baj999 takes the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect from Pakistani players on the baj999 platform, how we use it, who we share it with, how long we keep it, and what rights you have over your own data. Please read this document carefully before registering or continuing to use your baj999 account.
This Privacy Policy applies to all personal data collected, processed, stored, and transmitted by baj999 in connection with the operation of the baj999 online gaming platform, accessible at baj999.one. It applies to all users of the platform, including registered account holders, visitors who browse the platform without registering, and individuals who contact baj999 through any support channel.
baj999 is committed to handling your personal data with the care, transparency, and respect it deserves. This Policy is designed to give you a complete and honest picture of how your information is used — not a vague summary that leaves the important details buried or unstated. If you have a question about something in this Policy that isn't clearly answered, you are encouraged to contact our support team for clarification before providing your data.
Scope of this Policy: This Privacy Policy covers personal data collected through the baj999 website, account registration process, KYC verification system, payment processing flows, customer support interactions, and any promotional communications sent by baj999. It does not cover the privacy practices of third-party payment providers (such as JazzCash or EasyPaisa) or game software providers — those entities operate under their own privacy policies.
By registering an account on baj999, completing KYC verification, making a deposit, or continuing to use the baj999 platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
For the purposes of this Privacy Policy, baj999 — the operator of the baj999 online gaming platform at baj999.one — acts as the data controller in respect of personal data collected from users of the platform. As data controller, baj999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a transparent manner.
baj999 operates under an internationally recognised gaming licence. Our data protection practices are aligned with the requirements of that licensing framework, which includes obligations relating to player data security, anti-money laundering record-keeping, and responsible gaming data handling.
Data Controller Contact: For any privacy-related queries, data access requests, or concerns about how baj999 processes your personal data, you may contact our Data Protection team directly at: [email protected]. Please mark your email with the subject line "Privacy / Data Request" so it is routed to the appropriate team without delay.
baj999 collects personal data through several distinct channels, each of which is described below. We apply the principle of data minimisation — meaning we collect only the information that is genuinely necessary for the purposes described in this Policy.
3.1 — Registration Data
When you create a baj999 account, we collect:
3.2 — KYC Verification Data
To comply with our licensing obligations and Pakistani anti-money laundering requirements, we collect:
3.3 — Transaction & Gaming Data
3.4 — Technical & Device Data
3.5 — Communications Data
baj999 uses the personal data described in Section 3 for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, mobile number, date of birth, password | Contract performance |
| Identity verification and KYC compliance | CNIC, selfie, payment proof | Legal obligation; licensing requirement |
| Processing deposits and withdrawals | Transaction data, payment method identifiers | Contract performance |
| Fraud prevention and security monitoring | IP address, device data, login timestamps, transaction patterns | Legitimate interests; legal obligation |
| Responsible gaming monitoring | Bet history, session data, deposit frequency | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Communications data, transaction records, account history | Contract performance; legitimate interests |
| Promotional communications (where consented) | Mobile number, game preferences, bonus history | Consent (opt-out available at any time) |
| Platform analytics and improvement | Anonymised click-stream and session data | Legitimate interests |
| Anti-money laundering record keeping | KYC documents, transaction history | Legal obligation |
baj999 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by a competent regulatory or law enforcement authority acting under applicable law.
baj999 processes your personal data only where it has a valid legal basis to do so. The legal bases upon which baj999 relies are:
baj999 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. This is an unconditional commitment, not a qualified policy statement. Your data is shared only in the specific, limited circumstances described below:
No Commercial Data Sales: baj999 has never sold, and will never sell, player personal data to advertising networks, data brokers, or any other commercial third party. Your data is used to run your baj999 account — nothing else.
The baj999 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, maintain your login session, remember your preferences, and generate anonymised analytics data about how players navigate the platform. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies does not affect baj999's core data processing activities described elsewhere in this Policy — it only affects the cookies set in your browser by the platform interface.
baj999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Licensing obligation; dispute resolution |
| KYC documents (CNIC, selfie) | Duration of account + 5 years post-closure | AML legal obligation |
| Transaction records | Duration of account + 5 years post-closure | AML legal obligation; tax records |
| Bet and gaming history | Duration of account + 3 years post-closure | Dispute resolution; responsible gaming |
| Support communications | 3 years from date of communication | Dispute resolution; quality assurance |
| Device and IP log data | 12 months from date of capture | Fraud prevention; security investigation |
| Marketing consent records | Until withdrawn + 3 years | Evidence of consent basis |
| Self-exclusion records | Duration of exclusion + 7 years | Regulatory requirement; player protection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical purposes.
baj999 implements technical and organisational security measures proportionate to the sensitivity of the personal data we hold and the risks associated with its processing. The following security controls are in place:
Security Incident Notification: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, baj999 will notify affected account holders as promptly as circumstances allow, providing details of the nature of the breach, the data affected, and the steps baj999 is taking to address it.
As a baj999 player, you have the following rights in relation to your personal data. These rights may be exercised by contacting [email protected] with the subject line "Data Rights Request":
Request a copy of all personal data baj999 holds about you. We will respond within 30 days with a structured data export.
Request correction of any personal data held by baj999 that is inaccurate or incomplete. KYC-linked data changes require re-verification.
Request deletion of your personal data. Note: data retained under legal obligation (AML, licensing) cannot be deleted until the mandatory retention period expires.
Request that baj999 restricts processing of your data to storage only — for example, while a dispute about accuracy is being resolved.
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider where technically feasible.
Object to processing of your data based on legitimate interests, or opt out of direct marketing communications at any time with immediate effect.
baj999 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case baj999 will notify you of the extension and the reason within the initial 30-day period.
Strictly 21+ Platform. The baj999 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. If baj999 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed and all associated personal data will be deleted, except where retention is required by law for the purpose of documenting the violation.
Age verification through CNIC documentation is a mandatory component of the baj999 KYC process. baj999 processes date-of-birth data collected at registration specifically to enforce the 21+ age restriction and considers this processing to be both a legal obligation under our gaming licence and a fundamental player protection measure.
If you are a parent or guardian and believe that a minor in your care has registered on baj999, please contact our support team immediately at [email protected] with the subject line "Underage Account Report". We will investigate and respond within 24 hours.
The baj999 platform integrates with a number of third-party service providers to deliver core functionality. The personal data shared with each category of third-party provider is limited to the minimum necessary for the specific function they perform:
All third-party processors engaged by baj999 are subject to contractual data processing agreements that restrict their use of personal data to the specific purposes for which it is shared and require them to maintain security standards commensurate with the sensitivity of the data processed.
As an internationally licensed platform serving Pakistani players, baj999 may transfer personal data to servers and service providers located outside Pakistan. Such transfers are necessary for the operation of the platform and are carried out in compliance with the data protection requirements of our international gaming licence.
Where personal data is transferred to countries or jurisdictions outside Pakistan, baj999 ensures that appropriate safeguards are in place, including contractual data protection clauses binding the recipient to processing standards equivalent to those described in this Policy. baj999 does not transfer personal data to jurisdictions that offer materially lower data protection standards than those applicable under our licensing framework without first implementing compensating safeguards.
baj999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. Material changes to this Policy — meaning changes that affect how your personal data is used in ways that may be unexpected based on the previous version — will be notified to registered players via SMS to their registered Pakistani mobile number at least 14 days before the amended Policy takes effect.
Minor updates that clarify existing practices without substantively changing them (for example, correcting typographical errors or adding explanatory examples) may be made without individual notification, though the "Last Updated" date at the top of this Policy will always reflect the most recent revision.
The version of this Privacy Policy in effect at the time you provide your personal data to baj999, or at the time of any specific processing activity, is the version that governs that data. Where updated Terms take effect and you continue to use the baj999 platform, you are deemed to have accepted the updated Policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how baj999 has handled your personal data, please contact our Data Protection team using the details below:
baj999 Data Protection Team
Email: [email protected]
Subject Line: "Privacy / Data Request" or "Privacy Complaint"
Response Time: Within 5 business days for general queries; within 30 calendar days for formal data rights requests
Language: Urdu and English both accepted
If you are not satisfied with baj999's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable under our gaming licence. Details of the relevant authority will be provided to you upon request.
baj999 treats all privacy complaints seriously and commits to investigating each complaint thoroughly and providing a substantive written response. We aim to resolve privacy-related complaints at the first point of contact wherever possible.
Six core privacy commitments that underpin every data processing decision made by the baj999 platform.
baj999 has never sold and will never sell your personal data to advertisers, data brokers, or any third party for commercial purposes. Your information is used to run your baj999 account — nothing else.
Every data transmission between your device and baj999 is protected by 256-bit TLS encryption. Your CNIC, payment details, and account credentials are encrypted at rest using AES-256 standards.
baj999 collects only the personal data genuinely necessary for the stated processing purpose. We do not collect data speculatively or hold it "just in case" beyond the defined retention periods.
Access, rectification, erasure, restriction, portability, and objection rights are available to all baj999 players. Data rights requests are responded to within 30 days with no bureaucratic friction.
This Policy tells you exactly what data we collect, why we collect it, who we share it with, and how long we keep it. No vague statements. No important details buried in footnotes.
baj999's data practices are aligned with the requirements of our international gaming licence, including mandatory KYC, AML record keeping, and responsible gaming data obligations — giving you the protection of a regulated framework.
Your data is protected. Your funds are segregated. Your identity is verified securely. baj999 is built for Pakistani players who deserve a platform they can actually trust — log in and experience it.
21+ only. Gambling involves real financial risk. Please play responsibly within your means.