tosspk Privacy Policy

This Privacy Policy ("Policy") describes how tosspk ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal data of users ("you", "the Player", "User") who access or register on the tosspk platform available at tosspk.net.

By registering a tosspk account, making a deposit, or otherwise using any part of our platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the tosspk Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and tosspk.

For the purposes of applicable data protection law, tosspk is the data controller in respect of personal data collected from players and website visitors. As data controller, tosspk determines the purposes and means by which your personal data is processed.

tosspk operates under an international gaming licence and processes personal data in accordance with the data protection obligations imposed by that licence and by the international data protection standards applicable to the jurisdictions in which it operates.

If you have any questions about how tosspk processes your personal data, or wish to exercise any of your data rights described in this Policy, please contact our Data Protection contact via the details provided in Section 14 of this Policy.

tosspk collects personal data from you through several channels and at various points during your relationship with us. The categories of personal data we collect are set out in the table below:

tosspk does not collect special categories of sensitive personal data (such as health, racial, religious, or political data) unless specifically required for responsible gaming assessments and with your explicit consent.

tosspk uses your personal data strictly for the purposes described below. We do not use your data in ways that are incompatible with the purposes for which it was originally collected without first notifying you and, where required, obtaining your consent.

• Account creation and management: To register your tosspk account, verify your identity (KYC), authenticate your login sessions, and maintain your account profile.
• Transaction processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records for each account.
• Service delivery: To provide access to all tosspk products including cricket betting, slot games, live casino, and promotional features.
• Regulatory compliance: To meet Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, and to co-operate with any lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the tosspk platform.
• Responsible gaming: To monitor gaming behaviour, implement player-requested limits and exclusions, and identify patterns that may indicate problem gambling in accordance with our Responsible Gaming Policy.
• Customer support: To respond to your queries, resolve disputes, and maintain records of your support interactions for quality assurance purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and news about tosspk products — only where you have given consent or where we have a legitimate interest in doing so, and always subject to your right to opt out.
• Platform improvement: To analyse usage patterns, conduct internal research, and improve the performance, design, and features of the tosspk platform.

tosspk processes your personal data on one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing required to enter into or perform the contract between you and tosspk — including account registration, deposit processing, withdrawal execution, and game delivery.
• Legal obligation: Processing required for tosspk to comply with applicable legal and regulatory obligations, including KYC verification, AML reporting, and responsible gaming requirements imposed under our gaming licence.
• Legitimate interests: Processing carried out for purposes of fraud detection, platform security, abuse prevention, internal analytics, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookies, where your prior, freely given consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of earlier processing.

tosspk uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, and understand how users interact with our website. The types of cookies we use are as follows:

• Strictly necessary cookies: Essential for the tosspk platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display options to provide a more personalised experience on repeat visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the tosspk website. This data helps us understand which features are most used and where we can improve the user experience.
• Marketing cookies: Used where you have given consent to track your engagement with tosspk promotional content and to deliver relevant bonus offers and communications. You may opt out of these at any time.

You can manage your cookie preferences through your browser settings at any time. Disabling certain categories of cookies may affect your experience on the tosspk platform. Please note that deleting cookies will reset any preferences you have previously saved.

tosspk does not sell your personal data. We may share your personal data with carefully selected third parties only in the following circumstances and only to the extent necessary for the relevant purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by financial services regulations.
• KYC and identity verification providers: Third-party verification services receive your identity documents and personal details to complete the required KYC checks. These providers are contractually bound to process your data only for this specific purpose.
• Fraud prevention and AML services: Specialist third-party services that assist tosspk in detecting fraudulent activity, suspicious transactions, and money laundering risks. Data shared is the minimum necessary for these assessments.
• Game content providers: Where tosspk offers games developed by third-party providers, those providers may receive technical data (such as session tokens and game round outcomes) necessary to deliver the game. They do not receive your full personal profile.
• Regulatory and law enforcement authorities: tosspk will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets involving tosspk, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

tosspk operates internationally and your personal data may be processed on servers or by service providers located outside Pakistan. Where personal data is transferred internationally, tosspk ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring recipient organisations to apply equivalent data protection standards to those applied by tosspk.
• Transfers only to countries or organisations that tosspk has assessed as providing an adequate level of data protection.
• Obtaining your explicit consent where required for a specific international transfer.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact our support team at the details provided in Section 14.

tosspk retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The general retention principles we apply are as follows:

• Active account data: Retained for the full duration of your account relationship with tosspk, plus an additional period after account closure as required by AML and gaming regulations — typically a minimum of five (5) years from account closure.
• KYC and identity documents: Retained for the period required by the regulatory framework applicable to tosspk's gaming licence, typically five (5) years from the end of the business relationship.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction to meet AML and financial record-keeping obligations.
• Support communications: Retained for up to three (3) years from the date of the interaction, to allow for dispute resolution and quality monitoring.
• Marketing preferences and consent records: Retained from the date of consent until withdrawn, plus a reasonable additional period to evidence compliance with consent obligations.

When personal data is no longer required, tosspk securely deletes or anonymises it in accordance with our internal data lifecycle management procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for analytical and reporting purposes.

As a user of the tosspk platform, you have the following rights in relation to the personal data we hold about you. You may exercise any of these rights by contacting our support team via live chat or at the email address provided in Section 14.

• Right of access: You have the right to request a copy of the personal data tosspk holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Note that this right is subject to tosspk's legal and regulatory obligations to retain certain data.
• Right to restriction: You may request that processing of your data be temporarily suspended — for example, while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on tosspk's legitimate interests, including the use of your data for direct marketing. Where you object to marketing, we will honour that request immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

tosspk takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the tosspk platform is encrypted using industry-standard SSL/TLS protocols, protecting your personal and financial data in transit.
• Encrypted data storage: Sensitive data held on tosspk servers, including payment details and identity documents, is stored in encrypted form.
• Access controls: Access to personal data is restricted to authorised tosspk personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Multi-factor authentication (MFA): Available for player accounts and mandatory for all internal administrative access to systems holding personal data.
• Regular security testing: tosspk conducts regular vulnerability assessments, penetration testing, and security audits of its platform and data infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, tosspk will notify the relevant regulatory authority without undue delay and will communicate the breach directly to affected players where required by law.

While tosspk implements robust security measures, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own account by using a strong, unique password and not sharing your login credentials with any other person.

The tosspk platform is strictly intended for adults aged 21 years and over. tosspk does not knowingly collect personal data from any person under the age of 21.

All registration applications are subject to age verification as part of the KYC process. Where tosspk identifies or is notified that personal data has been collected from a minor, we will take immediate steps to:

• Close the associated account.
• Void any wagers placed and return eligible deposits to the source payment method.
• Permanently delete all personal data associated with the minor from our systems as quickly as technically and legally permissible.

tosspk reserves the right to update this Privacy Policy at any time. We will publish the revised version on this page with a new effective date. For material changes that significantly affect how we use your personal data, we will notify registered players directly via email or in-platform notification prior to the changes taking effect.

The version of this Privacy Policy published at tosspk.net/privacy-policy at any given time is the version currently in force. We encourage you to review this Policy periodically to stay informed of how tosspk protects your data.

Your continued use of the tosspk platform following any update to this Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or tosspk's handling of your personal data, please reach out through any of the following channels:

• Live Chat: Available 24/7 via your tosspk account dashboard. This is the fastest way to reach our team for data-related queries.
• Email: [email protected] — please mark your email with the subject line "Privacy Request" and include your registered account username. Allow up to 48 hours for a response.

When submitting a data rights request, please include your full name, registered email address, and a description of the right you wish to exercise. tosspk may need to verify your identity before processing the request to ensure we do not disclose your data to an unauthorised party.