Privacy Policy – To Jay Pakistan Online Gaming Platform

To Jay is an online gaming platform accessible at tojay.click, operated for the benefit of players in Pakistan. When this Privacy Policy refers to "To Jay", "we", "us" or "our", it means the To Jay platform and its operating entity.

For the purposes of this policy, we are the data controller — meaning we decide how and why your personal data is processed. If you have any questions about how To Jay handles your data, contact us at support@tojay.click. We aim to respond to all privacy-related enquiries within 5 business days.

This Privacy Policy applies to all personal data collected through the tojay.click website and any related player account services. It does not apply to third-party websites or services that may be linked to or associated with To Jay — you should review those services' own privacy policies separately.

To Jay collects only the personal data that is necessary to operate your account, process payments and comply with legal obligations. We do not collect data we have no genuine use for.

Most of the data To Jay holds about you comes directly from you during the registration and account use process. Here is a straightforward breakdown of where it comes from:

• Registration form — when you create your To Jay account, you provide your name, mobile number and date of birth.
• Deposits and withdrawals — when you use Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a bank card to transact, the payment method details are captured to process the transaction.
• Game play — your activity across all To Jay games is recorded automatically for account management, dispute resolution and responsible gaming purposes.
• Device and browser — standard technical data such as your IP address, device type and browser version is collected automatically when you visit the site.
• Customer support — if you contact the To Jay support team via email or live chat, those communications are stored to resolve your query and for quality review.
• Cookies — small data files stored on your device that help To Jay remember your session preferences and maintain account security. More detail in Section 7.

To Jay does not purchase personal data from third-party data brokers. We do not scrape data from social media platforms or obtain your information from any source other than direct interaction with the platform.

Every piece of data To Jay holds is used for a specific, legitimate purpose. We do not collect data just to have it. Here is what we actually use your information for:

• Account management — to create, maintain and authenticate your To Jay account so you can log in securely.
• Payment processing — to process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard.
• Game operation — to run games, record results, calculate and pay out winnings and maintain an accurate betting history in your account.
• Bonus and promotion administration — to apply and track wagering requirements for any bonus you have claimed at To Jay.
• Fraud prevention and security — to detect and prevent unauthorised account access, fraudulent transactions and multi-accounting.
• Responsible gaming — to monitor play patterns and enforce self-imposed limits, cooling-off periods or self-exclusions at your request.
• Legal compliance — to fulfil anti-money laundering obligations and respond to lawful requests from regulatory or law enforcement bodies where applicable.
• Customer support — to respond to your queries, complaints and account-related requests through the To Jay support team.
• Platform improvement — anonymised and aggregated data about how players use To Jay helps us identify bugs, improve game loading speeds and enhance the mobile experience.

The short answer is: very few people, and only when there is a real need. To Jay does not sell your personal data. We do not share it with advertisers, data brokers or marketing companies.

The limited circumstances in which To Jay may share your data with third parties are as follows:

• Payment processors — to process your PKR transactions, we share the minimum required information with Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT) or the card network (for Visa/Mastercard). These providers receive only what is needed to process the transaction.
• Game providers — where games at To Jay are supplied by a third-party studio, that studio may receive anonymised session data to service the game. They do not receive your name, contact details or payment information.
• Identity verification services — where KYC verification is required, a verification service may process your identity documents. This is done under strict data processing agreements.
• Legal authorities — To Jay will disclose personal data to law enforcement or regulatory bodies only when required by a valid legal obligation. We will not do so voluntarily or without a lawful basis.

All financial transactions at To Jay are conducted in Pakistani Rupees (PKR). There is no foreign currency conversion and your payment data never crosses into foreign payment systems unnecessarily.

Specific points about how payment data is handled at To Jay:

• Full card numbers are never stored by To Jay. Card payments are processed by the card network and we receive only a masked reference (last 4 digits).
• Easypaisa and JazzCash transactions are confirmed via the respective provider's API. To Jay receives a transaction confirmation and amount — not your full wallet credentials.
• Bank account details provided for IBFT withdrawals are stored encrypted and used only to process outgoing withdrawal requests.
• Transaction history — amounts, dates, methods — is retained as part of your account record for the duration set out in Section 8.
• To Jay does not profit from your payment data in any way. It is used solely to process deposits and withdrawals on your behalf.

To Jay uses cookies and similar technologies to make the platform work properly and to improve your experience. A cookie is a small text file stored on your device when you visit the site.

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect how some features of To Jay work. To Jay does not use cookies to serve you third-party advertisements.

To Jay retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable legal obligations. Here is a general guide to our retention periods:

• Active account data — retained for the lifetime of your To Jay account plus a further period after closure as required for legal compliance purposes.
• Transaction records — PKR deposit, withdrawal and betting records are retained for a minimum of 5 years from the date of the transaction for legal and anti-money laundering compliance.
• Identity verification documents — retained for as long as your account is active and for a further period post-closure as required by applicable law.
• Support communications — emails and chat transcripts are retained for 2 years from the date of the interaction.
• Technical logs — IP address and session logs are retained for up to 12 months for security investigation purposes.

Once the applicable retention period expires, data is securely deleted or anonymised. Anonymised data — where there is no way to link it back to you — may be retained indefinitely for statistical purposes.

Data security is not something To Jay takes lightly. The following measures are in place to protect your personal information:

Despite these measures, no internet transmission or storage system is 100% secure. If you suspect your To Jay account has been compromised, contact support immediately at support@tojay.click. In the event of a data breach that affects your rights, To Jay will notify affected players promptly.

As a To Jay player, you have the following rights over your personal data. You can exercise any of these rights by contacting support@tojay.click. We will respond within 30 days.

To Jay is strictly for players aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe a minor has registered an account on To Jay, please contact us immediately at support@tojay.click.

Upon receiving a verified report that an account belongs to a minor, To Jay will immediately close the account, delete the associated personal data and refund any remaining balance to the verified parent or guardian. No further action will be taken against the minor, but the account cannot be reactivated.

From time to time, To Jay may update this Privacy Policy to reflect changes in how the platform operates, changes in applicable law or feedback from players. When we make significant changes, we will notify registered players via the mobile number or contact method associated with their account at least 7 days before the changes take effect.

The updated policy will always be available at tojay.click/privacy-policy. The "last updated" date at the top of this page reflects the date of the most recent published version. We recommend checking this page periodically — it will not change often, and when it does we will tell you.

Continued use of To Jay after the effective date of a policy update constitutes acceptance of the revised terms. If you disagree with any update, you may close your account before the changes take effect by contacting support.

If you have a question about this Privacy Policy, want to exercise one of your data rights or wish to raise a complaint about how To Jay has handled your personal information, please use the contact details below.

All privacy-related complaints will be acknowledged within 2 business days and fully investigated within 30 days. If you are not satisfied with our response, you have the right to escalate the matter to the relevant regulatory authority in your jurisdiction.