At toto21, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect from Pakistani players, how it is used, who it may be shared with, how long we retain it, and what rights you hold over your own information. We are committed to transparency and to handling your data responsibly under applicable international data protection standards.
Before diving into the full legal text, here are the six core principles that govern how toto21 handles every piece of personal data it processes.
toto21 only collects the personal data that is strictly necessary for the purpose for which it is collected. We do not gather information for the sake of it.
All personal data stored by toto21 is protected using industry-standard 256-bit encryption, access controls, and regular security audits conducted by independent third parties.
toto21 is fully transparent about what data it collects, why it collects it, and who it may be shared with. There are no hidden data practices on this platform.
toto21 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data sharing is limited to service providers required for platform operation.
Personal data is retained only for as long as required by the purpose for which it was collected or as mandated by applicable regulatory and legal obligations.
toto21 respects your right to access, correct, restrict, and in certain circumstances delete the personal data we hold about you. Requests are processed promptly.
This Privacy Policy is issued by toto21 (hereinafter "toto21", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at toto21.blog. toto21 acts as the data controller in respect of the personal data of all registered players and visitors to the toto21 platform.
As the data controller, toto21 is responsible for determining the purposes and means by which personal data is processed. toto21 processes personal data in accordance with applicable international data protection standards and the requirements of its gaming licence, which includes mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
toto21 collects and processes the following categories of personal data, depending on how you interact with the platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, CNIC number | Registration; KYC verification |
| Contact Data | Pakistani mobile number, email address (if provided) | Registration; account updates |
| Financial Data | JazzCash/EasyPaisa wallet reference, bank account details, transaction history | Deposit; withdrawal; KYC |
| Gaming Data | Game session records, bet history, win/loss records, bonus activity | All gaming activity |
| Technical Data | IP address, device type, browser, operating system, session logs | Platform visits; login events |
| Behavioural Data | Pages visited, features used, time on platform, click patterns | Platform usage (via cookies) |
| Communications Data | Live chat transcripts, support ticket records, email correspondence | When you contact support |
| Verification Documents | Government-issued ID photos, selfies, proof of payment method | KYC verification; withdrawal checks |
toto21 collects personal data through the following channels:
toto21 processes your personal data under one or more of the following legal bases, depending on the specific purpose of processing:
toto21 uses the personal data it collects for the following specific purposes:
toto21 does not sell, rent, or trade your personal data to any third party. Your data may be shared with the following categories of recipients only where strictly necessary:
toto21 uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by the toto21 website. Cookies enable the platform to function correctly, remember your preferences, and collect analytics data.
toto21 uses the following categories of cookies:
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the toto21 platform from functioning correctly. Analytics and functional cookies may be disabled without affecting core platform access.
toto21 retains personal data for the following periods, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law:
toto21 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
Despite these measures, no internet-based platform can guarantee absolute security. toto21 encourages all players to use strong unique passwords, enable two-factor authentication, and log out of their accounts after each session — particularly when using shared devices. In the event you suspect your toto21 account has been compromised, contact support immediately.
toto21 is an internationally operating platform. In the course of providing its services, your personal data may be transferred to and processed in countries other than Pakistan, including countries where toto21's technology infrastructure and gaming licence are based.
Where personal data is transferred internationally, toto21 ensures that adequate safeguards are in place to protect your data, including contractual data protection clauses with all data recipients, equivalent to those required under international data protection frameworks. toto21 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures.
As a toto21 player, you hold the following rights in respect of the personal data toto21 processes about you. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 15.
You have the right to request a copy of all personal data toto21 holds about you (commonly known as a Subject Access Request). toto21 will respond within 30 days of receiving a verifiable request.
If any personal data toto21 holds about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information directly from your toto21 account settings panel.
In certain circumstances, you may request that toto21 delete your personal data. This right is subject to limitations where toto21 is required by law to retain data — including gaming licence record-keeping requirements. Erasure requests for regulatory data will be assessed individually.
You may request that toto21 restricts the processing of your data in specific circumstances — for example, where you contest the accuracy of data or where you have objected to processing and a determination is pending.
Where processing is based on consent or contract and is carried out by automated means, you may request that toto21 provides your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on toto21's legitimate interests, including direct marketing. Where you object to marketing communications, toto21 will cease processing your data for that purpose immediately.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Opt out of marketing communications directly from your toto21 account settings.
toto21 strictly prohibits the use of its platform by anyone under the age of 21 years. toto21 does not knowingly collect personal data from individuals under the age of 21. If toto21 discovers that a minor has registered an account, the account will be immediately closed, all associated data will be deleted to the extent permitted by law, and any funds will be returned to the verified payment source.
The toto21 platform may contain references to third-party services, such as payment providers. If you navigate to a third-party website or application — for example, when redirected to JazzCash or EasyPaisa to complete a payment — you will be subject to that third party's privacy policy from the moment you leave the toto21 platform.
toto21 has no control over, and accepts no responsibility for, the privacy practices of third-party sites or services. toto21 recommends that you review the privacy policies of any third-party services you use in connection with your toto21 account.
toto21 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where material changes are made, toto21 will notify registered players by publishing a prominent notice on the platform and, where practicable, by sending a notification to your registered mobile number.
The date of the most recent revision of this Privacy Policy is displayed at the top of this document. We encourage you to review this Policy periodically to remain informed about how toto21 handles your personal data. Your continued use of the toto21 platform following the publication of a revised Policy constitutes acceptance of the updated terms.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how toto21 has handled your personal data, please contact us through the following channels:
toto21 commits to acknowledging privacy-related queries within 48 hours and to resolving substantive data rights requests within 30 calendar days of receipt of a verifiable request. For complex requests, toto21 may extend the response period by a further two months, with prior notification provided to the requesting player.
Our support team handles all data rights requests and privacy concerns directly. You can also review our full Terms & Conditions or visit our FAQ for quick answers to common questions.
All toto21 services, including data collection and processing described in this Privacy Policy, apply exclusively to registered players who are 21 years of age or older. toto21 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the toto21 account lifecycle.
Your data at toto21 is also protected by robust responsible gaming controls. Visit our Responsible Gaming page to learn more about how toto21 supports healthy gaming habits and protects vulnerable players.