At bbaji, your privacy is not an afterthought — it is built into every part of how we operate. This Privacy Policy explains in plain English exactly what personal data bbaji collects from players across Pakistan, how that data is used, who it may be shared with, and what rights you hold over your own information. We encourage all registered and prospective players to read this document in full before creating a bbaji account.
These six highlights cover the most critical points of bbaji's privacy commitments. They supplement — but do not replace — the full policy text below.
bbaji collects only the personal data required to operate a licensed gaming platform — including your name, CNIC details, mobile number, email address, and financial transaction data. We do not collect data that is unnecessary for our legitimate operational and compliance purposes.
Your data is used to verify your identity, process PKR deposits and withdrawals via JazzCash and EasyPaisa, comply with KYC and anti-money laundering obligations, provide customer support, and where you opt in, send you promotions tailored to the Pakistani market including PSL cricket betting offers.
bbaji does not sell your personal data to third parties. Data is shared only with regulated service providers directly involved in operating bbaji — such as payment processors, KYC verification partners, and fraud detection services — all under strict confidentiality and data protection agreements.
All personal and financial data transmitted to and from bbaji is protected using industry-standard TLS encryption. Sensitive data at rest is stored using AES-256 encryption. bbaji conducts regular security audits, penetration testing, and vulnerability assessments to protect player accounts from unauthorised access.
bbaji retains your personal data for a minimum of five years following account closure, in accordance with our international licensing obligations and applicable anti-money laundering regulations. After the mandatory retention period expires, data is securely deleted or anonymised so it can no longer be linked back to you.
As a bbaji player, you have the right to access, correct, restrict, or request deletion of your personal data, subject to legal retention requirements. You may also object to certain types of data processing and withdraw marketing consent at any time. Contact [email protected] to exercise any of these rights free of charge.
This Privacy Policy ("Policy") is published by bbaji, the operator of the online gaming and sports betting platform accessible at bbaji.cam ("bbaji", "we", "us", "our"). This Policy describes how bbaji collects, uses, stores, and shares personal data relating to individuals ("you", "Player", "User") who access or use any part of the bbaji platform, including its website, mobile interface, live casino, sports betting services, and all related features.
bbaji is committed to protecting the privacy of all its players across Pakistan, including those based in major cities such as Karachi, Lahore, Islamabad, and Faisalabad. We process personal data in a manner that is transparent, lawful, and aligned with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR), which we voluntarily adopt as a benchmark for our privacy standards regardless of the jurisdiction from which you access our platform.
By registering a bbaji account or continuing to use the bbaji platform after the publication of this Policy, you acknowledge that you have read and understood its contents and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bbaji platform.
For the purposes of applicable data protection law, bbaji acts as the data controller in respect of personal data collected from players using the bbaji platform. As data controller, bbaji determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.
Where bbaji engages third-party service providers to assist in delivering platform services — such as payment processors, KYC verification providers, or cloud infrastructure partners — those providers act as data processors under written agreements that impose strict data protection obligations consistent with this Policy. bbaji remains responsible for ensuring those processors handle your data appropriately.
For all data protection enquiries, players may contact bbaji using the details provided in Section 16 of this Policy. bbaji aims to respond to all data protection requests within thirty (30) days of receipt.
bbaji collects personal data across several categories depending on how you interact with the platform. The following table summarises the main categories of personal data we collect and retain:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, gender | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, Pakistani mobile number, residential address | Account communication, support, verification, marketing (where opted in) |
| Financial Data | JazzCash / EasyPaisa account references, HBL / UBL / Meezan Bank account identifiers, deposit and withdrawal amounts in PKR | Transaction processing, anti-money laundering compliance, fraud prevention |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform security, fraud detection, performance optimisation |
| Gaming Data | Game history, betting activity, win/loss records, session durations, responsible gaming tool usage | Regulatory compliance, responsible gaming monitoring, personalisation |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Customer service delivery, quality assurance, dispute resolution |
| Marketing Preferences | Opt-in/opt-out records, promotional response history | Managing marketing consent, personalising promotional communications |
bbaji does not intentionally collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless specifically required to comply with a legal or regulatory obligation. If such data is provided voluntarily (for example, within a support message), bbaji will treat it with the highest level of care and use it solely for the purpose for which it was submitted.
bbaji collects personal data through a variety of means depending on the nature of your interaction with the platform:
The majority of personal data held by bbaji is provided directly by you when you register a bbaji account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account profile. You are responsible for ensuring that the information you provide is accurate, complete, and kept up to date.
When you access and use the bbaji platform, our servers automatically collect certain technical data including your IP address, device identifiers, browser type and version, operating system, referring URLs, pages visited, and time spent on each page. This data is collected via server logs, cookies, and similar tracking technologies. See Section 7 for full details on our use of cookies.
bbaji may receive personal data about you from third-party sources in limited circumstances, including:
bbaji processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:
bbaji uses the personal data it collects for the following specific purposes:
bbaji uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and where you have consented, to deliver relevant promotional content. A "cookie" is a small text file placed on your device by a website server. Cookies cannot execute programmes or deliver viruses to your device.
These cookies are strictly necessary for the bbaji platform to function and cannot be disabled. They enable core features such as maintaining your bbaji Login session, remembering your language and display preferences, and securing the platform against cross-site request forgery attacks. No consent is required for essential cookies.
With your consent, bbaji uses analytics cookies to collect aggregated, anonymised data about how players navigate the platform — including which games are most popular, how long sessions last, and which pages generate the most engagement. This data is used exclusively to improve platform performance and the overall player experience.
With your explicit consent, bbaji may use marketing cookies to deliver promotions and advertisements relevant to your interests as a bbaji player. bbaji does not use marketing cookies to track your activity across third-party websites.
You may manage, restrict, or delete cookies at any time through your browser settings. Please note that disabling essential cookies will impair the functionality of the bbaji platform and may prevent you from logging in or accessing certain features. Non-essential cookie consent can also be managed through the cookie preference centre accessible in the bbaji platform footer.
bbaji does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only in the following specific and limited circumstances:
As an internationally licensed gaming platform, bbaji may process or store player data on servers located outside Pakistan. Where personal data is transferred to a country that does not provide the same level of data protection as your home jurisdiction, bbaji takes appropriate safeguards to ensure that your data remains protected to the standard described in this Policy.
Such safeguards may include:
You may request further information about the specific safeguards applied to international data transfers by contacting bbaji at the address provided in Section 16.
bbaji implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
Whilst bbaji takes all reasonable precautions to protect your data, no internet-based system is completely immune from security threats. You are also responsible for protecting your bbaji Login credentials and must notify us immediately at [email protected] if you suspect any unauthorised access to your account.
bbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to mandatory minimum retention periods imposed by bbaji's international gaming licence and applicable financial regulations.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Licensing obligation, AML compliance |
| Financial Transaction Records | Duration of account + 5 years post-closure | AML regulations, tax and audit requirements |
| Gaming & Betting History | Duration of account + 5 years post-closure | Licensing obligation, dispute resolution |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory requirement |
| Customer Support Records | 3 years from last interaction | Dispute resolution, quality assurance |
| Marketing Consent Records | Until consent withdrawn + 3 years | Proof of lawful marketing basis |
| Technical / Log Data | 12 months from collection | Security monitoring, fraud investigation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytics purposes.
Subject to applicable law and our regulatory obligations, you have the following rights in respect of the personal data bbaji holds about you. All rights may be exercised free of charge by contacting bbaji at [email protected]. bbaji aims to respond to all rights requests within thirty (30) days.
As a bbaji player, you hold meaningful rights over your personal data. Here is a plain-English summary of each right and how to exercise it.
You may request a copy of all personal data bbaji holds about you. We will provide this in a commonly used electronic format within 30 days of your verified request.
If any personal data bbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to mandatory retention periods under our licensing obligations.
You may request that bbaji restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or an objection is being assessed.
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format for transfer to another service provider.
You may object at any time to processing carried out on the basis of bbaji's legitimate interests, including profiling for responsible gaming purposes, unless bbaji can demonstrate compelling grounds that override your interests.
Where a decision that significantly affects you is made solely by automated means, you have the right to request human review of that decision and to contest the outcome.
Where processing is based on your consent — such as marketing emails — you may withdraw that consent at any time via your account settings or by contacting [email protected], without affecting prior lawful processing.
bbaji sends marketing communications — including promotional bonus offers, new game announcements, PSL cricket betting promotions, and bbaji Casino updates — only to players who have explicitly opted in to receive such communications at the time of account registration or subsequently through their account settings.
Marketing messages may be delivered via email, SMS to your registered Pakistani mobile number, or in-platform notifications. The frequency and content of such communications will depend on your registered preferences and your activity on the bbaji platform.
You may withdraw your marketing consent and opt out of all promotional communications at any time through any of the following methods:
Withdrawal of marketing consent will be processed within five (5) business days. Please note that opting out of marketing does not affect transactional and account communications — bbaji will continue to send you essential notifications relating to your account, deposits, withdrawals, and security alerts regardless of your marketing preferences.
The bbaji platform is strictly intended for adult players aged 21 years and over. bbaji does not knowingly collect personal data from individuals under the age of 21 and does not permit minors to register or use the platform under any circumstances.
As part of the account registration process, all applicants are required to provide their date of birth and consent to age verification checks conducted by bbaji's KYC verification partners. bbaji reserves the right to request additional documentary evidence of age — such as a copy of a valid CNIC or passport — at any stage of the account lifecycle if there is any reason to doubt a player's declared age.
Where bbaji discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, bbaji will take immediate steps to:
If you are a parent or guardian and believe that a minor in your care has registered a bbaji account or provided personal data to bbaji without your knowledge or consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
bbaji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The date of the most recent update is displayed at the top of this page.
Where changes to this Policy are material — meaning they significantly alter the rights of players or the way in which bbaji processes personal data — bbaji will notify registered players via email to the address associated with their account and/or via a prominent notice on the bbaji platform at least fourteen (14) days before the changes take effect.
For minor, non-material changes — such as typographical corrections, clarifications, or updates to contact details — bbaji may update the Policy without advance notice. In all cases, the version of the Policy published on this page at the time of your use of the bbaji platform constitutes the governing version.
Your continued use of the bbaji platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any changes made to this Policy, you should cease using the bbaji platform and may request account closure by contacting customer support.
If you have any questions, concerns, or requests relating to this Privacy Policy or bbaji's handling of your personal data, please do not hesitate to get in touch. bbaji is committed to addressing all privacy-related enquiries promptly, transparently, and in good faith.
You may contact bbaji's privacy team using the following details:
bbaji aims to respond to all privacy enquiries within thirty (30) calendar days of receipt. Where a request is particularly complex or where a large volume of requests has been received, bbaji may extend this period by a further sixty (60) days and will notify you of the extension and the reason for it within the initial thirty-day window.
If you are not satisfied with bbaji's response to your privacy enquiry, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. bbaji encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concerns before escalation.
Now that you understand how bbaji protects your personal data, you can play with complete peace of mind. Explore Pakistan's most trusted online casino — cricket betting, Teen Patti, Andar Bahar, jackpot slots, and live dealer games — all secured with enterprise-grade encryption and backed by a team that takes your privacy seriously.
21+ Only · Play Responsibly · Your Data is Protected