Data Handling Notice for Users

Personal data refers to information that can identify a user directly or indirectly. The website may collect information during registration, account use, identity checks, transactions, support contact, and security review.

Personal data may include:

• full name, date of birth, mobile number, email address, and account credentials;
• identity verification data, such as CNIC, passport, or similar records where requested;
• payment details, transaction history, deposit and withdrawal records;
• device data, IP address, browser type, location signals, and website activity logs;
• communication records linked to support, complaints, disputes, or account checks.

The collection of this information supports account administration, fraud prevention, payment processing, legal compliance, and safer use of online services.

Technical and organisational safeguards may include:

• encrypted transfer of sensitive data;
• restricted staff access based on job need;
• access logs and security monitoring;
• password protection and account verification controls;
• secure storage systems and routine security review;
• staff duties on confidentiality and responsible data handling.

Users have the right to request access, correction, or deletion of personal data, subject to legal retention duties and security requirements. The policy is intended to comply with applicable laws in Pakistan, including the Prevention of Electronic Crimes Act 2016 where relevant to unauthorised access, electronic records, and data security, as well as any data protection rules in force.

Collected information is used only for lawful, transparent, and defined purposes. Data processing supports the operation of accounts, website security, transaction accuracy, service review, analytics, and compliance obligations.

Personal data may be used to:

• create, verify, and maintain user accounts;
• process deposits, withdrawals, refunds, and payment checks;
• confirm identity, age, and eligibility where required;
• detect fraud, misuse, bonus abuse, suspicious activity, or unauthorised access;
• respond to user requests, complaints, and account queries;
• improve website performance, navigation, and service reliability;
• analyse website traffic, user behaviour, and service demand;
• send account notices, policy updates, and service messages;
• send marketing messages only where consent or another lawful basis applies;
• meet legal, tax, audit, dispute, and regulatory duties.

Marketing data is kept separate where possible and is handled with respect for consent choices. Service messages linked to security, payments, or policy updates may still be sent where needed for account operation or legal compliance.

A user may request access to personal information held in relation to an account. Requests may also cover correction of inaccurate data, completion of missing details, or deletion of information that is no longer needed.

The access and correction process may include:

• account identity confirmation before any data is disclosed or changed;
• review of the requested information by authorised staff;
• correction of inaccurate or outdated account records;
• confirmation where the request has been completed;
• refusal or limitation where the request conflicts with legal duties, payment records, security checks, or dispute handling.

Deletion requests are assessed against retention obligations. Some records may need to be kept for fraud prevention, payment reconciliation, complaints, audit, or legal compliance.

By using Baji Live, the user consents to reasonable security checks, identity review, payment verification, and processing of payment data by authorised payment service providers. Payment providers may process transaction information under their own legal and security duties.

The website is intended only for users aged 18 years or above. Accounts, services, and payment activity are not available to minors.

The operator cannot confirm a user age with certainty unless reliable identity documents or other verification records are reviewed. Age checks may be requested where required for account safety, legal compliance, or dispute review.

If a parent or legal guardian believes that a minor has submitted personal data, the matter may be reviewed after suitable proof is supplied. If the account or information relates to a minor, the operator may:

• restrict or close the account;
• delete the minor personal data where legal retention is not required;
• preserve limited records where needed for fraud prevention, payment review, or legal compliance;
• confirm the result through the official support process.

Personal data may be stored or processed outside Pakistan where Baji Live, payment providers, hosting providers, analytics providers, security vendors, or other authorised partners operate. Such processing may take place in jurisdictions with privacy laws that differ from Pakistan law.

Use of the website and services confirms consent to this cross border processing where it is necessary for account operation, payments, security, compliance, or technical support.

Confidentiality is protected through partner duties, access limits, security controls, and contractual obligations where applicable. Partners that receive personal data must use it only for the authorised purpose and must apply suitable safeguards against unauthorised access, disclosure, loss, or misuse.

This Privacy Policy should be read together with the website terms, account rules, payment terms, responsible gaming rules, and any notices shown during account use. A disclaimer or additional notice may alter the scope, application, or effect of specific privacy rules where permitted by law.

The policy applies when the user accepts it through any recognised form of agreement, including:

• electronic acceptance during registration or account use;
• signature or written confirmation where required;
• continued use of the website after the policy is made available;
• accession to the website terms or related account documents.

If any part of the policy is found invalid or unenforceable, the remaining parts continue to apply as far as permitted by law.

Cookies are small text files stored on a device when a user visits a website. Similar technologies may also be used to identify sessions, remember preferences, measure traffic, and support website security.

Cookies may be used for:

• website statistics and traffic measurement;
• behaviour analysis across pages and sessions;
• personalisation of settings and content display;
• account security and fraud prevention;
• performance review and service improvement;
• error detection and technical maintenance.

Cookie data may be retained for up to one year unless a shorter period applies through browser settings, system controls, or legal requirements. A user may manage cookies through browser settings, but some website functions may be limited if cookies are disabled.

Use of the website, account registration, deposits, withdrawals, or continued access to services confirms acceptance of this Privacy Policy. The user is responsible for reading the policy before using the website or submitting personal information.

The current published version of the policy prevails over earlier versions. Updates may be made to reflect changes in services, technology, legal duties, payment processes, or security practices.

If a user does not agree with the policy, the user should stop using the services and may request account support through the official channels available on the website.

Personal data may be shared with authorised external parties where required by law, contract, dispute handling, payment processing, fraud prevention, security review, or service operation.

External parties may include:

• payment service providers and banks involved in transactions;
• identity verification and security service providers;
• hosting, cloud, analytics, and technical support providers;
• professional advisers, auditors, and compliance consultants;
• law enforcement, courts, regulators, or public authorities where legally required;
• dispute resolution bodies or parties involved in account claims.

Where a third party is named on the website, the relevant notice should be reviewed with this policy. Where a third party is not named, the user should be informed of the purpose and scope of sharing where this is required and practicable.

Submission of personal data confirms consent to sharing that is necessary for account use, payments, verification, security, legal compliance, and dispute management.

The website may contain links to external websites, payment pages, support tools, social pages, or partner services. These websites may have their own privacy policies, cookie rules, security standards, and data retention practices.

Baji Live is not responsible for the collection, use, storage, disclosure, or deletion of personal data by external websites that operate outside its control. A user should review the privacy policy and terms of any external website before submitting personal information.

Access to external websites is at the user own discretion. The operator may remove or update links where required for security, compliance, or service reasons.