Tojay Privacy Policy

1. Introduction

At Tojay, we take your privacy seriously. This Privacy Policy sets out how we collect, use, store, and protect the personal information you provide when using our platform — whether through the Tojay website, mobile app, or any related service.

By registering an account or continuing to use Tojay, you confirm that you have read and understood this policy and consent to the practices described within it. If you disagree with any part of this policy, please discontinue use of the platform and contact our support team to request account closure.

This policy applies to all users in Pakistan and covers data processed in connection with account registration, deposits and withdrawals in PKR, participation in games and promotions, and general platform interactions. We are committed to handling your data responsibly and transparently.

2. What We Collect

We collect different types of information depending on how you interact with Tojay. Below is a clear breakdown of the categories of data we may collect and why.

2.1 Information You Provide Directly

When you register an account or interact with our platform, you may provide:

• Full name and date of birth
• Email address and mobile number
• Residential address (for identity verification purposes)
• CNIC number or passport details (during KYC verification)
• Payment details linked to JazzCash, Easypaisa, Raast, bank accounts, or cards
• Communications you send to our support team

2.2 Information We Collect Automatically

When you use the Tojay platform, we automatically collect certain technical information, including:

• IP address and approximate location data
• Device type, operating system, and browser version
• Session timestamps, pages visited, and features used
• Game activity logs, betting history, and transaction records
• Crash reports and error logs

2.3 Information from Third Parties

In certain cases, we may receive information about you from third-party partners — for example, from payment processors confirming the status of a PKR deposit, or from identity verification services used during KYC checks. We handle all third-party data in accordance with this policy.

3. How We Use Your Data

Every piece of information we collect serves a specific, legitimate purpose. We do not collect data simply for the sake of it. Here is how your data is put to use on the Tojay platform:

• Account Management: Creating and maintaining your Tojay account, verifying your identity, and managing your preferences and settings.
• Transactions: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, and other supported methods — accurately and securely.
• Customer Support: Responding to your queries, resolving disputes, and providing assistance with technical issues or account matters.
• Fraud Prevention: Detecting and preventing suspicious activity, money laundering, underage access, and abuse of bonuses or promotions.
• Platform Improvement: Analysing usage patterns to improve game performance, fix bugs, and introduce features that better serve Pakistani players.
• Responsible Gaming: Monitoring for signs of problem gaming behaviour and providing relevant tools and information to users who may need support.
• Promotions & Notifications: Sending you relevant bonus offers, updates, and platform announcements — only where you have opted in to receive such communications.
• Legal Compliance: Meeting any applicable legal, regulatory, or reporting obligations as required.

We process your data only where we have a lawful basis to do so — typically because it is necessary to fulfil your account contract with us, because you have given consent, or because it is required for legitimate operational purposes such as security and fraud prevention.

4. Data Sharing

Tojay does not sell or rent your personal information. We share data only in the limited circumstances described below, and always with appropriate safeguards in place.

4.1 Payment Processors

To process your PKR transactions, we share relevant financial details with our payment partners including JazzCash, Easypaisa, Raast, and banking partners. These providers process your payment information strictly in accordance with their own privacy policies and applicable regulations.

4.2 Identity Verification Providers

When KYC verification is required, we may share your submitted identity documents with third-party verification services. These services are contractually bound to handle your data confidentially and to use it solely for the purpose of identity verification.

4.3 Game Software Providers

Some game functionality is powered by third-party software providers. These providers may receive anonymised or pseudonymised session data necessary to deliver a smooth gaming experience. They are not permitted to use this information for any independent marketing or profiling purposes.

4.4 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or regulatory authority. We will only share the minimum information necessary to satisfy such requirements and will notify you where legally permitted to do so.

5. Cookies & Tracking

Tojay uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences, and understand how users interact with our site. A cookie is a small text file stored on your device when you visit a website.

5.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These handle session management, login state, and security checks. You cannot opt out of these without affecting platform functionality.
• Functional Cookies: Remember your language preference, display settings, and other personalisation choices to improve your experience.
• Analytics Cookies: Help us understand which pages are visited most, where users spend time, and where technical issues occur — so we can keep improving the platform.
• Security Cookies: Detect unusual login patterns, prevent fraudulent access, and protect your account from unauthorised use.

5.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect certain features of the Tojay platform — for example, you may need to log in again each visit, or some display preferences may not be saved. Please refer to your browser's help documentation for instructions on managing cookie settings.

6. Data Security

Keeping your data secure is a top priority at Tojay. We apply a range of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

• All data transmitted between your device and Tojay is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Sensitive data such as payment information and identity documents is stored using strong encryption at rest.
• Access to personal data within our organisation is strictly limited on a need-to-know basis. Staff with access are subject to confidentiality obligations.
• We conduct regular security reviews, vulnerability assessments, and system monitoring to detect and respond to potential threats promptly.
• Suspicious login attempts and unusual account activity are flagged automatically and reviewed by our security team.

While we take every reasonable precaution, no system is completely immune to risk. You also play an important role in keeping your account secure — use a strong, unique password, do not share your credentials with anyone, and contact us immediately if you suspect unauthorised access.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Below is a general guide to how long different categories of data are typically kept:

• Account Data: Retained for the duration of your active account, and for a reasonable period after account closure to allow for dispute resolution and legal compliance.
• Transaction Records: Financial records related to PKR deposits, withdrawals, and game activity are retained for a minimum period required to meet financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for the period required by applicable anti-money laundering and know-your-customer regulations.
• Support Communications: Records of your communications with our support team are retained for a reasonable period to assist with ongoing or future queries.
• Technical & Usage Logs: Anonymised usage and analytics data may be retained for longer periods to support platform development and security analysis.

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Your Rights

As a Tojay user, you have rights regarding your personal data. We are committed to honouring these rights and making the process of exercising them as straightforward as possible.

• Right to Access: You can request a copy of the personal data we hold about you at any time.
• Right to Correction: If any of your personal information is inaccurate or out of date, you can request that we correct it. You can also update basic details directly from your account settings.
• Right to Deletion: You may request that we delete your personal data. Note that we may need to retain certain information for legal compliance or fraud prevention purposes even after a deletion request.
• Right to Withdraw Consent: Where we process your data based on your consent — for example, for marketing communications — you can withdraw that consent at any time. This will not affect any processing that took place before the withdrawal.
• Right to Object: You can object to certain types of data processing, including direct marketing. We will stop processing your data for that purpose upon receiving a valid objection.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data that you have provided to us, where technically feasible.

To exercise any of these rights, please contact our support team via live chat or email. We will respond to your request within a reasonable timeframe and may need to verify your identity before processing it.

9. Minors & Age Policy

Tojay is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has created an account or provided personal information through our platform, please contact us immediately. We will take prompt action to investigate and, where confirmed, delete the relevant account and associated data.

During registration, users are required to confirm that they are 18 or older. We may also request age verification documentation as part of our KYC process. Accounts found to belong to underage users will be suspended and any associated funds returned where this is practicable.

10. Third-Party Links

The Tojay platform may reference or link to third-party services — for example, payment providers or game developers. These third parties operate their own privacy policies, which are independent of Tojay's. We are not responsible for the privacy practices of any external service, and we encourage you to review the privacy policy of any third-party platform you interact with.

Our platform does not display third-party advertising, and we do not allow advertisers to set cookies or tracking technologies on Tojay pages.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users by email or through an in-platform notification.

We encourage you to review this policy periodically to stay informed about how Tojay protects your data. Continued use of the platform after any update constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Tojay handles your personal data, our support team is available 24/7 and will be happy to help.