toto22 Privacy Policy

1. Data Controller

toto22 ("we", "us", "our") is the data controller responsible for personal data collected through the toto22 platform accessible at toto22.vip. toto22 operates as an international online gaming platform. All data processing activities described in this Privacy Policy are carried out by toto22 or by third-party processors engaged by toto22 under binding data processing agreements.

For all data protection queries, contact our Data Protection team at: [email protected]

2. Personal Data We Collect

toto22 collects personal data that is necessary to operate the Platform, comply with applicable legal obligations, and provide you with a safe and functional gaming experience. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name
• Date of birth
• Email address
• Mobile telephone number
• Residential address (city, country)
• Username and hashed password

2.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (CNIC, passport, driving licence)
• Proof of address documents
• Source of funds declarations where applicable
• Selfie or liveness verification images where required

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (JazzCash account references, Easypaisa wallet references, bank account details, USDT TRC20 wallet addresses)
• Transaction reference numbers
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Games played, bets placed, results and win/loss records
• Session duration and frequency data
• Responsible gaming tool settings and history
• Sports betting selections and live betting activity

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Pages visited, click-path data, and time on page

2.6 Communications Data

• Contents of support tickets, live chat transcripts, and emails sent to toto22
• Promotional communications preferences
• Complaint and dispute records

3. How We Collect Your Data

toto22 collects personal data through the following means:

• Registration and account management: Data you provide directly when creating or updating your account.
• KYC verification: Documents you upload in connection with identity and age verification requirements.
• Deposits and withdrawals: Data provided or generated during payment transactions.
• Platform use: Data generated automatically as you navigate and use the toto22 platform, including through cookies and server-side logging.
• Support interactions: Data you provide when contacting toto22 support by email or live chat.
• Third-party data sources: Where permitted by applicable law, toto22 may receive supplementary identity or fraud-screening data from third-party KYC verification providers and payment processors.

4. Purpose and Legal Basis for Processing

toto22 processes personal data for the following purposes and on the following legal bases:

4.1 Contract Performance

Processing your registration data, financial data, and gaming activity data is necessary for toto22 to provide the Services you have contracted for, including account management, game access, and payment processing.

4.2 Legal Compliance

toto22 is required by applicable international gaming regulations and anti-money laundering (AML) frameworks to collect and retain KYC documentation, transaction records, and account activity data. This processing is carried out in compliance with legal obligations and is not discretionary.

4.3 Legitimate Interests

toto22 processes technical and device data, and gaming activity data for fraud prevention, platform security, responsible gaming monitoring, and system performance optimisation. These interests do not override your fundamental rights where those rights require privacy protection.

4.4 Consent

Where toto22 sends you promotional communications (bonus offers, tournament announcements, new game alerts), we do so on the basis of your consent. You may withdraw consent to marketing communications at any time by contacting [email protected].

5. Data Sharing and Disclosure

toto22 does not sell personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT TRC20 network infrastructure — to facilitate deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist in verifying player identity and age in compliance with AML and responsible gaming requirements.
• Game content providers: Where required to resolve game disputes or audit gaming outcomes, limited session data may be shared with the relevant game provider.
• Legal and regulatory authorities: Where disclosure is required by applicable law, court order, or legitimate regulatory request.
• Fraud prevention networks: Anonymised or pseudonymised data may be shared with industry fraud prevention services to identify and prevent bonus abuse and multi-accounting.

All third-party processors engaged by toto22 are bound by data processing agreements that require them to process personal data only on toto22's instructions and in accordance with applicable data protection standards.

6. Cookies and Tracking Technologies

toto22 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function (session management, login state, security tokens). These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency display, and game lobby layout.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to improve performance and content.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect the user experience.

7. Data Retention

toto22 retains personal data for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal retention obligations. Specifically:

• Account and transaction data is retained for a minimum of five years following account closure, in compliance with AML record-keeping requirements.
• KYC documentation is retained for a minimum of five years from the date of verification.
• Support and communications records are retained for two years from the date of the last interaction.
• Marketing preference data is deleted promptly upon withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you.

8. Data Security

toto22 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting internal access to personal data, regular security assessments and penetration testing, and multi-factor authentication for administrative access.

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and must notify toto22 immediately at [email protected] if you suspect any unauthorised access to your account.

9. Your Data Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data held by toto22:

• Right of access: You may request a copy of the personal data toto22 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that toto22 limit the processing of your data in certain circumstances.
• Right to data portability: You may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of these rights, submit a written request to [email protected]. toto22 will respond within 30 days. We may require identity verification before processing a data rights request.

10. Children and Minors

The toto22 Platform is strictly for adults aged 18 and over. toto22 does not knowingly collect personal data from individuals under the age of 18. If toto22 becomes aware that personal data has been collected from a person under 18, that data will be deleted and the account permanently closed. If you believe a minor has registered on the toto22 Platform, please contact [email protected] immediately.

11. International Data Transfers

As an international online gaming platform, toto22 may transfer personal data to servers and processors located outside your country of residence. Where personal data is transferred internationally, toto22 takes appropriate steps to ensure that the transfer is carried out under lawful mechanisms that provide an adequate level of protection, such as standard contractual clauses or equivalent safeguards recognised under applicable data protection law.

12. Third-Party Links

The toto22 Platform does not contain links to third-party websites. This Privacy Policy applies solely to data processing carried out by toto22 on the toto22 platform. toto22 is not responsible for the privacy practices of third-party payment processors or identity verification providers, whose own privacy policies govern their data processing activities.

13. Changes to This Privacy Policy

toto22 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players by email or by prominent notice on the Platform no less than 7 days prior to the effective date of the change. Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised policy. The "Last updated" date at the top of this document indicates when the policy was most recently revised.

14. Contact and Complaints

For any questions, concerns, or complaints relating to this Privacy Policy or toto22's data processing practices, please contact our Data Protection team:

Email: [email protected]

toto22 will acknowledge your query within 48 hours and respond substantively within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.