SuperBaji Privacy Policy – How We Protect Your Data in Pakistan

Who We Are

SuperBaji is an online betting and gaming platform operated by the company holding the applicable gaming licence. Our platform is accessible at superbaji.plus and is designed specifically for the Pakistani market. SuperBaji acts as the data controller for all personal data collected through the platform – meaning we determine the purposes and methods of processing your data and are responsible for ensuring that processing is carried out lawfully and transparently.

Our primary point of contact for all privacy-related matters is our support team, reachable at support@superbaji.plus. We take privacy queries seriously and aim to respond to all data-related requests within 72 hours.

Data We Collect

SuperBaji collects personal data across several categories. Here is a clear breakdown of what we collect and how we obtain it:

2.1 Data You Provide Directly

When you register an account on SuperBaji, you provide us with:

• Your full legal name as it appears on your CNIC.
• Your Pakistani mobile phone number.
• Your email address.
• Your date of birth (to verify you meet the minimum age requirement of 18).
• Your residential address in Pakistan.
• CNIC number and a copy of your CNIC (front and back) during identity verification.
• Payment method details including mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, and masked card details for Visa/Mastercard payments.
• Any additional information submitted when contacting SuperBaji support.

2.2 Data Generated Through Platform Use

When you use SuperBaji's platform, we automatically collect:

• Device information including device type, operating system version, and browser type.
• IP address at the time of login and transactions.
• Geolocation data at the city level where available, used to confirm you are accessing the platform from an eligible location.
• Betting and gaming activity including bets placed, amounts staked, markets selected, game sessions, win/loss records, and cashout actions.
• Deposit and withdrawal transaction records including amounts, timestamps, and payment methods used.
• Login timestamps, session durations, and page interaction patterns.
• Communication records including live chat transcripts and email correspondence with our support team.

2.3 Data from Third Parties

In some cases we receive data about you from third parties as part of our operations:

• Identity verification providers: When you complete KYC (Know Your Customer) verification, our verification partner cross-checks the documents you provide against their database and returns a verification result to SuperBaji.
• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banks, and card processors share transaction confirmation data with SuperBaji to confirm deposits and process withdrawals.
• Fraud prevention services: We may receive risk signals from fraud detection services that help us identify potentially compromised accounts or suspicious transaction patterns.

How We Use Your Data

SuperBaji uses your personal data for the following purposes. We are clear about each purpose and the reason we are entitled to process data for it:

• Account management: Creating, maintaining and securing your SuperBaji account. Without this we cannot provide you with the platform at all.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age of 18. This is a legal requirement we cannot waive under any circumstances.
• Processing deposits and withdrawals: Handling your PKR transactions through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment methods. Financial transaction data is essential for this and is retained for legally required periods.
• Providing betting and gaming services: Recording your bets, calculating results, settling winnings, and maintaining your transaction history. This is the core service SuperBaji provides.
• Customer support: Responding to your queries, resolving disputes, and investigating complaints. Support communications are retained to ensure consistency and for quality assurance.
• Security and fraud prevention: Monitoring for suspicious activity, detecting multiple account registrations, identifying unusual betting patterns, and protecting you and other players from account takeover attempts.
• Responsible gaming: Monitoring account activity for indicators of problem gambling, enforcing the deposit limits and self-exclusion tools you set, and applying exclusion lists where required.
• Legal and regulatory compliance: Meeting our obligations under applicable licensing requirements including record-keeping, reporting, and cooperation with regulatory or law enforcement requests.
• Platform improvement: Analysing anonymised and aggregated usage patterns to improve SuperBaji's performance, fix bugs, and develop new features that serve Pakistani players better.
• Marketing (with your consent): Sending you promotions, bonus offers, and news about SuperBaji's services – only if you have opted in to receive such communications.

Legal Basis for Processing

SuperBaji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services you signed up for – account management, transaction processing, bet settlement, and support – is necessary for the performance of our contract with you.
• Legal obligation: Identity verification, age checking, financial record-keeping, and reporting to regulators or law enforcement are obligations we must fulfil by law regardless of your preferences.
• Legitimate interests: Security monitoring, fraud detection, responsible gaming monitoring, and platform analytics serve SuperBaji's legitimate interests as a business and protect other players on the platform. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications are sent only on the basis of your explicit consent. You may withdraw this consent at any time.

Data Sharing

SuperBaji does not sell your personal data. We share it only in the following limited circumstances:

5.1 Service Providers

We share data with companies that help us operate the SuperBaji platform. These include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners for IBFT, and card payment processors. They receive only the transaction data necessary to complete your payment.
• Identity verification providers: Our KYC partner receives your CNIC details to confirm your identity and age. They process this data under their own privacy policy and are contractually prohibited from using it for any other purpose.
• Game providers: Evolution Gaming, Pragmatic Play Live, Ezugi, and other suppliers receive your session data to deliver games. They do not receive your full identity or financial data beyond what is technically necessary for game delivery.
• Cloud and infrastructure providers: SuperBaji's platform runs on secure cloud infrastructure. Our hosting partners process data on our behalf under strict data processing agreements.
• Fraud and security services: Risk management tools that help us identify compromised accounts and suspicious patterns receive transaction and device data in anonymised or pseudonymised form where possible.

5.2 Legal and Regulatory Disclosures

SuperBaji may disclose your personal data to government bodies, regulators, or law enforcement agencies where required to do so by applicable law, a court order, or a legitimate regulatory request. We will only disclose the minimum information necessary to comply and will inform you of any such disclosure unless we are legally prohibited from doing so.

5.3 Business Transfers

In the event that SuperBaji's business or assets are acquired by another company, your personal data may be transferred as part of that transaction. You would be notified of any such transfer and the new entity would be required to honour this Privacy Policy or provide an equivalent level of protection before processing your data under any new arrangements.

Data Retention

SuperBaji retains your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. Here is how our main retention periods work:

• Account data and betting records: Retained for the duration of your account and for a minimum of 5 years after account closure to comply with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for 5 years following closure in line with anti-money laundering regulations.
• Transaction records: Financial transaction logs are retained for 7 years from the date of each transaction in line with standard accounting and regulatory retention requirements.
• Support communication records: Live chat transcripts and email records are retained for 3 years from the date of each communication to enable dispute resolution and quality assurance.
• Marketing consent records: Records of your opt-in and opt-out choices are retained indefinitely to demonstrate compliance with consent requirements even after marketing communications cease.
• Technical logs (IP, device, session): Security and access logs are retained for 12 months and then automatically purged unless a security investigation requires extended retention.

When data reaches the end of its retention period, SuperBaji deletes or anonymises it securely. Anonymised data – which cannot be used to identify you – may be retained indefinitely for statistical and analytical purposes.

Security

Protecting your personal data is a core operational priority at SuperBaji. We have implemented the following technical and organisational security measures:

• SSL/TLS encryption: All data in transit between your device and SuperBaji's servers is encrypted. Any attempt to intercept the connection will receive encrypted data that is unreadable without the decryption key.
• Encrypted data storage: Sensitive data including payment details and identity documents is stored in encrypted form. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data within SuperBaji is restricted on a strictly need-to-know basis. Support staff see only the data relevant to the query they are handling. Database access is logged and audited.
• Two-factor authentication: Available on all SuperBaji player accounts and required for all staff accounts. We strongly encourage all players to enable this.
• Regular security assessments: SuperBaji's infrastructure and application code are reviewed for vulnerabilities regularly. Critical issues are patched on an emergency basis.
• Incident response: We maintain a formal data breach response procedure. In the event of a breach affecting your personal data, we will notify you and any applicable regulatory authority within the legally required timeframe.

Cookies & Tracking Technologies

SuperBaji uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device that helps the platform remember your preferences and activity. Here is how we use them:

SuperBaji does not use advertising or tracking cookies that follow you across other websites. You can manage cookie preferences through your browser settings, but disabling essential cookies will prevent the platform from functioning correctly.

Your Rights

As a SuperBaji player, you have the following rights with respect to your personal data. You can exercise any of these rights by contacting us at support@superbaji.plus with the subject line "Data Request":

We will respond to all data rights requests within 30 days. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this by a further 30 days with prior notice. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline the request with explanation.

Marketing Communications

SuperBaji will only send you marketing and promotional communications – including bonus offers, match alerts, and platform news – if you have explicitly opted in to receive them during registration or at a later point through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email from SuperBaji.
• Updating your communication preferences in the Settings section of your account.
• Emailing support@superbaji.plus with the subject line "Unsubscribe" from the email address associated with your account.

Opting out of marketing does not affect operational communications such as deposit and withdrawal confirmations, security alerts, account verification requests, and responses to your support queries. These service communications are sent regardless of marketing preferences because they are necessary for your account to function.

Children's Privacy

SuperBaji is strictly an adults-only platform. We do not knowingly collect or process personal data from anyone under the age of 18. The minimum age to register an account on SuperBaji is 18 years, and we verify age as part of our account registration and KYC processes.

If we become aware that we have inadvertently collected personal data from a person under 18, we will immediately close the associated account, delete the personal data collected, and reverse any financial transactions associated with the account where legally required.

Parents and guardians in Pakistan are encouraged to use parental control software on devices accessible to minors to prevent access to online gambling platforms including SuperBaji. If you believe a minor has registered on SuperBaji, please contact us immediately at support@superbaji.plus so we can take immediate action.

Updates to This Privacy Policy

SuperBaji reviews this Privacy Policy periodically and updates it when our data practices change, when we add new services, or when applicable laws require changes to our approach. The "Last Updated" date at the top of this page always reflects when the current version came into effect.

Where changes are material – meaning they significantly affect your rights or how we use your data – we will notify you by email to the address registered on your SuperBaji account at least 14 days before the changes take effect. Minor clarifications and corrections may be updated without advance notice.

Continuing to use SuperBaji after the effective date of any updated Privacy Policy constitutes your acceptance of the new version. If you do not agree with changes, you should close your account and withdraw any balance before the new policy takes effect. Contact support at support@superbaji.plus if you need assistance with this.

Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how SuperBaji is handling your personal data, please get in touch:

• Email: support@superbaji.plus – use the subject line "Privacy Query" or "Data Request" for fastest routing to our compliance team.
• Live Chat: Available directly on the SuperBaji platform 24 hours a day, 7 days a week in Urdu and English. For complex data requests, email is preferred as it creates a documented trail.

We aim to respond to all privacy-related queries within 72 hours. For formal data subject access requests we will provide a full response within 30 days.

If you are not satisfied with SuperBaji's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority or regulatory body applicable under the laws of your jurisdiction.