1. Who We Are
bji ap (referred to throughout this policy as "bji ap", "we", "us", or "our") is the online gaming platform operating at bjiap.net. bji ap serves Pakistani players and processes personal data in connection with the provision of online casino and gaming services. bji ap is the data controller in respect of all personal data collected through the platform.
Our designated data protection contact can be reached at support@bjiap.net. All formal privacy-related requests, including access requests and deletion requests, should be directed to this address with the subject line "Privacy Request – [Your Registered Mobile Number]" to ensure efficient handling.
This Privacy Policy applies to the bji ap website and all services accessible through it. It does not apply to third-party websites, payment processors, or game providers, each of which maintains their own privacy documentation that you should review separately.
2. Data We Collect
bji ap collects personal data in several categories depending on your interaction with the platform. We collect only what is genuinely necessary for the purposes described in this policy and do not retain data beyond those purposes.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, CNIC image (front and back) | During KYC verification, required before first withdrawal |
| Contact Data | Mobile number, email address | At registration |
| Financial Data | JazzCash / Easypaisa mobile number, bank account details, transaction history, deposit and withdrawal amounts in PKR | When you make a deposit or request a withdrawal |
| Gaming Data | Game session logs, wager amounts, win/loss history, bonus usage, game preferences | Continuously during account use |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatically on every platform visit |
| Communications Data | Support chat transcripts, email correspondence, WhatsApp messages sent to our support number | When you contact bji ap support |
| Marketing Preferences | Opt-in/opt-out status for promotional SMS and email | At registration and when updated by you |
3. How We Collect Your Data
bji ap collects personal data through the following channels:
Direct submission by you
When you fill in the registration form, complete KYC, contact support, or update your account settings, you provide data directly to bji ap. This is the primary source of most personal data we hold.
Automated technical collection
When you visit bjiap.net, our servers automatically log your IP address, device identifiers, browser type, and session timing data. This happens on every page load regardless of whether you are logged in.
Payment processor verification
When you make a deposit or withdrawal, our payment processor confirms the transaction and passes confirmation data (amount, timestamp, reference number, masked account identifier) back to bji ap. Full account credentials remain with the payment provider.
Game activity logging
Our gaming platform automatically records every wager, game session, and outcome in real time. This is required for dispute resolution, responsible gaming monitoring, and regulatory compliance.
Cookies and tracking technologies
bji ap uses cookies to maintain your login session, remember preferences, and measure platform performance. Full details are in Section 10 of this policy.
4. Why We Use Your Personal Data
bji ap uses the personal data it collects for the following purposes. We only ever use data for a purpose that was either disclosed at collection or is a natural extension of a disclosed purpose that you would reasonably expect.
- Account creation and management: Creating, verifying, and maintaining your bji ap account, including password resets and security alerts.
- Processing transactions: Crediting deposits to your wallet, processing withdrawal requests to JazzCash or Easypaisa, and maintaining PKR transaction records.
- Identity verification (KYC): Confirming your identity and age as required to comply with anti-money laundering obligations and to protect the integrity of the platform.
- Delivering gaming services: Operating game sessions, recording outcomes, applying bonuses, and tracking wagering requirements in your account.
- Responsible gaming monitoring: Analysing gaming patterns to identify potential problem gambling behaviour and triggering protective interventions where appropriate.
- Customer support: Responding to your queries, resolving disputes, and maintaining records of correspondence for quality assurance.
- Fraud prevention and security: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, and money laundering.
- Marketing communications (with consent only): Sending promotional offers, new game announcements, and personalised bonus offers to players who have opted in.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the bji ap platform, game selection, and payment experience.
- Legal compliance: Meeting obligations under applicable law, responding to lawful regulatory enquiries, and maintaining required records.
5. Legal Basis for Processing
bji ap processes your personal data on one or more of the following legal bases depending on the specific processing activity:
- Contractual necessity: Processing required to fulfil our obligations under the account agreement with you – including operating your account, processing deposits and withdrawals, and delivering gaming services. Without this processing, bji ap cannot provide services to you.
- Legal obligation: Processing required to comply with applicable laws including anti-money laundering requirements, which mandate identity verification, transaction record-keeping, and suspicious activity reporting.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where our legitimate business interests do not override your privacy rights.
- Consent: Processing for marketing communications, which is entirely optional. You may withdraw this consent at any time without affecting your ability to use bji ap.
6. Who We Share Your Data With
bji ap shares personal data only with the third parties listed below and only to the extent necessary for the stated purpose. We do not share data with advertisers, data brokers, or any commercial third party for their own marketing purposes.
6.1 Payment Processors
JazzCash, Easypaisa, NayaPay, SadaPay, and the banking partners through which IBFT and card transactions are processed receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial services regulations. bji ap does not store full payment credentials beyond what is required for dispute resolution.
6.2 Identity Verification Services
bji ap uses a third-party KYC provider to verify CNIC documents. This provider receives a copy of your CNIC image and personal details solely for the purpose of verification. They are bound by a data processing agreement that prohibits any other use of your data.
6.3 Game Providers
Live casino games are provided by Evolution Gaming. To deliver a seamless live game experience, a session token and anonymised player identifier are passed to the game provider. Evolution Gaming does not receive your CNIC, mobile number, or financial data. Their separate privacy documentation governs how they handle session data.
6.4 Legal and Regulatory Authorities
bji ap may disclose personal data to government authorities, law enforcement, or regulatory bodies where required to do so by law or in response to a valid legal process. bji ap will notify you of such disclosure where legally permitted to do so.
6.5 Professional Advisers
bji ap's lawyers, accountants, and auditors may access personal data in the course of providing professional services. They are bound by confidentiality obligations and may not use your data for any other purpose.
7. Payment Data & JazzCash / Easypaisa
Given that the majority of bji ap players transact via JazzCash and Easypaisa, it's worth explaining specifically how payment data flows through the bji ap platform.
When you initiate a JazzCash or Easypaisa deposit, you enter your mobile wallet number on the payment screen. This number is transmitted directly and securely to the relevant payment provider via an encrypted API connection. bji ap stores only a masked reference (e.g., 0312-XXXXX45) alongside the transaction amount and timestamp for reconciliation purposes.
When you request a withdrawal to JazzCash or Easypaisa, your registered withdrawal mobile number is retrieved from your verified account record and submitted to the payment provider. bji ap does not share your withdrawal number with any other party and does not use it to contact you for marketing purposes.
8. Data Security Measures
bji ap maintains a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Our security programme covers the following areas:
- Encryption in transit: All connections to bjiap.net are enforced over TLS 1.2 or higher with 256-bit symmetric encryption. HTTP connections are automatically redirected to HTTPS.
- Encryption at rest: Databases containing personal data including CNIC records and financial data are encrypted at rest using AES-256.
- Access controls: Internal access to player personal data is restricted on a need-to-know basis with role-based permissions. KYC documents are accessible only to compliance staff with documented justification required for each access event.
- Two-factor authentication: bji ap staff with access to personal data systems use mandatory two-factor authentication. Players can also enable 2FA on their accounts for additional protection.
- Penetration testing: bji ap's platform undergoes regular penetration testing by independent security professionals. Identified vulnerabilities are remediated on a priority-based schedule.
- Incident response: bji ap maintains a documented incident response procedure. In the event of a data breach that affects your personal data, we will notify you without undue delay and provide details of what data was affected and what steps are being taken.
9. How Long We Keep Your Data
bji ap retains personal data for different periods depending on the category of data and the reason it was collected. We do not retain data beyond what is necessary for the applicable purpose.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity / KYC data | 5 years after account closure | Anti-money laundering legal obligation |
| Financial transaction records | 5 years after transaction date | Financial record-keeping legal obligation |
| Gaming session logs | 3 years after session date | Dispute resolution and responsible gaming monitoring |
| Support correspondence | 2 years after ticket closure | Quality assurance and dispute history |
| Technical / device logs | 12 months from collection | Security monitoring and fraud detection |
| Marketing preferences | Until consent is withdrawn | Consent-based marketing |
After the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (with all identifying elements removed) may be retained indefinitely for aggregate analytics purposes.
10. Cookies & Similar Technologies
bji ap uses cookies and similar client-side storage technologies to make the platform function correctly, maintain your login session, and understand how the platform is used. The following categories of cookies are in use:
10.1 Strictly Necessary Cookies
These cookies are essential for bji ap to function. They maintain your login session, remember your language preferences, and ensure that payment forms operate securely. Without these cookies, you cannot log in or use the platform. These cookies do not require your consent because they are operationally essential.
10.2 Functional Cookies
Functional cookies remember choices you make – such as your preferred game category or table stake level – so that you don't have to reset them every session. These cookies improve your experience but are not required for basic platform operation.
10.3 Analytics Cookies
bji ap uses aggregated, anonymised analytics to understand how players navigate the platform, which games are most popular, and where technical issues are occurring. This data is never linked to individual player identities. Analytics cookies can be declined without affecting your ability to use bji ap.
You can manage cookie preferences through your browser settings. Blocking all cookies may prevent some bji ap features from operating correctly, particularly login session maintenance. bji ap does not use advertising or retargeting cookies.
11. Your Privacy Rights
As a bji ap player, you have the following rights with respect to the personal data we hold about you. All requests should be submitted to support@bjiap.net with the subject line "Privacy Request" and your registered mobile number.
12. Children's Privacy
bji ap is an online gaming platform intended solely for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older, and our KYC process verifies this through CNIC documentation.
If bji ap discovers that a player account was registered by someone under 18, the account will be immediately closed, all deposits refunded to the payment method used, and all winnings forfeited. The CNIC documentation submitted will be reviewed for potential misrepresentation and appropriate action taken.
If you are a parent or guardian and believe your child has created a bji ap account, please contact support@bjiap.net immediately. We will take action within 24 hours of a verified report.
13. Changes to This Privacy Policy
bji ap reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new legal requirements, or improvements to how we explain our approach. The version number and effective date at the top of this policy indicate when it was last updated.
When material changes are made to this Privacy Policy – meaning changes that meaningfully affect how we use your data or your rights in relation to it – bji ap will notify all registered players via email to their registered address at least 14 days before the change takes effect. You will also see a notice on the bji ap platform itself during this period.
If you continue to use your bji ap account after a material change takes effect, this is taken as acknowledgement of the updated policy. If you do not agree with any change, you may close your account and request deletion of your data as described in Section 11.
14. How to Contact Us About Privacy
If you have any question about this Privacy Policy, about how bji ap handles your personal data, or if you wish to exercise any of the rights described in Section 11, please contact us through the following channel:
Subject line: Privacy Request – [Your Registered Mobile Number]
Response time: Within 5 business days for general queries; within 30 days for formal data subject requests.
Language: Queries may be submitted in English or Urdu.
bji ap takes privacy queries seriously. If you contact us about a privacy concern, you will receive a substantive response from a team member – not an automated reply – within the timeframes stated above. We aim to resolve all privacy concerns informally where possible. If you are not satisfied with our response, you may refer the matter to the relevant regulatory authority.