1. Introduction
This Privacy Policy applies to all services provided by Bajiaff through the website bajiaff.ws and any related platforms or applications. It governs how Bajiaff collects, processes, stores, uses and protects the personal data of all registered players and site visitors based in Pakistan and elsewhere.
Bajiaff understands that Pakistani players value their privacy. In a market where digital payments via Easypaisa, JazzCash and other wallets are now part of everyday life, the question of who holds your data and how they use it is a legitimate and important one. This policy gives you straight answers to those questions.
By registering on Bajiaff or using the platform in any way, you consent to the data practices described in this policy. This Privacy Policy should be read alongside our Terms and Conditions. If you have questions that this document does not answer, contact our team at privacy@bajiaff.ws — we are happy to explain anything in more detail.
The short version: Bajiaff collects the data it needs to run the platform safely and fairly. We do not sell your personal information to anyone. We do not send you marketing emails without your permission. Your payment details are encrypted and never stored on our servers after a transaction is complete.
2. What Personal Data We Collect
Bajiaff collects data across three broad categories: information you provide directly, information generated automatically by your use of the platform, and identity verification documents required for compliance.
Information you provide directly:
- Registration data: Full name, date of birth, email address, mobile phone number, and the password you create for your account.
- Identity verification (KYC) documents: A copy of your CNIC (Computerised National Identity Card) and a selfie photograph used to verify that you are who you say you are. This is a one-time process required before your first withdrawal.
- Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, and card details for Visa/Mastercard payments. See Section 5 for specific detail on how payment data is handled.
- Communications: Messages you send to Bajiaff's support team via live chat, WhatsApp or email, including any attachments you provide to support a complaint or query.
- Responsible gaming preferences: Any deposit limits, loss limits, session time reminders or self-exclusion instructions you configure in your account settings.
Information collected automatically:
- Technical data: Your IP address, browser type and version, operating system, device type, screen resolution and timezone settings.
- Usage data: Pages visited on Bajiaff, time and duration of visits, game sessions played, bets placed, game results, deposit and withdrawal transaction records, and navigation paths through the platform.
- Session data: Login timestamps, logout timestamps and session duration records.
- Cookie data: See Section 6 for a full explanation of cookies on Bajiaff.
Note: Bajiaff does not collect more data than it needs. Each category of data listed above serves a specific function — identity verification, payment processing, security monitoring or platform improvement. We do not collect data "just in case".
| Data Category |
Examples |
Purpose |
Legal Basis |
| Identity Data |
Name, date of birth, CNIC |
KYC verification, age check, fraud prevention |
Legal obligation; contract performance |
| Contact Data |
Email, mobile number |
Account access, support communications, security alerts |
Contract performance |
| Financial Data |
Wallet numbers, bank details |
Deposit & withdrawal processing |
Contract performance |
| Technical Data |
IP address, device type |
Security monitoring, fraud detection |
Legitimate interest |
| Usage Data |
Games played, bets placed |
Platform improvement, responsible gaming monitoring |
Legitimate interest; contract performance |
| Communication Data |
Support chat transcripts |
Dispute resolution, quality assurance |
Legitimate interest |
3. How Bajiaff Uses Your Personal Data
Bajiaff uses your personal data strictly for the purposes set out below. We do not use your data for any other purpose without obtaining your prior consent, and we do not sell your data to any third party under any circumstances.
- Account creation and management: Your registration data is used to create and maintain your Bajiaff account, verify your identity, process your logins and keep your account secure.
- Payment processing: Your financial data is used solely to process deposits and withdrawals via the payment method you have selected. Payment details are passed to the relevant payment processor and are not retained on Bajiaff's servers after the transaction is complete.
- Age and identity verification: CNIC and selfie data is used exclusively to verify that you are aged 18 or above and that you are the legitimate owner of the account, as required under our platform's compliance obligations.
- Security and fraud prevention: Technical data such as IP addresses, device identifiers and login patterns is used to detect and prevent unauthorised account access, fraudulent transactions and account abuse.
- Responsible gaming: Usage data — particularly game frequency, session lengths and deposit patterns — is monitored to identify players who may be showing signs of problem gambling behaviour. Bajiaff may contact players proactively in such cases to offer support tools.
- Platform improvement: Anonymised and aggregated usage data helps the Bajiaff team understand how players navigate the platform, which games are most popular and where the user experience can be improved.
- Legal compliance: Bajiaff retains certain data categories as required to comply with applicable laws and regulations, including anti-money laundering obligations.
- Customer support: Communication data from live chat, WhatsApp and email interactions is retained to allow Bajiaff to track open issues, resolve disputes and maintain quality standards in support delivery.
- Marketing communications: If you have explicitly opted in to marketing communications during registration or at any later point, Bajiaff may send you promotional emails about new games, bonuses and platform features. You can opt out at any time by updating your communication preferences in account settings or by emailing privacy@bajiaff.ws.
4. Who Bajiaff Shares Your Data With
Bajiaff takes a restrictive approach to data sharing. Your personal data is only ever shared with third parties in the specific circumstances described below, and never for commercial gain.
- Payment processors: When you make a deposit or request a withdrawal, the necessary financial data is shared with the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, your bank or card issuer) to complete the transaction. Each processor operates under its own privacy policy and regulatory framework.
- Identity verification providers: KYC document checks may be processed through a certified third-party identity verification service. These providers are contractually bound to process data only for the purpose of identity verification and not for any other use.
- IT and infrastructure providers: Bajiaff uses third-party cloud hosting and technical infrastructure providers to operate the platform. These providers act as data processors under Bajiaff's instructions and are contractually prohibited from using player data for their own purposes.
- Legal and regulatory authorities: Bajiaff will disclose personal data to law enforcement or regulatory bodies if required to do so by applicable law, a valid court order or a legitimate regulatory investigation. In all such cases, only the minimum data necessary to fulfil the legal obligation will be disclosed.
- Anti-fraud and AML services: Transaction data may be shared with anti-money laundering screening services as required by Bajiaff's compliance obligations. This data is used solely for fraud and money-laundering risk assessment.
We never sell your data. Bajiaff does not sell, rent, trade or license your personal information to any third party for marketing, commercial or analytical purposes. This is an absolute commitment — not a conditional one.
5. How Bajiaff Handles Payment Data
Given that many Bajiaff players in Pakistan use mobile wallets — Easypaisa and JazzCash in particular — payment data deserves specific explanation. Here is exactly how Bajiaff handles financial information:
- Card data: Card numbers, CVV codes and expiry dates entered during a Visa/Mastercard deposit are transmitted over 256-bit SSL encryption directly to the payment processor. Bajiaff's servers never receive or store your full card number. Only a masked reference (e.g., last four digits) is retained in your account transaction history.
- Mobile wallet numbers: Easypaisa, JazzCash, NayaPay and SadaPay wallet numbers are stored as part of your account's payment method record so that withdrawals can be processed back to the correct wallet. These numbers are stored in encrypted form and are only accessible to the payment processing system — not to general platform staff.
- Bank account details: IBFT bank account numbers provided for withdrawal are stored in encrypted form and used solely for the purpose of processing withdrawal requests to your verified bank account.
- Transaction records: A record of every deposit and withdrawal — including amount in PKR, date, time, payment method and status — is retained in your Bajiaff account for your own reference and for dispute resolution purposes. These records do not contain full payment credentials.
All payment data is handled in accordance with applicable payment security standards. Bajiaff does not charge fees on payment processing, and payment data is never used for any purpose other than processing your financial transactions.
6. Cookies and Tracking Technologies
Bajiaff uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by the website you are visiting. Cookies help the platform remember your preferences, maintain your login session and understand how the site is being used.
Bajiaff uses the following categories of cookies:
- Strictly necessary cookies: These are required for the platform to function. They maintain your login session, remember your language preference and ensure that the security features of the site work correctly. These cookies cannot be disabled without breaking core platform functionality.
- Performance cookies: These collect anonymised information about how players use the platform — which pages are visited most often, how long sessions last and where players encounter issues. This data is used in aggregate form to improve the platform experience.
- Functional cookies: These remember your preferences — such as your preferred language or region settings — so you do not need to re-enter them on each visit.
- Analytics cookies: Bajiaff may use privacy-respecting analytics tools to understand traffic patterns on the site. Where analytics cookies are used, they collect only anonymised, aggregated data.
You can manage cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types or delete cookies that have already been set. Note that disabling strictly necessary cookies will affect your ability to use the Bajiaff platform.
No cross-site tracking: Bajiaff does not use advertising cookies or third-party trackers that follow you across other websites. Cookies on Bajiaff exist to make the platform work better for you — not to build an advertising profile.
7. How Long We Keep Your Data
Bajiaff retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations and to resolve any disputes that may arise.
- Active account data: All data associated with an active Bajiaff account is retained for the duration of the account's active status.
- Post-closure data: When a Bajiaff account is closed — either by the player or by Bajiaff — account data including identity documents and transaction records is retained for a minimum of five years from the date of closure. This is a standard requirement under anti-money laundering and financial services compliance obligations.
- KYC documents: CNIC copies and selfie verification images are retained for the duration of the account and for five years following account closure.
- Transaction records: Full deposit and withdrawal histories are retained for five years after the last transaction, as required for financial record-keeping compliance.
- Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the last communication in a support thread, unless the matter relates to a formal dispute in which case they are retained alongside the dispute record.
- Marketing opt-in records: Records of marketing consent are retained for as long as your account is active or until you withdraw consent, and for one year after consent is withdrawn as evidence of the original opt-in.
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an individual player.
8. How Bajiaff Secures Your Data
Bajiaff implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. The key security measures in place include:
- 256-bit SSL/TLS encryption: All data transmitted between your device and Bajiaff's servers is encrypted using 256-bit SSL/TLS — the same standard used by major international banks. This includes all login events, game sessions, payment transactions and support interactions.
- Encrypted data storage: Sensitive data fields — including payment credentials, KYC documents and passwords — are stored in encrypted form. Passwords are hashed using industry-standard algorithms and are never stored in readable form.
- Access controls: Internal access to player data is restricted to Bajiaff staff whose job function requires it. All staff access is logged and audited. Customer support agents can see the information they need to help you — they cannot see your full card numbers or complete bank account details.
- Two-factor authentication: Bajiaff offers two-factor authentication (2FA) for player accounts, which adds a significant layer of protection against unauthorised login attempts. Players are strongly encouraged to enable 2FA in their account security settings.
- Fraud and intrusion monitoring: Bajiaff's systems monitor for unusual access patterns, suspicious transaction activity and other indicators of unauthorised access in real time. Suspicious events trigger automated alerts and human review.
- Regular security reviews: Bajiaff conducts periodic reviews of its security infrastructure, access logs and data handling practices to ensure ongoing compliance with security best practices.
Your role in security: While Bajiaff implements strong technical protections, account security also depends on you. Use a strong, unique password for your Bajiaff account, enable two-factor authentication, and never share your login credentials with anyone. If you suspect unauthorised access, contact support immediately.
9. Your Data Rights
As a Bajiaff player, you have a number of rights in relation to the personal data we hold about you. These rights can be exercised by contacting Bajiaff's privacy team at privacy@bajiaff.ws. Bajiaff will respond to all valid data rights requests within 30 days.
10. Data of Minors
Bajiaff's platform is strictly for adults aged 18 and above. Bajiaff does not knowingly collect or process personal data of individuals under 18 years of age. The age verification process at account registration and as part of KYC compliance is specifically designed to prevent under-age access.
If Bajiaff becomes aware that personal data of a person under 18 has been collected — whether through registration fraud or any other means — the relevant account will be immediately closed, all collected data will be deleted, and any deposited funds will be returned to the originating payment method after verification. If you believe your child or a minor you know has accessed Bajiaff, contact support immediately at support@bajiaff.ws.
11. Third-Party Links and Services
The Bajiaff platform does not contain links to external third-party websites in its main content areas. All navigation on Bajiaff leads to pages within the Bajiaff platform itself. Where Bajiaff uses third-party services — such as payment processors or identity verification providers — these integrations are embedded within the Bajiaff platform and do not redirect you to external sites unless explicitly indicated.
If at any point you do follow a link to a third-party site (for example, from a promotional communication), Bajiaff is not responsible for the privacy practices of that site. You should review the privacy policy of any third-party site independently before providing personal information to it.
12. Changes to This Privacy Policy
Bajiaff may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, Bajiaff will notify registered players via email to the address on file and by displaying a notice on the platform.
The updated policy will be published on this page with the "Last Updated" date revised to reflect the date of change. Your continued use of the Bajiaff platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
We recommend bookmarking this page and reviewing it periodically. If you have questions about any changes, contact privacy@bajiaff.ws.
