their own marketing purposes. We may share your information only in the following circumstances:

• Payment service providers — JazzCash, Easypaisa, Raast, and bank transfer partners receive the transaction data they need to process your deposits and withdrawals. These providers operate under their own privacy policies.
• Identity and fraud verification services — where required to verify your identity or assess fraud risk, we may share relevant details with specialist third-party verification providers.
• Game software providers — third-party game studios that supply slots, live casino, and fish games may receive anonymised session data to support game functionality. They do not receive your full personal profile.
• Technology and hosting partners — service providers who support our platform infrastructure, analytics, and customer communication tools process data on our behalf under data processing agreements.
• Legal and compliance — we may disclose your information where required by applicable law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of biji baji or its users.

06 Payment Data

All financial transactions on biji baji are processed in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, or bank transfer, the relevant payment credentials are transmitted directly to the payment provider over encrypted connections.

Biji baji does not store full card numbers or mobile wallet PINs on our own servers. Payment references and transaction identifiers are retained for account record purposes and to facilitate any disputes or refund requests.

If you register a payment method for future use, only a tokenised reference — not your actual account or card number — is stored on our system. This token is provided by your payment provider and cannot be used independently to initiate transactions.

07 How Long We Keep Your Data

We keep your personal data for as long as your account remains active, and for a reasonable period afterwards to manage any outstanding queries, disputes, or obligations. The following general principles apply:

• Account data — retained for the duration of your account and for up to five years after account closure to address any potential disputes.
• Transaction records — deposit and withdrawal history is retained for a minimum of five years for financial record-keeping purposes.
• Identity verification documents — retained for the period required by applicable verification obligations and deleted securely thereafter.
• Marketing preferences — retained until you withdraw consent or request deletion.
• Technical logs — IP logs and session data are typically retained for a shorter period unless needed for an ongoing fraud or security investigation.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked back to you.

08 Security Measures

Biji baji takes the security of your personal data seriously. We have put in place a range of technical and organisational measures to protect your information against unauthorised access, loss, or misuse:

• All data transmitted between your device and our platform is encrypted using TLS (Transport Layer Security).
• Passwords are stored using one-way cryptographic hashing — we cannot see or retrieve your actual password.
• Access to personal data within our systems is restricted to staff who genuinely need it to perform their role.
• Payment processing is handled by certified payment service providers who maintain their own security standards.
• Our systems are regularly monitored for unusual activity, and security patches are applied promptly.

While we do our best to protect your data, no online platform can guarantee absolute security. If you suspect that your account has been compromised, please contact our support team immediately and change your password without delay.

09 Cookies & Tracking

Biji baji uses cookies and similar technologies to keep the platform working correctly and to understand how players interact with the site. Here is a summary of the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will affect your ability to log in and use the platform. Biji baji does not use third-party advertising cookies or sell browsing data to ad networks.

10 Your Rights

You have the following rights in relation to the personal data biji baji holds about you:

• Right of access — you can request a copy of the personal data we hold about you at any time.
• Right to correction — if any information we hold is inaccurate or out of date, you have the right to ask us to correct it. You can update most account details directly from your profile settings.
• Right to deletion — you can ask us to delete your personal data. We will action this request where no legal or contractual obligation requires us to retain the data. Note that deletion requests may result in account closure.
• Right to restrict processing — in certain circumstances you can ask us to limit how we use your data, for example while a complaint is being investigated.
• Right to withdraw consent — where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to data portability — you can request a copy of the data you provided to us in a structured, machine-readable format.

To exercise any of these rights, contact our support team using the details in Section 14. We will respond to valid requests within a reasonable timeframe. We may need to verify your identity before acting on a request.

11 Minors

Biji baji is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use the platform in any way.

If we discover or have reason to believe that a user is under 18, we will immediately suspend the account, void any transactions, and delete the associated personal data. If you believe a minor has registered on our platform, please contact our support team so we can investigate promptly.

Parents and guardians are encouraged to use device-level parental controls to prevent underage access to online gaming platforms. For more guidance, visit our Responsible Gaming page.

12 International Data Transfers

Some of the third-party service providers we use to operate the biji baji platform — such as cloud hosting providers or analytics tools — may store or process data outside Pakistan. Where this occurs, we take steps to ensure that appropriate safeguards are in place to protect your data, including contractual data protection clauses with those providers.

By using biji baji, you acknowledge that your information may be processed outside of Pakistan in connection with the services described in this policy. We select service providers carefully and only work with those who maintain high data protection standards.

13 Changes to This Policy

Biji baji may update this Privacy Policy from time to time to reflect changes in the way we operate, the services we offer, or applicable privacy standards. When material changes are made, the "Last updated" date at the top of this page will be revised.

Where changes significantly affect how your data is used, we will make reasonable efforts to notify registered users. Continued use of the platform after an updated policy has been published constitutes acceptance of those changes. If you do not agree with an updated policy, you should stop using the platform and may request account closure.

We recommend checking this page periodically so you are always aware of how your information is being handled.

14 Contact Us

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information has been handled, please get in touch with our support team:

Support email: [email protected]

Please contact us from the email address registered to your biji baji account so we can verify your identity and respond efficiently. We aim to acknowledge all privacy-related queries promptly and resolve them within a reasonable timeframe.

For answers to common questions, you can also visit our FAQ page. For information about your account rights and platform rules, see our Terms and Conditions.