Baji Long Privacy Policy — How We Handle Your Information

1. Introduction

Baji Long is committed to protecting the privacy and personal data of everyone who uses the platform. Whether you are a registered player making a deposit, a visitor browsing game categories or a customer contacting our support team, you deserve to know exactly how your information is being handled and why.

This policy has been written in plain, accessible English for Pakistani players. We have deliberately avoided dense legal jargon wherever possible. If any part of this policy is unclear, our support team can explain it in plain terms — just contact us using the details at the end of this document. We would rather you ask than guess.

Privacy is not just a legal obligation for Baji Long — it is a foundational part of the trust we have spent years building with Pakistani players. A platform that mishandles your data is a platform you cannot trust with your money, and we understand that completely.

2. Who We Are

Baji Long operates the online gaming platform accessible at bajilong.click. For the purposes of this Privacy Policy, Baji Long is the data controller — meaning we are the organisation that determines why and how your personal data is processed. Our contact details for all privacy-related enquiries are provided in Section 15 of this policy.

Where Baji Long uses third-party service providers to process data on its behalf — for example, payment gateway operators or fraud detection services — those providers act as data processors under our instruction. They are contractually bound to process your data only in accordance with our instructions and this policy.

3. Personal Data We Collect

Baji Long collects personal data in several categories depending on how you interact with the platform. Below is a summary of the main types of information we may hold about you:

We do not collect or store full payment card numbers, CVV codes or online banking passwords. Payment transactions are handled by certified payment processors and Baji Long only receives a transaction reference and confirmation status.

4. How We Collect Your Data

Baji Long collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit, request a withdrawal or contact our support team, you provide data directly to Baji Long.
• Automated collection: Technical data such as your IP address, device information and session activity is collected automatically when you access the platform. This happens whether or not you are logged into your account.
• Payment processors: When you make a deposit or withdrawal, our payment partners share transaction reference information with us so we can credit or debit your account correctly.
• Fraud and security services: We may receive risk signals and identity verification results from third-party fraud prevention providers to protect your account and the platform as a whole.
• Cookies and similar technologies: The Baji Long platform uses cookies and local storage to maintain your session, remember preferences and measure platform performance. Details are in Section 10.

5. How We Use Your Data

Baji Long uses personal data for the following purposes, each tied to a specific operational or legal need:

• Account management: Creating, maintaining and securing your Baji Long account. Without your identity and contact data, we cannot create an account at all.
• Payment processing: Processing deposits and withdrawals in PKR, verifying that payments come from your own registered accounts and maintaining accurate transaction records.
• Identity verification (KYC): Confirming your age and identity before withdrawals and in response to regulatory requirements. CNIC verification ensures Baji Long complies with its anti-money-laundering obligations.
• Fraud prevention and security: Monitoring accounts for suspicious activity, detecting unauthorised access and investigating potential breaches of our Terms and Conditions.
• Customer support: Responding to your enquiries, resolving disputes and providing assistance with account, payment or game-related issues.
• Platform improvement: Using aggregated, anonymised gameplay and usage data to improve game selection, platform performance and user experience for all Baji Long players.
• Marketing communications: Sending promotional emails and in-platform notifications about bonuses, new games and offers — but only to players who have opted in. You can opt out at any time.
• Responsible gaming: Identifying potential signs of problem gambling based on usage patterns and reaching out proactively where our Responsible Gaming team considers intervention appropriate.

6. Legal Basis for Processing

Every data processing activity at Baji Long rests on one of the following legal bases:

• Contract performance: Processing required to operate your account, handle payments and provide the gaming services you have registered to use.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, age verification requirements and other applicable Pakistani legal obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security and platform improvement where these interests do not override your fundamental privacy rights.
• Consent: Processing for optional activities such as marketing communications, where you have actively opted in. You may withdraw this consent at any time without affecting your account.

7. When and With Whom We Share Data

Baji Long does not sell your personal data. We share data only in the following limited and necessary circumstances:

• Payment service providers (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing partners, Visa/Mastercard acquiring banks): To process your deposits and withdrawals. These providers receive only the transaction data necessary to complete the payment.
• Identity verification providers: To conduct KYC checks against government-issued identity documents. These providers are bound by strict data confidentiality agreements.
• Fraud and risk management services: To assess and mitigate the risk of fraudulent account activity. Data shared is limited to what is required for the risk assessment.
• Legal and regulatory authorities: Where Baji Long is required by law, court order or regulatory direction to disclose data. We will notify you of such disclosures where legally permitted to do so.
• Professional advisors: Lawyers, auditors and accountants who are bound by professional confidentiality obligations and who require access to data in the course of their professional services to Baji Long.

8. How Long We Keep Your Data

Baji Long retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with Baji Long, plus a minimum of five years after closure to comply with anti-money-laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years after each transaction to comply with financial record-keeping obligations.
• Gaming activity data: Retained for three years after your last session for responsible gaming monitoring and dispute resolution purposes.
• Technical and device data: Retained for 12 months from collection for security and fraud monitoring purposes, then deleted or anonymised.
• Support communications: Retained for two years from the resolution of the relevant support ticket.

When data is no longer required and there is no legal obligation to retain it, Baji Long securely deletes or anonymises it in accordance with our internal data disposal procedures.

9. How We Keep Your Data Secure

Baji Long implements technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our platform.
• Encryption at rest for all databases containing personal or financial data using AES-256 standards.
• Access controls ensuring that only authorised Baji Long staff with a legitimate need can access personal data, with access logged and audited.
• Two-factor authentication available for all player accounts and mandatory for Baji Long staff accessing internal systems.
• Regular security audits and penetration testing conducted by independent security professionals.
• Real-time monitoring of platform access patterns with automated alerts for anomalous activity.

No security measure is infallible and Baji Long cannot guarantee absolute security. In the event of a data breach that affects your rights and interests, we will notify you promptly in accordance with applicable law and take all reasonable steps to mitigate the impact.

10. Cookies and Similar Technologies

The Baji Long platform uses cookies and similar browser technologies to deliver a reliable, personalised experience. Cookies are small text files stored on your device by your browser. Baji Long uses the following categories of cookies:

Baji Long does not use third-party advertising cookies or tracking pixels that feed data to social media or ad networks. You can manage cookie preferences through your browser settings. Disabling performance or functional cookies will not prevent you from using the platform but may affect some conveniences like remembered preferences.

11. Your Privacy Rights

As a Baji Long player, you have the following rights in relation to your personal data. To exercise any of them, contact our support team using the details in Section 15. We will respond within 30 days.

12. Protection of Minors

The Baji Long platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that personal data has been collected from a minor, we will immediately delete that data, close the associated account and, where appropriate, report the matter to relevant authorities.

If you are a parent or guardian and believe that a minor has created a Baji Long account or submitted personal data to our platform, please contact our support team immediately using the details in Section 15. We will investigate and act promptly.

13. International Data Transfers

Baji Long operates primarily for Pakistani players and stores the majority of player data on servers located in secure data centres. Where data is processed by third-party service providers whose infrastructure is partially located outside Pakistan, Baji Long ensures that appropriate contractual safeguards are in place to protect your data to an equivalent standard to that described in this policy.

We do not transfer your identity data, financial records or gaming history to jurisdictions that do not provide adequate data protection guarantees without first establishing appropriate contractual protections. If you have questions about specific international transfers, please contact our privacy team.

14. Changes to This Privacy Policy

Baji Long reviews this Privacy Policy regularly and updates it whenever our data practices change or when relevant laws require it. The date shown at the top of this page is always the date of the most recent revision.

When material changes are made — changes that affect how we use your data in a significant way — registered players will be notified by email at least 14 days before the changes take effect. Minor clarifications and administrative updates may be made without prior notification.

Your continued use of the Baji Long platform after any update to this policy constitutes your acceptance of the revised version. If you disagree with any changes, you may close your account by contacting our support team before the changes take effect.

15. Privacy Contact & Complaints

For any privacy-related question, data access request, erasure request or complaint, please contact the Baji Long privacy team using the following details. We are committed to responding to all privacy enquiries within 30 days.