wdtoto Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by wdtoto ("we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "user") who access or use the wdtoto platform — including the website at wdtoto.ws, all associated Services, and any communications between you and wdtoto via live chat, email, or other supported channels.

wdtoto is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation and our international gaming licence obligations. This Policy describes what data we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject.

By registering a wdtoto account, using the wdtoto login function, making deposits, placing bets, or otherwise interacting with the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with the wdtoto Terms & Conditions, which form part of the same contractual framework governing your relationship with wdtoto.

2. Personal Data We Collect

wdtoto collects personal data across several categories depending on the nature of your interaction with the platform. The table below outlines the primary data types, the source of collection, and the context in which each category arises:

wdtoto does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming assessments and with your explicit consent.

3. How We Use Your Personal Data

wdtoto uses the personal data collected from you for the following specific purposes:

1. 3.1 Account Management. To create, maintain, and administer your wdtoto account — including processing your wdtoto login sessions, updating account preferences, and communicating account-related information such as security alerts and transaction confirmations.
2. 3.2 Payment Processing. To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to process withdrawal requests to your verified payment method. Financial data is shared only with the specific payment processor handling each transaction.
3. 3.3 Identity Verification (KYC). To verify your identity, age, and the legitimacy of your payment methods in accordance with wdtoto's licensing obligations. KYC is required before withdrawal processing and may be requested at any stage of the account lifecycle.
4. 3.4 Fraud Prevention & Security. To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the wdtoto platform. Technical data — including IP addresses and device fingerprints — is used in automated risk scoring systems.
5. 3.5 Responsible Gaming Compliance. To monitor gaming activity patterns for indicators of problem gambling, to apply self-exclusion restrictions, to enforce deposit limits, and to maintain records of responsible gaming tool usage as required by our licensing authority.
6. 3.6 Regulatory Reporting. To fulfil reporting obligations to wdtoto's licensing authority and, where legally required, to disclose information to law enforcement or other competent authorities.
7. 3.7 Platform Improvement. To analyse aggregated, anonymised usage data for the purpose of improving platform features, game lobby curation, and payment channel performance. No individual player is identifiable from this analysis.
8. 3.8 Marketing Communications. To send promotional offers, bonus notifications, and cricket betting promotions to players who have opted in to marketing communications. You may withdraw this consent at any time through the wdtoto account settings panel after login.

4. Legal Basis for Processing

wdtoto processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity — processing required to fulfil our obligations under the wdtoto Terms and Conditions, including account management, payment processing, and bet settlement.
• Legal obligation — processing required to comply with wdtoto's gaming licence conditions, anti-money laundering obligations, and regulatory reporting requirements.
• Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, informed consent. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third-Party Disclosure

wdtoto does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is strictly limited to the following categories of recipient, and only to the extent necessary for the stated purpose:

1. 5.1 Payment Processors. Your financial data is shared with the specific payment provider handling each transaction — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT processing partners. Each provider is bound by their own data protection obligations and processes only the data needed to complete the transaction.
2. 5.2 Identity Verification Providers. wdtoto may use third-party KYC service providers to assist in verifying identity documents and cross-referencing against sanctions and fraud databases. These providers process data under strict contractual data processing agreements.
3. 5.3 Gaming Content Providers. Game studios providing slot titles — including the providers behind Midas Fortune and Treasures of Aztec — and live casino streaming operators receive anonymised session data necessary to deliver game content. They do not receive identifying personal data.
4. 5.4 Regulatory and Law Enforcement Authorities. wdtoto may be required to disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required by applicable law or as part of an active investigation into suspected financial crime or regulatory breach.
5. 5.5 IT and Infrastructure Providers. Cloud hosting, database management, and cybersecurity service providers who support platform operations may have access to data in the course of their service provision. All such providers are subject to data processing agreements that restrict use to platform support purposes only.

6. Cookies & Tracking Technologies

The wdtoto platform uses cookies and similar tracking technologies to support platform functionality, maintain session state across wdtoto login instances, and where consented, to analyse usage patterns for platform improvement purposes. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the wdtoto platform to function — including session authentication, load balancing, and security token management. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences across wdtoto login sessions, including language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the wdtoto platform — including page visit duration, navigation paths, and game lobby interactions. These cookies are only activated with your consent.
• Security Cookies: Used to detect and prevent fraudulent sessions, account takeover attempts, and automated bot activity on the wdtoto platform. These operate as part of the platform's fraud detection infrastructure.

You may manage your cookie preferences through the wdtoto platform's cookie consent banner, which is presented on your first visit to the site. You may also manage browser-level cookie settings through your device's browser configuration. Note that disabling strictly necessary cookies will prevent the wdtoto platform from functioning correctly.

7. Data Retention Periods

wdtoto retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship plus 5 years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and Financial Records: Retained for 5 years post-transaction or post-account closure (whichever is later), as required by financial compliance regulations applicable under wdtoto's gaming licence.
• Gaming Activity Data: Retained for 3 years post-account closure for dispute resolution and responsible gaming compliance purposes.
• KYC Documents: Retained for 5 years post-account closure. Copies of KYC documents are securely destroyed after the retention period using certified data destruction processes.
• Support Communications: Retained for 2 years from the date of the interaction, unless the communication relates to an active dispute or compliance matter in which case retention is extended until resolution.
• Marketing Preferences: Retained until withdrawal of consent plus 1 year for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with wdtoto's data destruction protocols. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

8. Your Data Rights

Subject to applicable law and the processing basis under which your data is held, you have the following rights in relation to the personal data wdtoto holds about you:

To exercise any of the above rights, contact the wdtoto support team via live chat. We will respond to all valid requests within 30 days. Complex requests may require additional time, in which case we will notify you and provide a revised response timeline. We may need to verify your identity before processing data rights requests.

9. Children & Minors — 21+ Policy

The wdtoto platform is strictly intended for individuals aged 21 years and above. wdtoto does not knowingly collect personal data from any individual under the age of 21. If wdtoto becomes aware that an account has been registered by or on behalf of a person under the age of 21, the account will be immediately and permanently closed, any balance will be handled in accordance with wdtoto's underage gaming policy, and any personal data associated with the account will be deleted in accordance with applicable data protection law.

If you believe that a person under the age of 21 has accessed or registered on the wdtoto platform, please contact wdtoto support immediately via live chat. All reports of suspected underage gaming are treated with urgency and investigated as a priority matter.

10. Security Measures

wdtoto implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL encryption with TLS 1.3 enforced across all wdtoto platform connections, including wdtoto login sessions, payment pages, and account management functions.
• Hashed and salted password storage — wdtoto does not store passwords in plain text. In the event of a data breach, exposed password hashes cannot be directly reversed.
• Multi-factor authentication options for wdtoto login sessions, available to all account holders via account security settings.
• Automated intrusion detection and real-time security monitoring across wdtoto platform infrastructure.
• Role-based access controls for internal staff, with all data access logged and subject to regular audit review.
• Regular penetration testing and third-party security audits of the wdtoto platform conducted by independent security specialists.

While wdtoto takes all reasonable technical measures to protect your data, no internet-based system is entirely immune to security risk. You are responsible for maintaining the security of your own wdtoto login credentials and for notifying wdtoto support immediately if you suspect your account has been compromised.

11. International Data Transfers

As an internationally licensed gaming platform, certain aspects of wdtoto's operations — including cloud hosting, payment processing, and game content delivery — involve the transfer of personal data across jurisdictional boundaries. Where such transfers occur, wdtoto ensures that appropriate safeguards are in place to protect your personal data, including:

• Standard contractual clauses agreed between wdtoto and third-party service providers governing the conditions under which transferred data may be used .
• Data processing agreements that require all recipients of transferred data to maintain security standards equivalent to those applied by wdtoto on its own infrastructure.
• Restrictions on onward transfer — third-party providers who receive data from wdtoto may not transfer that data to sub-processors without wdtoto's prior written authorisation.

wdtoto does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual safeguards. Players in Pakistan — including those in Karachi, Lahore, Islamabad, and Faisalabad — have the same data protection rights regardless of where wdtoto's infrastructure is physically located.

12. Privacy Policy Updates

wdtoto reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where a new category of data processing is introduced or where your rights are affected — wdtoto will provide advance notice by posting the updated Policy on the platform with a revised effective date and, where appropriate, by notifying registered account holders via the contact information held on their wdtoto account.

Your continued use of the wdtoto platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the platform and contact wdtoto support to request account closure. The current version of this Policy is always accessible via the footer of the wdtoto platform and supersedes all prior versions.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data wdtoto holds about you, please contact the wdtoto support team via the live chat channel available on the platform. For formal written correspondence relating to data protection matters, including the exercise of data subject rights, you may also contact us at the following address:

wdtoto is committed to resolving data protection concerns directly. If you are not satisfied with our response to a data protection request or complaint, you may escalate the matter to the data protection supervisory authority applicable under wdtoto's licensing jurisdiction, or to the relevant regulatory body overseeing the international gaming licence under which wdtoto operates. Details of the applicable supervisory authority are available on the wdtoto About Us page.