Privacy Policy

This Privacy Policy ("Policy") is published by Goloto ("goloto", "we", "us" or "our"), the operator of the online gaming information and navigation platform located at https://goloto.cam ("Platform"). This Policy applies to all Users of the Platform and describes how we handle personal data in connection with your use of our services.

Goloto is an English-language informational platform focused on the Pakistan market. We are committed to handling personal data responsibly, transparently and in accordance with internationally recognized data protection principles — including those reflected in the EU General Data Protection Regulation (GDPR) as a benchmark standard, and applicable data protection considerations in Pakistan.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the terms of this Policy, please discontinue use of the Platform immediately.

The following terms have the meanings assigned to them below throughout this Policy:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or indirectly — including name, email address, IP address, device identifiers and usage patterns.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, goloto.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of goloto under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Cookies" means small text files stored on your device by a web browser at the request of the Platform, used to remember information about your session and preferences.
• "User" means any individual who accesses or uses the Platform.
• "Third-Party Platform" means any external website, operator or service referenced in goloto Content but not operated by goloto.

For the purposes of this Privacy Policy, the Data Controller responsible for your Personal Data is the operator of the goloto Platform. Our designated point of contact for all privacy-related matters is the support team reachable at the contact details set out in Section 15 of this Policy.

Goloto does not operate as a gambling operator, does not hold gambling licenses and does not process financial transactions on behalf of Users. We are solely an informational platform. Our data processing activities are limited to those necessary to operate and improve the Platform and to communicate with Users in connection with their use of the Platform.

Goloto collects the minimum amount of Personal Data necessary to fulfill the purposes described in this Policy. The categories of data we may collect are as follows:

4.1 Identity & Contact Data
If you contact us via email or the Platform's support channel, we collect your name (if provided), email address and any information you include in your message. We do not require account registration to access goloto Content.

4.2 Technical Data
When you access the Platform, our servers and analytics tools automatically collect technical data, including:

• IP address (which may indicate approximate geographic location, including city-level data for cities such as Karachi, Lahore, Islamabad or Rawalpindi);
• Browser type, version and operating system;
• Device type and screen resolution;
• Internet service provider and connection type;
• Referring website URL (if any).

4.3 Usage Data
We collect anonymized and aggregated data about how Users interact with the Platform, including:

• Pages visited and time spent on each page;
• Click patterns and navigation paths;
• Search terms used within the Platform (if applicable);
• Content categories accessed (e.g., casino guides, sports betting pages, responsible gambling section).

4.4 Cookie & Tracking Data
The Platform uses cookies and similar tracking technologies to enhance your experience. Full details of cookie types and how to manage them are set out in Section 10 of this Policy.

4.5 Communication Data
If you contact us for support or with a query, we retain records of those communications — including email content, timestamps and any follow-up exchanges — for the purpose of resolving your query and maintaining service quality records.

Goloto collects Personal Data through the following means:

• Directly from you: When you contact our support team via email at [email protected] or through live chat, you voluntarily provide personal data such as your name and email address.
• Automatically: Technical Data and Usage Data are collected automatically through server logs, analytics tools and cookies when you access the Platform. This collection is passive and does not require any active input from you beyond visiting the Platform.
• Through third-party analytics providers: We may use privacy-conscious analytics services to understand aggregate usage patterns. These providers process data on our behalf and are bound by data processing agreements.

Goloto does not purchase, receive or otherwise obtain personal data from data brokers, third-party marketers or external databases.

We process Personal Data only where we have a lawful basis for doing so. The table below sets out the specific purposes for which we process data and the corresponding lawful basis applied:

Where we rely on Legitimate Interest as the lawful basis, we have assessed that our processing is proportionate and does not override your fundamental data protection rights. You may object to processing based on Legitimate Interest at any time — see Section 11 for your rights.

Goloto does not sell, rent or trade your Personal Data to third parties. We may share data in the following limited and controlled circumstances:

• Service Providers: We engage trusted third-party service providers — such as web hosting companies, analytics platforms and customer support tools — who process data on our behalf under written data processing agreements that bind them to confidentiality and data security obligations.
• Legal Compliance: We may disclose Personal Data when required to do so by applicable law, court order, regulatory requirement or governmental authority — to the extent necessary and proportionate to the legal obligation.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of goloto's business, Personal Data may be transferred as part of that transaction, provided the receiving entity agrees to honor this Policy or provides equivalent protections.
• Protection of Rights: We may share data where necessary to protect the rights, property or safety of goloto, its Users or the public — including for fraud prevention and security purposes.

Goloto retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by applicable law. Our general retention principles are as follows:

• Support Communications: Email and live chat records are retained for up to 24 months following the close of your query, to allow follow-up and quality monitoring. After this period, records are deleted or anonymized.
• Technical & Usage Data: Server logs and anonymized analytics data are retained in aggregated form for up to 12 months, after which they are purged from active systems.
• Cookie Data: Session cookies expire when you close your browser. Persistent cookies are retained for the duration described in our Cookie section (Section 10), after which they expire and are deleted automatically.
• Legal Hold: Where we are required to retain data in connection with a legal proceeding, regulatory investigation or compliance obligation, data will be preserved for the duration of that requirement.

When Personal Data is no longer required, it is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

Goloto implements appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, accidental loss, alteration, disclosure or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and the Platform is encrypted using 256-bit TLS (Transport Layer Security), ensuring that data cannot be intercepted in transit.
• Access Controls: Access to Personal Data within goloto's systems is restricted on a need-to-know basis, with role-based access controls and authentication requirements applied to all internal systems.
• Infrastructure Security: The Platform is hosted on infrastructure that maintains industry-standard physical and logical security controls, including firewalls, intrusion detection and regular security patching.
• Vendor Management: Third-party service providers who handle Personal Data on our behalf are assessed for their data security practices and are contractually obligated to maintain appropriate protections.
• Incident Response: Goloto maintains procedures for identifying, assessing and responding to data security incidents. Where a breach is likely to result in a high risk to your rights, we will notify affected individuals as required by applicable data protection standards.

While we apply robust security measures, no transmission of data over the internet or electronic storage system can be guaranteed as 100% secure. If you have reason to believe your data has been compromised through the Platform, please contact us immediately at [email protected].

The goloto Platform uses cookies and similar technologies to improve your experience, analyze Platform performance and remember your preferences. The following table describes the categories of cookies we use:

Managing Cookies: You can control and manage cookies through your browser settings at any time. Most modern browsers allow you to block, delete or receive notifications before cookies are set. Disabling essential cookies may affect the functionality of certain Platform features. Non-essential cookies (analytics and preferences) are only activated where you have provided your consent.

Please note that cookie controls are browser-specific — if you use multiple devices or browsers (including accessing the Platform from Lahore on mobile and from Islamabad on desktop, for example), you may need to adjust settings on each.

Depending on your location and applicable law, you may have the following rights in relation to your Personal Data held by goloto. We will endeavor to honor these rights in all cases, regardless of your jurisdiction:

To exercise any of these rights, please contact us using the details in Section 15. We will respond to verifiable requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, of which you will be notified. We may request identification to verify your identity before processing a request — this is to protect your data from unauthorized access.

The goloto Platform is strictly intended for adults aged 18 years or above, or the higher minimum age required by the operator or license jurisdiction. Goloto does not knowingly collect Personal Data from individuals under the age of 18.

If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data from our systems. If you are a parent or guardian and believe that your child has provided Personal Data to goloto, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Goloto Content may reference Third-Party Platforms — including online casinos, sportsbooks and payment service providers familiar to Pakistani users such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are informational context only and do not constitute links to, endorsements of or partnerships with those entities.

This Privacy Policy applies solely to the goloto Platform. It does not apply to any Third-Party Platform you may choose to visit independently following information found on goloto. Each Third-Party Platform has its own privacy policy and data practices for which goloto accepts no responsibility.

Before providing personal data to any Third-Party Platform — including for account registration, identity verification (KYC) or payment processing — you should read that platform's privacy policy carefully and satisfy yourself as to its data protection practices.

Goloto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements or Platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

Where changes are significant and materially affect your rights, we will take reasonable steps to draw those changes to your attention — such as displaying a notice on the Platform or including a summary of key changes at the top of the updated Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the way goloto handles your Personal Data — including exercising any of your data subject rights described in Section 11 — please contact us using the following details:

Related documents: Terms & Conditions | Responsible Gambling | FAQ