How Personal Information Is Handled

Personal data is any information that can identify a user directly or indirectly. The platform may collect only the information needed to operate accounts, process transactions, maintain security, meet legal duties, and manage responsible service access.

Personal data may include:

• full name, date of birth, address, mobile number, and email address;
• account login details, account settings, and communication records;
• identity documents where verification is required;
• payment information, deposit and withdrawal records, and transaction references;
• device data, IP address, browser type, location signals, and website usage information.

The platform applies technical and organisational controls to protect personal information. These controls may include restricted access, encrypted transmission where available, internal access rules, monitoring of suspicious activity, staff confidentiality duties, and secure storage practices.

Users have the right to:

• request access to personal data held about them;
• ask for correction of inaccurate or incomplete information;
• request deletion where retention is no longer required by law, compliance, dispute handling, or account obligations;
• withdraw consent for optional processing, subject to legal and service limits.

Personal data is handled in line with applicable laws and regulatory duties in Pakistan, including cybercrime, payment, anti money laundering, tax, court order, and consumer protection requirements where relevant.

Collected data is used for lawful, fair, and transparent purposes linked to the online services. The platform does not use personal information for unrelated purposes unless the user has given consent or a legal duty applies.

Information may be used to:

• create, manage, and secure user accounts;
• verify identity, age, location, and account eligibility;
• process deposits, withdrawals, refunds, and payment checks;
• respond to user requests, complaints, and account enquiries;
• improve website performance, service reliability, and account safety controls;
• conduct analytics related to traffic, errors, device use, and service quality;
• send service notices and permitted marketing messages where consent has been given;
• detect fraud, misuse, unauthorised access, and prohibited activity;
• comply with legal obligations, regulatory requests, audits, and dispute procedures.

Marketing use is limited to permitted communication and may be stopped by the user through available account or support options.

Users may request access to their personal information and may ask for updates where data is incorrect. Requests may require identity confirmation before any account record is changed or released.

Correction and deletion requests are handled through the following approach:

1. The user submits a request through the official support or account contact channel.
2. The platform verifies the identity of the requester.
3. Incorrect information is corrected where the request is valid.
4. Data is deleted or anonymised where there is no legal, payment, security, tax, dispute, or compliance reason to retain it.

Some records may need to remain stored for a lawful retention period. These records may include payment history, identity verification records, fraud prevention logs, and dispute related information.

By using Baji Live, users consent to reasonable security checks, account verification, and payment data processing by banks, payment gateways, wallet providers, and other authorised service providers involved in transactions.

The website and related services are intended only for users aged 18 years or older. Accounts must not be created or used by minors.

The operator may not be able to confirm a user age unless identification documents are requested and reviewed. If a parent or legal guardian believes that a minor has submitted personal data, a request may be sent through the official contact channel with sufficient details for review.

After verification, the operator may:

• restrict or close the account;
• delete personal data where lawful and practical;
• retain limited information where required for legal, fraud prevention, payment, or dispute purposes.

Personal data may be processed outside Pakistan where service providers, payment partners, hosting providers, analytics providers, or security vendors operate. Such processing may be needed for account access, transactions, fraud checks, support, website operation, and compliance.

By using the site, users consent to the transfer and processing of personal data in these locations. The platform requires partners to handle confidential information responsibly and to use it only for agreed service, security, payment, or legal purposes.

External partners are expected to apply suitable safeguards, including:

• confidentiality commitments;
• access limits based on service need;
• secure storage and transmission controls;
• deletion or return of data when no longer needed, subject to legal retention.

This Privacy Policy may be read together with any legal disclaimer, website terms, account rules, responsible play rules, payment rules, and bonus terms that apply to the services. A disclaimer may affect how certain rules are applied, interpreted, limited, or enforced where the law permits.

Acceptance may occur through electronic confirmation, account registration, continued website use, signature, or accession to the applicable terms. The accepted version applies to the user unless a later version is published and becomes effective under the policy update process.

Nothing in a disclaimer removes rights that cannot be excluded under applicable law in Pakistan.

Cookies are small text files stored on a device when a user visits websites. They help the site remember settings, measure traffic, support security, and improve online service performance.

Cookies may be used for:

• website statistics and traffic measurement;
• behaviour analysis related to pages, clicks, sessions, and device use;
• personalisation of language, account preferences, and display settings;
• fraud prevention, login security, and technical troubleshooting;
• service improvement based on aggregated website information.

Cookie data may be retained for up to 1 year unless a shorter period applies or the user removes cookies through browser settings. Some cookies may be necessary for account access, payment flow, fraud prevention, or website security.

Use of Baji Live indicates full acceptance of this Privacy Policy, including data collection, processing, storage, disclosure, cookie use, and retention practices described in this document.

If this policy is updated, the current published version prevails over any earlier version. Continued use of the services after publication of the updated policy is treated as acceptance of the revised terms, subject to applicable law.

Users who do not agree with the policy should stop account use and contact support about available account or data options.

Personal data may be shared with third parties where needed for law, account operation, payment processing, security, dispute handling, agreements, or compliance. Sharing is limited to the purpose and scope required for the relevant service or legal need.

Third parties may include:

• payment processors, banks, wallet providers, and transaction support services;
• identity verification, fraud prevention, and security service providers;
• hosting, analytics, technical support, and communication service providers;
• professional advisers, auditors, dispute resolution bodies, and insurers;
• courts, regulators, law enforcement authorities, and government bodies where legally required.

Where the website lists service providers or partner categories, users should review those details. If a party is not listed, data may still be shared where the purpose and scope are lawful, necessary, and consistent with this policy.

Submission of personal data is treated as consent for such sharing where consent is required. Legal duties may also require disclosure without separate consent.

The website may contain links to other websites, payment pages, identity verification pages, content providers, or service platforms. Those external websites may have their own privacy policies, cookie rules, security measures, and data handling practices.

Baji Live is not responsible for how external websites collect, use, store, disclose, or protect personal information after a user leaves the official site. Users should review the privacy policy of any external website before submitting personal data.

Care is advised when opening links, downloading files, or entering account, identity, or payment information on any website outside the official service environment.