Responsible Handling of Personal Data

Personal data is any information that can identify a user directly or indirectly. The platform may collect account details, contact information, identity documents where verification is required, payment records, device data, IP address, login history, transaction activity, support messages, and responsible gaming records.

The collection of information supports lawful account service, security, payment checks, dispute review, fraud prevention, and compliance with applicable Pakistan privacy, cyber security, electronic records, and contractual requirements.

Protection Measures

The operator applies technical and organisational measures designed to reduce unauthorised access, loss, misuse, alteration, or disclosure of data. These may include:

• encrypted transmission where supported by the website and payment services;
• limited internal access based on job need;
• account authentication and session controls;
• activity monitoring for fraud, abuse, and security risks;
• secure storage for documents and payment related records;
• staff access rules and confidentiality duties;
• retention controls and secure deletion or anonymisation when data is no longer required.

User Rights

Users may request support with their personal information, subject to identity checks and legal limits. Rights may include:

• access to account data held by the platform;
• correction of inaccurate or outdated information;
• deletion of data where retention is no longer legally or operationally required;
• restriction of certain use where allowed by applicable law;
• withdrawal of consent for optional communications or non essential processing.

Collected information is used for defined service, security, and compliance purposes. Data processing is carried out in a transparent way and limited to what is needed for the relevant purpose.

The platform may use personal data for:

• account registration, login, verification, and profile management;
• deposits, withdrawals, payment confirmations, and transaction records;
• bonus, betting, casino, and sportsbook activity linked to an account;
• customer support, complaint handling, and dispute checks;
• fraud detection, account safety, responsible gaming controls, and risk review;
• analytics, website statistics, service improvement, and technical diagnostics;
• marketing messages where the user has consented or where permitted by law;
• compliance with legal duties, regulator requests, court orders, and contractual obligations.

Optional marketing use is separate to core account service. A user may withdraw marketing consent through available account settings or support channels, subject to standard verification.

Users may request access to their account information, correction of inaccurate details, or deletion of eligible data. The operator may ask for identity confirmation before processing any request to protect the account and prevent unauthorised disclosure.

A request may cover:

• a copy of personal information linked to the account;
• correction of name, contact, payment, or verification details where evidence is required;
• deletion of information that is no longer needed for legal, security, payment, dispute, or compliance purposes;
• withdrawal of consent for optional data use.

Deletion may be refused or delayed where records must be retained for payment reconciliation, fraud prevention, legal claims, tax records, security checks, dispute handling, or responsible gaming controls.

Use of Baji Live confirms user consent to security checks, identity review, fraud screening, and payment data processing by banks, payment processors, wallet services, verification partners, and other authorised service providers involved in account operations.

The services are intended only for users aged 18 and above. Account registration, betting, casino play, deposits, and withdrawals are not permitted for minors.

The operator may not be able to verify age unless identity documents or other reliable evidence are supplied. Where an account is suspected to belong to a minor, the operator may restrict access, suspend transactions, request verification, and review account activity.

If a parent or legal guardian believes that a minor has supplied personal data, a deletion request may be submitted through the available support channel. After reasonable verification of the requester and the minor status, the operator will delete or anonymise the data where allowed by law and will retain only records needed for legal, security, or dispute purposes.

Personal data may be processed outside Pakistan where Baji Live service providers, payment partners, verification vendors, hosting providers, analytics tools, or support contractors operate. Such processing may be required for account service, payment settlement, security review, technical hosting, and compliance checks.

Use of the website and related services confirms consent to cross border data processing where needed for platform operations. The operator requires authorised partners to protect confidentiality, use information only for agreed purposes, apply reasonable security controls, and follow applicable legal and contractual obligations.

Where data is transferred or accessed outside Pakistan, the operator remains responsible for applying suitable safeguards through contracts, access limits, audit rights, and security procedures.

A legal disclaimer accepted with this Privacy Policy may explain, limit, or adjust the scope and effect of specific rules, subject to applicable law. It may also clarify operational limits, user responsibilities, service provider involvement, technical risks, and cases where disclosure is required by law.

The disclaimer applies when the user accepts the policy through:

• electronic acceptance during registration or account use;
• signature or written confirmation where requested;
• accession to the platform terms through continued account activity;
• any other valid acceptance method allowed under applicable law.

If any disclaimer term conflicts with mandatory legal protection, the mandatory legal rule will prevail to the extent required.

Cookies are small text files stored on a user device by a website or browser. They help the website recognise a device, maintain sessions, remember selected settings, collect statistics, and support site security.

The platform may use cookies and similar tools for:

• login session management and account safety;
• website statistics and performance measurement;
• site behaviour analysis and technical diagnostics;
• personalisation of language, layout, and account preferences;
• fraud prevention, abuse detection, and service improvement;
• marketing measurement where allowed by consent settings and law.

Cookie data may be retained for up to one year unless a shorter period is applied by browser settings, technical controls, or legal requirements. Users may manage cookies through browser settings, but some account features may be limited if essential cookies are blocked.

Use of Baji Live, account registration, deposits, withdrawals, gameplay, sportsbook activity, or access to website services confirms full acceptance of this Privacy Policy. A user who does not accept the policy should not use the account or related services.

The current version of this document prevails over earlier versions. Updates may be made to reflect legal changes, platform security needs, payment provider rules, service changes, or data protection procedures.

Continued use after publication of an updated version will be treated as acceptance where allowed by applicable law. Material changes may be communicated through website notice, account message, email, or another appropriate channel.

Personal data may be shared with external parties where required by law, needed for dispute handling, necessary under user agreements, or required for account service. Data sharing is limited to the purpose and scope relevant to the request or service.

External parties may include:

• payment processors, banks, wallet services, and transaction partners;
• identity verification and fraud prevention providers;
• hosting, analytics, technical, and customer support service providers;
• professional advisers, auditors, insurers, and legal representatives;
• law enforcement agencies, courts, regulators, or public authorities where disclosure is legally required;
• parties involved in complaints, chargebacks, investigations, or contractual disputes.

Where specific external parties are listed on the website, users should review the relevant notice. If a party is not named, the purpose and scope of sharing should be communicated where required by law or by this policy.

Supply of personal information and use of the services confirms consent to necessary sharing for account operation, payment processing, security checks, compliance, and dispute management.

The website may contain links to external websites, payment pages, identity services, social media pages, app stores, affiliate pages, or partner platforms. These websites operate under their own privacy policies, cookie rules, security standards, and terms.

The operator is not responsible for how external websites collect, use, store, disclose, or delete personal data after a user leaves the official website environment. External sites may apply different rules under different jurisdictions.

Users should review the privacy policy, cookie notice, and terms of each external website before entering personal information. Care is required when sharing identity documents, payment details, account credentials, or contact information outside the official platform.