toto68 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how toto68 ("toto68", "we", "us", "our") collects, uses, stores, shares, and protects personal information obtained from users ("Player", "User", "you") of the toto68.asia website and associated services.

By registering an account or accessing any part of the toto68 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree with this Policy, you must not use the toto68 platform.

This Policy operates alongside the toto68 Terms & Conditions. In the event of conflict between the two documents on data-related matters, this Policy shall prevail.

2. Data We Collect

toto68 collects personal data through several channels: account registration, KYC verification submissions, platform activity, payment transactions, and communications with support. The categories of personal data collected include:

2.1 Registration Data. When you create a toto68 account, we collect your full name, date of birth, email address, and Pakistani mobile number. You will also create a username and password, which are stored in encrypted form.

2.2 Identity Verification Data. As part of KYC, toto68 collects government-issued identity documents including CNIC for Pakistani players, selfie photographs for biometric identity confirmation, and proof of address documentation where required.

2.3 Financial Data. toto68 records deposit and withdrawal transaction details including the payment method used (e.g. JazzCash, Easypaisa, bank transfer, USDT), transaction amounts in PKR, transaction timestamps, and transaction reference numbers. Full payment account numbers are not stored by toto68 — payment processing is handled through third-party processors.

2.4 Gaming Activity Data. We record all bets placed, games played, results, session durations, and responsible gaming tool activations associated with your toto68 account. This data is used for account management, regulatory compliance, and responsible gaming monitoring.

2.5 Technical Data. When you access toto68, we automatically collect your IP address, browser type and version, device type, operating system, referring URLs, and session duration. This data is collected through server logs and analytics tools.

2.6 Communication Data. If you contact toto68 support, we retain records of your communications including live chat transcripts and email correspondence. This data is used to manage your enquiry and improve service quality.

3. How We Use Your Data

toto68 uses your personal data for the following purposes:

• To create and manage your toto68 account;
• To verify your identity and age as required by KYC obligations;
• To process deposits and withdrawals in PKR via your chosen payment methods;
• To provide access to sports betting, live casino, slot games, and other platform features;
• To detect and prevent fraud, money laundering, match-fixing, and other prohibited conduct;
• To enforce the toto68 Terms & Conditions and responsible gaming policies;
• To send account-related communications including transaction confirmations, security alerts, and policy updates;
• To respond to support enquiries and complaints;
• To improve the toto68 platform based on aggregated usage analytics;
• To comply with applicable legal, regulatory, and licensing obligations.

toto68 does not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where required by anti-fraud or anti-money laundering systems, in which case you may request a human review of any adverse decision.

4. Legal Basis for Processing

toto68 processes your personal data on the following legal grounds:

4.1 Contract Performance. Processing necessary to provide the services you have registered for, including account management, game access, and payment processing.

4.2 Legal Obligation. Processing required to comply with anti-money laundering obligations, age verification requirements, KYC regulations, and other applicable legal duties.

4.3 Legitimate Interests. Processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests do not override your rights.

4.4 Consent. Where we process data for purposes beyond those above — such as optional marketing communications — we will request your explicit consent and will not proceed without it. You may withdraw consent at any time.

5. KYC and Identity Verification

toto68 operates a mandatory KYC process for all accounts that request withdrawals. For Pakistani players, this involves submission of CNIC documentation and may include selfie verification for biometric identity confirmation.

KYC data is processed solely for identity verification, age confirmation, and compliance with applicable anti-money laundering obligations. toto68 does not use CNIC data for any commercial purpose unrelated to these obligations.

Identity documents submitted to toto68 are stored securely and are retained for the period required by applicable regulatory obligations following account closure. After the mandatory retention period, documents are permanently deleted from our systems.

toto68 may engage third-party identity verification service providers to assist with KYC processing. Such providers are contractually bound to process data solely for the purposes specified by toto68 and to maintain equivalent data security standards.

6. Cookies and Tracking Technologies

toto68 uses cookies and similar tracking technologies to operate the platform and to understand how players interact with it. The categories of cookies used are:

• Essential Cookies: Required for core platform functionality — session management, login state, and security. These cannot be disabled without impairing platform use.
• Analytics Cookies: Collect aggregated, anonymised data about platform usage patterns to help us improve the toto68 experience. No individual player is identifiable from analytics data.
• Preference Cookies: Store your platform preferences (e.g. display settings) between sessions.

You may manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect platform functionality. toto68 does not use third-party advertising cookies or cross-site tracking cookies.

7. Data Sharing and Disclosure

toto68 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data may be shared in the following circumstances only:

• Payment Processors: Data necessary to process your deposit or withdrawal is shared with the relevant payment service provider (e.g. JazzCash, Easypaisa, bank partners). These providers process data under their own privacy policies and applicable financial regulations.
• KYC Providers: Identity verification data is shared with third-party KYC and anti-money laundering service providers solely for compliance purposes.
• Regulatory Authorities: toto68 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law or valid legal process.
• Group Entities: Data may be shared with corporate affiliates of toto68 where necessary for operational or compliance purposes, subject to equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition, or sale of toto68 or its assets, player data may be transferred as part of the transaction, subject to notice to affected players.

Any third party receiving data from toto68 is required to maintain confidentiality and to use data only for the purposes for which it was shared.

8. Data Retention

toto68 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. The general retention periods applied are:

• Account registration data: Duration of account plus a minimum of five years post-closure;
• KYC and identity documents: Duration of account plus a minimum of five years post-closure, or longer if required by applicable anti-money laundering regulations;
• Transaction records: Minimum of five years from the date of transaction;
• Support communications: Three years from the date of the communication;
• Technical / server log data: Typically 12 months from collection.

Following the applicable retention period, personal data is securely and permanently deleted from toto68 systems. Where deletion is not technically feasible within the retention period (e.g. backup systems), data is quarantined from active use until deletion is completed.

9. Data Security

toto68 implements technical and organisational security measures appropriate to the risk of processing, including:

• 256-bit SSL/TLS encryption for all data in transit between your browser and toto68 servers;
• Encryption of sensitive data at rest, including passwords and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication requirements for account access from unrecognised devices;
• Regular security assessments and monitoring of platform infrastructure;
• Segregation of player funds from operational accounts.

No security measure is infallible. In the unlikely event of a data breach that poses a risk to your rights and freedoms, toto68 will notify affected players and, where required, relevant regulatory authorities, within the timeframes specified by applicable law.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by toto68:

• Right of Access: You may request a copy of the personal data toto68 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact toto68 via live chat or at the email address listed in Section 14. We will respond within a reasonable period and in accordance with applicable legal requirements. We may need to verify your identity before processing your request.

11. Third-Party Links

The toto68 platform does not include links to third-party websites. If toto68's payment providers or other service partners operate separate web properties to which you are directed during a transaction, toto68 is not responsible for the privacy practices of those separate properties. You should review their privacy policies independently before submitting personal data.

12. Children and Minors

toto68 is strictly an adult platform. We do not knowingly collect personal data from persons under the age of 18. Account registration includes a mandatory age declaration and is subject to KYC age verification. If toto68 discovers that a minor has accessed the platform and provided personal data, that account will be immediately closed and the data will be deleted, subject to any legal retention obligation arising from the detected access event.

If you believe a minor has registered a toto68 account, please contact us immediately via the support channels listed in Section 14.

13. Changes to This Policy

toto68 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the platform or registered email address prior to taking effect. The "Effective Date" at the top of this page will be updated to reflect the date of the most recent revision. Continued use of toto68 following notice of an update constitutes acceptance of the revised Policy.

14. Contact

For privacy-related enquiries, data subject rights requests, or to report a potential data protection concern, please contact the toto68 Data Protection team via:

• Live chat on the toto68 platform (available 24/7);
• Email: [email protected] (plain text — not a clickable link).