wwwbaji Privacy Policy

wwwbaji is an online sports betting and casino gaming platform accessible at wwwbaji.ws, serving registered adult players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, Peshawar, and other cities. wwwbaji operates under an international gaming licence and is committed to handling all player data lawfully, fairly, and transparently.

For the purposes of this Privacy Policy, wwwbaji acts as the data controller — meaning we determine why and how your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are contractually bound to handle your data only as instructed by wwwbaji and in compliance with applicable data protection standards.

This Policy applies to all personal data collected from individuals who visit, register on, or otherwise interact with the wwwbaji platform — including prospective players who browse without registering, registered account holders, and former account holders whose data is retained under legal retention obligations.

wwwbaji collects personal data across several categories depending on your level of interaction with the platform. The categories below outline what we collect and why each category is necessary for the operation of the wwwbaji service.

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address in Pakistan (city, street, postal code)
• Pakistan CNIC number or passport number (collected during KYC verification)
• Gender (optional, collected for account personalisation)

2.2 Contact Data

• Mobile phone number (used for SMS OTP, account security alerts, and support communications)
• Email address (used for account communications, promotional emails where consented, and KYC correspondence)

2.3 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet identifiers (mobile number associated with the wallet)
• Bank account details for HBL, UBL, or Meezan Bank withdrawals (account title and IBAN)
• USDT wallet addresses where applicable
• Deposit and withdrawal transaction history (amounts, timestamps, payment methods, and status)
• Bonus usage history and wagering records associated with your account

2.4 KYC Document Data

• Scanned or photographed copies of government-issued identification (Pakistan CNIC front and back, or passport data page)
• Selfie or live photo for identity verification purposes
• Proof of address documents where required (e.g., utility bill, bank statement)

2.5 Gaming & Behavioural Data

• Betting history across all products: cricket betting, live casino, slot games, rummy, and keno
• Game session durations, login timestamps, and activity patterns
• Responsible gaming settings and limits applied to your account
• Any self-exclusion or cool-off requests made by you

2.6 Technical & Device Data

• IP address and approximate geolocation (city/region level, used for jurisdiction compliance checks)
• Device type, operating system, and browser information
• Cookie identifiers and session tokens (see Section 7)
• Platform access logs and error reports

2.7 Communications Data

• Records of all communications between you and the wwwbaji support team (live chat transcripts, email threads, support ticket content)
• Survey responses or feedback submitted voluntarily through the platform

wwwbaji collects your personal data through the following channels and mechanisms:

• Direct submission by you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or fill in any form on the platform, you are directly providing data to us.
• Automated collection: When you visit or use the wwwbaji platform, our systems automatically collect technical and behavioural data — including your IP address, device information, browser type, session duration, pages viewed, and in-game activity — through server logs, cookies, and similar tracking technologies (see Section 7).
• Payment service providers: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the payment processor shares transaction confirmation data with wwwbaji to allow us to credit or debit your account accurately.
• KYC and identity verification providers: Where wwwbaji uses third-party identity verification services to assist with document checking, those providers may return verification results and data quality scores to wwwbaji. The underlying documents are processed in accordance with this Policy.
• Anti-fraud and AML monitoring tools: Automated risk monitoring systems analyse transaction and gameplay patterns to detect suspicious activity. These systems may flag accounts for manual review based on behavioural signals.

wwwbaji uses your personal data only for the specific, lawful purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

Account Management

• Creating and maintaining your wwwbaji player account
• Authenticating your identity during login, including SMS OTP verification
• Processing deposits and withdrawals via your selected payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT)
• Applying and tracking responsible gaming settings and limits on your account

Legal & Regulatory Compliance

• Verifying that you are 21 years of age or older before permitting access to betting and casino products
• Conducting Know Your Customer (KYC) identity verification as required under our international gaming licence
• Monitoring transactions for anti-money laundering (AML) compliance and filing reports where required by law
• Maintaining records as required by applicable gaming regulatory and financial reporting obligations

Platform Operation & Security

• Detecting and preventing fraud, bonus abuse, duplicate account creation, and other prohibited conduct
• Monitoring for unusual gameplay patterns that may indicate collusion, match fixing, or exploitation of technical errors
• Conducting security investigations and enforcing the wwwbaji Terms and Conditions
• Resolving disputes and responding to player complaints

Communications & Support

• Responding to your support queries through our 24/7 live support and email channels
• Sending transactional messages including deposit confirmations, withdrawal updates, and security alerts (these cannot be opted out of as they are essential to account operation)
• Sending promotional and marketing communications, including notifications about Eid bonuses, Ramadan seasonal offers, PSL cricket betting promotions, and new slot game launches — where you have provided consent for marketing communications

Product Improvement & Analytics

• Analysing aggregated, anonymised player behaviour to improve platform performance, user experience, and game offering
• Identifying technical errors or platform bugs through error log analysis

wwwbaji processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contract performance: Processing your registration data, financial data, and gaming activity data is necessary for wwwbaji to perform its contractual obligations to you as a registered player — including operating your account, processing payments, and delivering the platform services you have signed up for.
• Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, age verification, and regulatory record-keeping — are carried out because they are required by the legal and regulatory obligations under wwwbaji's international gaming licence and applicable financial crime prevention frameworks.
• Legitimate interests: wwwbaji processes technical data, security logs, and behavioural data on the basis of its legitimate interests in maintaining platform security, preventing fraud and bonus abuse, and improving the quality of its services. Where we rely on legitimate interests, we have assessed that our interests are not outweighed by any undue prejudice to your privacy rights.
• Consent: Where we send you optional marketing communications — including promotional emails about Eid and Ramadan offers, new game announcements, or PSL cricket betting events — we rely on your explicit consent. You may withdraw consent for marketing communications at any time by contacting support at [email protected].

wwwbaji does not share your personal data with third parties except in the circumstances listed below. All third-party data processors engaged by wwwbaji are contractually bound to process your data solely as instructed by wwwbaji and to maintain appropriate technical and organisational security measures.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT gateway providers receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own regulatory frameworks as licensed financial institutions or payment service providers in Pakistan.
• Identity verification providers: Third-party KYC service providers may receive your identity documents and biometric data solely for the purpose of verifying your identity. These providers are contractually prohibited from retaining or using this data beyond the scope of the verification task.
• Gaming software and content providers: Third-party casino game developers and data feed suppliers integrated into the wwwbaji platform may receive pseudonymised session data (e.g., a session token and game outcome records) to facilitate gameplay. They do not receive your full identity data.
• Fraud prevention and AML monitoring services: Specialist security and compliance providers may process transaction and behavioural data to assist wwwbaji in detecting money laundering, fraud, and match-fixing activity.
• Legal and regulatory authorities: wwwbaji will disclose your personal data to relevant law enforcement agencies, gaming regulatory authorities, or financial intelligence units where we are legally required to do so — for example, in response to a court order, a regulatory investigation, or a mandatory AML suspicious activity report. We will notify you of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of wwwbaji's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the relevant privacy policy implications prior to the transfer taking effect.

The wwwbaji platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to help us understand how players interact with the site. Below is an overview of the cookie types used:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging in to your wwwbaji account. For detailed cookie management instructions, refer to the help section of your browser (Chrome, Firefox, Safari, Edge).

wwwbaji does not use third-party advertising cookies or behavioural retargeting cookies that track you across other websites.

wwwbaji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Active account data: All personal, financial, and gaming data associated with your account is retained for the full duration of your account being active on the wwwbaji platform.
• Post-closure retention: Following account closure — whether voluntary or by wwwbaji — your identity data, KYC documents, financial transaction records, and gaming history will be retained for a minimum of five (5) years from the date of closure. This retention period is required to comply with AML obligations, gaming licence record-keeping requirements, and potential dispute resolution needs.
• Support communications: Records of customer support interactions are retained for a minimum of three (3) years to facilitate dispute resolution and quality assurance reviews.
• Marketing consent records: Records of your marketing consent (or withdrawal of consent) are retained for the duration of your account lifecycle and for three (3) years post-closure as evidence of compliance with consent obligations.
• Technical logs: Server access logs and security event logs are retained for a minimum of twelve (12) months for security investigation purposes.

At the end of the applicable retention period, your personal data is securely deleted or anonymised such that it can no longer be associated with you as an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and product development purposes.

As a wwwbaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your full name, registered email address, and a description of your request. We will respond within a reasonable timeframe, and in any event within 30 days of receipt.

• Right of Access: You may request a copy of all personal data that wwwbaji holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic contact details directly in your account profile; for identity data corrections, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal retention obligation applies. Note that regulatory retention requirements (see Section 8) may mean that some data cannot be deleted immediately upon request.
• Right to Restriction of Processing: You may request that wwwbaji restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while you are objecting to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that your data be provided to you in a machine-readable format, or transferred directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your data carried out on the basis of wwwbaji's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes, including profiling related to marketing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

wwwbaji implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include but are not limited to:

• Encryption in transit: All data transmitted between your device and the wwwbaji platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Always ensure you see HTTPS in your browser address bar when accessing wwwbaji.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is stored using AES-256 encryption on our secured infrastructure.
• Access controls: Access to personal data within wwwbaji's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular training on data protection responsibilities.
• Two-factor authentication: We offer and strongly encourage SMS OTP-based two-factor authentication for all player accounts. Please enable this feature in your account security settings to significantly reduce the risk of unauthorised access.
• Penetration testing and security audits: The wwwbaji platform undergoes regular security assessments, including penetration testing by qualified independent security professionals.
• Incident response: In the event of a data breach that presents a risk to your rights, wwwbaji will notify affected players and relevant regulatory authorities within the timeframes required by applicable data protection obligations.

While wwwbaji takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own account credentials — see the Account Security section of our Terms and Conditions for more information.

If you are a parent or guardian and believe your child (under 21) has registered on the wwwbaji platform, please contact us immediately at [email protected]. We will investigate and act promptly to close any such account and remove the individual's data.

We strongly encourage parents and guardians to use parental control software to restrict access to online gambling platforms on devices used by minors. A range of free and paid parental control tools are available for Android, iOS, Windows, and Mac devices.

wwwbaji operates under an international gaming licence, and certain data processing activities — including use of third-party KYC verification providers, gaming software providers, and cloud infrastructure — may involve the transfer of your personal data to servers or processors located outside Pakistan.

Where such international transfers occur, wwwbaji ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Pakistan, including:

• Contractual data processing agreements that impose obligations on recipient processors to maintain adequate security and processing controls
• Selection of third-party providers operating in jurisdictions with recognised data protection frameworks
• Data minimisation — only the minimum necessary data is transferred internationally, and transfers are limited to those strictly required for the delivery of platform services

If you would like further information about the international transfers applicable to your data, please contact us at [email protected].

wwwbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email to their registered address and by displaying a prominent update notice on the platform upon login.

The "Effective Date" displayed at the top of this page will always reflect the date on which the most current version of this Policy came into force. We recommend reviewing this page periodically, particularly after receiving a notification of an update.

Your continued use of the wwwbaji platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and consent to the updated terms, to the extent permitted by applicable law. If you do not agree with any material change to this Policy, you may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data wwwbaji holds about you, please contact our team using the details below. Our support team is available 24 hours a day, 7 days a week.

When contacting us regarding a data rights request (see Section 9), please include your full name, registered email address, and a clear description of your request so we can assist you efficiently. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days.