At toto21, the privacy of every player — whether based in Karachi, Lahore, Faisalabad, Islamabad, or anywhere else across Pakistan — is taken seriously. This Privacy Policy explains precisely what personal data toto21 collects, how it is used, who it is shared with, how long it is retained, and what rights you have in relation to your own information. We have written this in plain, readable English so every toto21 player can understand their privacy position clearly — without needing a legal degree.
Our Approach
These six principles guide how toto21 collects and handles your personal data. They are a summary — the full legally binding policy is set out in the numbered clauses below.
toto21 collects personal data only for specific, explicit, and legitimate purposes. We do not collect data speculatively or for undefined future use. Every category of data toto21 holds about you exists for a defined reason — account management, KYC, AML compliance, customer support, or (with your consent) direct marketing.
toto21 does not collect more personal data than is necessary for the purposes for which it is processed. If a piece of information about you is not needed to operate your toto21 account, comply with regulatory requirements, or provide the service you are using, toto21 does not ask for it.
toto21 takes reasonable steps to ensure that the personal data it holds is accurate and kept up to date. If you become aware that information toto21 holds about you is inaccurate or outdated, you have the right to request that it be corrected — and toto21 will act on that request promptly.
toto21 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. This includes 256-bit SSL encryption on all toto21 login sessions, encrypted data storage, access controls, and regular security reviews conducted as part of our licensing obligations.
toto21 is open about how it uses your personal data. This Privacy Policy is written in accessible English and published openly on the toto21 platform. toto21 does not use your data in ways that would surprise you or that you would not reasonably expect given the nature of an internationally licensed online gaming service operating for Pakistani players.
toto21 recognises and respects the rights you have in relation to your personal data — including the right to access, correct, delete, and restrict processing of your information. These rights are described in detail in Section 9 of this policy and can be exercised by contacting toto21 support at any time.
This Privacy Policy ("Policy") is published by toto21 ("toto21," "we," "us," or "our"), the operator of the online gaming platform available at toto21.lol. This Policy describes how toto21 collects, uses, stores, shares, and protects the personal data of individuals who register accounts, visit the toto21 website, use any toto21 gaming product, or interact with toto21's customer support team.
This Policy applies to all toto21 players and website visitors globally, including English-speaking Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and all other cities. By registering a toto21 account or using the toto21 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside toto21's Terms & Conditions and Responsible Gaming Policy. In the event of any inconsistency between this Policy and any other toto21 document, this Privacy Policy shall govern in relation to personal data matters.
Regulatory Context: toto21 operates under an internationally recognised gaming licence. Our privacy and data protection practices are governed by the requirements of that licensing authority, which mandates specific data collection, retention, and security standards as conditions of our licence. Some data processing activities described in this Policy are carried out as a direct requirement of our licensing obligations and cannot be refused without affecting your ability to use the toto21 platform.
For the purposes of applicable data protection law, toto21 is the data controller in respect of the personal data it collects from players and website visitors. As data controller, toto21 determines the purposes and means by which personal data is processed.
Where toto21 engages third-party service providers to process personal data on its behalf (for example, payment processors, game providers, identity verification services, or customer support platforms), those third parties act as data processors under toto21's instructions and are contractually bound to process data only in accordance with toto21's directions and applicable data protection requirements.
toto21's contact details for all privacy-related enquiries are set out in Section 15 of this Policy.
toto21 collects the following categories of personal data from players and website visitors. Not all categories apply to every individual — the data collected depends on how you interact with toto21 and which products or services you use.
| Data Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number, nationality | Registration; KYC verification |
| Contact Data | Email address, Pakistani mobile number, residential address | Registration; account updates |
| Financial Data | JazzCash / EasyPaisa account numbers, HBL / UBL / Meezan Bank account details, deposit and withdrawal amounts in PKR, transaction history | Deposit / withdrawal processing |
| Gaming Activity Data | Betting history, game sessions, wagering amounts, winnings, bonus usage, live casino participation | Throughout platform use |
| Technical Data | IP address, device type, browser type, operating system, session duration, cookies, referring URL | Automatically on site visit |
| KYC Documentation | CNIC images (front and back), passport images, selfie photographs, proof of address documents | KYC verification process |
| Communications Data | Live chat transcripts, email correspondence, support tickets, responsible gaming tool settings | Customer support interactions |
toto21 does not collect sensitive personal data (such as health information, religious beliefs, or biometric data) except where this is strictly necessary for responsible gaming compliance, in which case it is processed only with explicit consent or as required by our licensing authority.
toto21 collects personal data through the following means:
toto21 uses the personal data it collects for the following purposes:
toto21 processes your personal data on one or more of the following legal bases:
toto21 does not sell your personal data to third parties for their own commercial purposes. toto21 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
International Transfers: Some of toto21's service providers are located outside Pakistan. Where personal data is transferred internationally, toto21 takes appropriate steps to ensure that such transfers are conducted with adequate safeguards in place, consistent with the requirements of toto21's licensing authority.
toto21 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by toto21's licensing authority and applicable law. The following retention principles apply:
When personal data is no longer required and the applicable retention period has expired, toto21 will securely delete or anonymise the data in a manner that prevents its reconstruction or re-identification.
toto21 recognises the following rights in relation to your personal data. To exercise any of these rights, please contact toto21 via the channels described in Section 15. toto21 will respond to valid requests within 30 days, or within such extended period as may be necessary where the request is complex.
toto21 uses cookies and similar tracking technologies on the toto21 platform. Cookies are small data files placed on your device that help toto21 provide a functional, secure, and personalised gaming experience. The following categories of cookies are used on toto21:
You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use core toto21 platform features, including the toto21 login process.
toto21 may send marketing communications — including promotional offers, bonus notifications, and platform updates — to players who have explicitly opted in to receive such communications during registration or through their toto21 account settings. toto21 will not send unsolicited marketing emails or SMS messages to players who have not provided explicit consent.
Opting Out: You can withdraw consent for marketing communications at any time by: (a) using the unsubscribe link included in any toto21 marketing email; (b) updating your communication preferences in your toto21 account settings; or (c) contacting toto21 support via live chat or email and requesting removal from marketing lists. Opt-out requests are processed within 5 business days.
Withdrawing consent for marketing communications does not affect your ability to use the toto21 platform, and you will continue to receive transactional communications related to your account (such as deposit confirmations, withdrawal notifications, and account security alerts).
toto21 does not knowingly collect or process the personal data of individuals under the age of 21. The toto21 platform is strictly for adults aged 21 and over. toto21's KYC verification process is specifically designed to detect and reject registrations from underage individuals.
Where toto21 discovers that personal data has been collected from an individual under 21 — whether through registration fraud or any other means — toto21 will immediately suspend the relevant account, delete the associated personal data to the extent permitted by law, and take appropriate action in accordance with our licensing obligations.
If you are a parent or guardian who believes a person under 21 in your care may have created a toto21 account, please contact our support team immediately at [email protected]. toto21 takes underage gambling extremely seriously and will act on all such reports with urgency.
toto21 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
While toto21 takes security seriously, no system is entirely immune from risk. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, toto21 will notify affected players in accordance with applicable requirements.
toto21 reserves the right to update this Privacy Policy at any time to reflect changes in how we collect and use personal data, changes in applicable data protection law, or changes required by our licensing authority. The effective date of the current version is displayed at the top of this Policy and in the table of contents sidebar.
Where changes to this Policy are material — meaning they significantly affect how your data is processed — toto21 will notify registered players by email at least 7 days before the revised policy takes effect. For non-material updates, the revised policy will be published on the toto21 platform without individual notice.
Your continued use of the toto21 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you should close your toto21 account before the effective date of the changes.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights described in Section 9, or have a concern about how toto21 is handling your personal data, please contact us using the following channels:
When submitting a privacy request, please include your registered toto21 email address, a description of your request, and any relevant reference information (such as transaction IDs or dates) that will help toto21's team process your request efficiently. toto21 may require identity verification before acting on certain requests to ensure that personal data is not disclosed or deleted at the request of an unauthorised party.
This Privacy Policy was last updated on January 1, 2026. This version supersedes all previously published versions of the toto21 Privacy Policy. The English language version of this Policy is the governing version.
Know Your Rights
As a toto21 player, you have the following rights in relation to your personal data. Contact our 24/7 support team to exercise any of these rights at any time.
Request a copy of all personal data toto21 holds about you.
Request correction of inaccurate or incomplete data on your account.
Request erasure of your data where processing is no longer necessary.
Ask toto21 to restrict processing of your data in certain situations.
Receive your data in a portable, machine-readable format.
Object to processing based on toto21's legitimate interests.
Questions or Ready to Play?
toto21 handles your personal data with care and full transparency. If you have privacy questions, our 24/7 support team is always available. If you are ready to play — cricket betting, Andar Bahar, slots, and more in PKR are all waiting. 21+ only.