BJ BJI Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy describes how bj bji ("we", "us", "the platform"), operating at bjbji.click, handles the personal information of everyone who visits the website, creates an account, or uses any service offered by bj bji — including cricket betting, Live Casino, Andar Bahar, Baccarat, Poker, Ludo Games and the VIP Club programme.

By registering an account or using bj bji, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, please do not register or continue using bj bji.

This policy is incorporated into and should be read alongside the Terms and Conditions. In any area where the two documents cover the same subject, the Terms and Conditions take precedence on legal and contractual matters, while this Privacy Policy is the authoritative document on data handling practices.

The personal data bj bji collects falls into three broad categories: information you give us directly, information generated by your use of the platform, and information we receive from third parties such as payment processors and identity verification providers.

We do not collect sensitive data such as religion, ethnicity, political opinions or health information unless it is directly relevant to a responsible gaming assessment you have requested. We do not store full payment card numbers — only masked representations for identification purposes.

bj bji collects personal data through the following methods:

• Direct input: Information you type into forms on bj bji — registration, profile updates, deposit forms, support messages and responsible gaming settings.
• Document uploads: During KYC verification, you may upload identity documents (CNIC, passport). These are processed securely and not stored longer than necessary.
• Automated technology: When you use bj bji, our servers automatically log your IP address, device information, browser type, pages visited, time stamps and session duration. This happens on every visit regardless of whether you are logged in.
• Cookies and local storage: bj bji uses cookies to maintain your session, remember preferences and improve performance. See Section 8 for full cookie details.
• Payment processors: When you deposit or withdraw, the payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or card network) confirms transaction details to bj bji. We receive confirmation data only — not your full wallet credentials.
• Identity verification providers: For KYC, bj bji may use a third-party identity verification service that cross-references your provided details against authoritative records. Results are shared with bj bji as a pass/fail or risk score.

Every piece of data bj bji holds about you serves a specific purpose. The table below maps the main purposes to the legal basis we rely on.

bj bji shares personal data with third parties only where it is strictly necessary to deliver our services or to comply with legal obligations. We never sell data. Every third party we work with is required to protect your data under an agreement consistent with this Privacy Policy.

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banks, card networks): We share the minimum data required to complete each transaction — typically your account identifier and the transaction amount. Your wallet credentials remain with the respective provider and are never stored on bj bji servers.
• Identity and KYC verification providers: Your identity documents and personal details may be passed to a third-party verification service to confirm your eligibility to hold a bj bji account. The provider returns a verified status — full document data is not retained by bj bji beyond the verification process.
• Fraud and security providers: bj bji uses risk assessment tools that analyse usage patterns to detect account takeover, coordinated abuse, and money laundering indicators. These tools process anonymised or pseudonymised data wherever possible.
• Legal and regulatory authorities: If bj bji is legally compelled to disclose personal data — by a court order, a regulatory body, or a law enforcement agency — we will comply with the minimum disclosure required. We will notify affected players if legally permitted to do so.
• Business continuity partners: In the event of a corporate transaction such as a merger, acquisition or asset sale, player data may be transferred to the successor entity under the same privacy obligations.

bj bji does not share your data with advertising networks, social media platforms, data analytics brokers, or any party whose primary purpose is marketing or profiling.

bj bji retains personal data for as long as it is needed for the purpose it was collected and as required by applicable legal obligations. The table below gives typical retention periods for key data types.

After the retention period applicable to each data type expires, data is either securely deleted or anonymised so it can no longer be linked to you personally. Anonymised data may be retained indefinitely for aggregate statistical analysis.

bj bji applies a layered security architecture to protect personal data against unauthorised access, alteration, disclosure or destruction. Security is not a single feature — it is an ongoing practice embedded in everything we build and operate.

• Transport encryption: All connections to bj bji use TLS 1.2 or higher with 256-bit encryption. Every page, every API call, every data submission is encrypted in transit. The padlock in your browser confirms this is always active.
• Password hashing: Your bj bji login password is stored using a one-way cryptographic hash. This means bj bji staff cannot read or retrieve your password at any point — even in the event of a data breach, hashed passwords are computationally infeasible to reverse.
• Access controls: Personal data access within bj bji's internal systems is restricted on a strict need-to-know basis. Not all staff can access player data — access is role-gated and all access is logged.
• Infrastructure security: bj bji's servers are hosted in data centres with physical security, power redundancy and network-level DDoS protection. Regular penetration testing and vulnerability scanning are carried out by external security specialists.
• Data breach response: In the unlikely event of a data breach affecting personal data, bj bji will notify affected players and relevant authorities within the timeframe required by applicable regulations. Notifications will be sent to your registered email address.

bj bji uses cookies — small text files stored in your browser — and similar technologies to make the platform work properly, remember your preferences, and understand how players use the site so we can improve it. Below is a summary of the cookies we use.

bj bji does not use third-party advertising cookies or allow ad networks to set cookies on our platform. You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will prevent you from logging in or using core platform features.

bj bji is a strictly 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the registration process and through KYC document checks. If we become aware that personal data has been collected from a minor, that account will be immediately closed, any deposits returned, and the associated personal data securely deleted.

If you are a parent or guardian and you believe your child may have accessed or registered on bj bji, please contact us immediately at support@bjbji.click. We will investigate and act promptly. We also recommend using device-level parental controls to prevent underage access to online gaming platforms.

As a bj bji player you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bjbji.click. We will acknowledge your request within 5 business days and respond fully within 30 days.

Some of the third-party service providers bj bji works with — including cloud infrastructure, fraud detection tools and identity verification providers — may process data in servers located outside Pakistan. When this occurs, bj bji ensures that appropriate contractual safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

Data transferred internationally is encrypted both in transit and at rest. bj bji does not permit overseas providers to use your data for any purpose other than the specific service they are contracted to perform on our behalf.

bj bji may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable regulations, or improvements to our services. When material changes are made, we will notify you via your registered email address or through a prominent notice on the bj bji platform at least 7 days before the change takes effect.

The "Last Updated" date at the top of this page always shows when the current version was published. We encourage you to review this page periodically, especially before major gaming seasons like PSL when new features may be introduced that affect data handling.

Continued use of bj bji after any update constitutes acceptance of the revised Privacy Policy. If you disagree with any change, you may request account closure as described in the Terms and Conditions.

If you have any question about this Privacy Policy, want to exercise any of your data rights, or believe bj bji has handled your personal data incorrectly, please get in touch. We take all privacy queries seriously and aim to respond fully within 30 days.