Your Data, Your Rights

Biji Baji Privacy Policy – How We Handle Your Personal Data

Biji baji takes the privacy of every Pakistani player seriously. This policy explains exactly what data we collect, why we collect it, how we protect it, and what rights you have over it.

Effective Date: 1 June 2025  ·  Last Reviewed: June 2025

biji baji

Biji baji — protecting player privacy across Pakistan since launch

Privacy at a Glance — Full details in the sections below

Minimal Data Collection
We only collect data that is genuinely needed to run your account and comply with regulations.
No Data Selling
Biji baji never sells your personal information to third-party marketers.
Your Rights
You can access, correct, or request deletion of your data at any time.
Secure Storage
All personal and financial data is encrypted and stored on secured infrastructure.

1. Introduction

This Privacy Policy ("Policy") describes how biji baji ("biji baji", "we", "our", "us"), operator of the online gaming platform at bijibaji.click, collects, uses, stores, and protects personal data relating to players and visitors ("you", "your").

We know that handing over personal information to any online platform requires trust, and we take that trust seriously. This document is written in plain English so that every player in Pakistan — regardless of their technical background — can understand exactly what is happening with their data when they use biji baji.

This Policy applies to all personal data collected through the biji baji website, mobile browser interface, customer support channels, and any promotional or loyalty programmes operated by biji baji. It should be read alongside our Terms and Conditions.

Scope: This Policy covers data collected from players in Pakistan using the biji baji platform. By registering an account or continuing to use biji baji after this Policy's effective date, you confirm that you have read and understood its contents.

2. Data We Collect

Biji baji collects the following categories of personal data. We do not collect data beyond what is necessary for the purposes described in Section 3.

2.1 Registration Data

When you create a biji baji account, we collect: full name, date of birth, phone number, and a self-chosen username and password (passwords are hashed — they are never stored in readable form). You may optionally provide an email address for account recovery purposes.

2.2 Identity Verification Data (KYC)

To comply with anti-money laundering (AML) obligations and to confirm your age, biji baji may request: a copy of your CNIC, passport, or driving licence; a selfie photograph; and proof of your payment method (e.g., a screenshot of your Easypaisa or JazzCash account showing your registered number matches the one on your biji baji account).

2.3 Financial Transaction Data

We record all deposits, withdrawals, bonuses, and gameplay transactions associated with your account. This includes transaction amounts in PKR, transaction reference numbers, payment method type, and timestamps. We do not store full card numbers — only masked card details and the last four digits where applicable.

2.4 Device and Technical Data

When you access biji baji, our systems automatically log: IP address, device type, browser type and version, operating system, screen resolution, and session timestamps. This data is used for security, fraud prevention, and platform optimisation.

2.5 Gameplay and Behavioural Data

We maintain records of your gaming activity including: games played, bet amounts, win/loss history, session duration, bonus usage, and responsible gaming tool settings. This data is used for account management, regulatory compliance, and responsible gaming monitoring.

2.6 Communication Data

If you contact biji baji support via live chat, email, or any other channel, we retain a record of those communications for quality assurance, dispute resolution, and compliance purposes.

Sensitive Data: Biji baji does not intentionally collect sensitive personal data such as health information, religious or political beliefs, or biometric data beyond what may be contained in submitted ID documents. Identity documents are processed solely for age and identity verification and are not used for any other purpose.
Data CategoryExamplesCollected At
Registration DataName, phone number, date of birthAccount creation
KYC / IdentityCNIC copy, selfie, payment proofVerification request
Financial DataDeposit amounts, withdrawal history, PKR balanceEach transaction
Technical DataIP address, device type, browserEach session
Gameplay DataGames played, bet history, session durationDuring gameplay
Communication DataSupport chat logs, emailsWhen contacting support
biji baji

Biji baji serves players across all of Pakistan's major cities — your data is protected wherever you play from

3. How We Use Your Personal Data

Biji baji uses your personal data only for the following purposes. We do not use your data for purposes that are incompatible with what you were told at the time of collection.

  • Account management: Creating, maintaining, and securing your biji baji account; processing deposits and withdrawals in PKR; applying bonuses and promotions; responding to support queries.
  • Identity and age verification: Confirming that you meet the minimum age requirement of 18 years and that the identity you registered with is genuine.
  • Legal and regulatory compliance: Meeting our anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations as required by our licensing conditions.
  • Fraud and security monitoring: Detecting and preventing unauthorised account access, fraudulent transactions, multi-accounting, and other prohibited conduct.
  • Responsible gaming: Monitoring gameplay patterns that may indicate problematic gaming behaviour, enforcing self-exclusion requests, and applying deposit and session limits set by the player.
  • Platform improvement: Analysing aggregated, anonymised usage data to improve the biji baji platform, optimise game loading performance on Pakistani mobile networks, and develop new features.
  • Marketing communications (where consent is given): Sending you information about biji baji promotions, new games, or platform updates via SMS or notification, only where you have explicitly opted in to receive such communications. You can opt out at any time.
  • Dispute resolution: Maintaining records necessary to investigate and resolve disputes fairly, including transaction logs and communication histories.

4. Legal Basis for Processing

Biji baji processes your personal data on the following legal grounds:

  • Contract performance: Processing your registration data, transaction data, and gameplay data is necessary to provide the biji baji service you have contracted for.
  • Legal obligation: KYC, AML, and CTF-related data processing is required by the regulatory and licensing obligations under which biji baji operates.
  • Legitimate interests: Security monitoring, fraud prevention, and platform analytics are conducted on the basis of biji baji's legitimate interest in maintaining a safe, fair, and functional platform — provided these interests do not override your rights.
  • Consent: Marketing communications are only sent where you have explicitly consented. You can withdraw consent at any time by contacting support or updating your communication preferences in your account settings.

5. Sharing Your Personal Data

Biji baji does not sell your personal data to any third party. We share your data only in the following limited circumstances:

  • Payment processors: When you deposit or withdraw, your transaction data is shared with the relevant payment service provider (Easypaisa, JazzCash, NayaPay, SadaPay, or your bank/card issuer). These providers process data under their own privacy policies and are not permitted to use your data for any purpose beyond processing the transaction.
  • Game software providers: Games on biji baji are powered by licensed third-party software studios. Your player identifier and gameplay data may be shared with these providers for game delivery and RNG audit purposes. No personally identifiable information beyond a pseudonymous player ID is shared for this purpose.
  • Regulatory and law enforcement authorities: Biji baji may be required by law to disclose personal data to regulatory bodies, tax authorities, or law enforcement agencies. We will notify you of any such disclosure where legally permitted to do so.
  • Anti-fraud and AML service providers: We use third-party services to screen for known fraudulent identities and to comply with AML obligations. These providers process data under strict contractual data processing agreements.
  • Professional advisers: Lawyers, auditors, and insurers may access your data on a need-to-know basis and are bound by confidentiality obligations.
No Selling, No Brokering: Biji baji has never and will never sell player data to advertising networks, data brokers, or marketing companies. Your contact details and gaming history are not a product — they are information you have entrusted us with to deliver a service.

6. Cookies and Tracking Technologies

Biji baji uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit our platform. We use the following types:

  • Strictly necessary cookies: Required for the platform to function — including session management (keeping you logged in), security tokens, and load balancing. These cannot be disabled without breaking core functionality.
  • Functional cookies: Remember your preferences, such as preferred language, last game played, and responsible gaming settings you have configured.
  • Analytics cookies: Help us understand how players navigate the biji baji platform — which pages are visited, which games are most accessed, and where players encounter difficulties. This data is aggregated and anonymised.
  • Security cookies: Assist in detecting and preventing fraudulent activity, including session hijacking and bot behaviour.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. Biji baji does not use third-party advertising or retargeting cookies.

7. Data Security

Biji baji implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

  • TLS/SSL encryption for all data transmitted between your device and biji baji servers
  • AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
  • Password hashing using industry-standard algorithms — biji baji staff cannot read your password
  • Multi-factor authentication options for player accounts
  • Regular security assessments and penetration testing of platform infrastructure
  • Access controls limiting which biji baji staff can access personal data, on a strict need-to-know basis
  • Automated anomaly detection to identify unusual login patterns or transaction behaviour

Despite these measures, no online platform can guarantee absolute security. If you believe your biji baji account has been compromised, contact our support team immediately. In the event of a data breach that is likely to result in risk to your rights, biji baji will notify affected players without undue delay.

biji baji

Biji baji — your data stays secure whether you play from Karachi, Lahore, Quetta, or anywhere in between

8. Data Retention

Biji baji retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by law.

  • Active accounts: All account data is retained for as long as your biji baji account remains active.
  • Closed accounts: Following account closure, transaction records and KYC documentation are retained for a minimum of five years to comply with AML and regulatory record-keeping obligations. After this period, data is securely deleted or anonymised.
  • Support communications: Support chat and email logs are retained for 24 months from the date of the communication, or longer if they relate to an open dispute or regulatory review.
  • Marketing data: If you have opted in to marketing communications and subsequently withdraw consent, your data is removed from our marketing lists within 30 days.
  • Technical/session data: IP logs and session data are retained for up to 12 months for fraud detection purposes and then purged.

9. Your Privacy Rights

As a biji baji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bijibaji.click with the subject line "Privacy Request". We will respond within 30 days.

You have the right to request a copy of all personal data biji baji holds about you. We will provide this in a commonly used electronic format (CSV or PDF). The first request per 12-month period is provided free of charge. Requests that are manifestly excessive may attract a reasonable fee.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For most account details, you can update these yourself from your biji baji account settings. For KYC-related data or historical records, please contact support.

You may request deletion of your personal data. Note that we are required by law to retain certain data (transaction records, KYC documents) for a minimum period for AML compliance purposes. Data that is subject to a mandatory retention period cannot be deleted before that period expires. All other data will be deleted or anonymised promptly upon a valid request.

You may request that biji baji restricts processing of your data in certain circumstances — for example, while a dispute is being investigated or while you await a rectification request to be fulfilled. During a restriction, your data may still be stored but will not be actively used beyond what the restriction itself requires.

Where data has been processed on the basis of your consent or contract performance, you have the right to receive that data in a structured, commonly used, machine-readable format so you can transfer it to another service if you wish. Contact us to make a portability request.

If you have previously consented to receive marketing communications from biji baji, you can withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. You can opt out via your account notification settings or by contacting support. We will action opt-out requests within 48 hours.

10. Children's Privacy

Biji baji is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. Age verification is a mandatory step during the account registration and KYC process specifically to enforce this requirement.

If biji baji discovers that an account has been registered by a person under 18, that account will be immediately closed, any deposited funds returned (minus any winnings generated during underage play), and all associated personal data deleted as soon as the mandatory regulatory record-keeping period permits.

If you are a parent or guardian and have reason to believe that a minor has registered on biji baji, please contact us immediately at support@bijibaji.click so we can take prompt action.

11. Third-Party Links

The biji baji platform does not contain links to external third-party websites. All navigation within biji baji remains on the bijibaji.click domain. This Policy therefore applies to all pages and features you interact with on biji baji.

Our game library includes titles developed by licensed third-party software providers. These games run within the biji baji platform environment, and your data interaction with these games is governed by this Policy. Biji baji does not direct you to these providers' own websites during normal gameplay.

12. Changes to This Privacy Policy

Biji baji may update this Privacy Policy from time to time to reflect changes in law, technology, our business practices, or feedback from players. When we make material changes, we will:

  • Update the "Last Reviewed" date at the top of this page
  • Display a notification on the biji baji platform for a reasonable period
  • Where the change is significant, notify registered players via their registered contact details

Continued use of biji baji after a revised Policy takes effect constitutes acceptance of the updated Policy. We recommend reviewing this page periodically so you stay informed of how your data is being handled. Archived versions of previous policies are available on request.

13. Contact Us and Complaints

If you have any questions about this Privacy Policy, want to exercise any of your rights, or wish to make a complaint about how biji baji has handled your personal data, please contact us:

  • Email: support@bijibaji.click — subject line "Privacy Request" or "Privacy Complaint"
  • Live Chat: Available 24/7 from within your biji baji account dashboard
  • Response time: Privacy requests and complaints acknowledged within 48 hours, responded to in full within 30 days

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate to the relevant data protection authority under your applicable jurisdiction. Details of the relevant authority are available on request.

Easy to Reach: Our support team operates on Pakistan Standard Time. You can write to us in straightforward English — no formal legal language required. We take every privacy concern seriously and will do our best to resolve it fairly and promptly.

How Biji Baji Protects Your Privacy in Practice

Privacy isn't just a document — it's built into how we operate every day

Encrypted at Every Step

Every piece of data moving between your phone and biji baji is protected by TLS encryption. Stored data — including your ID documents and transaction history — is encrypted at rest using AES-256. Even if someone gained access to our storage, your data would be unreadable without the encryption keys.

Minimal Staff Access

Not every biji baji employee can see your personal data. Access is strictly controlled on a role-by-role basis — a support agent helping with a deposit issue sees only what they need to resolve that issue, and nothing more. All access is logged and auditable.

Opt-Out Marketing Anytime

Biji baji only sends promotional messages to players who have explicitly opted in. Opting out is instant — update your preferences in account settings and you'll receive no further marketing from us within 48 hours. We don't make it difficult to unsubscribe.

Regular Security Reviews

Biji baji's infrastructure undergoes regular security assessments to identify and resolve vulnerabilities before they can be exploited. We treat the security of your data as an ongoing operational commitment, not a one-time setup task.

KYC Documents Handled with Care

Identity documents submitted for KYC are used only for age and identity verification. They are stored encrypted, accessible only to the compliance team, and deleted after the mandatory retention period expires. They are never shared with or sold to third parties for any purpose.

Transparent Third-Party Agreements

Every third party that processes biji baji player data on our behalf — payment providers, game studios, security services — operates under a formal data processing agreement that restricts how they may use that data. They cannot use your data for their own marketing or sell it further down the chain.

Privacy Protected — Ready to Play on Biji Baji?

Join over 500,000 Pakistani players who trust biji baji. Register free, deposit via Easypaisa or JazzCash, and start playing — your data is in safe hands.

Responsible Gaming: Biji baji is for adults aged 18 and above. If gaming ever becomes a concern, use the self-exclusion, deposit limit, and session time tools available in your account settings. Visit our Responsible Gaming page for support resources. Play within your means and keep it enjoyable.