This Privacy Policy explains what personal data Bajili collects, why we collect it, how we use and protect it, and what rights you have over your information. We are committed to handling your data with care and transparency.
These cards summarise the key pillars of Bajili's approach to data privacy. They do not replace the full policy below — please read the complete document.
All personal data transmitted between your device and Bajili is protected by TLS/HTTPS encryption. Account credentials are stored using industry-standard hashing practices.
Bajili follows a data-minimisation principle. We do not collect personal information beyond what is reasonably necessary for account operation, KYC/AML compliance and service delivery.
Bajili does not sell, rent or trade your personal information to third-party advertisers or data brokers. Sharing with third parties is limited to what is necessary for platform operation.
You have the right to access, correct, export and request deletion of your personal data. Requests can be submitted through the Help Centre or via the contact details in this Policy.
This Privacy Policy ("Policy") describes how Bajili ("we", "us", "our", "the Platform"), operated at bajili.cam, collects, processes, stores, shares and protects personal data relating to users of the Platform ("you", "your", "the User"). It also describes your rights in respect of that data and how to exercise them.
By registering an account on Bajili or using any service available on the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or continue to use the Platform.
This Policy should be read alongside the Terms & Conditions, which govern the overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.
Throughout this Policy, the following terms carry the meanings ascribed to them below:
The Data Controller for all Personal Data collected through the Bajili Platform is the Operator of bajili.cam. Queries relating to data protection, including requests to exercise data subject rights, should be directed to the Support team using the contact details in Section 16 of this Policy.
Bajili operates as an English-language online gaming entertainment platform. The Platform is not registered with, approved by or subject to oversight by any Pakistani data protection authority, government body or financial regulator. Pakistani users acknowledging this Policy do so in the context described in Section 14 of this Policy.
Bajili collects the following categories of Personal Data, depending on how you interact with the Platform:
When you create an account, we collect: full legal name; date of birth; email address; username; encrypted password; country and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere); and phone number where provided.
To comply with KYC and AML obligations, we may collect: copies of government-issued photographic identification (such as a National Identity Card, passport or driving licence); proof of address documents (such as a recent utility bill or bank statement); and proof of payment method (such as a copy of a bank card or screenshot of a wallet transaction).
We collect records of deposits, withdrawals, transaction amounts, payment method identifiers (e.g., masked card numbers, wallet reference IDs), transaction timestamps and any associated verification data required by our payment processors.
We record your gaming activity on the Platform, including bet histories, game session data, win and loss records, bonus usage, wager timestamps and responsible gambling tool usage (e.g., deposit limit settings, self-exclusion requests).
We automatically collect: IP address; device type, operating system and browser version; screen resolution; referring URL; pages visited; session duration; and geolocation data where permitted by your device settings.
We retain records of communications between you and Bajili Support, including Live Chat transcripts, email correspondence and Help Centre enquiry submissions, for quality assurance, dispute resolution and legal compliance purposes.
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Registration Data | Account creation and management | Duration of account + 5 years post-closure |
| KYC Documents | Identity verification, AML compliance | 5 years from last transaction |
| Financial Transaction Data | Payment processing, AML, dispute resolution | 5–7 years (regulatory requirement) |
| Activity & Behavioural Data | Service delivery, responsible gambling, analytics | Duration of account + 3 years |
| Technical & Device Data | Security, fraud prevention, performance | Up to 12 months |
| Communications Data | Support quality, dispute resolution | 3 years from last interaction |
Bajili processes your Personal Data on the following lawful bases, as applicable under international data protection principles:
We use the Personal Data we collect for the following specific purposes:
Bajili does not sell your Personal Data. We share Personal Data only in the following limited circumstances:
We engage third-party service providers to assist with specific platform functions, including payment processing, identity verification services, cloud infrastructure hosting, fraud detection tools, live chat software and email delivery. These providers act as Data Processors under contractual data processing agreements and may only process your data in accordance with our documented instructions.
Where game sessions are delivered by third-party game studios, technical session data (such as player session tokens, game round identifiers and bet values) may be transmitted to those studios for the purpose of delivering the game and settling outcomes. No personally identifiable information beyond what is technically necessary is transmitted.
We may disclose Personal Data where we are required to do so by applicable law, court order, regulatory authority, law enforcement request or to protect the legal rights or safety of Bajili, its users or the public. We will notify you of any such disclosure where legally permissible to do so.
In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, Personal Data held by Bajili may be transferred to the acquiring entity as part of the transaction. Affected users will be notified in advance where practically possible, and the acquiring entity will be required to honour the commitments in this Policy.
We retain Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations and to resolve disputes. The indicative retention periods for each data category are set out in the table in Section 4.
Financial transaction records and KYC documentation are retained for a minimum of five (5) years from the date of the last relevant transaction, in accordance with international AML record-keeping standards. Some categories of data may be retained for longer periods where required by applicable law or where a legal dispute is pending.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data may be retained indefinitely for analytical purposes.
Bajili implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include but are not limited to:
Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and should use a unique, strong password and not share your login details with any third party.
Bajili uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:
These cookies are essential for the Platform to function. They manage user sessions, maintain authentication state and prevent cross-site request forgery. These cookies cannot be disabled without materially impairing Platform functionality.
These cookies remember your preferences (such as language settings, display preferences and responsible gambling tool configurations) to provide a personalised experience across sessions.
These cookies collect aggregated information about how users interact with the Platform — including pages visited, session duration and navigation paths — to help us understand usage patterns and improve the service. Data collected is anonymised or pseudonymised where technically feasible.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Detailed browser cookie management instructions are available in the support documentation for your specific browser.
Bajili's infrastructure, and the infrastructure of some of our third-party service providers, may be located in countries outside the jurisdiction of the user's residence, including countries that may not have data protection laws equivalent to those in the user's home jurisdiction.
Where Personal Data is transferred internationally, Bajili takes steps to ensure that appropriate safeguards are in place to protect the transferred data, including contractual protections with receiving parties. By using the Platform and providing your Personal Data, you acknowledge and consent to the possibility of such international transfers as described in this Policy.
The Bajili Platform is strictly intended for adults aged 18 and over, or the higher minimum age required by the operator's licence jurisdiction. Bajili does not knowingly collect Personal Data from individuals below the applicable minimum age. If we become aware that Personal Data has been submitted by a minor, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has provided Personal Data to Bajili, please contact us immediately using the details in Section 16 so that we can investigate and take appropriate action.
Subject to applicable law and the verification of your identity, you have the following rights in respect of your Personal Data held by Bajili:
You have meaningful control over the Personal Data Bajili holds about you. Here is what each right means in practice.
You may request a copy of the Personal Data Bajili holds about you, along with information about how it is processed. We will respond to verified access requests within thirty (30) days.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections can often be made directly through your account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note: this right may be limited where retention is required by legal obligation (e.g., AML record-keeping).
You may request that we temporarily halt the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested or a legitimate interest objection is under review.
Where processing is based on consent or contractual necessity, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
You may object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling. Where you object to marketing communications, we will honour the objection without charge or adverse consequence.
Bajili is an English-language platform designed with Pakistani users in mind. Users accessing the Platform from Pakistan should be aware of the following:
Pakistan does not currently have a comprehensive general data protection law equivalent to international standards such as the European General Data Protection Regulation (GDPR). However, the Prevention of Electronic Crimes Act, 2016 (PECA) and the Personal Data Protection Bill (in legislative progress at the time of writing) are relevant to the processing of personal data of Pakistani individuals. This Policy reflects internationally accepted data protection principles, which we apply as our baseline standard irrespective of the user's jurisdiction.
Bajili does not claim to be registered with, supervised by or accountable to the Pakistan Telecommunication Authority, the State Bank of Pakistan, the Federal Investigation Agency or any other Pakistani regulatory or governmental body in respect of data protection matters. Users accessing the Platform from Pakistan do so under the terms of this Policy and the Terms & Conditions.
Bajili reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. When we make material changes — that is, changes that significantly affect how we collect, use or share your Personal Data — we will notify registered users through on-Platform notifications or by email to the address associated with your account.
Non-material changes (such as typographical corrections, formatting updates or clarifications that do not alter the substance of our data practices) may be made without specific notification. The Effective Date at the top of this Policy reflects the date of the most recent substantive revision.
Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and close your account.
If you have any questions, concerns or complaints regarding this Privacy Policy, or if you wish to exercise any of the data subject rights described in Section 13, please contact us through one of the following channels:
We aim to respond to all data-related enquiries within five (5) business days. Rights requests involving data access, portability or erasure may require up to thirty (30) calendar days, with complex requests taking up to ninety (90) calendar days. You will be notified of the expected timeline upon receipt of your request.
This Privacy Policy was last reviewed on 1 January 2026. © 2026 Bajili. All rights reserved.
Four practical commitments that back up the legal language in this Policy.
Every connection between your device and Bajili servers is encrypted via TLS. Your session data, payment information and account credentials are never transmitted in plain text.
We collect only what is necessary for platform operation, KYC compliance and service delivery. We do not harvest behavioural profiles for third-party advertising purposes.
In the event of a Personal Data breach posing risk to your rights, we will notify you promptly with details of what occurred, what data was affected and what steps we have taken in response.
We do not retain your Personal Data indefinitely. Each category of data has a defined retention window, and data is securely deleted or anonymised when retention is no longer justified.
Now that you understand how Bajili handles your personal data, you can use the Platform knowing exactly what information is collected, how it is protected and what rights you have over it.
18+ only. Gambling may be restricted by local law in Pakistan. This Policy is subject to change. Continued use of the Platform constitutes acceptance of the current Policy.