tojbat Privacy Policy

1.1 Who We Are. tojbat is Pakistan's leading online cricket betting and casino platform, operating at tojbat.net under an international gaming licence. For the purposes of this Privacy Policy, tojbat is the data controller responsible for all personal data collected through the tojbat website and associated services.

1.2 Scope. This Privacy Policy applies to all personal data collected from individuals who visit, register with, or otherwise interact with the tojbat platform — including Pakistani players from Karachi, Lahore, Islamabad, Faisalabad, and all other regions across Pakistan. It covers data collected through the website, any mobile browser interface, communications with our support team, and any other touchpoint operated by tojbat.

1.3 Relationship to Other Documents. This Privacy Policy should be read alongside tojbat's Terms and Conditions and Responsible Gaming Policy. In the event of any conflict between this Privacy Policy and the Terms and Conditions regarding data matters, this Privacy Policy shall prevail.

1.4 Language. This policy is published in English. Where Urdu language support is requested by a Pakistani player, our support team can provide a plain-language summary of the key points in Urdu on request. The English version remains the legally binding document in all cases.

2.1 Registration Data. When you create a tojbat account, we collect the following personal information:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (used for mandatory 21+ age verification)
• Residential address in Pakistan (city, street, postal code)
• Pakistani mobile number (for SMS verification and account security)
• Email address (for account communications and transactional notifications)
• Username and encrypted password

2.2 KYC Verification Data. As part of our Know Your Customer obligations under our international gaming licence, we may collect:

• CNIC (Computerised National Identity Card) number and scanned copy
• Passport or other government-issued identity document
• Proof of residential address (utility bill, bank statement)
• Selfie or live photograph for identity confirmation

2.3 Financial Data. To process deposits and withdrawals in PKR, tojbat collects:

• JazzCash and EasyPaisa mobile wallet numbers
• Bank account details for HBL, UBL, and Meezan Bank transfers
• Visa or Mastercard card number (last four digits only, for display), expiry date, and billing name
• Transaction history, deposit amounts, and withdrawal records

2.4 Technical & Usage Data. We automatically collect certain technical data when you use the tojbat platform:

2.5 Voluntary Data. You may voluntarily provide additional data such as survey responses, feedback, or promotional competition entries. This data is used solely for the stated purpose at the time of collection.

tojbat uses your personal data strictly for the purposes described in this policy. The primary uses are as follows:

• Account Management: Creating and maintaining your tojbat player account, processing login requests, and managing account settings.
• Identity Verification: Conducting mandatory KYC checks to confirm that you meet the 21+ age requirement and to verify your identity in line with our licensing obligations.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and processing withdrawals to your verified payment method.
• Regulatory Compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations required under tojbat's international gaming licence.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance via live chat, Messenger, and email channels.
• Platform Security: Detecting and preventing fraud, account takeover attempts, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions.
• Responsible Gaming: Monitoring betting patterns to identify potentially problematic gambling behaviour and providing timely intervention tools where appropriate.
• Service Improvement: Analysing aggregated, anonymised usage data to improve the tojbat platform, fix bugs, and develop new features for Pakistani players.
• Promotional Communications: Sending you relevant bonus offers, PSL cricket betting promotions, and tojbat news — only where you have provided consent and have not opted out.

tojbat processes your personal data on the following legal grounds:

• Contractual Necessity: The majority of data processing is necessary to fulfil our contractual obligations to you as a registered tojbat player — specifically to operate your account, process bets, and handle payments.
• Legal Obligation: Certain processing activities — particularly KYC, AML checks, and age verification — are required by the conditions of our international gaming licence and applicable financial regulations. This processing is mandatory and cannot be opted out of without affecting your ability to use the platform.
• Legitimate Interests: tojbat processes some data on the basis of its legitimate interests, including fraud prevention, platform security, and the improvement of our services. We conduct legitimate interest assessments to ensure these interests do not override your fundamental rights.
• Consent: Where we process your data for marketing and promotional communications, we do so only on the basis of your freely given, informed consent obtained at the point of registration. You may withdraw this consent at any time.

5.1 We Do Not Sell Your Data. tojbat will never sell, rent, or exchange your personal data with third-party advertisers, data brokers, or marketers. This is an absolute commitment, not subject to commercial exceptions.

5.2 Service Providers. tojbat works with trusted third-party service providers who process data on our behalf, strictly under data processing agreements that bind them to confidentiality and security obligations. These include:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank for PKR transaction processing; Visa and Mastercard networks for card payments.
• KYC Providers: Third-party identity verification platforms used to cross-check CNIC data and document authenticity.
• Game Providers: Licensed casino and sports data providers whose platforms are integrated into the tojbat lobby. These providers receive only the minimum data required to manage your game session.
• Cloud Infrastructure: Secure cloud hosting providers responsible for the technical infrastructure underpinning the tojbat platform.
• Anti-Fraud Services: Specialist fraud detection and risk scoring services that help tojbat identify suspicious account activity.

5.3 Regulatory Authorities. tojbat may be required to disclose personal data to regulatory authorities, law enforcement bodies, or courts where required by law or as directed by our licensing authority. In such cases, tojbat will disclose only the minimum data necessary to satisfy the legal obligation.

5.4 Business Transfers. In the unlikely event of a merger, acquisition, or transfer of tojbat's business assets, player data may be transferred to the acquiring entity. Affected players will be notified in advance and the acquiring entity will be bound by the terms of this Privacy Policy.

6.1 What Are Cookies. Cookies are small text files stored on your device by the tojbat website when you visit. They allow the platform to remember your preferences, maintain your login session, and collect anonymous usage statistics.

6.2 Types of Cookies Used. tojbat uses the following categories of cookies:

6.3 No Advertising Cookies. tojbat does not use third-party advertising cookies or cross-site behavioural tracking pixels. We do not participate in retargeting advertising networks.

6.4 Managing Cookies. You can manage or disable non-essential cookies via your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your tojbat account and using core platform features. Browser-level cookie management instructions are available from your browser provider's support documentation.

7.1 Active Accounts. While your tojbat account remains active, we retain all personal data associated with that account for as long as is necessary to provide the services you have requested, comply with our regulatory obligations, and resolve any disputes that may arise.

7.2 Closed Accounts. Following the closure of your tojbat account — whether at your request or as a result of a policy breach — we will retain your personal data for a minimum period of five (5) years. This retention period is mandated by our international gaming licence to satisfy AML, KYC audit, and regulatory reporting requirements.

7.3 Financial Records. Transaction records, including all PKR deposits and withdrawals processed via JazzCash, EasyPaisa, and bank transfer, are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements applicable under our licensing regime.

7.4 Support Communications. Live chat transcripts and support email correspondence are retained for three (3) years from the date of the interaction. This retention supports quality assurance and dispute resolution processes.

7.5 Deletion After Retention. At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business improvement purposes.

8.1 Technical Measures. tojbat implements a comprehensive set of technical security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

• TLS 1.3 encryption for all data transmitted between your device and tojbat servers
• AES-256 encryption for sensitive data stored at rest, including CNIC details and payment information
• Multi-factor authentication options for player account access
• Automated intrusion detection and real-time security monitoring
• Regular independent security audits and penetration testing of the tojbat platform
• Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis

8.2 Organisational Measures. All tojbat staff and contractors who handle player data are subject to confidentiality obligations and receive regular data protection training. Access to production systems containing personal data is logged, monitored, and subject to multi-factor authentication.

8.3 Your Responsibility. While tojbat takes all reasonable steps to protect your data, you also have a responsibility to keep your login credentials secure. You must not share your tojbat username or password with any third party. If you suspect that your account credentials have been compromised, contact tojbat support immediately.

As a tojbat player, you hold the following rights over your personal data. To exercise any of these rights, contact our support team via live chat or at support at tojbat.net. We will respond to all data rights requests within 72 hours and aim to fully resolve them within 30 days of receipt.

• Right of Access: You may request a copy of all personal data that tojbat holds about you, along with information about how it is being processed.
• Right to Rectification: If any of your personal data held by tojbat is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to tojbat's mandatory retention obligations under its gaming licence — we cannot delete data that we are legally required to keep.
• Right to Restriction: You may request that tojbat restricts its processing of your data in certain circumstances, for example while a rectification request is being considered.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests. tojbat will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.1 Transfer Necessity. As an internationally licensed online gaming platform serving Pakistani players, tojbat may transfer certain personal data to servers or service providers located outside of Pakistan. Such transfers are necessary to operate the tojbat platform, process payments, and fulfil our regulatory obligations.

10.2 Transfer Safeguards. Where personal data is transferred internationally, tojbat ensures that appropriate safeguards are in place to protect the data, including:

• Data processing agreements incorporating standard contractual clauses with all international recipients
• Transfer only to countries or organisations that maintain an adequate level of data protection as assessed by tojbat's compliance team
• Technical controls ensuring data remains encrypted during international transit

10.3 Payment Network Transfers. Transactions processed via Visa, Mastercard, JazzCash, and EasyPaisa may involve data passing through those networks' international processing infrastructure. Each of these networks operates under its own data protection framework and is bound by card scheme and regulatory requirements applicable to their operations.

11.1 Strict Age Requirement. The tojbat platform is strictly for individuals who are 21 years of age or older. tojbat does not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory age verification steps to enforce this requirement.

11.2 Discovery of Underage Data. If tojbat becomes aware that personal data has been collected from an individual under the age of 21, the following steps will be taken immediately:

• The account will be suspended and access to the platform blocked
• All bets placed will be declared void and stakes returned to the original payment source
• All personal data associated with the underage account will be deleted as soon as it is no longer required for regulatory reporting purposes
• The incident will be reviewed by tojbat's compliance team to strengthen age verification procedures where necessary

12.1 Right to Update. tojbat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform services. The version date shown at the top of this document will be updated whenever a change is made.

12.2 Notification of Changes. For material changes that significantly affect how we use your personal data, tojbat will notify registered players via email and/or an in-platform notification at least 7 days before the change takes effect, where operationally feasible.

12.3 Continued Use. Your continued use of the tojbat platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and request account closure by contacting support.

13.1 Privacy Enquiries. For any questions, concerns, or requests relating to this Privacy Policy or tojbat's data handling practices, please contact our support team using any of the following channels:

• Email: support at tojbat.net — include "Privacy Enquiry" in your subject line
• Live Chat: Available directly on the tojbat website, 24 hours a day, 7 days a week
• Language Support: Urdu and English support available from our Pakistani support team

13.2 Response Times. tojbat aims to acknowledge all privacy-related enquiries within 24 hours of receipt and to provide a substantive response within 72 hours. Complex data rights requests may require up to 30 days to fully resolve. We will keep you informed of progress throughout the process.

13.3 Complaints. If you are dissatisfied with tojbat's response to a privacy concern, you have the right to escalate your complaint to the dispute resolution process established under our international gaming licence. Details of this process are available on request from the tojbat support team.