When you play at Baji Long, you share information with us. That is unavoidable — you need an account, we need to verify who you are, and our payment systems need to process transactions. What matters is what happens to that information after you hand it over. This Privacy Policy answers that question in full, in plain language, without the deliberately confusing corporate jargon that privacy policies are notorious for.
This policy applies to every registered player at Baji Long, every visitor to bajilong.biz and every person who contacts our support team — regardless of which city in Pakistan they are writing from, and regardless of which payment method they use. If you are a new player deciding whether to register, this document will help you understand exactly what you are agreeing to with respect to your personal data.
1 Who We Are
Baji Long is an online casino and sports betting platform operated for Pakistani players at bajilong.biz. For the purposes of this Privacy Policy, Baji Long is the data controller — meaning we are the organisation that determines why and how your personal data is processed.
Our data protection contact is reachable at support@bajilong.biz. If you have any questions about how we handle your data — whether it is a simple clarification or a formal request — this is the correct address to use. We respond to all data-related enquiries within 72 hours.
2 Data We Collect
Baji Long collects personal data in three main ways: information you provide directly, information generated by your use of the platform and information collected automatically by our technical systems.
2.1 Data You Provide Directly
- Registration data: Full name, date of birth, Pakistani mobile number, email address and account password.
- Identity verification (KYC): Copy of your CNIC (Computerised National Identity Card), passport or other government-issued identity document when requested for account verification.
- Payment information: Easypaisa account number, JazzCash number, NayaPay or SadaPay wallet details, bank account number for IBFT, or card details for Visa/Mastercard transactions. Note: full card numbers are never stored on Baji Long servers.
- Support communications: Any information you share in live chat, email or other support channels, including messages, attachments and your account reference.
- Responsible gaming forms: Information you provide when requesting deposit limits, self-exclusion or other responsible gaming tools.
2.2 Data Generated by Your Use of the Platform
- Betting and gaming history — games played, stakes placed, outcomes, session durations.
- Transaction history — deposit amounts, withdrawal requests, bonus claims and adjustments.
- Account activity logs — login timestamps, IP addresses associated with logins, device identifiers.
- Responsible gaming tool usage — when limits were set, modified or removed.
2.3 Automatically Collected Technical Data
- IP address and approximate geographic location derived from it.
- Device type, operating system, browser type and version.
- Pages visited on bajilong.biz, referral source and navigation path.
- Cookie identifiers and session tokens — see Section 6 for full cookie details.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity | Name, DOB, CNIC number | Registration / KYC form |
| Contact | Mobile number, email address | Registration form |
| Financial | Easypaisa/JazzCash number, bank details | Deposit / withdrawal process |
| Gaming Activity | Bets placed, games played, outcomes | Automatically via platform systems |
| Technical | IP address, device ID, browser type | Automatically via server logs |
| Support | Chat transcripts, email correspondence | Direct communication with our team |
3 How We Use Your Data
Baji Long uses your personal data only for the purposes listed below. We do not use it for purposes incompatible with those you were informed of at the time of collection.
- Account management: Creating, maintaining and securing your player account. Verifying your identity and age. Processing password resets and security alerts.
- Transaction processing: Handling deposits and withdrawal requests via your chosen payment method. Reconciling balances and crediting bonuses.
- Regulatory compliance and KYC: Meeting our Know Your Customer and Anti-Money Laundering obligations. Verifying that players are 18 or over. Retaining records as required by our operating licence.
- Fraud prevention and security: Detecting and investigating suspicious account activity, duplicate registrations, bonus abuse and unauthorised access attempts.
- Customer support: Responding to your queries, resolving disputes and providing assistance with account or payment issues.
- Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, administering limits and self-exclusion requests, and providing welfare-related outreach where appropriate.
- Platform improvement: Analysing anonymised usage data to improve game performance, payment flow efficiency, and overall user experience on bajilong.biz.
- Marketing communications: Sending promotional emails and SMS messages about bonuses and offers — only where you have opted in. See Section 12 for full details and how to opt out.
4 Legal Basis for Processing
Every time Baji Long processes your personal data, we do so on one of the following legal grounds:
- Contract performance: Processing necessary to operate your account, handle your bets and process your payments — without which we cannot provide the service you signed up for.
- Legal obligation: Processing required to comply with KYC, AML, age verification and record-keeping requirements imposed by our operating licence and applicable regulations.
- Legitimate interests: Processing to detect and prevent fraud, maintain platform security, improve our services and conduct internal analytics — where these interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies — only where you have explicitly opted in, and which you can withdraw at any time.
5 Data Sharing and Third Parties
Baji Long does not sell, rent or trade your personal data. We share it only in the following limited and controlled circumstances:
5.1 Payment Processors
When you make a deposit or request a withdrawal, your payment details are passed to the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or the card processing network (for Visa/Mastercard). These processors receive only the minimum data necessary to complete the transaction and are bound by their own regulatory obligations regarding data security.
5.2 Game Software Providers
Games on the Baji Long platform are provided by third-party studios. When you play a game, a session token is passed to the provider's servers to load and run the game. This does not include your full name, contact details or payment information — only an anonymised session reference tied to your account.
5.3 Identity Verification Services
For KYC purposes, identity documents may be processed by a third-party verification provider acting as a data processor under contract with Baji Long. They are authorised to use your data only for the purpose of identity verification and are prohibited from any other use.
5.4 Law Enforcement and Regulatory Authorities
Where required by law, court order or regulatory instruction, Baji Long will disclose player data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
5.5 Business Transfers
In the event of a merger, acquisition or sale of all or part of the Baji Long business, player data may be transferred as part of that transaction. Affected players will be notified in advance and given the opportunity to close their account before any transfer occurs.
6 Cookies and Tracking Technologies
Baji Long uses cookies and similar technologies on bajilong.biz. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how it is being used.
6.1 Types of Cookies We Use
- Essential cookies: Required for the platform to function. They maintain your login session, remember your language preference and ensure the platform loads securely. These cannot be disabled without breaking the service.
- Functional cookies: Remember your preferences — such as bet slip settings or deposit method — to save you time on subsequent visits.
- Analytics cookies: Collect anonymised data about how players navigate the platform. This helps us identify which pages are slow, where users get stuck and how the betting flow can be improved. Data collected by analytics cookies is not linked to your personal identity.
- Marketing cookies: Used only if you have consented to marketing communications. They help us show relevant offers and measure campaign effectiveness. You can withdraw consent at any time via your account settings or by emailing support@bajilong.biz.
6.2 Managing Cookies
You can control non-essential cookies through your browser settings. Instructions for the most common browsers are widely available. Disabling essential cookies will prevent the Baji Long platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to play, deposit or withdraw.
7 Data Security
The security of your personal data is something Baji Long takes seriously at every level of the platform — from the code running on our servers to the procedures followed by our support team.
- Encryption in transit: All data exchanged between your browser and bajilong.biz is encrypted using TLS (Transport Layer Security). Look for the padlock icon in your browser address bar — that is the encryption working.
- Encryption at rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted at rest using industry-standard algorithms.
- No storage of full payment credentials: Full card numbers, wallet PINs and IBFT passwords are never stored on Baji Long servers. Payment data is tokenised through our payment processors.
- Access controls: Player data is accessible only to Baji Long staff who have a legitimate operational need to view it. Access is logged, audited and reviewed regularly.
- Two-factor authentication: Available for all player accounts and strongly recommended. Activate it in your account security settings.
- Security incident response: In the event of a data breach that poses a risk to your rights and freedoms, Baji Long will notify affected players without undue delay and take immediate steps to contain and remediate the breach.
8 Data Retention
Baji Long retains personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by law or our operating licence.
- Active accounts: Your data is retained for the full duration that your account is active on the platform.
- Closed accounts: Following account closure, we are required to retain certain records — including identity verification documents, transaction history and account activity logs — for a minimum period as mandated by our licensing obligations. This period is typically five years from account closure, after which data is securely deleted or anonymised.
- Support communications: Chat transcripts and email correspondence are retained for 24 months from the date of the interaction, unless they form part of an ongoing dispute, in which case they are kept until the dispute is resolved.
- Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for as long as necessary to demonstrate compliance, and for three years after the end of the consent period.
- Analytics data: Anonymised analytics data with no connection to individual identities may be retained indefinitely for platform improvement purposes.
9 Your Privacy Rights
As a player at Baji Long, you have a number of rights in relation to your personal data. These are summarised below. To exercise any of them, contact us at support@bajilong.biz with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and complete it within 30 days.
Right of Access
Request a copy of all personal data we hold about you. We will provide this in a clear, readable format at no charge.
Right to Rectification
Request correction of any personal data we hold that is inaccurate or incomplete. Most basic corrections can be made directly in your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that legal retention obligations may prevent full erasure in some cases.
Right to Restrict Processing
Request that we limit how we process your data while a dispute or accuracy review is pending, without requiring full deletion.
Right to Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
Right to Object
Object to processing based on legitimate interests, including profiling for marketing. Where consent is the basis for processing, you may withdraw it at any time.
10 Children's Privacy
Baji Long is strictly an adults-only platform. We do not knowingly collect or process personal data from any person under the age of 18. Our registration process requires confirmation of age and we may request identity documents to verify this.
If we become aware that a person under 18 has registered an account or provided us with personal data, we will immediately close the account, void any transactions associated with it and securely delete all associated personal data. Any winnings accumulated on a verified underage account will be forfeited.
If you believe a minor has registered an account, please contact us immediately at support@bajilong.biz.
11 Third-Party Links
From time to time, content on bajilong.biz may reference third-party organisations or services in an informational context. Baji Long does not include live outbound links in its platform pages. However, if you independently navigate to a third-party website, please be aware that those websites operate under their own privacy policies, which are outside the scope of this document.
Baji Long is not responsible for the privacy practices of any third-party platform, and the mention of any organisation in our content does not constitute an endorsement of their data handling practices.
12 Marketing Communications
Baji Long will only send you promotional emails or SMS messages if you have given your explicit consent to receive them. Consent is collected during the registration process via a clearly labelled opt-in checkbox. This checkbox is not pre-ticked — consent is only valid if you actively choose to give it.
Marketing messages from Baji Long may include information about new bonuses, promotions, game launches and platform updates. We do not use third-party mailing lists or purchase contact data for marketing purposes — we only contact you using the details you provided when you registered.
12.1 Opting Out
You can withdraw your marketing consent at any time using any of the following methods:
- Click the "Unsubscribe" link at the bottom of any Baji Long marketing email.
- Reply "STOP" to any marketing SMS from Baji Long.
- Update your notification preferences in your account settings.
- Email support@bajilong.biz requesting removal from all marketing lists.
Opting out of marketing communications will not affect your account, your bonuses or any other aspect of the service. We may still send you essential transactional messages — such as deposit confirmations, withdrawal notifications and security alerts — which are not marketing communications and cannot be opted out of while your account is active.
13 Changes to This Privacy Policy
Baji Long reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, new regulatory requirements or improvements in how we explain our processes. The date at the top of this page always shows when the most recent revision was made.
Where changes are material — meaning they significantly affect how we use your data or what rights you have — we will notify registered players by email at least 14 days before the changes take effect. For minor clarifications or corrections, we may update the policy without prior notice.
Continued use of the Baji Long platform after an updated policy takes effect constitutes acceptance of the revised terms. If you do not agree with any change, you may close your account before the effective date.
14 Contact and Complaints
For any questions, requests or concerns about how Baji Long handles your personal data, please contact our data protection team directly:
- Email: support@bajilong.biz — subject line: "Privacy Enquiry" or "Data Rights Request"
- Live Chat: Available 24/7 in English and Urdu via the platform chat widget. Ask to speak with the data protection team.
- Response time: All data-related enquiries are acknowledged within 72 hours and resolved within 30 calendar days.
If you are not satisfied with our response to a data protection concern, you have the right to raise a complaint with the relevant supervisory authority in your jurisdiction. Details of how to do this are available from our support team upon request.
Baji Long takes every privacy concern seriously. We would always prefer to resolve an issue directly with you before it escalates — our data protection team is empowered to make decisions and act on them, not just pass your concern up a chain.
