Tojays Bet Privacy Policy – Your Data, Your Rights in Pakistan

This Privacy Policy is published by Tojays Bet, the operator of the online gaming platform accessible at tojaysbet.com. Tojays Bet is the data controller for all personal information collected from players using the platform. As data controller, we are responsible for deciding how your personal information is collected, stored, used, and protected.

This policy applies to all individuals who register an account, visit the Tojays Bet website, contact our customer support team, or interact with our platform in any way. It applies equally to players based in Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, and all other cities and regions of Pakistan.

By registering a Tojays Bet account, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not agree, you should not create an account. If you have concerns about any aspect of this policy, contact us before registering — details are provided in Section 10.

Tojays Bet collects the minimum personal information necessary to operate the platform securely and comply with our regulatory obligations. We do not collect data for its own sake — every category of information we hold has a specific, documented purpose.

Identity & Contact Information

• Full name as it appears on your CNIC
• CNIC number (required for identity verification and withdrawal processing)
• Date of birth (to verify the 18+ age requirement)
• Mobile phone number (used for account recovery, support, and optional marketing)
• Email address (used for account communications and optional promotional messages)
• Residential address (required for full KYC verification on accounts reaching higher withdrawal thresholds)

Financial Information

• Payment method details (Easypaisa/JazzCash account numbers, bank account details for IBFT, or card details for Visa/Mastercard payments)
• Transaction history (deposits, withdrawals, bet amounts, game results)
• PKR balance and bonus balance at any point in time

Technical & Usage Information

• IP address at the time of login and transactions
• Device type, operating system, and browser version
• Pages visited, games played, time spent on the platform
• Session duration and frequency of platform use
• Geographic location data (country/city level, derived from IP address)

Tojays Bet collects personal data through three main channels. Understanding these channels helps you know exactly when and how your information enters our systems.

Directly from You: The majority of your personal data comes directly from information you provide. This includes the registration form when you create a Tojays Bet account, the identity verification process when you submit your CNIC, the payment forms when you make deposits or withdrawal requests, and any communications you initiate with our support team via live chat or email.

Automatically During Platform Use: Tojays Bet automatically collects certain technical data when you interact with the platform. This includes your IP address and device information at login, session data recording which games you played and for how long, and cookie data as described in Section 8. This automatic collection is necessary for platform security, fraud prevention, and service improvement. You cannot fully use the platform without some level of automatic technical data collection.

From Third Parties: Tojays Bet may receive information about you from payment processors (to confirm transaction status), identity verification service providers (to cross-reference CNIC data), and fraud detection services (to flag unusual account activity). In all cases, third parties who share data with Tojays Bet are contractually required to have a lawful basis for sharing that data with us.

Tojays Bet processes your personal data only where we have a valid legal basis for doing so. Each processing activity at Tojays Bet falls under one of the following legal bases: contractual necessity (to provide the service you have signed up for), legal obligation (to comply with regulatory requirements such as KYC and AML), legitimate interests (for fraud prevention and platform security), or consent (for optional marketing communications).

Tojays Bet will never use your personal data for a purpose not listed in this policy without first notifying you and, where required, obtaining your consent. If you receive a communication from someone claiming to be Tojays Bet that requests sensitive data (passwords, full card numbers) through an unusual channel, treat it as suspicious and contact our support team immediately.

Tojays Bet does not sell or trade personal data. We share data only where strictly necessary with the following categories of recipients, all of whom are subject to data processing agreements and confidentiality obligations:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card processors receive the minimum transaction data required to process your deposits and withdrawals. These providers have their own privacy obligations under Pakistani financial regulations.
• Identity Verification Providers: Third-party KYC services may receive your CNIC and identity photograph to cross-reference against official records. This is done solely to comply with our regulatory verification requirements.
• Fraud Detection & Security Services: Anonymised or pseudonymised technical data (IP addresses, device fingerprints, behavioural patterns) may be shared with fraud detection partners to protect the integrity of the platform and other players.
• Regulatory Authorities: Where legally required, Tojays Bet will disclose personal and financial data to relevant regulatory bodies or law enforcement agencies. We will not voluntarily disclose data to government bodies beyond what is legally compelled.
• Gaming Platform Infrastructure Providers: Technical hosting and game platform providers who support the delivery of the Tojays Bet service may process limited technical data under strict data processing agreements.

Tojays Bet retains your personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations. The retention periods below apply to active and closed accounts.

• Account Data (name, contact, login): Retained for the duration of your Tojays Bet account plus 5 years after account closure. This retention period is required by anti-money laundering regulations.
• Identity Verification Documents (CNIC, photograph): Retained for the duration of your account plus 5 years after closure, as required by KYC regulations applicable to licensed gaming operators.
• Financial Transaction Records: Retained for 7 years after the date of each transaction, consistent with financial recordkeeping obligations.
• Session and Behavioural Data: Retained for up to 2 years for fraud detection and responsible gaming monitoring purposes, then deleted or anonymised.
• Marketing Consent Records: Retained for the period of consent plus 3 years to demonstrate compliance with consent obligations.
• Support Communications: Chat and email records retained for 2 years from the date of the interaction.

After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. If you request early deletion and it does not conflict with a legal retention obligation, Tojays Bet will process the deletion request within 30 days.

As a player at Tojays Bet, you have the following rights over your personal data. These rights can be exercised by contacting our support team at any time. We will acknowledge your request within 48 hours and respond substantively within 30 days.

Tojays Bet uses cookies — small text files stored in your browser — to make the platform work properly and to understand how players use the site. We use the minimum number of cookies necessary and do not use third-party advertising or tracking cookies.

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load balancing cookies that distribute traffic efficiently. You cannot disable these without breaking the platform.
• Functional Cookies: Store your preferences such as language settings and game display options. These persist between sessions so you do not have to reset your preferences each time. You can clear these via your browser but may lose saved preferences.
• Analytics Cookies: Used to understand how players navigate the platform — which pages are visited, which games are loaded, and where users encounter difficulties. This data is aggregated and anonymised. Analytics cookies are optional and can be declined without affecting core platform functionality.

You can manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific sites. Note that disabling all cookies will affect platform functionality. For most players, the default browser settings work well with the Tojays Bet platform.

Tojays Bet implements multiple layers of technical and operational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security programme includes the following measures:

• Encryption in Transit: All data moving between your device and Tojays Bet servers is encrypted using TLS 1.3 with 256-bit AES encryption. Your connection status is indicated by the padlock icon in your browser's address bar.
• Encryption at Rest: Personal and financial data stored in Tojays Bet databases is encrypted at rest, meaning that even if a server were physically compromised, stored data would not be readable without the encryption keys.
• Access Controls: Internal access to player data at Tojays Bet is restricted to personnel who have a documented operational need. Access is logged, regularly reviewed, and revoked immediately when employees leave or change roles.
• Two-Factor Authentication: Tojays Bet accounts support optional two-factor authentication (2FA). We strongly recommend enabling 2FA in your account settings. High-value withdrawal requests may trigger additional authentication steps.
• Regular Security Audits: Tojays Bet undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

Tojays Bet will update this Privacy Policy when required — either because our data practices change, our regulatory obligations are updated, or we introduce new features that involve different types of data processing. When changes are made, the "Last Updated" date at the top of this document will be revised.

For material changes that significantly affect how we use your personal data, registered players will be notified via the mobile number or email address on their Tojays Bet account before the changes take effect. We recommend reviewing this page periodically even without a notification, particularly before making significant deposits or submitting identity documents.

If you have any question about this Privacy Policy, want to exercise any of your data rights, or believe your data has been mishandled in any way, please contact us through the following channels:

• Live Chat: Available 24/7 from the Tojays Bet platform. For privacy requests, type "Privacy Request" to route your query to the correct team.
• Email: support@tojaysbet.com — use "Privacy Policy" in the subject line. We acknowledge all emails within 48 hours and provide a substantive response within 30 days.

We are committed to resolving all data privacy concerns fairly and promptly. If you submit a request and do not receive a response within the stated timeframes, please follow up by contacting live chat directly referencing your original submission date.