Privacy Policy

This Privacy Policy ("Policy") describes how baj999 ("Platform", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to users ("you", "your") who access or use the baj999 website at baj999.cam and all associated gaming services, including sports betting, live casino, slots, table games and esports wagering.

We are committed to handling your personal information with transparency, care and in full compliance with the data protection obligations imposed by our applicable operating licensing jurisdiction. This Policy has been written to be as clear and accessible as possible, so that you understand exactly what happens to your data when you use baj999.

By registering an account with baj999, making a deposit, or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

If you have questions about this Policy or about how your data is handled at any point, please contact our support team via the 24/7 live chat function on the platform or by email at the address provided in Section 15.

The following terms carry specific meanings throughout this Privacy Policy. Understanding these definitions will help you read the remaining sections accurately.

baj999 collects the following categories of personal data in the course of providing its services. We collect only what is genuinely necessary for the purposes described in Section 5.

baj999 does not knowingly collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where a government-issued identity document submitted during KYC incidentally contains such information — in which case only the identity and date-of-birth fields are processed and the document is handled as sensitive data under appropriate access controls.

We collect personal data through the following channels and mechanisms:

• Direct Registration: Information you provide when creating your baj999 account, including your name, date of birth, email address, contact number and residential address.
• KYC Verification: Identity documents and supporting materials you submit when completing our Know Your Customer verification process. This is a mandatory requirement under our licensing obligations and is necessary to confirm your age and identity before withdrawals can be processed.
• Platform Activity: Data generated automatically when you use the platform — including your betting activity, game sessions, deposit and withdrawal transactions, and interactions with live chat or support functions.
• Technical Collection: Device and connection data collected automatically by our servers whenever you access the platform, including your IP address, browser type, operating system and session timestamps. This data is collected for security, fraud prevention and platform analytics purposes.
• Cookies and Tracking Technologies: Data collected via cookies, pixel tags and similar technologies as described in Section 9. You can manage your cookie preferences through your browser settings, subject to the limitations described in that section.
• Third-Party Verification Providers: Where you consent, or where our licensing obligations require, we may receive identity and AML-check results from third-party KYC and compliance service providers. These providers act as data processors under contract with baj999.
• Support Communications: Any personal data you voluntarily share when contacting our support team via live chat, email or any other communication channel provided on the platform.

baj999 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or as otherwise required by law.

Where data protection frameworks aligned with internationally recognised standards apply to our processing activities, baj999 relies on the following legal bases to justify the processing of your personal data:

• Contract Performance: The majority of our data processing is necessary to perform the contract we have with you — i.e., to operate your account, process your bets, handle deposits and withdrawals, and deliver the services you signed up for. Without this processing, we cannot provide the service.
• Legal Obligation: We are required to process certain data — particularly identity verification (KYC) and transaction records — in order to comply with the licensing conditions imposed on the operator and with applicable anti-money-laundering legislation.
• Legitimate Interests: We process some data on the basis of our legitimate business interests, including fraud detection, platform security, multi-account detection and aggregated analytics for product improvement. We have assessed that these interests are not overridden by your rights and freedoms.
• Consent: Where we process your data for optional purposes — such as sending you marketing communications or using non-essential cookies — we do so only on the basis of your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

baj999 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data only in the following limited and controlled circumstances:

• KYC and Identity Verification Providers: We work with licensed third-party identity verification service providers to complete our mandatory KYC checks. These providers receive only the minimum data required to perform their specific verification function and are bound by strict data processing agreements.
• Payment Processors and Gateway Providers: When you make a deposit or request a withdrawal, relevant transaction data is shared with the applicable payment processor. Payment method names referenced on our platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency networks) are familiar references for Pakistani users. Sharing of data with any payment processor occurs solely to facilitate your specific transaction.
• Fraud Prevention and AML Services: We may share data with specialist fraud detection and AML screening providers where required to detect, investigate or prevent financial crime. Such sharing is limited to what is strictly necessary for the compliance function.
• Game and Platform Technology Providers: Our casino games and sportsbook software are provided by third-party game studios and platform technology partners. These providers may receive anonymised or pseudonymised session data for the purposes of game certification, RNG auditing and technical support. They do not receive your full personal profile unless explicitly necessary.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, licensing authorities or other competent public bodies where we are required to do so by law, court order, or valid regulatory request. We will notify you of such disclosure where we are legally permitted to do so.
• Group Companies and Successors: In the event of a business restructuring, merger, acquisition or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure appropriate data protection safeguards are in place.

Depending on the data protection framework applicable to your circumstances and the operator's licensing jurisdiction, you may have the following rights in relation to your personal data held by baj999. We are committed to facilitating the exercise of these rights promptly and transparently.

To exercise any of the above rights, please contact our support team via the 24/7 live chat function or by email (see Section 15). We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Complex requests may take up to 90 days in total, in which case we will notify you of the extended timeline.

We may need to verify your identity before processing certain data rights requests to ensure that we do not inadvertently disclose or delete data in response to an unauthorised request.

baj999 uses cookies and similar tracking technologies — including pixel tags and local storage — to operate the platform effectively, keep your session secure, remember your preferences and understand how users interact with different parts of the site. The following table describes each category of cookie we use.

You can manage or delete non-essential cookies through your browser settings at any time. Please note that disabling functional cookies may affect the usability of certain platform features. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance.

baj999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law and licensing obligations. The following general retention principles apply:

• Account Data: Retained for the lifetime of your active account and for a minimum of five (5) years following permanent account closure, as required by our AML and licensing compliance obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later. This is a hard regulatory requirement under applicable anti-money-laundering frameworks and cannot be waived on request.
• Transaction Records: Financial transaction records, including deposits, withdrawals and bet history, are retained for a minimum of five (5) years from the date of the transaction to satisfy audit, licensing and AML recordkeeping requirements.
• Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the communication for quality assurance and dispute resolution purposes.
• Technical and Log Data: Server log data and IP address records are retained for up to twelve (12) months from the date of collection, after which they are deleted or anonymised.
• Marketing Preferences: Records of your marketing consent status are retained for as long as your account is active and for a reasonable period after account closure to demonstrate compliance with consent obligations.

When a retention period expires, data is securely deleted, destroyed or irreversibly anonymised so that it can no longer be associated with you as an identifiable individual. Anonymised and aggregated data — from which individual identity cannot be reconstructed — may be retained indefinitely for platform analytics and product development purposes.

baj999 operates as an international online gaming platform. As a result, your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such international transfers occur, baj999 takes appropriate safeguards to ensure that your personal data is protected to a standard consistent with internationally recognised data protection principles. These safeguards may include:

• Contractual clauses with data processors and service providers that require them to protect personal data to a standard equivalent to that required under the applicable licensing framework.
• Working exclusively with third-party vendors who have demonstrated compliance with recognised data security standards, including ISO/IEC 27001 or equivalent certifications.
• Technical and organisational security measures described in Section 13 of this Policy.

By using baj999, you acknowledge that your personal data may be transferred internationally as described in this section. If you have specific concerns about international data transfers relating to your account, please contact our support team.

baj999 does not knowingly collect personal data from individuals under the age of 18 (or the applicable higher minimum age). Our KYC verification process is specifically designed to confirm each registrant's age before deposits and withdrawals are permitted. Any account found to belong to a minor will be immediately suspended, all funds will be handled in accordance with our Terms & Conditions, and the personal data associated with that account will be securely deleted except where retention is required by law.

If you are a parent or guardian and believe that a minor has registered an account with baj999 or has accessed the platform without authorisation, please contact our support team immediately via the 24/7 live chat or by email. We will investigate and take appropriate action without delay.

We strongly encourage parents and guardians to use parental control software to restrict access to gambling websites on devices used by minors. Age verification tools and parental filtering software are available from a number of providers — please refer to our Responsible Gambling page for further guidance.

baj999 implements a range of technical and organisational security measures designed to protect your personal data from unauthorised access, loss, misuse, disclosure, alteration or destruction. These measures are reviewed and updated on an ongoing basis in line with industry best practices.

• Encryption in Transit: All data transmitted between your browser or device and our platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption.
• Password Security: User account passwords are never stored in plain text. They are hashed using a recognised secure hashing algorithm before storage, meaning that even baj999 staff cannot read your password.
• Access Controls: Access to personal data within baj999's systems is strictly limited on a need-to-know basis. Staff access rights are role-based, regularly reviewed and revoked immediately upon role change or departure.
• Secure Infrastructure: baj999's platform infrastructure is hosted in secure data centres that maintain recognised physical and environmental security controls, including restricted physical access, climate control and power redundancy.
• Intrusion Detection: We use automated monitoring systems to detect and alert on unusual access patterns, potential brute-force attacks and other indicators of unauthorised access attempts.
• Incident Response: We maintain documented data breach response procedures. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the applicable supervisory authority within the timeframes required by our licensing obligations.

While we take extensive measures to protect your data, no system can guarantee absolute security. You also play an important role in keeping your account secure — use a strong, unique password for your baj999 account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.

baj999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, licensing obligations or platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page and in the Table of Contents sidebar.
• Display a prominent notice on the platform and/or send a notification to your registered email address, where the changes are material and affect your rights.
• Make the updated Policy available on this page with the effective date of the new version clearly stated.

Your continued use of the baj999 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how baj999 handles your personal data. Previous versions of this Policy may be requested from our support team for reference purposes.

If you have any questions, concerns or requests relating to this Privacy Policy or to the way baj999 handles your personal data, please get in touch with us using the contact details below. Our support team is available 24 hours a day, 7 days a week.

When submitting a data rights request by email, please include your registered username and the email address associated with your account so that we can locate your records efficiently and verify your identity before processing the request.

We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days of receiving a verifiable request. If a request is complex or involves a high volume of data, we may extend this timeline by up to a further 60 days, in which case we will notify you in advance.