BJ BJI Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy describes how BJ BJI ("we", "us", "our"), operating the platform at bjbji.im, collects, uses, stores, and protects the personal information of players in Pakistan. It applies to all users of the BJ BJI website, mobile platform, and any related services.

Privacy is not something BJ BJI treats as a legal checkbox. When you share your name, your CNIC, your Easypaisa number, or your betting history with BJ BJI, you're trusting us with information that matters. This policy explains exactly how that trust is honoured — what is collected, what is used, and what is never touched.

By registering an account on BJ BJI, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described here. If you disagree with any part of this policy, please do not register or use BJ BJI's services.

1What Personal Data BJ BJI Collects

BJ BJI collects only the data that is necessary to operate the platform, verify player identity, process payments, and comply with applicable regulations. We do not collect data for the sake of collecting it.

Registration Data

• Full legal name (as it appears on your CNIC)
• Date of birth
• Pakistani mobile number
• Email address
• Username and encrypted password
• Province and city of residence

Verification (KYC) Data

• CNIC number and a copy of your CNIC (front and back)
• Proof of address where required
• Selfie or live photo for identity confirmation (requested only for large withdrawals)

Financial Data

• Easypaisa / JazzCash / NayaPay / SadaPay account numbers used for deposits and withdrawals
• Bank account details for IBFT transactions
• Card details (last four digits only — full card numbers are never stored by BJ BJI)
• Transaction history — deposit amounts, withdrawal amounts, and timestamps

Gameplay & Activity Data

• Bets placed, games played, stakes used, and outcomes
• Session duration and login/logout timestamps
• Bonus claims and wagering progress
• Responsible gaming settings you have applied to your account

Technical Data

• IP address
• Device type, operating system, and browser version
• Referring URL (how you arrived at bjbji.im)
• Pages visited and time spent on each page

2How BJ BJI Collects Your Data

BJ BJI collects your personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, or fill in any form on bjbji.im.
• Automatically during platform use: Technical and gameplay data is collected automatically through server logs, analytics tools, and the game engines provided by our third-party game studios.
• From payment processors: When you complete a transaction via Easypaisa, JazzCash, NayaPay, SadaPay, or IBFT, our payment processing partners confirm the transaction outcome and share minimal transaction metadata with BJ BJI.
• From identity verification services: BJ BJI uses licensed third-party KYC providers to verify CNIC authenticity. These providers share only the verification result (pass/fail) and do not retain your documents on BJ BJI's behalf.

3Why BJ BJI Uses Your Personal Data

BJ BJI uses your personal data only for the purposes listed below. We do not use your data for any purpose that was not disclosed to you at the time of collection.

4Who BJ BJI Shares Your Data With

BJ BJI does not sell your personal data to third parties — ever. We share data only where it is strictly necessary to operate the platform and in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT providers, and card processors receive only the transaction data they need to complete your specific transaction.
• KYC / Identity verification providers: Licensed identity verification services receive your CNIC details and selfie solely for the purpose of confirming your identity. They are contractually prohibited from using your data for any other purpose.
• Game studios: JILI, PG Soft, IGS, Spade Gaming, and other game providers receive anonymised player session data to operate their games. They do not receive your name, CNIC, or payment details.
• Analytics providers: Aggregated, anonymised platform usage data is shared with analytics tools to help improve BJ BJI. No personally identifiable information is included in these transfers.
• Legal and regulatory authorities: BJ BJI may be legally required to disclose account or transaction data to competent authorities in response to a lawful request. We will always inform you if such a request is received, unless we are legally prohibited from doing so.

All third parties with whom BJ BJI shares data are required to maintain appropriate data security standards and are prohibited from using your data for any purpose beyond what BJ BJI has authorised.

5Payment Data & Financial Security

Financial data is the most sensitive information BJ BJI holds, and it is treated accordingly:

• Card numbers: BJ BJI never stores full card numbers on its servers. Card transactions are processed directly through our PCI-DSS compliant payment partners. BJ BJI stores only the last four digits and card type for reference purposes.
• Mobile wallet details: Your Easypaisa or JazzCash account number is stored in an encrypted format in BJ BJI's database. It is used only to process your withdrawal requests and is never shared with any party other than the specific payment processor completing your transaction.
• Transaction records: BJ BJI maintains a record of all deposit and withdrawal transactions associated with your account for a minimum of five years. This is a financial compliance requirement.
• Withdrawal security: All withdrawal requests are subject to an automated fraud check before processing. This check uses transaction pattern analysis and does not involve manual review of your personal documents unless a specific concern is flagged.

6Cookies & Tracking Technologies

BJ BJI uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. Here is a breakdown of what we use and why:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security tokens that prevent cross-site request forgery. These cannot be disabled without breaking core functionality.
• Performance cookies: Used to measure how BJ BJI pages are accessed and which features are used most. Data collected is aggregated and anonymised. BJ BJI uses this to make the platform faster and easier to navigate.
• Functional cookies: Remember your preferences — language setting, preferred deposit method, and notification preferences — so you don't have to re-enter them every time.
• Analytics cookies: BJ BJI uses third-party analytics tools in anonymised, aggregate form to understand overall platform performance. No individual user is identified in this data.

Most browsers allow you to manage or block cookies through browser settings. Blocking essential cookies will prevent BJ BJI from functioning correctly. Blocking performance or analytics cookies will have no impact on your ability to use the platform.

7Data Storage & Security

BJ BJI takes the security of player data seriously and has implemented the following measures:

• Encryption in transit: All data transmitted between your device and bjbji.im is encrypted using TLS 1.3 (Transport Layer Security). The connection is established over HTTPS at all times.
• Encryption at rest: Sensitive personal data stored in BJ BJI's database — including CNIC details, payment account numbers, and passwords — is encrypted using AES-256 encryption.
• Access controls: Access to personally identifiable player data within BJ BJI's systems is restricted on a strict need-to-know basis. Support agents can see only the data necessary to assist with your query. Financial team members can see payment data but not gameplay history. No single employee has unrestricted access to all data categories.
• Server security: BJ BJI's servers are hosted in secure, access-controlled data centres. Regular penetration testing and vulnerability assessments are performed by independent security firms.
• Breach notification: In the unlikely event of a data breach affecting your personal information, BJ BJI will notify you within 72 hours of becoming aware of the breach, in accordance with standard data protection practice.

No system is completely impenetrable, and BJ BJI cannot guarantee absolute security against all possible threats. However, we apply the same security standards used by major Pakistani financial institutions and continuously update our defences.

8How Long BJ BJI Keeps Your Data

BJ BJI retains personal data only for as long as it is necessary for the purposes described in this policy:

• Account data: Retained for the lifetime of your account plus five years following account closure. This retention period is required for financial compliance and dispute resolution.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC documents (CNIC copies, selfies): Retained for five years from the date of submission or from account closure, whichever is later.
• Support communications: Retained for three years from the date of the final communication in each support thread.
• Technical / analytics data: Anonymised after 24 months and retained in aggregate form for platform improvement purposes.
• Marketing opt-in records: Retained until you withdraw your consent, plus one year for compliance documentation.

After the applicable retention period expires, your personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

9Your Privacy Rights as a BJ BJI Player

As a registered BJ BJI player, you have the following rights over your personal data. All requests can be submitted by emailing support@bjbji.im with the subject line "Privacy Request":

BJ BJI will respond to all verified privacy requests within 30 days. In complex cases, this may be extended by a further 30 days, in which case you will be informed of the extension and the reason for it.

10Children's Privacy

BJ BJI is strictly an adults-only platform. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

During registration, BJ BJI requires players to confirm that they are 18 or older. CNIC verification is used to confirm age as part of KYC compliance. If BJ BJI discovers that a minor has created an account, that account will be immediately closed, all funds will be returned, and all personal data associated with the account will be deleted from BJ BJI's systems as quickly as legally permissible.

If you are a parent or guardian and believe your child has registered on BJ BJI, please contact support@bjbji.im immediately with details so we can take swift action.

11Updates to This Privacy Policy

BJ BJI reviews and updates this Privacy Policy periodically to reflect changes in how the platform operates or in applicable legal requirements. When we make changes:

• The "Last Updated" date at the top of this page will be changed.
• Where the changes are material and affect your rights, BJ BJI will notify registered players by their registered mobile number or email address.
• A notification will be displayed on the BJ BJI platform for at least 14 days following any material update to this policy.

Your continued use of BJ BJI after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should contact support to close your account before the effective date.

12Contact BJ BJI About Privacy

For any privacy-related request, question, or complaint, contact BJ BJI's data protection team directly:

BJ BJI takes all privacy complaints seriously. If you are not satisfied with BJ BJI's response to a privacy concern, you have the right to escalate the matter through appropriate legal channels. BJ BJI will cooperate fully with any legitimate regulatory inquiry.