Privacy Policy
At Tojbet, your privacy is not a formality — it is a fundamental commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you hold over your own information as a user of this platform.
Effective Date: 1 January 2026 | Last Reviewed: 1 January 2026How We Handle Your Data
Data Minimisation
We collect only the personal data that is strictly necessary to operate your account, deliver Services and comply with legal obligations. We do not collect data speculatively or for undefined future purposes.
Security by Design
All data is transmitted over encrypted HTTPS connections. Internal access to personal data is role-restricted on a need-to-know basis. Security measures are reviewed regularly against current best practices.
No Data Selling
Tojbet does not sell, rent or trade your personal data to third-party marketers. Data is shared only where operationally necessary — for example, with KYC/AML verification partners, payment processors or where legally required.
Your Rights Are Real
You have the right to access, correct, delete and restrict the processing of your personal data. We do not make exercising these rights needlessly complicated — contact us and we will respond within a reasonable timeframe.
Defined Retention Periods
Personal data is not kept indefinitely. Retention periods are set based on the purpose for which data was collected and applicable legal requirements. Data is securely deleted or anonymised once retention periods expire.
Transparent Communication
This Privacy Policy is written in plain English — not buried in impenetrable legal jargon. Support for privacy-related queries is available in both English and Urdu to better serve our Pakistani user base.
01Introduction
This Privacy Policy ("Policy") is published by Tojbet ("Tojbet", "we", "us", "our"), the operator of the online platform accessible at tojbet.cam ("Platform"). This Policy describes how we collect, process, store, share and protect the personal data of individuals ("Users", "you", "your") who access or use the Platform.
By accessing or using the Platform, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
Tojbet is an English-language online betting information and entertainment platform designed for Pakistani users. We do not operate a licensed gambling business in Pakistan and do not claim any approval from the Government of Pakistan, the PTA, the State Bank of Pakistan or any provincial authority. This Policy does not constitute legal advice applicable to your specific circumstances under Pakistani law.
02Definitions
The following definitions apply throughout this Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person — that is, any data that can be used directly or indirectly to identify you.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
- "Data Controller" means Tojbet, the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" means a third party that processes Personal Data on behalf of Tojbet under a contractual arrangement.
- "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data.
- "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics and session management.
- "KYC" means Know Your Customer — the identity verification process required to comply with applicable AML regulations.
03Data We Collect
Tojbet may collect and process the following categories of personal data depending on how you use the Platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Account registration, KYC/AML compliance, age verification |
| Contact Data | Email address, phone number, city of residence | Account communication, support, notifications |
| Financial Data | Payment method type, last 4 digits of card (if applicable), transaction amounts in PKR/Rs | Processing deposits and withdrawals, fraud prevention |
| Verification Data | Document images (CNIC, passport), selfie/liveness check images, proof of address | KYC identity verification, AML compliance |
| Technical Data | IP address, device type, browser type, operating system, session data | Platform security, fraud detection, optimisation |
| Usage Data | Pages visited, features used, time spent, betting history, game interactions | Platform improvement, personalisation, responsible gambling monitoring |
| Communications Data | Support ticket content, email correspondence, chat messages | Customer support, dispute resolution, service improvement |
| Marketing Preferences | Opt-in / opt-out status for promotional communications | Delivering communications consistent with your stated preferences |
We do not collect or process special categories of sensitive personal data (such as health data, political opinions or biometric data for identification purposes) except where a selfie or liveness check is required as part of KYC — in which case it is processed strictly for identity verification and is not retained beyond the legally required period.
04How We Collect Your Data
We collect personal data through several channels:
Directly From You
- When you complete the account registration process.
- When you submit KYC documents through our secure verification portal.
- When you make deposits or request withdrawals — including via payment methods familiar in Pakistan such as bank transfers through HBL, UBL, Meezan Bank and Bank Alfalah, and mobile wallet references including Easypaisa and JazzCash. References to these providers are contextual only and do not imply endorsement of gambling by those institutions.
- When you contact our support team by email at [email protected].
- When you adjust your account settings, privacy preferences or marketing opt-ins.
Automatically Through Platform Use
- Through cookies and similar tracking technologies as you browse the Platform.
- Through server logs which record IP addresses, device details and session activity.
- Through analytics tools that aggregate usage patterns to help us improve Platform performance.
From Third Parties
- From identity verification and AML screening service providers during KYC processes.
- From payment processors where additional transaction verification is required.
- From fraud detection services that may cross-reference data to protect the integrity of the Platform.
05Legal Basis for Processing
Where applicable data protection legislation requires us to identify a lawful basis for processing your personal data, we rely on the following:
- Contractual Necessity: Processing required to perform the contract between you and Tojbet — for example, operating your account, processing transactions and delivering Services.
- Legal Obligation: Processing required to comply with applicable laws — including KYC/AML obligations and regulatory record-keeping requirements.
- Legitimate Interests: Processing necessary for our legitimate business interests — such as fraud prevention, platform security, improving our Services and managing responsible gambling obligations — provided those interests are not overridden by your fundamental rights.
- Consent: Where you have given explicit consent — for example, for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
06How We Use Your Data
Tojbet uses collected personal data for the following purposes:
- Account Management: Creating, maintaining and administering your account, including authentication, security and account recovery.
- Service Delivery: Enabling you to access betting, gaming and informational content on the Platform.
- Transaction Processing: Facilitating deposits, withdrawals and balance management in PKR or other supported currencies.
- Identity Verification (KYC/AML): Verifying your identity, age and the source of funds where required to satisfy legal and regulatory obligations.
- Responsible Gambling Monitoring: Detecting patterns of play that may indicate problem gambling and enabling the delivery of responsible gambling tools, warnings or interventions.
- Fraud Prevention and Platform Security: Identifying and preventing fraudulent activity, unauthorised access and abuse of Platform systems.
- Customer Support: Responding to your queries, complaints and requests, and maintaining records of those interactions.
- Platform Improvement: Analysing aggregated usage data to improve Platform design, content, performance and user experience.
- Marketing Communications: Sending you information about promotions, offers and updates where you have opted in to receive such communications. You may opt out at any time.
- Legal Compliance and Regulatory Reporting: Meeting our legal obligations under applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.
07Data Sharing & Disclosure
Tojbet does not sell, rent or trade your personal data to third parties. We may share your data with the following categories of recipients in limited and controlled circumstances:
- Identity Verification Providers: Third-party KYC and AML screening services engaged to verify your identity and age, and to screen against sanctions lists.
- Payment Processors: Companies that facilitate deposit and withdrawal transactions on the Platform. These processors receive only the data necessary to execute the specific transaction.
- IT and Infrastructure Providers: Cloud hosting, data storage, security and analytics providers who process data on our behalf under strict data processing agreements.
- Customer Support Tools: Helpdesk and communication platforms used to manage support interactions — operating under contractual confidentiality obligations.
- Legal and Regulatory Authorities: Where we are legally obliged to disclose data — for example, in response to a valid court order, regulatory investigation or law enforcement request.
- Professional Advisers: Lawyers, accountants and auditors bound by professional confidentiality obligations, where access is necessary for the provision of their services to Tojbet.
All third-party processors engaged by Tojbet are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.
08Data Retention
Personal data is retained only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce our agreements.
- Active Account Data: Retained for the duration of your account relationship with Tojbet.
- Transaction Records: Retained for a minimum of five (5) years after the relevant transaction to satisfy AML record-keeping obligations. Applicable regulatory requirements may mandate longer retention in specific cases.
- KYC Documents: Retained for the period required by applicable AML legislation — typically five (5) years from the end of the customer relationship or from the date of the transaction to which they relate.
- Support Communications: Retained for a period sufficient to resolve disputes and improve service quality, generally up to three (3) years unless a longer period is required by law.
- Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.
Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.
09Data Security
Tojbet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:
- SSL/TLS encryption for all data transmitted between your device and our Platform.
- Encryption of sensitive data at rest, including financial and identity verification records.
- Role-based access controls ensuring Platform staff can only access personal data relevant to their specific functions.
- Regular security testing, vulnerability assessments and penetration testing by qualified security professionals.
- Multi-factor authentication requirements for administrative access to systems containing personal data.
- Secure data deletion and disposal procedures for devices and storage media at end of life.
Your Responsibilities: You are responsible for maintaining the confidentiality of your account login credentials. Never share your password with anyone. If you suspect your account has been compromised, contact us immediately at [email protected]. Tojbet will never ask for your password by email, phone or chat.
While we implement robust security measures, no internet-based platform can guarantee absolute security. We encourage you to use strong, unique passwords and to enable any available two-factor authentication options for your account.
10Cookies & Tracking Technologies
Tojbet uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device that helps us recognise you across sessions and personalise your experience.
Types of Cookies We Use
- Essential Cookies: Strictly necessary for the Platform to function — for example, maintaining your session after login, storing your language preference and enabling security features. These cannot be disabled without impairing core Platform functionality.
- Analytics Cookies: Used to collect aggregated information about how users interact with the Platform — such as pages visited, time on page and navigation paths. This data is used to improve the Platform and is not linked to individually identifiable users.
- Functionality Cookies: Allow the Platform to remember choices you have made — such as your preferred language or notification settings — to deliver a more personalised experience.
- Security Cookies: Used for fraud detection and prevention purposes, including identifying suspicious login patterns and bot activity.
You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies may limit certain Platform features. Continued use of the Platform following the display of our cookie notice constitutes acceptance of our use of cookies in accordance with this Policy.
11International Data Transfers
In operating a global platform, personal data may be transferred to and processed in countries outside your country of residence — including countries outside Pakistan. Where such transfers occur, Tojbet ensures that appropriate safeguards are in place to protect your personal data, which may include:
- Transfers to countries recognised as providing an adequate level of data protection by the relevant regulatory authority.
- Use of standard contractual clauses or equivalent data transfer mechanisms approved under applicable data protection law.
- Transfers to processors who have implemented binding corporate rules or equivalent internal data protection standards.
By using the Platform and providing your personal data, you acknowledge that your data may be processed in jurisdictions outside Pakistan. If you have questions about international data transfers, please contact us using the details in Section 16.
12Your Data Rights
Subject to applicable data protection law and certain lawful exceptions, you hold the following rights in relation to your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and to be informed of how it is being processed. We will respond to verified access requests within a reasonable period.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (where consent was the basis for processing), or where processing is unlawful. Note that we may be required to retain certain data by law — for example, KYC records under AML obligations — and such data cannot be deleted on request alone.
Right to Restriction of Processing
In certain circumstances — for example, while you contest the accuracy of data we hold, or while a legitimate interest objection is assessed — you may request that we temporarily restrict processing of your personal data.
Right to Object
Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
Right to Data Portability
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request receipt of your personal data in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
To exercise any of these rights, contact us at [email protected] with your request and sufficient information to verify your identity. We will acknowledge receipt and respond within a reasonable timeframe. There is no charge for exercising your rights in most circumstances.
13Minors & Age Policy
The Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the applicable license jurisdiction. Tojbet does not knowingly collect personal data from individuals below this age threshold.
If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on this Platform, please contact us at [email protected] so we can investigate and take appropriate action.
The 18+ age requirement does not imply that gambling is legal for all adults in Pakistan. Pakistani users must independently verify their obligations under applicable local law.
14Third-Party Links & Services
The Platform may contain references to third-party payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency options such as BTC and USDT — as educational, contextual references for Pakistani users. These references do not constitute links to or endorsements of those providers' platforms.
If the Platform contains links to any third-party websites or services (which may be updated from time to time), Tojbet is not responsible for the privacy practices, content or security of those third-party platforms. We recommend reviewing the privacy policy of any third-party site you visit independently.
15Policy Amendments
Tojbet reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform Services. Where changes are material, we will make reasonable efforts to notify registered users — for example, by posting a notice on the Platform or by email to the address registered on your account.
The "Last Reviewed" date displayed at the top of this page indicates when the Policy was most recently updated. Your continued use of the Platform following the posting of any revised Policy constitutes acceptance of the updated terms.
If you do not agree with any changes to this Policy, you should discontinue use of the Platform and contact us to close your account.
16Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or how Tojbet processes your personal data — including requests to exercise your data rights — please contact us using the details below. We are committed to responding promptly and transparently.
Data Controller:
Tojbet — tojbet.cam
Privacy Enquiries Email:
[email protected]
Support Languages:
English and Urdu
Response Time:
Typically within 24–48 business hours. Data subject access request responses may take up to 30 days.
For related policies and platform information, please review our Terms & Conditions, Responsible Gambling Policy, About Us and FAQ.
Questions About Your Privacy?
Our team handles all data and privacy queries in English and Urdu. If you want to exercise your data rights, update your preferences or simply understand how your data is used, reach out — we will respond clearly and promptly.
Related policies: Terms & Conditions | Responsible Gambling | About Us