Policy Contents
Privacy questions? We respond within 72 hours.
support@bajj.click
1. Introduction
This Privacy Policy explains how Bajj ("we", "us", "the platform") collects, uses, stores and protects personal information provided by users of the website at bajj.click. It applies to all Pakistani members and visitors, regardless of how they access the platform — whether via mobile browser, desktop browser or any other means.
By registering an account on Bajj, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, please do not register or use Bajj. This policy is to be read alongside our Terms and Conditions, which govern your use of the platform more broadly.
We have written this policy in the clearest language we can because we believe Pakistani members deserve to understand exactly what happens with their information. Privacy documentation is often written to confuse rather than inform. This one is not.
Data Controller: Bajj (bajj.click) is the data controller for all personal information collected through the platform. Our contact for all data and privacy matters is support@bajj.click.
2. Information We Collect
Bajj collects personal information through two routes: information you provide directly, and information that is automatically generated when you use the platform.
2.1 Information You Provide Directly
- Registration data: Full name, date of birth, email address, mobile number and preferred username when you create a Bajj account.
- Identity verification documents: CNIC copy, proof of address or other verification documents when requested under our KYC (Know Your Customer) process.
- Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, and card details for Visa/Mastercard transactions. Card numbers are processed by our payment providers and are never stored in full by Bajj directly.
- Communications: Any messages you send to Bajj support via live chat or email, including support request details, complaints and feedback.
- Responsible gaming preferences: If you set deposit limits, loss limits, session time controls or self-exclusion preferences on Bajj, these are stored as part of your account profile.
2.2 Automatically Collected Information
- Device and browser data: Device type, operating system, browser version and screen resolution.
- Connection data: IP address, mobile network operator, approximate geographic location derived from IP, and connection timestamps.
- Usage data: Pages visited on bajj.click, games opened, bets placed, session duration and navigation patterns within the platform.
- Cookie data: Information stored via cookies and similar technologies — see Section 7 for full details.
- Transaction history: A complete record of all deposits, withdrawals, bonuses credited, bets placed and game sessions on your Bajj account.
3. How We Use Your Data
Bajj uses your personal data only for the purposes listed below. We do not use your data for purposes incompatible with those stated here without notifying you first.
- To operate your account: Processing deposits, withdrawals, bets and game sessions in PKR requires accurate identity and payment information linked to your Bajj account.
- To verify your identity: Anti-money laundering (AML) obligations require Bajj to verify the identity of members before processing large transactions or where unusual activity is detected.
- To prevent fraud and money laundering: Automated and manual checks on transaction patterns, IP addresses and device fingerprints help Bajj identify and prevent fraudulent activity, account takeovers and financial crime.
- To provide customer support: Support agents access account information to resolve queries, process complaints and assist with technical issues. All support interactions are recorded for quality assurance.
- To send service communications: Bajj sends transactional emails and SMS notifications related to your account — including deposit confirmations, withdrawal updates, and security alerts. These cannot be opted out of as they are essential service communications.
- To send promotional communications: With your consent, Bajj may send you information about new games, promotions and offers. You can opt out of promotional communications at any time from your account settings.
- To fulfil responsible gaming obligations: Data on session times, deposit patterns and betting behaviour is used to identify members who may be experiencing gambling-related harm, and to enforce self-imposed limits and exclusions.
- To improve the platform: Aggregated, anonymised usage data helps Bajj understand how Pakistani members use the platform and identify areas for improvement.
5. Data Retention
Bajj retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods below reflect our legal obligations and operational requirements:
- Account and identity data: Retained for a minimum of 5 years after account closure to comply with anti-money laundering regulations. This includes name, date of birth, CNIC and address information.
- Transaction records: All deposit, withdrawal and betting records are retained for a minimum of 5 years after the transaction date for regulatory and dispute resolution purposes.
- Support communications: Live chat transcripts and email support history are retained for 3 years from the date of the conversation.
- Marketing preferences: If you have opted out of marketing communications, this preference is retained indefinitely to ensure we do not contact you again — even if our records are otherwise purged.
- Anonymised analytics data: Usage data that has been fully anonymised (where it is no longer possible to identify an individual) may be retained indefinitely for platform improvement purposes.
When retention periods expire, personal data is securely deleted or anonymised. You may request early deletion of certain data categories — see Section 8 for your data rights.
6. Security Measures
Bajj implements multiple layers of technical and organisational security to protect your personal data against unauthorised access, disclosure, alteration or destruction.
Technical Measures
- SSL/TLS encryption on all pages and API communications on bajj.click.
- Encrypted storage of sensitive data including passwords (hashed with industry-standard algorithms) and financial credentials.
- Multi-factor authentication options for Bajj member accounts.
- Automated fraud detection systems that monitor login attempts, device changes and unusual transaction patterns in real time.
- Regular security vulnerability scanning and penetration testing of the Bajj platform.
Organisational Measures
- Access to member personal data is restricted to Bajj staff who need it to perform their specific role. All access is logged and audited.
- Staff with access to sensitive member data are subject to confidentiality obligations and receive regular data security training.
- In the event of a data security incident affecting member data, Bajj will notify affected members without undue delay and take immediate remediation steps.
Account security tip: Bajj will never ask for your password via email, live chat or phone. If anyone contacts you claiming to be from Bajj and asks for your password, treat it as a phishing attempt and report it to support@bajj.click immediately.
7. Cookies
Bajj uses cookies — small text files stored on your device by your browser — and similar technologies to operate the platform, remember your preferences and understand how Pakistani members use the site.
7.1 Types of Cookies We Use
- Essential cookies: Required for the platform to function — including session management, login authentication and security tokens. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings, game volume preferences and responsible gaming limit settings.
- Analytics cookies: Collect anonymised information about how members navigate bajj.click — which pages are visited most, where members drop off, and how long sessions last. This helps us improve the platform.
- Marketing cookies: Used only if you have given explicit consent, to help us understand the effectiveness of our promotions and show relevant Bajj content if you have opted in to communications.
Cookie Preferences (Visual Reference)
This is a visual reference. To manage your actual cookie preferences, please use the cookie settings within your Bajj account.
7.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent bajj.click from working correctly — you may not be able to log in or complete transactions. Disabling analytics or marketing cookies has no effect on your core account functionality.
8. Your Data Rights
You have clear rights over your personal data held by Bajj. To exercise any of the rights below, contact us at support@bajj.click and we will respond within 72 hours. In most cases, requests are fulfilled within 30 days.
Right to Access
Request a copy of all personal data Bajj holds about you, including account data, transaction history and support records.
Right to Correction
Request that inaccurate or outdated personal data held by Bajj be corrected. Update your email or phone number directly in account settings.
Right to Deletion
Request deletion of your personal data. Note that regulatory retention obligations (Section 5) may mean some data cannot be deleted immediately.
Right to Restrict Processing
Request that Bajj restricts how your data is used in certain circumstances while you dispute its accuracy or the basis for processing it.
Right to Data Portability
Request a structured, machine-readable copy of data you have provided to Bajj directly — for example, account registration data and transaction history.
Right to Object
Object to processing of your data for marketing purposes at any time. You can also object to certain other processing where Bajj relies on legitimate interests as the legal basis.
9. Minors
Bajj is strictly an 18+ platform. We do not knowingly collect or process personal data from anyone under the age of 18. Age verification is a standard part of the Bajj account registration and KYC process.
If we become aware that personal data has been collected from a person under 18, the associated account will be closed immediately and all data will be deleted in accordance with our data retention obligations. Any deposits made by under-age users will be returned to the originating payment method and any winnings will be forfeited.
If you believe a minor may have registered a Bajj account, please contact us immediately at support@bajj.click. We take this very seriously and will investigate all such reports promptly.
10. International Data Transfers
Some of Bajj's service providers — including certain payment processors and fraud detection services — may process data in countries outside Pakistan. Where this occurs, Bajj ensures that appropriate contractual safeguards are in place to protect your data to the same standard it receives when processed within Pakistan.
Game content providers licensed in international jurisdictions may process player session data (such as your Bajj player ID and bet amounts) on their own servers. These providers are subject to their own regulatory requirements and licensing conditions which govern their data handling practices.
Bajj never transfers full personal identity data — including CNIC details, full name, mobile number or payment credentials — outside of Pakistan without explicit justification and appropriate safeguards in place.
11. Changes to This Privacy Policy
Bajj may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable regulations, or changes to the services we offer. When material changes are made, registered Bajj members will be notified by email at least seven days before the updated policy takes effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We recommend checking this page periodically. Continuing to use Bajj after the effective date of any updated Privacy Policy constitutes your acceptance of those changes.
Previous versions of this Privacy Policy are available on request by emailing support@bajj.click.
12. Contact & Data Requests
All privacy enquiries, data subject access requests, deletion requests and other data rights exercises should be directed to:
When contacting us about a data request, please include your registered Bajj email address or mobile number so we can identify your account. We may need to verify your identity before processing certain data requests — this is to protect you from unauthorised access to your own data.
For related policy documents, see our Terms and Conditions and Responsible Gaming page.