Privacy Policy – Baji 999 Data Protection for Pakistani Players

This Privacy Policy explains how Baji 999 collects, stores, uses and protects your personal data when you access or use the Baji 999 platform — including the website, mobile application and all associated services. It applies to all registered players and visitors based in Pakistan or accessing the platform from any other location.

By registering an account or using Baji 999, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described here. If you do not agree, please do not use the platform. This policy should be read alongside the Baji 999 Terms and Conditions.

Baji 999 acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your data and are responsible for ensuring it is handled in accordance with this policy and applicable data protection principles.

Baji 999 collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information obtained from third parties where necessary for verification or fraud prevention.

Information you provide directly:

• Full name, date of birth, mobile number and email address provided at registration.
• National identity information submitted for age or identity verification (such as CNIC number).
• Payment method details including Easypaisa account number, JazzCash mobile number, NayaPay or SadaPay handles, bank account details for IBFT, or Visa/Mastercard information. Raw card or account credentials are processed by certified payment gateways and are not stored on Baji 999 servers.
• Communications you send to the Baji 999 support team via email, live chat or any other channel.
• Responsible gaming preferences, deposit limits and self-exclusion requests you set in your account.

Information generated by platform use:

• Account login history including timestamps and IP addresses.
• Betting and gameplay history — games played, amounts wagered, outcomes and session durations.
• Deposit and withdrawal transaction history.
• Device information including browser type, operating system and screen resolution, used for platform optimisation.
• Cookie and session data (see Section 5 for full details).

Information from third parties:

• Identity verification results from certified KYC (Know Your Customer) providers.
• Fraud risk scores from payment fraud prevention services.
• Responsible gaming flags from self-exclusion registries where applicable.

Baji 999 uses your personal data only for purposes that are either necessary to provide the service you have signed up for, required by law, or for which you have given explicit consent. The table below summarises the main uses:

Baji 999 does not use personal data for automated decision-making that produces legal or similarly significant effects — for example, automatic permanent account bans are reviewed by a human team member before being applied.

Baji 999 processes your personal data on one of the following legal grounds, depending on the specific purpose:

• Contract performance: Where processing is necessary to provide the Baji 999 service you have registered for — including account management, deposits, withdrawals and gameplay.
• Legal obligation: Where processing is required to comply with applicable law — including anti-money laundering regulations, age verification requirements and responsible gaming obligations.
• Legitimate interests: Where processing serves a genuine business purpose that does not override your rights — including fraud prevention, security monitoring, platform analytics and responsible gaming oversight.
• Consent: Where you have actively opted in — specifically for marketing communications via email or SMS. You may withdraw consent at any time without affecting your account.

Baji 999 uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device by your browser when you visit a website. They help the platform function correctly and allow us to analyse how the platform is used.

The types of cookies used on Baji 999 are:

• Essential cookies: Required for the platform to function — including session management, login state, security tokens and bet slip maintenance. These cannot be disabled without breaking core platform functionality.
• Analytical cookies: Used to understand how players use the platform — which pages are visited most, where players drop off and how long sessions typically last. This data is aggregated and anonymised; no individual player profiles are built from it.
• Preference cookies: Store your platform settings such as language preference, odds format and notification preferences so you don't need to reset them each session.
• Marketing cookies (opt-in only): Used only if you have opted into personalised promotional communications from Baji 999. These help ensure that bonus offers shown to you are relevant to your gaming activity. You can opt out at any time from account settings.

You can manage cookie preferences in your browser settings. Blocking all cookies may affect your ability to use some features of the Baji 999 platform, particularly login and bet placement.

Baji 999 does not sell, rent or trade your personal data. Data is shared with third parties only in the following circumstances, all of which are necessary to operate the platform or fulfil legal obligations:

• Identity verification providers: Third-party KYC services that verify your age, identity and address as required by regulatory obligations. These providers process your data under strict confidentiality agreements.
• Payment processors: Certified payment gateway partners — including those supporting Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card processing — receive transaction data necessary to complete your PKR deposits and withdrawals. They do not receive your gameplay data.
• Fraud prevention services: Specialist providers that analyse transaction patterns and login behaviour to identify and prevent fraud. Data shared is limited to what is necessary for fraud risk assessment.
• Game providers: Where you play games provided by third-party studios (such as Spribe, Pragmatic Play or Evolution Gaming), your account reference and bet data are transmitted to the relevant provider's systems to run the game. Game providers are contractually prohibited from using this data for any purpose outside game delivery.
• Regulatory and law enforcement bodies: Where Baji 999 is legally required to disclose player data in response to a valid legal process, court order or regulatory request, we will comply. Where permitted by law, we will notify the relevant player of such a disclosure.

All third parties with whom Baji 999 shares data are required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared.

Baji 999 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations.

• Active account data: Retained for the duration of your account being open and active on Baji 999.
• Transaction and gameplay records: Retained for a minimum of five years from the date of the transaction. This is required to comply with anti-money laundering regulations applicable in the gaming industry.
• Identity verification documents: Retained for five years from the date of verification, or from the date the account is closed, whichever is later.
• Support communications: Retained for three years from the date of the communication to enable resolution of any subsequent disputes.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever comes first.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised aggregated data may be retained indefinitely for analytical purposes.

Baji 999 applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the Baji 999 platform.
• Encryption at rest for sensitive personal data stored on Baji 999 servers, including identity and payment reference data.
• Role-based access controls ensuring that Baji 999 staff only access the player data necessary for their specific role.
• Continuous automated monitoring for unusual login activity, including multiple failed attempts and logins from unfamiliar locations.
• Regular security audits and penetration testing by qualified third-party security professionals.
• Two-factor authentication (2FA) available for all player accounts and required internally for staff accessing administrative systems.

As a Baji 999 player, you have the following rights over the personal data the platform holds about you. To exercise any of these rights, contact our support team at support@baji999-win.com with your request. We will respond within 30 days.

Baji 999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted at the point of registration and may be requested again at any point during the account's lifetime.

If Baji 999 discovers that a minor has registered an account — whether through our own monitoring or through a report — the account will be closed immediately, all balances including deposits will be forfeited, and any personal data collected will be deleted as soon as is legally permissible.

If you believe that a minor may be using a Baji 999 account, please contact our support team immediately at support@baji999-win.com. We take reports of this kind seriously and act on them as a priority.

Baji 999 may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features or data practices. When changes are material — particularly those that affect how your data is used or shared — we will notify you via the email address registered to your account at least 14 days before the changes take effect.

The updated policy will always be accessible on this page with the "Last updated" date revised accordingly. We encourage you to review this page periodically. Your continued use of the Baji 999 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns or requests relating to this Privacy Policy or the way Baji 999 handles your personal data, please contact our support team. We are available 24/7 in Urdu and English.

• Email: support@baji999-win.com
• Live Chat: Available on the Baji 999 platform after login, 24/7.
• Response time: We acknowledge all privacy-related queries within 24 hours and aim to resolve them within 30 days.

For formal data access, correction or deletion requests, please email us with the subject line "Privacy Request" and include your registered mobile number so we can verify your identity before processing the request.