bjapp Privacy Policy – How We Handle Your Personal Data

1 Who We Are – bjapp as Data Controller

bjapp (accessible at bjapp.im) is the operator of an online gaming and betting platform serving players in Pakistan. In the context of this Privacy Policy, bjapp acts as the data controller — meaning bjapp determines what personal data is collected, why it is collected, and how it is processed.

All data processing activities described in this policy are carried out by bjapp's internal teams and, where applicable, contracted third-party processors — all of whom are bound by confidentiality and data protection obligations consistent with the standards described here.

If you have any questions about how bjapp handles your personal data, the fastest way to reach us is through live chat in your bjapp account, or by email at support@bjapp.im. Data-specific requests — such as subject access requests or deletion requests — are handled by bjapp's compliance team and typically resolved within 15 business days.

2 What Personal Data bjapp Collects

bjapp collects personal data across three main contexts: account registration, platform usage, and payment processing. Here is a clear breakdown of what we collect and how:

3 How bjapp Uses Your Personal Data

Each piece of data bjapp collects has a specific, defined purpose. We do not process your data for any purpose beyond what is listed here:

• Account management: Your identity and contact data is used to create and maintain your bjapp account, verify your identity, and communicate account-related information to you.
• Payment processing: Your financial data is used exclusively to process deposits and withdrawals through your chosen payment method. bjapp does not store full card numbers; only partial details required for transaction matching are retained.
• Regulatory compliance: Pakistani financial regulations and anti-money laundering (AML) requirements oblige bjapp to verify the identity of account holders and maintain records of significant financial transactions. This is a legal obligation, not a commercial choice.
• Fraud detection and security: Technical and usage data — including IP addresses, device fingerprints, and login patterns — is used by bjapp's security systems to detect unauthorised account access, multi-accounting, and fraudulent activity.
• Platform improvement: Anonymised and aggregated usage data helps bjapp understand how players interact with different features, which games are most popular, and where the platform experience can be improved.
• Customer support: Communication data is retained to provide context for ongoing support queries, to review disputed outcomes, and to maintain a record of commitments made by bjapp to individual players.
• Responsible gaming: bjapp's responsible gaming systems use your transaction and usage data to detect patterns that may indicate problem gambling behaviour, consistent with bjapp's duty of care obligations.
• Marketing communications: Where you have opted in, bjapp may use your contact details to send promotional offers, bonus notifications, and platform updates. You can opt out at any time.

4 Legal Basis for Processing

bjapp processes your personal data on the following legal bases, depending on the purpose:

• Contractual necessity: Processing your identity data, financial data, and transaction data is necessary to fulfil bjapp's contractual obligations to you — specifically, to operate your account and process your bets and payments.
• Legal obligation: AML compliance, age verification, KYC documentation, and transaction record-keeping are required by applicable financial regulations. bjapp is legally obliged to collect and retain this data.
• Legitimate interests: Fraud detection, security monitoring, platform analytics, and responsible gaming monitoring are conducted on the basis of bjapp's legitimate interests in operating a secure and fair platform. These interests have been assessed and do not override your fundamental privacy rights.
• Consent: Marketing communications are sent only where you have given explicit consent during registration or subsequently through your account settings. Consent can be withdrawn at any time without affecting your ability to use bjapp's gaming services.

5 Third-Party Data Sharing

bjapp does not sell your personal data to any third party. However, bjapp does share certain data with specific categories of third parties in order to operate the platform legally and effectively. Each category is listed below with the reason for sharing:

• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems, Visa/Mastercard networks): Minimum necessary financial data is shared to process your deposits and withdrawals. These processors operate under their own privacy policies and data protection obligations.
• Identity verification providers: When KYC verification is required, your identity documents may be processed by a contracted verification service. bjapp only uses providers with appropriate data handling standards.
• Fraud and security technology providers: Technical data — including device identifiers and IP addresses — is processed by bjapp's fraud detection systems, which may involve third-party security software operating on bjapp's behalf.
• Regulatory authorities and law enforcement: bjapp will disclose personal data to Pakistani regulatory authorities or law enforcement agencies when required to do so by law, or when bjapp has reasonable grounds to believe that disclosure is necessary to prevent or report a crime.
• Game software providers: For certain live casino games operated by third-party studio providers, limited gameplay data may be shared with the studio to deliver the game and resolve disputes. These providers are bound by confidentiality agreements.

6 Data Security Standards at bjapp

bjapp takes data security seriously and has implemented multiple layers of protection around your personal information:

• Transmission security: All data exchanged between your browser or mobile device and bjapp's servers is encrypted using TLS 1.2 or higher (visible as the padlock icon in your browser).
• Storage encryption: Sensitive stored data — including identity documents and financial account references — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within bjapp's systems is restricted to employees who require it for their specific job function. Access logs are maintained and reviewed.
• Password storage: bjapp never stores your account password in plain text. Passwords are hashed using a one-way cryptographic algorithm before storage, meaning even bjapp staff cannot read your password.
• Breach response: In the event of a data security incident that poses a risk to your rights, bjapp will notify affected players as quickly as possible and take immediate steps to contain and remediate the breach.

7 How Long bjapp Keeps Your Data

bjapp retains personal data only for as long as necessary for the purposes described in this policy or as required by legal and regulatory obligations:

• Account data: Retained for the lifetime of your active bjapp account, plus a minimum of 5 years after account closure to satisfy financial record-keeping regulations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction, consistent with Pakistani financial regulations.
• KYC verification documents: Retained for 5 years after the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years after the resolution of each case, to provide context for any related future queries.
• Marketing preferences and consent records: Retained for as long as your account is active. If you withdraw marketing consent, bjapp will cease sending marketing communications within 48 hours while retaining the consent withdrawal record.
• Technical and usage logs: Raw access logs are retained for 90 days for security purposes. Aggregated, anonymised analytics data may be retained indefinitely.

When data reaches the end of its retention period, bjapp deletes or anonymises it in accordance with its data disposal procedures. You may request early deletion of certain categories of data — see Section 9 for details.

8 Cookies & Tracking Technologies

bjapp uses cookies and similar tracking technologies on the bjapp.im website to make the platform work properly, remember your preferences, and understand how players use different parts of the site. Here is what each type of cookie does:

You can manage cookie preferences through your browser settings. Note that disabling essential or security cookies may prevent bjapp from working correctly. bjapp does not use third-party advertising cookies or cross-site tracking cookies.

9 Your Data Rights as a bjapp Player

As a bjapp player, you have specific rights over your personal data. Here is what each right means in practice and how to exercise it:

To exercise any of these rights, email support@bjapp.im with the subject line "Data Rights Request" and include your account username and a description of your request. bjapp will acknowledge receipt within 2 business days and complete the request within 15 business days.

10 Marketing Communications

bjapp may send you promotional emails, SMS messages, or in-app notifications about bonuses, new features, tournaments, and platform updates. This only happens where you have given consent — either during registration or by opting in through your account settings.

To opt out of marketing communications from bjapp:

• Email marketing: Click the unsubscribe link at the bottom of any bjapp marketing email. Changes take effect within 48 hours.
• SMS: Reply STOP to any bjapp promotional SMS. Changes take effect immediately.
• In-app notifications: Manage notification preferences in your bjapp account settings under Notifications.
• Full opt-out: Contact support@bjapp.im with "Marketing Opt-Out" in the subject line to be removed from all marketing communications across all channels simultaneously.

11 Children's Privacy

bjapp's services are strictly for adults aged 18 and above. bjapp does not knowingly collect personal data from any individual under the age of 18. The registration process requires users to confirm their age, and bjapp's verification systems are designed to identify and reject underage applicants.

If bjapp becomes aware that personal data belonging to a person under 18 has been collected, that account will be closed immediately and all associated data will be deleted, with any remaining balance returned via the original payment method where legally permissible.

If you believe a minor has registered on bjapp, please contact support@bjapp.im immediately. bjapp takes underage access seriously and will investigate all such reports promptly.

12 Updates to This Privacy Policy

bjapp may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we explain our approach to privacy. The effective date at the top of this page will be updated whenever changes are made.

For material changes — those that significantly affect how your data is used or your rights under this policy — bjapp will notify registered players by email and/or by displaying a prominent notice on the platform for a minimum of 14 days before the changes take effect.

We encourage you to review this policy periodically. Continuing to use bjapp after an updated policy has come into effect constitutes your acknowledgment of the changes. If you disagree with any update, you may close your account and request data deletion by contacting support.

13 Contact bjapp on Privacy Matters

For any question, concern, or formal request relating to your personal data and bjapp's privacy practices, please use the following channels:

• Email: support@bjapp.im (use subject line "Privacy Policy Query" or "Data Rights Request" as appropriate)
• Live Chat: Available 24/7 inside your logged-in bjapp account — look for the chat icon in the lower right corner
• Response time for data rights requests: Acknowledgement within 2 business days; completion within 15 business days
• Languages: Support for privacy queries is available in both English and Urdu

bjapp is committed to resolving all privacy concerns transparently and promptly. If you are not satisfied with the response to a privacy complaint, you have the right to escalate the matter to the appropriate regulatory authority in Pakistan.