Bajl Privacy Policy – How We Protect Your Data in Pakistan

1 Who We Are and How This Policy Applies

Bajl operates the online gaming platform at bajl.online, including all associated game sections — PSL betting, live cricket scoring, online casino, slots, poker, Aviator, Ludo Games and all other services offered under the Bajl brand. For the purposes of this Privacy Policy, "Bajl", "we", "us" and "our" all refer to the entity that operates bajl.online.

This Privacy Policy applies to all personal data that Bajl collects and processes in connection with your registration, use of games, deposits, withdrawals, bonus claims, customer support interactions and any other activity conducted through the Bajl platform or via communication with Bajl's support team.

This policy covers players registered in Pakistan and applies to all data collected from Pakistani players, regardless of which device or network is used to access Bajl. If you are accessing Bajl from outside Pakistan, please be aware that data protections in your jurisdiction may differ.

2 What Personal Data Bajl Collects

Bajl collects personal data in two ways: information you provide directly when registering or using the platform, and information collected automatically as you interact with Bajl's services. The following table summarises the categories of data Bajl collects:

Bajl does not collect or store full payment card numbers. Card transactions are processed by certified payment gateways that handle card data under their own PCI-DSS compliant security standards. Bajl receives only confirmation of transaction outcome and a partial reference number.

3 Why Bajl Collects Your Data

Every piece of data Bajl collects serves a specific, documented purpose. We do not collect information speculatively or "just in case". The primary reasons Bajl collects personal data from Pakistani players are:

• Account creation and operation: To set up and manage your Bajl account, verify your identity and ensure you can access the games and services you registered for.
• Age and identity verification (KYC): To confirm that every player on Bajl is at least 18 years old and is who they say they are. This is a core obligation, not optional.
• Payment processing: To process deposits from and withdrawals to your registered Pakistani payment accounts (Easypaisa, JazzCash, IBFT, Visa/Mastercard, NayaPay, SadaPay).
• Anti-money laundering (AML) compliance: To monitor transactions for patterns that may indicate money laundering or financial crime, as required.
• Responsible gaming obligations: To track gaming behaviour, enforce deposit limits you have set, honour self-exclusion requests, and identify players who may need support.
• Customer support: To respond to your queries, resolve disputes and improve the support experience for all Bajl players.
• Platform improvement: Anonymised and aggregated usage data is used to understand how players interact with Bajl and to prioritise feature improvements.
• Security and fraud prevention: To detect and prevent cheating, bot activity, account sharing and other forms of abuse that would harm the integrity of Bajl's platform.

4 Legal Basis for Processing

Bajl processes personal data on one of the following legal grounds, depending on the type of data and the purpose of processing:

• Contractual necessity: Processing that is required to provide the services you signed up for — account management, payments, game access. Without this processing, Bajl cannot fulfil its obligations to you as a player.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering monitoring and responding to lawful requests from authorities.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, analytics for service improvement, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: For marketing communications only. Bajl will not send promotional emails or SMS messages without your express consent, and you can withdraw that consent at any time.

5 How Bajl Uses Your Data in Practice

To help you understand how your data actually flows through Bajl's systems, here is a practical walkthrough of key data uses from the moment you register:

6 Sharing Your Personal Data

Bajl does not sell your personal data to any third party. Period. We share data with external parties only in the following limited circumstances, and only to the extent strictly necessary:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank networks and card scheme processors receive your payment details to complete transactions. Each is bound by its own strict data security obligations.
• Identity verification providers: Bajl uses a certified third-party KYC service to validate CNIC and passport documents. This provider processes your document data under a formal data processing agreement with Bajl and may not use your data for any other purpose.
• Responsible gaming databases: If you self-exclude on Bajl, your details may be shared with relevant self-exclusion registers to prevent you from accessing other gaming platforms during your exclusion period.
• Law enforcement and regulatory authorities: Bajl will disclose personal data to law enforcement or regulatory bodies when required by law, when responding to a valid legal process, or where Bajl has a reasonable belief that disclosure is necessary to prevent criminal activity.
• Service providers: Bajl uses third-party providers for services such as cloud hosting, email delivery and analytics. All providers are bound by data processing agreements that prohibit them from using Bajl player data for their own purposes.

7 How Bajl Secures Your Personal Data

Bajl takes data security seriously and has implemented technical and organisational measures appropriate to the risks involved in processing personal data in the online gaming context. Key security measures include:

• All data transmitted between your device and Bajl's servers is encrypted using TLS 1.3 (256-bit SSL), the same standard used by banks and financial institutions worldwide.
• KYC documents and sensitive identity data are stored in an encrypted vault with role-based access controls. Only authorised verification staff can access this data, and all access is logged and audited.
• Bajl's servers are hosted in secure data centres with physical access controls, network monitoring and intrusion detection systems operating around the clock.
• Player passwords are stored as salted cryptographic hashes — Bajl staff cannot read your password, and it is never transmitted in plain text.
• Two-factor authentication is available for all Bajl accounts and is strongly recommended. Enabling 2FA provides an additional layer of protection against unauthorised access.
• Bajl conducts regular security assessments, including penetration testing, to identify and address vulnerabilities before they can be exploited.

In the event of a data breach that poses a significant risk to players, Bajl will notify affected players promptly and take all reasonable steps to contain and remediate the breach. Bajl will also notify relevant authorities as required.

8 How Long Bajl Keeps Your Data

Bajl retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When the retention period expires, Bajl deletes or anonymises personal data securely. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

9 Cookies and Tracking Technologies

Bajl uses cookies and similar tracking technologies on its website and platform. Cookies are small files placed on your device that help Bajl provide a functional, secure and personalised experience. The types of cookies Bajl uses are explained below:

You can control cookies through your browser settings. Disabling all cookies may affect your ability to use certain features of the Bajl platform, particularly features that require you to remain logged in between page loads.

10 Your Rights Over Your Personal Data

As a player registered on Bajl, you have specific rights over the personal data we hold about you. These rights are detailed below. To exercise any of these rights, contact Bajl's data team at support@bajl.online with the subject line "Data Rights Request". Bajl will respond within 30 days.

11 Children's Privacy

The Bajl platform is strictly for adults aged 18 and over. Bajl does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe a minor has accessed Bajl or provided personal information to Bajl, please contact support@bajl.online immediately. Bajl will investigate and, where confirmed, delete the minor's data and permanently close the account.

12 Marketing Communications

Bajl will only send you promotional emails, SMS messages or in-platform notifications about bonuses, new games and special offers if you have explicitly given your consent to receive marketing communications during registration or through your account settings.

You can withdraw your marketing consent at any time by:

• Clicking the unsubscribe link in any Bajl marketing email.
• Replying STOP to any Bajl promotional SMS.
• Updating your communication preferences in your Bajl account settings.
• Contacting support@bajl.online with a request to opt out of all marketing.

Withdrawing marketing consent does not affect your ability to use Bajl or receive service-related communications (account security alerts, transaction confirmations, support responses). These operational messages are sent regardless of marketing preference because they are necessary for the provision of Bajl's services.

13 Changes to This Privacy Policy

Bajl reviews and updates this Privacy Policy periodically to reflect changes in data practices, applicable law, or the features and services offered on the platform. The effective date at the top of this document indicates when the current version came into force.

Where changes are material — meaning they significantly affect how Bajl uses your data or the rights available to you — Bajl will provide at least 14 days' notice via email or an in-platform notification before the updated policy takes effect. Continued use of Bajl after the effective date of an updated policy constitutes your acceptance of the changes.

Non-material changes (such as corrections, clarifications that do not alter the substance of data practices, or updates reflecting new features with the same privacy implications as existing features) may take effect immediately without prior notice.

14 How to Contact Bajl About Your Privacy

For any question, concern or request related to this Privacy Policy or the personal data Bajl holds about you, please contact Bajl's data team through any of the following channels:

Bajl will acknowledge data rights requests within 5 business days and respond in full within 30 calendar days. If your request is complex or you have submitted multiple requests, Bajl may extend this period by a further 30 days and will notify you of the extension and reason.