baji77 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how baji77 ("baji77", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at baji77.im, collects, processes, stores, and protects the personal data of individuals ("Players", "Users", "you") who access or use our services.

baji77 is committed to handling your personal information responsibly and in accordance with internationally recognised data protection standards. This Policy applies to all personal data collected through the baji77 website, mobile platform, live chat support system, email correspondence, and any other channel through which you interact with us.

By registering an account on baji77, accessing the platform, or providing us with personal information through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the baji77 platform and contact our support team to arrange account closure.

This Policy should be read alongside baji77's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and baji77.

2. Data We Collect

baji77 collects the following categories of personal data from players. We collect only what is genuinely necessary for the purposes described in this Policy — we do not collect data speculatively or in excess of what our operations require.

3. How We Collect Your Data

baji77 collects personal data through the following means:

• Direct collection at registration: When you create a baji77 account, you voluntarily provide your name, date of birth, contact details, and other registration information.
• KYC document submission: When you submit identity documents to complete verification before your first withdrawal, we collect the data present in those documents.
• Deposits and withdrawals: When you transact through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or USDT TRC20, relevant payment reference data is collected to record and reconcile your transactions.
• Platform usage: As you navigate baji77, our servers automatically log technical data including your IP address, device identifiers, browser information, and session activity.
• Customer support interactions: When you contact baji77 via live chat or email, we retain records of those communications to ensure continuity of support and to resolve disputes.
• Cookies and tracking technologies: baji77 uses cookies and similar technologies as described in Section 6 of this Policy to collect browsing and preference data.

4. How We Use Your Data

baji77 processes your personal data only for lawful and specified purposes. The following table sets out the primary purposes for which we use the data we collect:

5. Legal Basis for Processing

baji77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary for the performance of the contract between you and baji77 — i.e., to provide you with the gaming, betting, and payment services you have registered to use.
• Legal obligation: Processing is required to comply with applicable regulatory obligations, including KYC requirements, AML obligations, and record-keeping duties imposed on gaming operators.
• Legitimate interests: Processing is necessary for baji77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending promotional and marketing communications, or placing non-essential cookies — baji77 relies on your freely given, informed, and specific consent. You may withdraw this consent at any time.

6. Cookies & Tracking Technologies

baji77 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with the site. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account login sessions, security tokens, and session state management. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember your preferences such as language settings, display preferences, and responsible gaming limits you have configured. Disabling them may affect the quality of your experience.
• Analytical cookies: baji77 uses first-party analytical cookies to understand aggregate platform usage patterns — for example, which game categories are most popular among Pakistani players, and where users encounter difficulties in the deposit flow. This data is processed in aggregated, non-identifiable form.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including identifying suspicious login patterns, detecting bot activity, and flagging unusual wagering behaviour that may indicate account compromise.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing the baji77 platform. baji77 does not use third-party advertising or behavioural tracking cookies.

7. Data Sharing & Disclosure

baji77 does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: To facilitate deposits and withdrawals, baji77 shares relevant transaction data with your chosen payment provider — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or a USDT TRC20 processing partner. These providers act as independent data controllers and are subject to their own privacy policies.
• KYC and identity verification services: baji77 may engage third-party identity verification providers to assist with the KYC process. Such providers are bound by confidentiality obligations and are permitted to use your data only for verification purposes.
• Game providers: baji77's casino and slot content is provided by third-party game studios. Where required for game session integrity or progressive jackpot management, limited technical data may be shared with these providers. No personally identifiable information beyond a pseudonymous player identifier is shared in this context.
• Regulatory and law enforcement authorities: baji77 may disclose your personal data to competent authorities where required to do so by applicable law, court order, or regulatory mandate, including for the purposes of AML investigations or fraud prevention.
• Professional advisers: baji77 may share data with legal counsel, auditors, or other professional advisers where necessary, subject to binding professional confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of the baji77 business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

8. International Data Transfers

baji77 operates internationally and may process or store personal data on servers located outside of Pakistan. Where your data is transferred to a country that does not provide an equivalent level of data protection to that available in your jurisdiction, baji77 implements appropriate safeguards to ensure that your data remains protected to a standard consistent with this Privacy Policy.

Such safeguards may include the use of standard contractual clauses, data processing agreements that impose equivalent privacy obligations on recipient entities, or transfers to recipients in jurisdictions that provide adequate protection under internationally recognised frameworks.

If you have questions about the specific safeguards applied to international transfers of your data, you may contact our data protection team at [email protected].

9. Data Retention

baji77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable regulatory or legal obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active baji77 account is retained for the duration of the account's existence plus a defined post-closure period necessary for regulatory compliance.
• KYC and identity documents: Identity documents and verification records are retained for a minimum period consistent with AML regulatory requirements applicable to online gaming operators. This period is typically five (5) years from the date of account closure.
• Financial transaction records: Records of all deposits, withdrawals, and wagers are retained for a minimum of five (5) years to satisfy financial record-keeping and AML obligations.
• Communications records: Support interactions and correspondence are retained for a period of three (3) years following the resolution of the relevant enquiry or dispute.
• Marketing consent records: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with consent-based marketing obligations.
• Technical and log data: Server logs and technical data are retained for a period of up to twelve (12) months for security monitoring purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified or identifiable individual.

10. Your Privacy Rights

baji77 recognises and respects the privacy rights of all players. Depending on your circumstances, you may be entitled to exercise the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data baji77 holds about you, along with information about how it is being processed.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For contact details and account information, you may also update certain data directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to exceptions — for example, baji77 may be required to retain certain data to comply with legal obligations even following a deletion request.
• Right to restriction of processing: You may request that baji77 restricts processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you do not wish the data to be deleted.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that baji77 provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of baji77's legitimate interests, including profiling for responsible gaming monitoring. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where baji77 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Security Measures

baji77 takes the security of your personal data seriously. We implement a range of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and baji77's servers.
• Encrypted storage of passwords using industry-standard hashing algorithms — baji77 staff cannot view your password in plaintext.
• Access controls that restrict internal access to personal data to only those staff members who require it for their specific role.
• Regular security assessments and penetration testing of the baji77 platform infrastructure.
• Two-factor authentication (2FA) availability for all player accounts, which baji77 strongly recommends enabling.
• Monitoring systems that detect and alert on anomalous access patterns, unusual login behaviour, and potential account compromise.
• Secure document handling procedures for KYC files, including encrypted storage and restricted access permissions.

While baji77 employs robust security measures, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that is likely to result in a significant risk to your rights and interests, baji77 will notify affected players without undue delay.

12. Children & Minors

The baji77 platform is strictly for individuals aged 21 years or older. baji77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the registration and KYC process, and baji77 employs multiple layers of verification to detect and prevent underage registration.

If baji77 becomes aware that a registered account belongs to an individual under 21 years of age, that account will be immediately suspended, all associated balances will be forfeited, and any personal data collected will be deleted in accordance with our data retention procedures, subject to any regulatory requirements to retain records of the age verification failure.

If you have reason to believe that an individual under the age of 21 has registered on the baji77 platform, please contact us immediately at [email protected] so that we can take prompt action.

13. Third-Party Links

The baji77 platform may contain links to third-party websites or services — for example, links to payment provider portals or game provider information pages. This Privacy Policy applies solely to data processed by baji77 through the baji77.im platform. baji77 is not responsible for the privacy practices of any third-party website or service, and we encourage you to review the privacy policies of any third-party site you visit.

The inclusion of a link to a third-party site on the baji77 platform does not constitute an endorsement of that site's privacy practices or any other aspect of its operations.

14. Changes to This Privacy Policy

baji77 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email or via an in-platform notification.

Your continued use of the baji77 platform following publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. We encourage you to review this Policy periodically. If you do not agree with any changes, you should discontinue use of the platform and contact support to request account closure.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to baji77's data processing practices, please contact our data protection team through any of the following channels:

• Live Chat: Available directly on the baji77 platform, 24 hours a day, 7 days a week — the fastest route for urgent privacy concerns.
• Email: [email protected] — for written data rights requests, please include your registered account username and a clear description of your request.

baji77 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. For complex data rights requests, we may extend this period by a further 30 days where necessary, and will inform you accordingly.