Privacy policy contents
1. Scope of this policy
This policy covers the website published at tojay.pk, including every page listed in our sitemap. It is written for visitors in Pakistan, though it applies wherever you access the site from.
It does not cover the gaming platform itself. Tojay.pk is an independent affiliate website. When you follow a link from here to the operator's platform, you leave this site and enter one governed by that operator's own privacy policy and terms. Anything you do there — registering, depositing, playing, withdrawing — is handled entirely by them, under their policies, not ours. We do not receive, hold or have access to your gaming account credentials, balance, transaction history or identity documents.
2. Information we collect
We have deliberately kept collection minimal. This site has no user accounts, no login, and no payment processing, which removes most of the categories a typical privacy policy has to address.
Collected automatically
- Technical request data — IP address, browser type and version, operating system, device type, screen size, and the page you requested. This is standard web-server information generated by the act of loading a page.
- Referral source — the page or search that brought you here, where your browser sends it.
- Interaction data — which pages you viewed, how long you stayed, and which outbound links you clicked, in aggregate form.
Provided by you
- Contact form entries — the name, email, optional phone number, topic and message you type. See section 8 for how this is handled, which may surprise you.
- Language preference — whether you selected English or Urdu, stored locally in your own browser.
What we never collect
- Gaming account usernames, passwords or one-time codes
- Payment card numbers, wallet PINs or bank credentials
- Identity documents, CNIC numbers or photographs
- Precise geolocation from your device
- Contacts, camera, microphone or file access
3. How we use information
We use what we collect for four purposes, and no others:
- Operating the site. Serving pages, remembering your language choice, and keeping the site available and reasonably fast.
- Improving content. Understanding which guides are read and which are ignored, so we spend effort where it is useful.
- Security and abuse prevention. Detecting automated scraping, spam attempts and unusual traffic patterns.
- Affiliate attribution. Confirming that a registration originated from this site so the commission that funds it is correctly credited.
We do not sell personal information. We do not build advertising profiles. We do not share your data with data brokers, and we do not run third-party ad networks on this site.
5. Analytics
We use privacy-respecting web analytics to understand traffic in aggregate: how many people read the install guide, which slot categories are searched most, which pages people leave immediately. This informs what we write next.
Analytics data is aggregated and not used to identify individuals. We do not attempt to link browsing behaviour on this site to any gaming account, nor could we — we have no access to the operator's user data.
Most browsers offer a "Do Not Track" or global privacy control setting. Where your browser sends one, we honour it by not loading optional analytics for that session.
6. Affiliate tracking
This website is funded by affiliate commission. When you click a "Play Now" or download link, the destination URL carries a tracking parameter identifying tojay.pk as the referrer. If you subsequently register and play, the operator may pay us a commission.
This is worth stating clearly: it costs you nothing. Your bonus is not smaller, your odds are not different, and your withdrawals are not slower because you arrived via this site. The commission is paid by the operator out of its own margin.
What we receive back is aggregate: how many registrations came from this site, not who they were. We do not receive your name, contact details, deposit amounts or gameplay history.
7. Third-party links and services
This site links out to the gaming operator and to our Telegram channels. It also loads web fonts from a third-party font service. Each of those parties operates under its own privacy policy, and we have no control over what they collect.
- The gaming operator — governed entirely by the operator's own privacy policy and terms of service.
- Telegram — messaging you send to our support desk or community channel is subject to Telegram's privacy policy.
- Web font provider — serving fonts involves your browser making a request to that provider, which sees your IP address as part of any ordinary web request.
Following an external link is your decision, and we encourage you to read the relevant policy before providing personal information to any third party.
8. The contact form
Our contact form performs validation entirely in your browser. Tojay.pk does not operate a server-side inbox, and the form does not transmit your message anywhere when you press submit. Nothing you type into it is stored by us or sent across the network.
We keep the form because it helps people structure what they want to say. For an actual reply, send the same details to our Telegram support desk. If that arrangement changes in future, this section will be updated before any collection begins.
9. Data retention
- Server request logs — retained for up to 30 days for security and diagnostics, then deleted.
- Aggregated analytics — retained for up to 14 months to allow year-on-year comparison.
- Language preference — stored only in your own browser, deleted when you clear site data.
- Telegram conversations — retained within Telegram under its retention practices; you can delete your side of a conversation at any time.
10. Security measures
The site is served over HTTPS with modern TLS. We keep the platform patched, limit administrative access to the minimum number of people, and use strong authentication on those accounts.
We also reduce risk by simply not holding sensitive data: with no accounts, no payments and no stored messages, there is very little here worth stealing. That is a deliberate design decision, not an accident.
No system is perfectly secure. If you believe you have found a vulnerability in this website, please report it to our Telegram desk rather than disclosing it publicly, and we will address it promptly.
11. Age restriction
This website is intended solely for adults aged 18 or over. We do not knowingly collect information from anyone under 18, and gambling-related content is not appropriate for minors under any circumstances.
If you are a parent or guardian and believe a minor has used this site, contact us and we will remove any associated records. We also recommend device-level content filtering — tools such as family safety settings, network filters and app restrictions are more effective than any single site's policy.
12. Your rights and choices
Regardless of where you live, we will honour the following on request:
- Access. Ask what information, if any, we hold relating to you.
- Deletion. Ask us to delete records associated with you, where they exist.
- Correction. Ask us to correct anything inaccurate.
- Objection. Ask us to stop processing your information for a stated purpose.
- Opt-out of analytics. Enable your browser's privacy control, or block analytics with an extension.
To exercise any of these, message our Telegram desk. We will respond within 30 days. Given how little we collect, the honest answer to most access requests is that we hold nothing tied to you personally.
13. Changes to this policy
We may update this policy as the site evolves or as legal requirements change. The "last updated" date at the top of this page always reflects the current version, and material changes will be announced in our Telegram community channel.
Continuing to use the site after an update constitutes acceptance of the revised policy.
14. Contacting us
Questions about this policy, or about privacy on this site generally, go to our Telegram support desk. Please do not send personal documents, account credentials or payment details — we neither need them nor want them.