At toto68, protecting the personal data of every Pakistani player who uses our platform is a fundamental obligation — not an afterthought. This Privacy Policy explains in plain, direct terms exactly what information toto68 collects, why we collect it, how it is stored and protected, and what rights you hold over your own data. By using toto68.biz and its associated services, you confirm that you have read and understood this policy.
Six core commitments that define how toto68 handles the personal information of every registered Pakistani player. Full legal detail follows in the policy sections below.
All personal data held by toto68 is stored on servers protected by 256-bit SSL encryption. Access to player data is restricted to authorised personnel only and is governed by strict internal access control policies.
toto68 does not sell, rent, or trade your personal data to third-party marketers or advertising networks under any circumstances. Your information is used solely for the purposes described in this Privacy Policy.
You have the right to request a copy of all personal data toto68 holds about you, to correct inaccurate information, and to request deletion of your data subject to regulatory retention requirements.
toto68 collects only the data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with its obligations under the International Gaming Licence.
toto68 uses cookies and similar tracking technologies only for platform functionality, session management, and anonymised analytics. You can manage cookie preferences from your browser settings at any time.
Identity documents submitted during KYC verification — including Pakistani CNIC and passport copies — are stored in an isolated, access-restricted environment and are never shared with unauthorised parties.
This Privacy Policy applies to all personal data processed by toto68 in connection with the operation of the online casino and sports betting platform available at toto68.biz, including all sub-pages, account management tools, cashier functions, mobile interfaces, and customer support channels.
In this policy, the following terms carry the meanings defined below:
This policy is to be read in conjunction with the toto68 Terms and Conditions and the Responsible Gaming Policy. Where this Privacy Policy conflicts with another toto68 document on a matter of data protection, this policy shall prevail.
toto68 acts as the data controller in respect of all personal data collected from players through the toto68.biz platform. As data controller, toto68 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.
All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the toto68 data team via email at [email protected] with the subject line "DATA PRIVACY REQUEST." Requests will be acknowledged within 48 hours and processed within 30 calendar days.
Where toto68 engages third-party processors — such as payment service providers, identity verification services, or platform analytics providers — those parties act as data processors under contractual obligations with toto68 and do not independently control your data.
toto68 collects the following categories of personal data in the course of operating the platform and providing services to Pakistani players:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, CNIC or passport number | At registration and during KYC verification |
| Contact Data | Email address, mobile number, residential address (city, province) | At registration |
| Financial Data | JazzCash / EasyPaisa account references, HBL / UBL / Meezan Bank account details (masked), transaction history | When making deposits or withdrawals |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatically on each platform visit |
| Usage Data | Games played, bet history, session duration, pages visited, features used | Continuously during platform use |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When contacting support or submitting feedback |
| Responsible Gaming Data | Deposit limits set, cool-off periods activated, self-exclusion requests | When using responsible gaming tools |
toto68 does not collect sensitive personal data such as biometric data, health records, or religious or political affiliations. Where identity documents contain information beyond what is strictly necessary for KYC purposes, toto68 will process only the relevant fields.
toto68 uses the personal data it collects for the following purposes:
toto68 processes your personal data on the following legal grounds, depending on the nature and purpose of the processing activity:
Where toto68 relies on legitimate interests as a legal basis, a balancing assessment is conducted to confirm that the processing is necessary and proportionate, and that your fundamental rights are not disproportionately affected.
toto68 processes payment data in order to facilitate deposits and withdrawals in PKR through approved Pakistani payment channels including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Payment processing is handled in partnership with certified payment service providers who operate under contractual data protection obligations with toto68.
Full payment card numbers, mobile wallet PINs, and online banking passwords are never transmitted to or stored by toto68. Payment authentication takes place directly within the secure environment of the respective payment provider. toto68 retains only a tokenised or masked reference to the payment method used, for the purpose of processing withdrawals to the correct destination.
Transaction records — including deposit amounts, withdrawal requests, and the associated payment method references — are retained for a minimum of five (5) years from the date of each transaction in order to satisfy toto68's obligations under anti-money laundering regulations applicable to internationally licensed gaming operators.
In the event that toto68 identifies a transaction that gives rise to a reasonable suspicion of money laundering or financial crime, it is legally obligated to report the matter to the relevant authority. Such a report may be made without notifying the account holder concerned, where the law prohibits such notification (tipping-off restrictions).
Identity verification is a mandatory requirement for all toto68 players before the first withdrawal is processed, and at any subsequent point where toto68 determines that enhanced due diligence is required. The KYC process requires players to submit a clear copy of a valid government-issued identity document — typically a Pakistani CNIC or passport — along with a recent proof of address and, in some cases, proof of the source of funds.
Identity documents submitted for KYC purposes are stored in a dedicated, access-restricted document vault that is segregated from the main toto68 platform database. Access to the KYC vault is limited to trained compliance staff and is subject to audit logging. Documents are not accessible to customer support agents or marketing personnel.
KYC documentation is retained for a minimum of five (5) years following account closure in order to comply with the record-keeping obligations of toto68's International Gaming Licence. Upon expiry of the retention period, documents are securely destroyed in accordance with toto68's data deletion protocols.
toto68 uses the identity information submitted during KYC exclusively for the purposes of age and identity verification, fraud prevention, and regulatory compliance. This information is not used for marketing purposes and is not shared with third parties other than the licensed identity verification service engaged by toto68 to process document checks.
toto68.biz uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform and improve the player experience. The following categories of cookies are used:
toto68 does not use third-party advertising or retargeting cookies. You will not be tracked across other websites for the purpose of serving toto68 advertisements based on your platform activity.
You can manage or delete cookies at any time through your browser's cookie management settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your toto68 account. For detailed instructions on managing cookies in popular browsers, refer to the help documentation of your specific browser.
toto68 does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:
All third-party processors engaged by toto68 are bound by contractual obligations that require them to process personal data only on toto68's documented instructions, to implement appropriate security measures, and to delete or return all personal data upon termination of the service relationship.
toto68 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply as a general guide:
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with toto68's internal data lifecycle management procedures.
toto68 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:
In the event of a personal data breach that poses a risk to your rights and freedoms, toto68 will notify affected players as soon as reasonably practicable and will take immediate steps to contain and remediate the breach. Notifications will be sent to the email address registered on your account.
While toto68 takes all reasonable precautions, no internet-based system can be guaranteed to be entirely secure. Players are encouraged to use strong, unique passwords for their toto68 accounts and to enable two-factor authentication from the account security settings.
As a player on the toto68 platform, you hold the following rights in relation to your personal data. These rights can be exercised by submitting a written request to [email protected] with the subject line "DATA PRIVACY REQUEST":
toto68 will respond to all data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reasons for it.
toto68 uses gameplay and account activity data to support the responsible gaming obligations it holds under its International Gaming Licence. This includes monitoring for behavioural patterns that may indicate the development of problem gambling — such as rapid increase in deposit frequency, significant session duration, or repeated self-exclusion reversals.
Where such patterns are identified, toto68 may proactively contact the player concerned with information about responsible gaming tools and support resources. This contact is carried out in the genuine interests of player welfare and does not constitute unsolicited marketing.
Data relating to responsible gaming measures — including deposit limits, cool-off activations, and self-exclusion requests — is flagged in the account record and is used to enforce the applicable restriction. Self-exclusion data is retained for the duration of the exclusion period plus five (5) years after account closure, in order to prevent re-registration by excluded players.
Players who are 21+ and wish to use toto68's self-exclusion or cool-off tools can access them from the account dashboard or by contacting [email protected] directly. For further information on responsible gaming, please visit our Responsible Gaming page.
The toto68 platform is strictly for individuals who are 21 years of age or older. toto68 does not knowingly collect or process personal data relating to individuals under the age of 21. Age verification is a mandatory step in the registration process, and identity documents are checked during KYC to confirm that the player meets the minimum age requirement.
If toto68 becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be immediately suspended, all data will be deleted except where retention is required by law, and any deposited funds will be returned to the original payment source.
If you have reason to believe that a person under 21 has registered on the toto68 platform, please notify us immediately at [email protected].
toto68 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or the services offered on the platform. When material changes are made, registered players will be notified via the email address on file at least 7 days before the revised policy takes effect, except where an urgent change is required for legal or security reasons.
The current version of this Privacy Policy is always accessible at toto68.biz/privacy-policy and is marked with its effective date. Continued use of the toto68 platform after the effective date of any revision constitutes your acceptance of the updated policy.
If you do not agree with a proposed amendment, you may request account closure before the amendment takes effect by contacting [email protected]. Any remaining real money balance will be returned in accordance with the account closure procedure set out in the toto68 Terms and Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a complaint about how toto68 has handled your personal data, please contact us using the details below:
Your data is protected, your identity is secure, and your PKR balance is in safe hands. Join players from Karachi, Lahore, Islamabad, and across Pakistan on the platform that takes privacy as seriously as your winnings. 21+ only.
Login to toto68 Explore the Casino