Privacy Policy for Tojay APK

Tojay APK ("we", "us", "the platform", "tojayapk.net") is committed to protecting the personal information of every player who visits or registers on our platform. This Privacy Policy explains in plain, straightforward Pakistan English exactly what data we collect, why we collect it and how it is handled from the moment you land on our site to the point you close your account.

By accessing tojayapk.net, registering an account, making a deposit or using any feature of the platform — including the Tojay APK mobile app — you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here.

This policy applies to all services offered through tojayapk.net including Casino, Slots, Live Casino, Sports, the App and all related support services. Where a specific feature has its own supplementary privacy notice, that notice will be clearly displayed within that feature and should be read alongside this policy.

We collect only the information that is genuinely necessary to operate your account, process payments and deliver a safe gaming experience. The categories of personal data we may collect include:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs or health information unless you voluntarily disclose such information during a support interaction.

Tojay APK collects your personal information through several channels depending on how you interact with the platform:

• Direct registration — when you fill in the sign-up form on tojayapk.net or through the Tojay APK mobile app, you provide your name, email, mobile number and date of birth directly to us.
• Account activity — every time you deposit funds, place a bet, claim a bonus or request a withdrawal, the details of that transaction are automatically recorded in your account history.
• KYC verification — when you submit identity documents such as your CNIC or proof of address, those documents and the information on them are stored securely as part of your verified account profile.
• Technical data — our servers automatically log certain technical information each time you visit the site or use the app, including your IP address, browser type and device identifiers.
• Cookies and similar technologies — we use cookies and local storage to remember your session preferences, maintain your login state and analyse how players use the platform. More detail is provided in the Cookies section below.
• Customer support interactions — when you contact our support team by email or live chat, we retain records of those conversations to help resolve your query and improve our service.
• Third-party payment processors — when a payment is made through JazzCash, Easypaisa, Raast or a bank transfer, the payment provider shares a transaction reference and status confirmation with us. We do not receive or store your full payment credentials directly.

Every piece of data we collect serves a specific, legitimate purpose. We do not use your information in ways that are unnecessary or unrelated to providing you with a safe and enjoyable gaming experience on Tojay APK. The main purposes for which we use your data are:

• Account creation and management — to set up and maintain your player account, verify your identity and ensure only one account exists per player.
• Processing financial transactions — to handle deposits, withdrawals and bonus credits accurately and securely in PKR through supported payment methods.
• Identity and age verification — to confirm that you are at least 18 years old and that the details you have provided are genuine before your account is fully activated.
• Fraud prevention and platform security — to detect and prevent fraudulent activity, money laundering, account takeovers, bonus abuse and other prohibited conduct.
• Responsible gaming monitoring — to track gaming activity patterns that may indicate problem gambling behaviour and to apply any limits, cool-off periods or self-exclusion requests you have made.
• Customer support — to investigate and resolve account queries, payment disputes and technical issues that you report to our support team.
• Platform improvement — to analyse aggregated usage data so we can improve game performance, navigation, the app experience and the overall quality of service for Pakistan players.
• Marketing communications — to send you promotional offers, bonus notifications and platform updates if you have opted in to receive them. You can opt out at any time through your account settings.
• Legal and regulatory compliance — to maintain records as required and to respond appropriately to any lawful requests from authorities or financial institutions.

Tojay APK does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We only share your information in the limited circumstances described below, and only with parties who are required to handle it with the same standard of care we apply ourselves.

• Payment service providers — we share the minimum necessary transaction details with JazzCash, Easypaisa, Raast, bank transfer processors and card networks in order to execute your deposits and withdrawals.
• Identity verification services — where we use a third-party KYC provider to verify your CNIC or other identity documents, your submitted data is shared with that provider solely for the purpose of verification.
• Game software providers — game providers who supply titles to the Tojay APK platform may receive anonymised or pseudonymised game session data for technical and audit purposes. They do not receive your full personal profile.
• IT and platform infrastructure partners — our hosting, security monitoring and analytics partners may process technical data on our behalf under strict data processing agreements.
• Legal authorities — we will disclose your personal data if required to do so by a lawful order, court direction or formal request from a relevant financial institution or regulatory body. We will only disclose what is specifically required and will, where legally permitted, notify you of such a request.

All third parties with whom we share personal data are contractually required to keep it confidential, use it only for the specified purpose and maintain appropriate security measures.

All financial transactions on Tojay APK are processed in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, debit card or credit card, the actual processing of your payment is handled by the respective payment gateway — not stored or processed directly on our servers.

We retain a record of transaction amounts, dates, reference numbers and the payment method type associated with each transaction in your account history. This is necessary for:

• Resolving payment disputes or discrepancies.
• Processing withdrawal requests back to your original payment method.
• Fraud and anti-money-laundering checks.
• Maintaining accurate financial records for your account.

Tojay APK uses cookies — small text files stored on your device — and similar local storage technologies to make the platform work properly and to understand how players use the site. Here is a straightforward breakdown of the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in or using the cashier. Our platform does not respond to browser "Do Not Track" signals at this time, but you can control cookie behaviour manually through your browser preferences.

Protecting your personal data is a priority for Tojay APK. We implement multiple layers of technical and organisational security measures to safeguard your information against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• SSL/TLS encryption — all data exchanged between your browser or app and our servers is encrypted in transit using industry-standard SSL/TLS certificates. The padlock icon in your browser confirms this connection is secure.
• Encrypted data storage — sensitive personal and financial records stored on our servers are encrypted at rest. Passwords are stored using strong one-way hashing and are never stored in plain text.
• Access controls — access to personal data within our systems is restricted to staff who genuinely need it to carry out their role. Access logs are maintained and reviewed regularly.
• Fraud monitoring — automated systems continuously monitor accounts for suspicious login attempts, unusual betting patterns and payment anomalies.
• Regular security reviews — our platform and infrastructure undergo periodic security assessments to identify and address potential vulnerabilities before they can be exploited.

Despite these measures, no system connected to the internet can be guaranteed to be completely impenetrable. You play an important role in keeping your account secure by using a strong, unique password and never sharing your login credentials with anyone else.

We retain your personal data only for as long as is necessary to fulfil the purposes described in this policy. The specific retention period depends on the type of data and the reason it was collected:

• Active account data — kept for the full duration of your account's active status plus a standard period after account closure to handle any outstanding queries or disputes.
• Financial transaction records — retained for a minimum of five years from the date of each transaction for financial record-keeping purposes.
• KYC / identity verification documents — kept for as long as your account is active and for a period after closure as required for anti-money-laundering purposes.
• Support communications — customer service records are retained for up to two years from the date of the interaction, unless a longer period is needed to resolve an ongoing dispute.
• Technical and usage data — typically retained in anonymised or aggregated form after 12 months for long-term analytics purposes.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

As a player on Tojay APK you have the following rights in relation to your personal data. To exercise any of these rights, contact us using the details in the Contact section below.

We will respond to all valid data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure we are responding to the correct person.

Tojay APK is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. During registration, all players are required to confirm that they are 18 or older, and we conduct age verification checks before a player's account is fully activated.

If we discover or are notified that a person under the age of 18 has provided us with personal data, we will take immediate steps to close the account, void any associated activity and securely delete the data from our systems.

Tojay APK may update this Privacy Policy from time to time to reflect changes in how we operate, improvements to our platform or changes in applicable data protection standards. When we make material changes, we will update the "Last Updated" date at the top of this page.

For significant changes that affect your rights or how we handle your data in a meaningful way, we will notify you by email to your registered address or by displaying a prominent notice within your account on your next login. Continued use of the platform after the updated policy takes effect constitutes your acceptance of the revised version.

We recommend bookmarking this page and reviewing it periodically so you are always aware of how your data is being handled on Tojay APK.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a concern related to your personal information on Tojay APK, please get in touch with our team:

Email: [email protected]

When contacting us about a data-related request, please include your registered email address and account username so we can locate your account and respond to you quickly. We aim to respond to all privacy-related enquiries within a reasonable timeframe.

For general questions about your account, bonuses or withdrawals, you can also check our FAQ page which covers the most common topics raised by Pakistan players.