This Privacy Policy explains how toto20 collects, uses, stores, shares, and protects the personal information of every Pakistani player who registers and plays on our platform. We are committed to handling your data responsibly, transparently, and in accordance with internationally recognised data protection principles. Please read this document carefully before creating your toto20 account.
Privacy on toto20 is not a formality — it is a genuine operational commitment. Here are six specific ways toto20 actively protects the personal data of every Pakistani player on the platform.
Every data transmission between your device and toto20's servers is protected by 256-bit SSL/TLS encryption. This applies to your login session, every deposit you initiate via JazzCash or EasyPaisa, and every piece of KYC documentation you upload for withdrawal verification.
toto20 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks under any circumstances. The personal information you provide — including your Pakistani mobile number, CNIC details, and email address — is used exclusively to operate your toto20 account.
Your toto20 account data — including your PKR transaction history, KYC documents, and gameplay records — is stored on encrypted servers accessible only to authorised toto20 personnel on a strict need-to-know basis. KYC documents are stored in an isolated, access-controlled environment separate from general account data.
toto20 collects only the personal data that is strictly necessary for account operation, KYC compliance, payment processing, and responsible gaming obligations. We do not collect data about your wider internet activity, your contacts, or any information unrelated to your toto20 account.
As a toto20 player, you have the right to request a full copy of the personal data toto20 holds about you, to correct any inaccurate information, and to request erasure of your data subject to our legal retention obligations. All such requests are handled within 30 days via our support team.
You control whether toto20 sends you promotional communications about bonuses, PSL betting markets, new game releases, and VIP offers. You can opt out of all marketing at any time via your toto20 Account Settings or by contacting support — the change takes effect on the next business day.
toto20 operates the online casino and sports betting platform accessible at toto20.lol. For the purposes of this Privacy Policy, toto20 acts as the Data Controller in respect of all personal data collected from players who register and use the toto20 platform. As Data Controller, toto20 determines the purposes for which and the means by which personal data is processed.
toto20 is operated under an international online gaming licence. The platform is designed specifically for the Pakistani market, with Pakistani Rupee (PKR) as the base currency, JazzCash and EasyPaisa as primary payment channels, and bilingual Urdu/English customer support available 24 hours a day, 7 days a week.
toto20 collects personal data from you directly when you register an account, make deposits or withdrawals, engage with our customer support team, or interact with the toto20 platform in any other way. We also collect certain technical data automatically when you access the platform. The categories of personal data collected by toto20 are set out below.
toto20 processes your personal data for the specific, legitimate purposes set out in the table below. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected without your prior consent.
toto20 processes your personal data on the following legal bases, depending on the specific purpose of processing:
toto20 does not sell your personal data to any third party. toto20 shares your personal data only with the limited categories of third parties described below, and only to the extent necessary for the specified purpose.
toto20 uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and improve the player experience. The following categories of cookies are used on toto20:
toto20 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention periods apply:
Where you request deletion of your personal data and no legal retention obligation prevents such deletion, toto20 will securely delete or anonymise your personal data within 30 days of receiving the request.
As a toto20 player, you are entitled to exercise the following privacy rights in relation to the personal data toto20 holds about you. All requests should be submitted to the toto20 support team at [email protected] (plain text — not a clickable link). toto20 will respond to all valid requests within 30 days.
You may request a copy of all personal data toto20 holds about your account, including your registration information, KYC records, transaction history, and gameplay data. toto20 will provide this in a structured, readable format.
If any personal data toto20 holds about you is inaccurate or incomplete — for example, an incorrect mobile number or a misspelled name — you have the right to request that it be corrected. Note that corrections to KYC-verified identity data may require submission of updated documentation.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists for processing. Erasure requests are subject to toto20's mandatory legal retention obligations outlined in Section 7.
In certain circumstances — for example, where you contest the accuracy of data held, or where processing is unlawful but you prefer restriction over deletion — you may request that toto20 restrict processing of your personal data while the matter is being resolved.
You may request your personal data in a structured, commonly used, machine-readable format where technically feasible. This right applies to data you have provided to toto20 directly and which is processed on the basis of consent or contractual necessity.
You may object to processing of your personal data carried out on the basis of toto20's legitimate interests. toto20 will cease such processing unless compelling legitimate grounds exist that override your objection. You have an unconditional right to object to processing for direct marketing purposes.
Where processing is based on your consent — specifically marketing communications about toto20 bonuses and promotions — you may withdraw that consent at any time via Account Settings or by contacting toto20 support. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
toto20 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis.
toto20 operates internationally, and your personal data may be processed by toto20 or its authorised third-party service providers in countries outside Pakistan. Where personal data is transferred internationally, toto20 ensures that appropriate safeguards are in place to protect your data to an equivalent standard as if it remained in Pakistan.
Safeguards employed for international data transfers include contractual data processing agreements with third-party processors incorporating internationally recognised data protection clauses, and selection of service providers that maintain data security certifications and practices consistent with toto20's own security standards.
Your KYC documents — including CNIC scans — are stored in encrypted, access-controlled environments. Where KYC verification involves a third-party service provider located outside Pakistan, such providers operate under strict contractual obligations prohibiting any secondary use of your identity documents.
toto20 is strictly for adults aged 21 and above. toto20 does not knowingly collect personal data from individuals under the age of 21. Age verification via CNIC is a mandatory step in the KYC process that all toto20 players must complete before their first withdrawal.
The toto20 platform integrates third-party services for game provision, payment processing, and platform analytics. While toto20 selects these partners carefully and requires them to operate under data processing agreements, toto20 is not responsible for the independent privacy practices of third-party game software providers or payment networks.
Where the toto20 platform contains links to third-party websites — for example, licensing authority websites or responsible gaming resource pages — please note that toto20 does not control those websites and this Privacy Policy does not govern how those third parties collect or use your data. You are encouraged to review the privacy policies of any third-party sites you visit.
toto20 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services offered on the toto20 platform. Material amendments will be communicated to registered players via their registered email address no less than 14 days before the updated Privacy Policy takes effect.
The "Effective Date" at the top of this Privacy Policy indicates when the current version entered into force. Your continued use of the toto20 platform after the effective date of an amended Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the amended Privacy Policy, you should close your toto20 account before the updated policy takes effect.
Previous versions of the toto20 Privacy Policy are available upon written request submitted to [email protected] (plain text — not a clickable link).
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about how toto20 has handled your personal data, please contact us through the following channels:
toto20 takes all privacy complaints seriously and is committed to resolving them fairly, transparently, and in a timely manner. We value the trust Pakistani players place in toto20 with their personal data and treat every privacy inquiry with the attention it deserves.
toto20 protects your personal data with 256-bit SSL, minimal data collection, and zero data sales. Over 1,000 games, PSL betting, and instant JazzCash withdrawals — all in PKR. 21+ only.
// 21+ only · 256-bit SSL · Internationally licensed · PKR deposits from Rs 200 · Zero data sales