Baji Long Privacy Policy

01Introduction

Baji Long ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who uses our website at bajilong.win and our associated mobile application. This Privacy Policy sets out in plain, honest terms what data we collect about you, why we collect it, how we use it, and what your rights are in relation to that data.

This policy applies to all users of the Baji Long platform, including registered account holders, visitors who browse the site without registering, and anyone who contacts our customer support team. It applies to all personal data collected through any channel — the website, the Baji Long app, email, live chat, or any other method of communication with us.

By registering a Baji Long account or continuing to use the platform after this policy has been published, you acknowledge that you have read and understood how your personal data is handled. If you have any questions that this policy does not answer, our support team is available around the clock and will be happy to help.

02Data We Collect

Baji Long collects personal data through several channels and for several different reasons. Below is a full breakdown of the categories of data we collect and the circumstances in which they are collected.

Registration Data

When you create a Baji Long account, we collect the information you provide at registration. This includes your full legal name, date of birth, email address, mobile phone number, residential address, and in some cases your CNIC number as part of the identity verification process.

Payment & Transaction Data

When you make a deposit or request a withdrawal, we collect transaction-related data including your payment method details (such as your JazzCash or Easypaisa account number, bank account details, or card details where applicable), transaction amounts in PKR, transaction timestamps, and the reference numbers assigned to each transaction. We do not store your full card number or mobile wallet PIN — payment authentication is handled by the respective payment provider.

Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies of identity documents such as your CNIC, proof of address, or a selfie for liveness verification. This data is collected only when required and is handled with additional security measures appropriate to its sensitivity.

Usage & Behavioural Data

As you use the platform, we collect data about your activity including pages visited, games played, bets placed, session duration, device type, operating system, browser type, and IP address. This data helps us understand how the platform is being used and where improvements can be made.

Communications Data

When you contact our customer support team via live chat, email, or any other channel, we retain records of those communications. This includes the content of messages, timestamps and the outcome of any issues raised. These records are kept to allow us to provide consistent support and to maintain an accurate history of account-related queries.

Device & Technical Data

We automatically collect certain technical information when you access the Baji Long platform, including your IP address, device identifiers, browser version, language settings, and general geographic location derived from your IP address. This data is used for security, fraud prevention and platform optimisation purposes.

03How We Use Your Data

The personal data we collect is used only for the purposes described below. We do not use your data in ways that would surprise you, and we do not process it for purposes that are incompatible with the reasons it was originally collected.

Purpose	Data Used	Why It's Necessary
Account creation & management	Registration data, contact details	To set up and maintain your Baji Long account
Processing deposits & withdrawals	Payment data, transaction history	To execute PKR transactions via JazzCash, Easypaisa, Raast, bank transfer
Identity verification (KYC)	CNIC, address proof, selfie	To verify your identity before processing large withdrawals
Fraud & security monitoring	Device data, IP address, behavioural data	To detect and prevent fraudulent activity and account misuse
Customer support	Communications data, account history	To respond to queries and resolve issues effectively
Platform improvement	Usage & behavioural data	To understand how players use the platform and improve the experience
Responsible gaming monitoring	Betting patterns, session data	To identify signs of problem gambling and offer support tools
Marketing communications	Email, phone number	To send promotions and offers — only with your consent

04Legal Basis for Processing

Baji Long processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including operating your account, processing payments and providing customer support.
• Legitimate interests: Processing that is in the genuine and proportionate interests of Baji Long or its players — including fraud prevention, platform security, and improving the quality of our services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations and identity verification requirements.
• Consent: Processing for purposes such as marketing communications, where we have obtained your explicit consent. You can withdraw consent for these activities at any time.

Where we rely on legitimate interests as a basis for processing, we have assessed that those interests are not overridden by your rights and interests as a data subject. If you would like more detail on any specific processing activity and its legal basis, contact our support team.

05Cookies & Tracking

Baji Long uses cookies and similar tracking technologies on the bajilong.win website and in the mobile app. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you interact with the platform.

Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and cookies that enable core features like the bet slip and deposit flow. These cannot be disabled without breaking key platform functions.
• Analytics cookies: Used to collect anonymous data about how players navigate the site — which pages are visited most, how long sessions last, and where players encounter issues. This data helps us improve the platform experience.
• Functional cookies: Store your preferences such as language settings, preferred sports markets, and display settings so you do not have to set them again each visit.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

Managing Cookies

You can control non-essential cookies through your browser settings or through the cookie preference panel available on the Baji Long website. Please note that disabling certain cookies may affect the functionality of parts of the platform. Essential cookies cannot be disabled as they are necessary for the service to operate.

06Third-Party Sharing

Baji Long does not sell, rent or trade your personal data to third parties. We share data with carefully selected third-party service providers only where necessary and only to the extent required to provide you with the services you have requested.

Categories of Third Parties

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners process your deposit and withdrawal transactions. They receive only the transaction data necessary to execute your payment.
• Identity verification providers: Where KYC verification is required, your identity documents may be processed by a third-party verification service. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification.
• Platform and technology providers: Cloud hosting, security, and infrastructure providers who support the operation of the Baji Long platform. These providers process data on our behalf and are contractually required to maintain appropriate data security standards.
• Customer support tools: The software systems used by our support team to manage live chat and email communications. Support data is stored within these systems and is accessible only to authorised Baji Long staff.
• Legal and regulatory bodies: Where required by applicable law, Baji Long may disclose personal data to law enforcement, regulatory authorities or other official bodies. We will always seek to limit such disclosures to the minimum required by law.

All third parties with whom we share personal data are required to handle that data in accordance with applicable data protection standards. We do not permit third-party service providers to use your data for their own marketing purposes.

07Data Retention

Baji Long retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods for different categories of data are outlined below.

• Account data: Retained for the lifetime of your account and for a period of up to 5 years following account closure, in line with standard record-keeping requirements.
• Transaction records: Financial transaction records including deposits, withdrawals and betting history are retained for a minimum of 5 years to meet financial record-keeping obligations.
• KYC documents: Identity verification documents are retained for the duration of your account and for a defined period after closure. Copies are securely deleted once the retention period expires.
• Support communications: Records of customer support interactions are retained for up to 3 years following the resolution of the relevant query.
• Usage and analytics data: Anonymised or aggregated analytics data may be retained indefinitely as it cannot be linked back to individual players. Non-anonymised usage data is retained for up to 2 years.
• Marketing consent records: Records of your marketing preferences and consent history are retained for as long as your account is active plus a reasonable period thereafter.

When personal data is no longer required for its original purpose and no legal retention obligation applies, it is securely deleted or anonymised. You may request early deletion of specific data categories subject to any overriding legal retention requirements — see Section 09 for your data rights.

08Data Security

Baji Long takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction.

Technical Measures

• All data transmitted between your device and Baji Long's servers is encrypted using TLS (Transport Layer Security).
• Personal and financial data stored on our systems is encrypted at rest using industry-standard encryption.
• Access to systems containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Our infrastructure is hosted on secure cloud platforms with continuous monitoring for security threats and intrusion attempts.
• Regular penetration testing and security audits are conducted to identify and address vulnerabilities proactively.

Organisational Measures

• All Baji Long staff who handle personal data receive data protection training and are bound by confidentiality obligations.
• We have internal data handling procedures and incident response plans in place to deal promptly with any security incidents.
• Third-party service providers are assessed for their data security practices before being engaged, and are required to meet minimum security standards under their contracts with us.

09Your Rights

As a Baji Long player, you have a number of rights in relation to your personal data. These rights are outlined below. To exercise any of them, contact our support team with your request — we aim to respond within a reasonable timeframe and will always acknowledge your request promptly.

We will not charge a fee for handling reasonable data requests. Where a request is manifestly unfounded, repetitive or excessive, we may decline or charge a reasonable administrative fee. We will always explain our reasoning if this applies.

10Children's Privacy

Baji Long is strictly for adults aged 18 years and over. We do not knowingly collect personal data from anyone under the age of 18. Registration on the platform includes a declaration of age, and accounts found to belong to under-18 individuals will be closed immediately with any associated data deleted or retained only as required to process any refund obligations.

If you are a parent or guardian and you believe that a minor in your care has registered on the Baji Long platform, please contact our support team immediately. We take this issue seriously and will act promptly on any confirmed report of underage account registration.

To protect minors in your household from accessing the Baji Long platform, we recommend using parental control software on shared devices and ensuring that your Baji Long account is protected with a password that minors in your household do not know. Always log out of your account when using a shared device.

11Marketing Communications

Baji Long may send you marketing communications about new promotions, bonuses, seasonal offers such as PSL special events, new game launches, and platform updates. We will only send you marketing communications if you have consented to receive them, which you can do at registration or at any point in your account settings.

How to Opt Out

You can withdraw your marketing consent and unsubscribe from communications at any time by:

• Updating your communication preferences in your Baji Long account settings.
• Clicking the unsubscribe link included in any marketing email we send you.
• Contacting our support team and requesting removal from our marketing list.

Once you opt out, we will stop sending marketing communications within a reasonable processing period, typically within 5 business days. Please note that opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or important policy updates — these will continue to be sent as they are essential to the operation of your account.

12Changes to This Policy

Baji Long may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the features available on the platform. When we make material changes to this policy, we will notify registered players via email or through an in-platform notification at least 7 days before the changes take effect, where reasonably practicable.

The updated policy will always be published at bajilong.win/privacy-policy with a revised "Last Updated" date at the top of the page. We encourage you to review this page periodically so you are always aware of how your data is being handled. Your continued use of the Baji Long platform after an updated policy has come into effect constitutes your acceptance of the revised terms.

If you disagree with any changes to this policy, you have the right to close your account and request deletion of your personal data, subject to any data retention obligations described in Section 07.

13Contact & Complaints

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Baji Long has handled your personal information, please get in touch with our team:

• Live Chat: Available 24/7 directly within the Baji Long platform — fastest response for urgent privacy queries.
• Email: [email protected] — for detailed requests requiring a written response and formal acknowledgement.
• FAQ: Visit our FAQ page for answers to the most common questions from Pakistani players regarding accounts and data.

We aim to acknowledge all privacy-related requests within 48 hours and to resolve them fully within 30 days. For complex requests this may take longer, in which case we will keep you informed of progress throughout.

If you feel that your complaint has not been resolved satisfactorily after contacting Baji Long directly, you retain the right to escalate the matter through any applicable legal channels available to you in Pakistan.