Data Protection & Privacy

tojbat Privacy Policy

We take your privacy seriously. This policy explains exactly what personal data tojbat collects, why we collect it, how we protect it, and the rights you hold as a valued player on our platform.

Effective date: 1 January 2026 Applies to all tojbat services Players aged 21+ only

How tojbat Protects You

Six pillars that define how we handle your personal information — from the moment you register to every session you play on tojbat.

Data Minimisation

tojbat collects only the information strictly necessary to operate your account, verify your identity, and process PKR transactions through JazzCash, EasyPaisa, and linked bank accounts. We do not harvest data we have no use for.

End-to-End Encryption

All data transmitted between your device and tojbat servers is protected by industry-standard TLS 1.3 encryption. Stored financial and identity records are further encrypted at rest using AES-256.

Your Right to Access

You have the right to request a full copy of the personal data tojbat holds about you at any time. Submit a request via our support email and we will respond within 30 calendar days — no fees, no hassle.

No Unauthorised Sharing

tojbat never sells, rents, or trades your personal information to third-party marketers. Data is shared solely with payment processors, KYC partners, and regulatory bodies where legally required.

Right to Erasure

Subject to legal retention obligations (e.g., AML and tax record-keeping), you may request deletion of your personal data upon account closure. tojbat will confirm erasure or explain any lawful basis for retention within 30 days.

Regulatory Compliance

tojbat operates under internationally recognised gaming and data protection standards. Our privacy practices are regularly reviewed by our compliance team to remain aligned with evolving data regulations.

Full Privacy Policy

Please read this policy carefully. By accessing or using tojbat's platform, you acknowledge that you have read and understood the terms set out below.

Important Notice: This policy applies to all users of the tojbat website and associated services. tojbat's gaming and betting services are intended exclusively for individuals aged 21 years or older. If you are under 21, you must not register or use our platform.

1 Who We Are

tojbat ("we", "us", "our") is an online gaming and sports betting platform serving players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond. We provide cricket betting, live casino games, slots, and instant-win titles accessible via our website at https://tojbat.com.

For all privacy-related inquiries, you may contact our Data Protection team at: [email protected]. We aim to respond to all privacy queries within 5 business days.

2 Information We Collect

tojbat collects personal data in several ways when you interact with our platform. The categories of information we collect include the following:

  • Identity Data: Full legal name, date of birth, CNIC/passport number (required for KYC verification), and a profile photograph where applicable.
  • Contact Data: Email address, mobile number (including JazzCash or EasyPaisa-linked numbers), and residential address in Pakistan.
  • Financial Data: Bank account details (HBL, UBL, Meezan Bank, etc.), mobile wallet IDs, transaction history, deposit/withdrawal records in PKR.
  • Technical Data: IP address, browser type, device identifiers, operating system, referring URLs, and session timestamps collected automatically via cookies and server logs.
  • Usage Data: Pages visited, games played, bets placed, time spent on platform, clickstream data, and preferences recorded within your tojbat account.
  • Communications Data: Records of support chat conversations, emails sent to us, and any feedback or complaint submissions.

We do not knowingly collect sensitive personal information such as biometric data, genetic data, or information regarding racial or ethnic origin beyond what is minimally required for identity verification under applicable regulations.

3 How We Use Your Information

tojbat uses your personal data for the following legitimate purposes, each grounded in either contractual necessity, legal obligation, or our legitimate business interests:

  • To create and manage your tojbat account and verify your identity (KYC).
  • To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, Raast, and linked bank accounts.
  • To provide access to our cricket betting, casino, slot, and card game offerings.
  • To detect and prevent fraud, money laundering, and underage gambling — including enforcing our 21+ age restriction.
  • To communicate important account updates, security alerts, and promotional communications (where consent is given).
  • To comply with our obligations under anti-money laundering (AML) regulations and other applicable legal requirements.
  • To improve our platform, personalise your experience, and analyse usage patterns for product development.
  • To manage responsible gaming features, including deposit limits, self-exclusion requests, and cooling-off periods.

tojbat will not use your personal data for purposes incompatible with those listed above without first informing you and, where required, obtaining your consent.

4 Legal Basis for Processing

Every instance of personal data processing at tojbat rests on one of the following lawful bases:

  • Contract: Processing is necessary to fulfil our agreement with you as a registered tojbat player — including account management, game delivery, and payment processing.
  • Legal Obligation: We are required by law to collect and retain certain data for AML compliance, fraud prevention, tax record-keeping, and regulatory reporting.
  • Legitimate Interests: We process certain technical and usage data to operate, secure, and improve our platform — provided this does not override your fundamental privacy rights.
  • Consent: Where we send marketing communications or use non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5 Cookies and Tracking Technologies

tojbat uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data. The types of cookies we use are:

  • Essential Cookies: Required for the website to function. These include session cookies that keep you logged in to your tojbat account.
  • Analytics Cookies: Help us understand how players navigate the platform so we can improve performance and user experience.
  • Preference Cookies: Store your language, currency (PKR), and display settings so you do not have to re-enter them on each visit.
  • Marketing Cookies: Used only with your consent to deliver relevant promotional content about tojbat bonuses and game launches.

You can control cookie settings via your browser. Disabling essential cookies may impair your ability to access certain tojbat features, including account login and game play.

6 Data Sharing and Third Parties

tojbat does not sell your personal data. We share your information only in the following limited circumstances:

  • Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive the minimum financial data required to process your PKR transactions securely.
  • KYC/AML Providers: Identity verification partners receive your identity documents and biometric data solely to fulfil our regulatory know-your-customer obligations.
  • IT Infrastructure Partners: Cloud hosting and security service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your information.
  • Regulatory and Law Enforcement Bodies: Where we are legally compelled to disclose data by court order, regulatory directive, or applicable law, we will do so and will notify you where permitted.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify registered players before such a transfer takes effect.

All third-party partners engaged by tojbat are contractually obligated to handle your personal data with confidentiality and to implement appropriate technical and organisational security measures.

7 Data Retention

tojbat retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Our standard retention periods are:

  • Account Data: Retained for the duration of your active tojbat account, plus a minimum of 5 years following account closure to satisfy AML and regulatory requirements.
  • Transaction Records: Financial records are retained for a minimum of 7 years in line with standard accounting and tax obligations.
  • Support Communications: Records of support interactions are retained for 3 years for quality assurance and dispute resolution purposes.
  • Technical/Log Data: Server logs and IP records are retained for up to 12 months and then securely deleted unless required for an ongoing investigation.
  • Marketing Preferences: Consent records and marketing preferences are retained for the lifetime of your account plus 2 years after closure.

When data is no longer required, tojbat ensures it is securely destroyed or irreversibly anonymised so it can no longer be linked to you as an individual.

8 Your Privacy Rights

As a tojbat player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your registered email address and a description of your request:

  • Right of Access: Request a copy of all personal data tojbat holds about you.
  • Right to Rectification: Ask us to correct inaccurate or incomplete personal data without undue delay.
  • Right to Erasure: Request deletion of your personal data where no legal basis for retention applies.
  • Right to Restrict Processing: Ask us to pause the processing of your data while a complaint or correction request is being resolved.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests, including profiling for marketing purposes.
  • Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

We will respond to all verified privacy rights requests within 30 calendar days. In complex cases we may extend this by a further 30 days, but we will inform you of any extension promptly.

9 Data Security

tojbat employs a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

  • TLS 1.3 encryption for all data in transit between your browser and our servers.
  • AES-256 encryption for sensitive data stored in our databases, including financial records and identity documents.
  • Multi-factor authentication (MFA) available on all tojbat player accounts.
  • Regular penetration testing and vulnerability assessments conducted by independent security professionals.
  • Role-based access controls ensuring that only authorised tojbat staff can access personal data, limited to what is necessary for their function.
  • Incident response procedures with mandatory breach notification protocols in line with regulatory requirements.

While tojbat takes every reasonable precaution, no system connected to the internet can guarantee absolute security. We strongly encourage you to use a strong, unique password for your tojbat account and to enable MFA via your account security settings.

10 International Data Transfers

tojbat's primary servers and data centres are operated under internationally recognised security standards. Where personal data is processed or stored in a jurisdiction outside Pakistan, tojbat ensures that appropriate safeguards are in place — including standard contractual clauses, binding corporate rules, or equivalent mechanisms — to ensure your data receives the same standard of protection it would within Pakistan.

We will never transfer your personal data to a country or organisation that cannot demonstrate an adequate level of data protection without first implementing appropriate contractual and technical safeguards.

11 Children and Underage Users

tojbat's services are strictly restricted to individuals aged 21 years or older. We do not knowingly collect, process, or store personal data from individuals under the age of 21. All new registrations are subject to mandatory age verification as part of our KYC process.

If you believe that a minor has registered on tojbat or that we have inadvertently collected data from a person under 21, please contact us immediately at [email protected]. We will take immediate steps to verify the claim and permanently delete any such data from our records.

We also encourage parents and guardians in Karachi, Lahore, Islamabad, and across Pakistan to make use of parental control software to prevent minors from accessing online gaming platforms.

12 Changes to This Privacy Policy

tojbat reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players via email or a prominent in-platform notification at least 14 days before the changes take effect. The revised policy will carry an updated effective date at the top of this page.

Your continued use of tojbat's platform after the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should discontinue use of the platform and contact us to close your account.

13 Contact and Complaints

For any questions, concerns, or complaints regarding this Privacy Policy or the way tojbat handles your personal data, please contact our Data Protection team directly:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the tojbat platform — average response time 3–5 minutes.
  • Response Time: We aim to acknowledge all privacy complaints within 3 business days and provide a full response within 30 calendar days.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or regulatory body applicable in your jurisdiction.

Ready to Play on tojbat?

Now that you know how we protect your data, join thousands of Pakistani players already enjoying cricket betting, live casino games, and slots — all in PKR.