Toffeeweb's Privacy Policy — Your Data Is Protected

Toffeeweb (https://toffeeweb.app) is a trusted online gaming platform in Bangladesh. We believe that every player's privacy is a fundamental right. That is why our Privacy Policy has been built on complete transparency — so you can clearly understand what we do and do not do with your information.

This privacy policy applies to the toffeeweb website, mobile app, and all related services. By registering or using our services, you are considered to have agreed to this privacy policy.

This Privacy Policy has been prepared in accordance with applicable data protection laws in Bangladesh and international best practices. We will update this page whenever changes are made and notify you in a timely manner.

To provide secure and quality service on toffeeweb, we need to collect certain information — but only what is genuinely necessary. See the details below:

Toffeeweb collects your information for specific purposes only. In accordance with our Privacy Policy, the data we collect is used solely for the following:

• Account Management: To create, verify, and manage your account.
• Payment Processing: To process secure deposits and withdrawals.
• Service Improvement: To personalize your gaming experience and introduce new features.
• Fraud Prevention: To detect and prevent suspicious activity.
• Support Services: To resolve your questions and complaints.
• Legal Compliance: To comply with applicable laws and regulatory obligations.
• Responsible Gaming: To monitor your gaming patterns and offer support when needed.
• Notice: To keep you informed of important account updates and promotions (only with your consent).

Toffeeweb does not sell or transfer any data to third parties for marketing purposes. Our internal analytics are conducted in a fully anonymized manner — no individual's identity is ever revealed.

The core principle of toffeeweb's Privacy Policy is simple — your data belongs to you. We will never sell your information under any circumstances. However, in limited situations, data may be shared with trusted third parties:

• Payment Processors: Payment gateways such as bKash, Nagad, and Rocket receive only the minimum information required to process transactions.
• Technology Service Providers: Third-party providers contracted for hosting, security, and software services — all of whom are bound by our privacy policy.
• Legal Authorities: Information may be disclosed as required by law in response to a court order or government directive.
• Anti-Fraud Organizations: Limited data may be shared with recognized bodies to prevent money laundering or fraud.

All third parties with whom we share data are bound by contract with toffeeweb and are required to uphold our privacy standards. They may only use the information for the specific purposes agreed upon.

Toffeeweb uses cookies and similar technologies on its website and app. Cookies are small data files stored in your browser or device that help enhance your experience.

Cookies we use:

• Essential Cookies: These cookies are essential for maintaining your login session and ensuring site security. Disabling them will prevent the site from functioning properly.
• Functional Cookies: Used to remember your preferences such as language and theme.
• Analytics Cookies: Collects anonymous statistics to understand which parts of the site are most used. No personal information is included.
• Security Cookies: Used to detect fraudulent login attempts and bot activity.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may limit certain features of the site.

Toffeeweb uses industry-leading security technology to keep your data safe. The key components of our security framework include:

• 256-bit SSL/TLS Encryption: All data transmission takes place through encrypted channels.
• Firewall & Intrusion Detection: Active monitoring to prevent unauthorized access to servers.
• Two-Factor Authentication (2FA): An additional layer of security at login.
• Encrypted Database: All stored data is kept in encrypted form.
• Regular Backups: Data is regularly backed up and stored in a secure location.
• Access Control: Only authorized personnel are permitted to access specific data.
• Data Breach Plan: In the event of a security breach, all relevant parties will be notified within 72 hours.

As a toffeeweb user, you have full control over your own data. Your key rights are outlined below:

To exercise any of these rights, please support@toffeeweb.appto email us. We will process your request within 30 days. The request will be fulfilled after your identity has been verified.

Toffeeweb does not retain your data indefinitely. Each type of information has a defined retention period:

Once the designated retention period expires, your data is securely and permanently deleted or fully anonymized so that you can no longer be identified in any way.

Toffeeweb services are strictly for users aged 18 and above. We do not knowingly collect personal information from minors.

Age verification is mandatory at registration. If we become aware that a minor has created an account:

• The account will be closed immediately.
• All associated data will be securely deleted.
• Any remaining balance will be refunded subject to verification.

If parents believe their child has created an account on toffeeweb, they should immediately support@toffeeweb.appto get in touch with us.

To learn more about responsible gaming, visit our Responsible Gaming View page.

Toffeeweb may update this Privacy Policy as needed — changes may arise from service improvements, new legal requirements, or user feedback.

For significant changes, we will:

• A notification will be sent to the registered email address.
• We will display a clear notice on the platform.
• We will note the update date at the top of this page.

Continuing to use toffeeweb after any changes have been made will be considered acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or complaints about this privacy policy, please reach out to us. Our data protection team will give your matter the attention it deserves.

To submit a privacy-related complaint, please use the subject line "Privacy Concern" Write to us and we will respond in detail within 7 business days.