Privacy Policy – wdtoto Online Gaming Platform Pakistan

01 Overview

wdtoto operates an online gaming platform that serves players across Pakistan. When you use our website or app — whether you are browsing games, making a deposit via JazzCash or Easypaisa, placing a cricket bet or contacting support — certain information is collected. This policy sets out clearly what that information is, why it is collected and how it is handled.

We do not sell your personal data to third parties for marketing. We do not share your data beyond what is strictly necessary to deliver the platform's services and comply with our operating obligations. The policy is written in plain language because we think you deserve to understand it without needing a legal background to read it.

This policy should be read alongside the Terms and Conditions, which govern your use of the platform as a whole. Where a specific product or feature has its own data notice, that notice should be read alongside this policy.

02 What We Collect

The data we collect falls into a few categories depending on how you interact with the platform. Here is a breakdown of what is collected and when.

Account Registration Data

When you create an account on wdtoto, we collect the information you provide during registration. This typically includes:

• Full name as it appears on your CNIC or other identity document.
• Date of birth — collected to verify you meet the minimum age of 18.
• Email address and mobile phone number.
• Chosen username and password (passwords are stored in encrypted form and are never visible to staff).
• Residential address, where required for identity verification.

Identity Verification Data

Before processing withdrawals or where account verification is required, we may ask for copies of identity documents such as your CNIC, passport or a recent utility bill. These documents are used solely for verification purposes and are handled with restricted access.

Transaction & Activity Data

We collect records of deposits, withdrawals and gameplay activity. This includes deposit amounts in PKR, payment methods used (such as JazzCash, Easypaisa, Raast or bank transfer), withdrawal requests and their processing status, game history, bet history and bonus activity.

Device & Technical Data

When you access the platform, we automatically collect certain technical information. This includes your IP address, device type and model, operating system, browser type and version, session timestamps and general location data (typically at city or region level — not precise GPS location).

Communications Data

If you contact support via in-app chat, email or any other channel, we keep a record of that communication. This helps us resolve issues more effectively and maintain a history of interactions relating to your account.

03 How We Use Your Data

We only use your data for legitimate and specific purposes directly connected to providing and improving the wdtoto platform. Here is what that means in practice.

• Account management: Creating and maintaining your account, verifying your identity and age, and keeping your account secure.
• Processing payments: Handling deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets.
• Delivering the platform: Running games, live casino tables, sports betting markets — including cricket, PSL and T20 — and all other platform features.
• Customer support: Responding to your queries, resolving disputes and keeping records of support interactions.
• Security and fraud prevention: Detecting and preventing fraudulent activity, bonus abuse, money laundering and other prohibited conduct.
• Responsible gaming: Monitoring for signs of problem gambling and applying responsible gaming controls such as deposit limits, loss limits and self-exclusion where relevant.
• Platform improvements: Analysing aggregated usage data to understand how the platform is used and where improvements can be made. This analysis is done on anonymised or aggregated data wherever possible.
• Communications: Sending account-related notifications such as deposit confirmations, withdrawal updates and important account alerts. We do not send unsolicited marketing communications without your consent.

04 Payment & Financial Data

Given that the platform handles real-money transactions in PKR, payment data is treated with an especially high level of care. When you make a deposit via JazzCash, Easypaisa, Raast, bank transfer or card, the transaction is processed through the relevant payment provider. wdtoto receives confirmation of the transaction — the amount, the method, the reference number — but does not store full card numbers or full mobile wallet credentials on our own servers.

Payment data is used exclusively for processing your deposits and withdrawals, for reconciliation and dispute resolution, and for fraud detection. We maintain transaction records for as long as required under our operational and compliance obligations, as described in the Data Retention section below.

05 Sharing Your Data

We do not sell your personal data. We do not share it with third parties for their own marketing purposes. Data is shared only in the following specific circumstances.

Payment Processors

To process your deposits and withdrawals, your payment data is shared with the relevant payment processor — such as JazzCash, Easypaisa, Raast, your bank or card network. This sharing is essential to complete the transaction and is limited to what the processor needs to do so.

Identity Verification Providers

Where identity verification is required, we may use a third-party verification service. In such cases, the identity documents you provide may be shared with that service for the purpose of verification only. These providers are contractually required to handle your data securely and use it only for the stated purpose.

Technology and Infrastructure Providers

The platform relies on third-party technology providers for hosting, game delivery, security monitoring and other infrastructure. These providers may process certain data as part of delivering their services. They are bound by contractual obligations to process data only as instructed by wdtoto and to maintain appropriate security standards.

Legal and Compliance Obligations

wdtoto may disclose your data where required to do so by applicable law, court order or other legal process. We will only disclose the minimum amount of data necessary to comply with any such requirement and will, where legally permitted, notify you that such a disclosure has been made.

06 Cookies & Tracking Technologies

wdtoto uses cookies and similar tracking technologies to make the platform work correctly and to understand how it is being used. A cookie is a small text file stored on your device when you visit a website. Here is how we use them.

Essential Cookies

These cookies are necessary for the platform to function. They manage your login session, keep you authenticated between pages, remember your language and currency preferences, and ensure the platform behaves consistently. You cannot opt out of essential cookies without affecting platform functionality.

Analytics Cookies

We use analytics tools to understand how players use the platform — which pages are visited most, where users drop off, how long sessions last and which features are used. This data is aggregated and anonymised wherever possible. It is used to improve the platform experience and fix problems.

Security Cookies

Certain cookies are used as part of the platform's fraud detection and security systems. These help us identify unusual access patterns, detect suspicious login attempts and protect accounts from unauthorised access.

Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to view, block or delete cookies. Note that blocking essential cookies will affect your ability to use the platform normally — you may not be able to stay logged in or access certain features. On mobile, the wdtoto app may use equivalent device-level tracking mechanisms which can be managed through your phone's app settings.

07 Data Security

Protecting your data is something we take seriously. wdtoto uses a range of technical and organisational measures to keep your information safe from unauthorised access, disclosure, alteration or destruction.

• Encryption in transit: All data transmitted between your device and the wdtoto platform is encrypted using industry-standard TLS (Transport Layer Security).
• Encrypted storage: Sensitive data — including passwords — is stored in encrypted form. Passwords are hashed and are not accessible to staff in readable form.
• Access controls: Access to player data within wdtoto's systems is restricted on a need-to-know basis. Staff members only have access to the data they need to do their jobs.
• Security monitoring: The platform is monitored for suspicious activity, attempted breaches and unusual access patterns. Security incidents are investigated and addressed promptly.
• Two-factor authentication: Where available, two-factor authentication adds an extra layer of security to your account login. We strongly recommend enabling this feature.

While we take every reasonable measure to protect your data, no online system can guarantee absolute security. You also play an important role in keeping your account safe — use a strong, unique password and do not share your login credentials with anyone.

08 How Long We Keep Your Data

wdtoto retains your personal data for as long as your account is active and for a reasonable period after account closure, in line with our operational and compliance obligations.

• Account data: Retained for the lifetime of your account and for a defined period following account closure. This allows us to resolve any outstanding disputes or queries that may arise after an account is closed.
• Transaction records: Financial transaction records in PKR — including deposit and withdrawal history — are retained for a period consistent with standard financial record-keeping obligations.
• Identity verification documents: Copies of identity documents such as your CNIC are retained for the duration of your account relationship and the required post-closure period, then securely deleted.
• Support communications: Records of support interactions are retained for as long as they are relevant to your account or any ongoing query, and then for a reasonable archival period.
• Technical and session data: IP addresses, device data and session logs are retained for a shorter period, primarily for security and fraud detection purposes.

When data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual. If you would like more detail about retention periods for a specific category of data, you can contact the support team.

09 Your Rights

As a user of the wdtoto platform, you have a number of rights in relation to your personal data. These rights can be exercised by contacting the support team. We aim to respond to all rights requests without unnecessary delay.

To exercise any of these rights, contact the wdtoto support team through in-app chat or by email. We may need to verify your identity before processing a rights request to ensure we are responding to the account holder.

10 Minors & Age Restriction

wdtoto is strictly an adult platform. Registration and use of the platform is only permitted for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18.

As part of the account registration and verification process, we collect date of birth and may request identity documents to confirm age. If we become aware that an account has been registered by someone who is under 18, the account will be closed immediately and any associated data will be handled in accordance with this policy and our Terms and Conditions.

If you are a parent or guardian and believe a minor has registered on the platform, please contact the support team immediately so the account can be reviewed and closed.

11 Changes to This Privacy Policy

wdtoto may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in technology, or to meet updated obligations. When material changes are made to the policy, registered users will be notified via email or through a notice on the platform before the changes take effect.

The date at the top of this page reflects when the policy was last updated. We encourage you to review this page periodically so you are always aware of the current version. Your continued use of the platform after updated terms have been published will be taken as acceptance of those changes.

If you disagree with a change to this policy and do not wish to continue using the platform, you may request account closure as described in the Terms and Conditions. Any data collected up to the point of closure will continue to be handled under the version of the policy that applied when it was collected, subject to our retention obligations.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal data is being handled, the wdtoto support team is available 24/7.

The fastest way to reach us is through the in-app live chat, which connects you directly with the support team. For written enquiries, you can also reach us at:

When contacting us about a data rights request, please include your registered email address or username so we can locate your account. We may ask for additional verification before processing the request.