This Privacy Policy explains how toto68 collects, processes, stores and protects your personal information when you use the Platform. We are committed to handling your data with care, transparency and in accordance with applicable data protection standards. Please read this document carefully before registering an account or submitting any personal information.
This Privacy Policy (hereinafter "Policy") is issued by toto68 (hereinafter "toto68", "we", "us" or "the Platform") and governs the collection, use, storage, disclosure and protection of personal data submitted by users (hereinafter "you", "User" or "Player") when accessing or using the toto68 platform at https://toto68.cam.
toto68 recognises the importance of privacy to its users, including those accessing the Platform from Pakistan and other jurisdictions. We are committed to processing personal data responsibly, proportionately and in a manner consistent with applicable data protection legislation in the jurisdiction in which toto68 operates.
By registering an account, making a deposit, placing a wager or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Platform.
The following terms, when used in this Policy, carry the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, IP address, financial data and device identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, disclosure, alteration, retrieval, erasure or destruction. |
| Data Controller | The entity that determines the purposes and means of processing personal data — in this context, toto68. |
| Data Processor | A third party that processes personal data on behalf of toto68 under a data processing agreement. |
| User / Data Subject | The natural person whose personal data is being processed — in this context, the registered user of the toto68 Platform. |
| Consent | A freely given, specific, informed and unambiguous indication of agreement by the data subject to the processing of their personal data. |
| KYC Data | Identity verification documents and related data submitted as part of the Know Your Customer process, including CNIC or passport copies, selfies and proof of address. |
| Cookies | Small text files stored on a user's device by a web browser for the purpose of tracking session information, user preferences and analytics data. |
toto68 collects personal data that is necessary for the operation of the Platform, compliance with applicable legal and regulatory obligations, and the delivery of services to users. The categories of personal data we may collect include:
toto68 collects personal data through the following mechanisms:
toto68 processes personal data only for specified, explicit and legitimate purposes. The table below summarises the primary purposes for which we process personal data:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining and administering your toto68 account, including authentication, password resets and account communications. |
| Identity Verification | Confirming your identity, age and eligibility to use the Platform in compliance with KYC and AML requirements of the applicable licensing jurisdiction. |
| Payment Processing | Facilitating deposits and withdrawals, verifying payment method ownership and maintaining transaction records. |
| Service Delivery | Operating betting markets, casino games, promotional features and responsible gambling tools accessible through your account. |
| Fraud Prevention & Security | Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting and other prohibited conduct. |
| Legal & Regulatory Compliance | Meeting obligations under the licensing framework governing toto68's operations, including AML, data retention and reporting requirements. |
| Customer Support | Responding to enquiries, complaints and support requests submitted via email or live chat. |
| Responsible Gambling | Monitoring account activity for indicators of problem gambling and administering responsible gambling controls such as deposit limits and self-exclusion. |
| Marketing Communications | Sending promotional communications where you have given explicit consent and have not subsequently opted out. You may withdraw consent at any time. |
| Platform Improvement | Analysing anonymised and aggregated usage data to improve Platform performance, user experience and game catalogue. |
toto68 relies on one or more of the following legal bases for processing personal data, depending on the purpose and category of data involved:
toto68 does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes.
We may share personal data with third-party service providers acting as Data Processors on our behalf under appropriate data processing agreements. These include:
All Data Processors are contractually obligated to process personal data only on our documented instructions, to implement appropriate security measures, and not to use the data for any purpose other than those specified.
We may disclose personal data to competent authorities, regulators, law enforcement agencies or courts where we are legally required to do so under applicable law, or where disclosure is necessary to protect the rights, property or safety of toto68, its users or the public.
In the event of a merger, acquisition, restructuring or sale of assets involving toto68, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.
toto68 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. Retention periods are determined with reference to:
KYC documentation and transaction records are typically subject to extended retention periods under AML frameworks. Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.
toto68 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:
While toto68 takes data security seriously, no online system is entirely immune from risk. In the event of a data breach that presents a significant risk to your rights and freedoms, we will take steps to notify affected users and relevant authorities in accordance with applicable requirements.
The toto68 Platform uses cookies and similar tracking technologies to support platform functionality, session management and analytics. The following categories of cookies may be deployed:
You may configure your browser to refuse cookies or to alert you when cookies are being sent. Disabling essential cookies will impair your ability to use the Platform, including account login and gameplay. Non-essential cookie preferences can typically be managed through your browser settings or any cookie consent mechanism presented on the Platform.
Subject to applicable data protection law and the limitations prescribed by legal and regulatory retention obligations, you have the following rights in relation to your personal data held by toto68:
You have the right to request confirmation of whether toto68 processes your personal data and to obtain a copy of that data, together with information about the purposes and legal basis for processing.
You have the right to request correction of inaccurate personal data held about you. Where data is incomplete, you may request that it be completed.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations including AML requirements.
You may request that processing of your personal data be restricted in certain circumstances, such as while the accuracy of data is contested or while an objection is being assessed.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, commonly used machine-readable format.
You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing immediately.
To exercise any of the above rights, please submit a written request to toto68 via the support email address set out in Section 15 below. We will acknowledge your request within a reasonable timeframe and respond substantively within the period required by applicable law, subject to identity verification requirements.
Please note that certain rights may be limited where processing is necessary for legal compliance, fraud prevention or regulatory purposes.
The toto68 Platform is strictly intended for adults aged 18 or above — or the higher minimum age required by the operator's licensing jurisdiction or applicable local law. toto68 does not knowingly collect, process or retain personal data from individuals below the applicable minimum age.
Age verification procedures are implemented as part of the KYC process. Where toto68 discovers or reasonably suspects that an account has been registered by a minor, the account will be suspended immediately, any associated winnings will be voided and steps will be taken to return deposits, subject to the applicable Terms and Conditions.
If you believe that a minor has submitted personal data to toto68, please contact us immediately using the contact details in Section 15. We will take prompt action to address the matter.
As an online platform with infrastructure, service providers and personnel potentially located in multiple jurisdictions, toto68 may transfer personal data across international borders in the course of normal business operations. Such transfers include data shared with KYC verification providers, cloud hosting services and payment processors that may be based outside Pakistan.
Where personal data is transferred to jurisdictions that may not offer the same level of data protection as the jurisdiction in which you are located, toto68 will implement appropriate safeguards to ensure an equivalent level of protection — such as contractual data protection obligations imposed on recipients.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than your country of residence.
toto68 reserves the right to amend, update or replace this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the changes.
Where material changes are made that significantly affect the way we process your personal data, we will endeavour to notify you in advance through the Platform or by email to your registered address. We encourage you to review this Policy periodically to stay informed of how toto68 handles your personal data.
If you have any questions, concerns or requests regarding this Privacy Policy, the processing of your personal data, or the exercise of your data subject rights, please contact the toto68 Data team using the following contact details:
Support / Data Enquiries Email (plain text — not a clickable link):
[email protected]
Live Chat: Available via the on-site chat widget during operator-stated hours. For data subject rights requests, written email contact is recommended to ensure a clear paper trail.
We will acknowledge data subject rights requests promptly and respond within the timeframe required by applicable law. We may need to verify your identity before processing a rights request to prevent unauthorised access to your personal data.
For concerns relating to responsible gambling, self-exclusion or account limit tools, please visit the Responsible Gambling page.
Six key data protection principles that guide how toto68 handles your personal information.
Your personal information is never sold, rented or traded to third parties for their own commercial purposes. Data sharing is limited to service providers operating under strict contractual obligations.
All data transmitted between your browser and toto68 is encrypted using industry-standard TLS/SSL protocols. KYC documents must only be uploaded through our secure HTTPS verification portal.
You may request access to, correction of, or deletion of your personal data at any time. Submit a written request to our support email. We will respond within the legally required timeframe.
We collect only the data we need and use it only for the purposes disclosed in this Policy — account management, KYC, fraud prevention, payment processing and service delivery.
Data is retained only for as long as legally required or operationally necessary. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.
Marketing communications are only sent where you have given explicit consent. You can withdraw consent and opt out at any time without affecting your account access or any other service.
Now that you have reviewed how toto68 handles your personal data, you can use the Platform with confidence. Visit the homepage to explore available markets, or read our Terms and Conditions for the full account and wagering rules.
Adults 18+ only, or the higher minimum required by the operator/license jurisdiction. Local laws may restrict gambling in Pakistan. Please gamble responsibly.