baj999 Privacy Policy

1. Who We Are

baj999 is an online casino and sports betting platform operating at baj999.co and targeting English-speaking players in Pakistan. For the purposes of this Policy, baj999 is the data controller — that is, the entity that determines the purposes and means of processing your personal data.

References to "personal data" in this Policy mean any information that relates to an identified or identifiable individual, including but not limited to your name, CNIC number, mobile number, email address, payment details, and betting activity records.

2. Data We Collect

baj999 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, CNIC or passport number, nationality, and a facial photograph (submitted as part of KYC verification).
• Contact Data: Pakistani mobile number, email address, and residential address (required for KYC).
• Financial Data: JazzCash account number, Easypaisa mobile number, bank account details, transaction history, deposit and withdrawal records.
• Account Data: Username, hashed password, account creation date, login timestamps, IP addresses, and device identifiers.
• Gaming Data: Bets placed, games played, wager amounts, winnings and losses, bonus usage, and responsible gaming settings.
• Technical Data: Browser type, operating system, mobile device model, screen resolution, and session duration data collected automatically during platform use.
• Communications Data: Records of support chat sessions, emails sent to baj999, and any feedback or complaints submitted.

3. How We Collect Your Data

baj999 collects personal data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, or contacting support.
• Automated collection: Technical and gaming data collected automatically as you navigate and use the Platform, including via cookies and server logs.
• Third-party providers: Identity verification data from KYC service providers; payment confirmation data from JazzCash, Easypaisa, and banking partners.

4. Legal Basis for Processing

baj999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide you with the Platform services, operate your Account, process transactions, and honour bets — all necessary to fulfil our agreement with you.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, age verification requirements, and regulatory obligations including KYC.
• Legitimate interests: Processing necessary for fraud prevention, platform security, abuse detection, and improving platform functionality.
• Consent: Processing for optional marketing communications, where you have expressly opted in. You may withdraw consent at any time.

5. How We Use Your Data

baj999 uses your personal data for the following purposes:

• Registering and maintaining your Account, verifying your identity and age.
• Processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, and other supported payment channels.
• Settling bets, crediting winnings, and managing bonus entitlements.
• Detecting and preventing fraudulent activity, money laundering, and multi-accounting.
• Communicating with you about your Account, including security alerts and transaction confirmations.
• Sending promotional offers and bonus notifications, where you have consented to marketing communications.
• Administering responsible gaming tools including deposit limits, self-exclusion, and reality checks.
• Improving the Platform's functionality and user experience based on aggregated behavioural data.
• Complying with applicable legal and regulatory reporting obligations.

6. Data Sharing

baj999 does not sell personal data. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment partners receive financial data solely to process your transactions.
• KYC providers: Identity verification data is shared with third-party KYC service providers under strict data processing agreements.
• Game studios: Technical session data may be shared with casino game providers (e.g., Pragmatic Play, Evolution) to operate their games within the baj999 platform.
• Legal authorities: baj999 may disclose personal data to law enforcement, regulators, or government agencies where required by applicable law or in response to a lawful request.
• Corporate transactions: In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party data processors engaged by baj999 are required to implement appropriate security measures and to process personal data only in accordance with baj999's instructions.

7. International Data Transfers

Given that baj999 uses internationally operating game studios and payment processors, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, baj999 ensures that appropriate safeguards are in place — including contractual protections equivalent to those described in this Policy — to maintain the security of your data regardless of where it is processed.

8. Data Retention

baj999 retains personal data for as long as your Account is active and for a period thereafter as required by applicable legal and regulatory obligations. In practice:

• Account and identity data is retained for a minimum of five (5) years following Account closure, in line with standard AML compliance requirements.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Marketing preferences are retained until you withdraw consent or close your Account.
• Technical and log data is retained for up to twelve (12) months and then anonymised or deleted.

You may request earlier deletion of data that baj999 is not legally obligated to retain by contacting our support team.

9. Cookies & Tracking Technologies

baj999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your language, currency, and display preferences between sessions.
• Analytics cookies: Used to understand how users navigate the Platform, which pages are visited most, and where errors occur. Data is aggregated and does not identify individual users.

baj999 does not deploy third-party advertising or behavioural targeting cookies. You may control cookie settings via your browser settings; however, disabling strictly necessary cookies may impair Platform functionality.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by baj999:

• Access: Request a copy of the personal data baj999 holds about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data where baj999 has no legal obligation to retain it.
• Restriction: Request that baj999 restrict processing of your data pending investigation of a complaint.
• Portability: Request transfer of your personal data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: Withdraw consent to marketing communications at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact baj999 support via live chat or email. Requests will be acknowledged within five (5) working days and resolved within thirty (30) days.

11. Children's Privacy

baj999 is strictly an adult platform. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is conducted at registration, and additional KYC checks may be triggered at any time. If baj999 discovers that personal data has been collected from a person under 18, that Account will be immediately closed and all associated data deleted, subject to any legal retention obligations.

Parents or guardians who believe their child has registered on baj999 should contact our support team immediately.

12. Security Measures

baj999 implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored on our infrastructure.
• Two-factor authentication (SMS OTP) available to all Account holders.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments by independent security professionals.
• Automated fraud detection and anomalous login monitoring.

While baj999 takes all reasonable steps to protect your data, no system is entirely impenetrable. In the event of a data breach affecting your rights, baj999 will notify affected users in accordance with applicable legal requirements.

13. Policy Updates

baj999 may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or data processing practices. Material changes will be communicated to registered users via email notification or a prominent notice on the Platform. The effective date at the top of this Policy will be updated accordingly. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

14. Contact Us

For any privacy-related queries, requests to exercise your data rights, or concerns about how baj999 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the baj999 Platform
• Response Time: Acknowledgement within 5 working days; full resolution within 30 days

This Privacy Policy was last reviewed and updated on 1 January 2026.