Privacy Policy — bjbaje

This Privacy Policy ("Policy") describes how bjbaje ("Platform", "we", "us", "our"), accessible at https://bjbaje.cam, collects, uses, stores, discloses and protects personal data relating to individuals ("User", "you", "your") who access or use the Platform.

bjbaje is an English-language online betting information and platform guide targeting Pakistani users. By accessing the Platform, creating an Account or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy is to be read alongside our Terms & Conditions and Responsible Gambling Policy. In the event of any conflict between this Policy and the Terms & Conditions with respect to data processing matters, this Policy shall prevail.

For the purposes of this Policy:

bjbaje, operating at https://bjbaje.cam, is the Data Controller in respect of Personal Data collected through the Platform's website, account registration process and associated communications.

The Operator — the licensed entity providing the underlying gambling and payment processing services — may independently act as a Data Controller in respect of account-level transactional and identity-verification data processed to fulfil its regulatory obligations. Where the Operator processes data as an independent controller, it is governed by its own privacy documentation, which will be made available to you at the point of account creation.

For all data protection enquiries relating to bjbaje's own processing activities, please use the contact details set out in Section 15 of this Policy.

bjbaje collects Personal Data in the following categories, depending on how you interact with the Platform:

4.1 Registration & Account Data

• Full legal name, date of birth and gender
• Email address and mobile telephone number
• Residential address, city and country (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Username and encrypted password
• Security questions and answers (where applicable)

4.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., CNIC, passport)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or video verification images where required by the Operator

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in PKR
• Payment method identifiers (masked account numbers, wallet IDs) — note: bjbaje does not store full card numbers or full bank account credentials
• Bet history, stakes, outcomes and account balance movements

4.4 Technical & Usage Data

• IP address, device type, operating system and browser information
• Session duration, pages visited and features used
• Geolocation data (city/country level, not precise GPS)
• Cookie identifiers and similar tracking technologies (see Section 8)

4.5 Communications Data

• Content of support tickets, live chat transcripts and email correspondence with bjbaje
• Survey responses and feedback submissions

Where applicable data protection law requires a lawful basis for processing Personal Data, bjbaje relies on the following grounds:

bjbaje uses your Personal Data strictly for the purposes for which it was collected. Specific uses include:

1. Creating and managing your Account, including authentication and session management.
2. Verifying your identity and age as required before processing withdrawals or activating certain account features.
3. Processing deposits, bets, winnings and withdrawals in PKR and other supported currencies.
4. Complying with anti-money-laundering (AML) and counter-terrorism financing (CTF) legal obligations, including filing suspicious transaction reports where required.
5. Monitoring betting patterns and account activity to identify problem gambling indicators and to trigger responsible gambling interventions where appropriate.
6. Providing customer support, resolving disputes and responding to complaints.
7. Sending transactional communications including deposit confirmations, withdrawal notifications and security alerts.
8. Sending marketing communications (only where you have provided explicit consent and subject to your right to withdraw that consent at any time).
9. Conducting internal analytics to improve Platform performance, user experience and content relevance.
10. Preventing, detecting and investigating fraud, cheating, multi-accounting and other prohibited conduct.

bjbaje does not sell, rent or trade your Personal Data to third parties for their marketing purposes. We may share your Personal Data in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist in operating the Platform, including payment processing infrastructure, identity verification services, analytics platforms, cloud hosting providers and customer support tooling. These providers process Personal Data on our behalf under contractual obligations that limit their use to the specified purpose and require appropriate security measures.

7.2 The Operator

The Operator providing the underlying gambling services will receive certain Personal Data necessary to manage your gambling account, process transactions and fulfil their regulatory obligations. This transfer is covered by contractual data-sharing arrangements between bjbaje and the Operator.

7.3 Legal and Regulatory Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory authorities or courts where required to do so by applicable law, court order or governmental request. Such disclosure is made only to the extent required and in accordance with applicable legal process.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving bjbaje, Personal Data may be transferred to the relevant successor entity. Users will be notified of any such transfer where it materially affects the processing of their data under this Policy.

bjbaje uses cookies and similar tracking technologies to enable essential Platform functionality, maintain session state, support analytics and improve user experience. The following categories of cookies are used:

You may configure your browser to reject or delete cookies. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling analytics or marketing cookies will not prevent you from using core Platform features.

bjbaje retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or the Operator's regulatory obligations. Our general retention guidelines are as follows:

• Account registration and KYC data is retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and bet records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for two (2) years from the date of resolution.
• Analytics data is retained in anonymised or aggregated form and does not constitute Personal Data after anonymisation.
• Marketing consent records are retained for the duration of the consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

bjbaje implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of Personal Data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest, including KYC documents and financial identifiers
• Role-based access controls ensuring that only authorised personnel with a documented need can access Personal Data
• Regular security vulnerability assessments and penetration testing
• Incident response procedures including notification protocols for material data breaches

Notwithstanding the above, no method of transmission over the internet or electronic storage is completely secure. bjbaje cannot guarantee absolute security but commits to taking all reasonable precautions and to notifying affected Users without undue delay in the event of a material Personal Data breach.

bjbaje operates globally and may transfer your Personal Data to service providers or the Operator located in countries outside Pakistan. Where such transfers occur, bjbaje ensures that appropriate safeguards are in place to protect your data, which may include contractual protections, standard data protection clauses or reliance on the recipient country's adequate data protection framework.

By using the Platform from Pakistan, you acknowledge that your Personal Data may be processed in jurisdictions outside Pakistan that may have different — and in some cases, lower — data protection standards than those applicable in Pakistan. bjbaje contractually requires all international recipients to apply security and data handling standards consistent with this Policy.

bjbaje is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by the applicable operator or license jurisdiction. Age verification is a mandatory component of the account registration process.

If bjbaje becomes aware that Personal Data has been collected from a minor, that data will be deleted immediately and the associated Account will be closed. If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact us immediately using the details in Section 15.

Subject to applicable law, you hold the following rights in respect of your Personal Data. Requests may be submitted to us at any time using the contact details in Section 15. We will acknowledge all requests within 72 hours and aim to respond substantively within thirty (30) days.

bjbaje reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new sharing arrangement — we will provide notice through the Platform at least fourteen (14) days before the changes take effect.

The current version of this Policy is always accessible at https://bjbaje.cam/privacy-policy. The "Last Reviewed" date at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date of an amendment constitutes acceptance of the revised Policy.

To exercise any of your data rights, submit a data subject access request, raise a data protection concern or ask any question about this Privacy Policy, please contact the bjbaje support team. Our team is available 24 hours a day, 7 days a week, with Urdu-speaking agents available on request.

Support email address (plain text — not a clickable link):
[email protected]

Please include the subject line "Data Privacy Request" and a clear description of your enquiry, together with your Account username (if applicable) to help us locate your records efficiently.

We will acknowledge all data-related enquiries within 72 hours of receipt and aim to resolve them within thirty (30) calendar days. Complex requests involving large volumes of data may require additional time, in which case we will keep you informed of progress.