Privacy Policy – Tojay Bet Pakistan Online Betting Platform

This Privacy Policy describes how tojay bet ("we", "us", "the Platform") collects, uses, stores and protects the personal information of players who register and use the tojay bet platform at tojaybet.bid. It applies to all players in Pakistan and to all products and services offered on the platform, including sports betting, casino games, the Aviator game and fishing games.

By creating a tojay bet account or using any part of our platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with any part of this policy, you should not use tojay bet.

The data controller responsible for your personal information is tojay bet. Our contact details for data-related queries are provided at the end of this policy in Section 14.

Tojay bet collects personal data in two main ways: information you provide directly to us, and information generated automatically when you use the platform.

Information you provide directly:

Information collected automatically:

• Device & Technical Data: IP address, device type, browser type and version, operating system, screen resolution.
• Usage Data: Pages visited, time spent on the platform, games played, bets placed, navigation paths and session duration.
• Transaction Data: Deposit amounts, withdrawal requests, bet history, bonus claims and payout records.
• Cookie Data: Session cookies, preference cookies and analytics cookies as described in Section 7.

Every piece of data tojay bet collects is used for a specific, documented purpose. We do not use your data for any purpose not listed here without your additional consent.

• Account Management: To create and maintain your tojay bet account, verify your identity and process your registration.
• Transaction Processing: To process deposits, withdrawals and bet settlements in PKR using your registered payment methods.
• KYC & Age Verification: To verify that you are at least 18 years old and that your account details are accurate, as required under our operating obligations.
• Customer Support: To respond to your queries, resolve disputes and assist with any account issues you report to our support team.
• Platform Improvement: To analyse usage patterns and identify technical issues so we can make tojay bet faster, more reliable and more enjoyable for Pakistani players.
• Security & Fraud Prevention: To detect and prevent unauthorised account access, bonus abuse, money laundering and other fraudulent or illegal activity.
• Responsible Gaming: To monitor for signs of problem gambling behaviour and apply the responsible gaming limits or restrictions you have requested on your account.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including record-keeping requirements and cooperation with competent authorities where legally required.
• Marketing Communications: To send you promotional offers, bonus notifications and platform updates by SMS or email — but only if you have opted in. See Section 12 for full details.

Tojay bet processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing your account data, payments and bets is necessary to fulfil our contract with you as a registered player.
• Legal Obligation: Identity verification, KYC checks and financial record-keeping are required by our operating obligations and cannot be refused.
• Legitimate Interests: Fraud detection, platform security, analytics and general platform improvement are processed on the basis of our legitimate interests as a business, balanced against your rights.
• Consent: Marketing communications and non-essential cookies are processed only with your explicit consent. You can withdraw this consent at any time.

Tojay bet does not sell your personal data. We share your information only in the following specific, necessary circumstances:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card networks receive the financial data necessary to process your transactions. These processors handle your data under their own privacy policies and are bound by strict data handling agreements with tojay bet.
• Identity Verification Providers: Third-party KYC service providers may process your CNIC details and other verification documents to confirm your identity. These providers are contractually bound to use your data only for verification purposes.
• Technology Service Providers: Companies that provide hosting, cloud storage, customer support software and analytics tools may process data on our behalf under strict data processing agreements.
• Game Providers: Game providers such as JILI, JDB and CQ9 receive anonymised session and gameplay data necessary to operate their games on the tojay bet platform. They do not receive your identity or financial data.
• Legal Authorities: We will disclose personal data to competent authorities — including law enforcement and financial intelligence units — where required to do so by law. We will notify you of any such disclosure where legally permitted to do so.

We never share your data with advertisers, marketing agencies, data brokers or any party whose purpose is to commercialise your personal information.

The security of your financial information is a top priority for tojay bet. Here is exactly how we handle payment data for Pakistani players:

• Card details (Visa/Mastercard) are processed through PCI DSS-compliant payment gateways. Full card numbers are never stored on tojay bet servers — only a tokenised reference is retained for processing future transactions.
• Mobile wallet credentials (Easypaisa, JazzCash, NayaPay, SadaPay) are processed through the official APIs of those platforms. Tojay bet does not store your wallet PIN or full account credentials.
• Bank IBFT details are used only to process the specific transaction requested and are not retained beyond what is required for legal record-keeping purposes.
• All payment-related communications between your device and our platform are encrypted using TLS 1.2 or higher.
• Withdrawals are only processed to payment methods that have been verified as belonging to the account holder — preventing fraudulent diversion of funds to third parties.

Tojay bet uses cookies — small text files stored on your device — to make the platform work properly and to help us improve it over time. Here is a breakdown of the cookie types we use:

Tojay bet does not use cross-site tracking cookies that follow you to other websites after you leave our platform. We do not partner with any advertising network that uses your tojay bet activity to target you with ads on other platforms.

You can manage cookie settings through your browser at any time. Disabling essential cookies will prevent the platform from functioning correctly — if you experience login issues after changing cookie settings, clearing your browser's cookie cache and reloading the page will usually resolve the problem.

Tojay bet retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law. Specific retention periods are as follows:

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

Tojay bet implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.

• Transport Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS). We do not operate any unencrypted HTTP connections on the platform.
• Storage Encryption: Sensitive data fields in our databases — including identity document data and financial references — are encrypted at rest using AES-256 encryption.
• Access Controls: Only authorised tojay bet staff with a specific operational need can access player personal data. Access is logged, audited and reviewed regularly.
• Two-Factor Authentication: Critical internal systems used by tojay bet staff to access player data require multi-factor authentication.
• Regular Security Audits: Tojay bet conducts regular security reviews and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal information, tojay bet will notify affected players through their registered contact details as quickly as possible and will take immediate steps to contain and remediate the incident.

As a tojay bet player, you have the following rights regarding your personal data. You can exercise any of these rights by contacting our support team:

Tojay bet is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover — through our age verification process or through any other means — that a registered account belongs to someone under 18, we will:

• Immediately close the account and block future access.
• Delete all personal data associated with the account as quickly as legally permissible.
• Return any real-money deposits to the payment method from which they originated, where this is technically possible.

If you are a parent or guardian and believe your child has created a tojay bet account, please contact us immediately at support@tojaybet.bid with the subject line "Minor Account". We will prioritise the request and act within 24 hours.

Tojay bet sends promotional communications — including bonus offers, new game announcements and tournament notifications — only to players who have opted in to receive them. We use SMS to Pakistani mobile numbers and email for marketing communications.

• You can opt in to marketing communications during registration or at any time through your account settings.
• You can opt out at any time by updating your communication preferences in account settings, by replying STOP to any SMS from tojay bet, or by contacting support directly.
• Opting out of marketing does not affect transactional communications — we will still send you messages related to your deposits, withdrawals, security alerts and account changes regardless of marketing preferences.
• Tojay bet does not share your contact details with third-party marketers. We do not purchase or use third-party marketing lists.

Tojay bet may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or improvements to the platform. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players by email or SMS at least 14 days before the changes take effect.
• Post a prominent notice on the tojay bet platform.

Continuing to use tojay bet after the effective date of any updated Privacy Policy constitutes your acceptance of the new terms. If you do not accept the changes, you may request account closure and deletion of your data by contacting our support team.

Previous versions of this Privacy Policy are available on request by emailing support@tojaybet.bid with the subject line "Previous Privacy Policy".

For any questions, requests or concerns regarding this Privacy Policy or the way tojay bet handles your personal data, please contact us through one of the following channels:

• Live Chat: Available 24/7 via the chat icon on the tojay bet platform. This is the fastest way to get a response for most data-related queries.
• Email: support@tojaybet.bid — for formal data rights requests, please use the subject line "Data Rights Request" or "Privacy Query" so your email is routed to the correct team. We respond within 48 hours.
• Data Rights Requests: Email with the subject "Data Rights Request" and include your registered name, account username and a description of your request. We will acknowledge within 48 hours and complete within 30 days.

If you are not satisfied with our response to a data-related complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.