TabTouch Privacy Policy – How We Protect Your Personal Data

This Privacy Policy applies to all services operated by TabTouch at tabtouch.ws, including sports betting, cricket betting, poker, Ludo games and all associated account, payment and promotional services.

When you create a TabTouch account, deposit funds, place bets or interact with any part of the platform, you share certain personal information with us. This policy explains exactly what that information is, why we need it, how we keep it safe and what control you have over it.

We have written this policy in plain language because we believe every TabTouch member – regardless of technical background – has the right to understand how their data is being handled. If anything in this policy is unclear, please contact our support team and they will explain it to you directly.

TabTouch collects only the data that is necessary to operate your account, process your transactions, verify your identity and comply with applicable obligations. The categories of data we collect are set out below.

TabTouch does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health data beyond what is strictly required for responsible gaming assessments.

Every piece of data TabTouch collects has a specific purpose. We do not collect data speculatively or hold data beyond its useful purpose. The primary uses of your data are:

• Account Management: Creating and maintaining your TabTouch account, processing logins and managing your account preferences and settings.
• Identity Verification: Confirming your identity to comply with Know Your Customer (KYC) requirements, verifying your age (18+) and confirming your payment method ownership.
• Transaction Processing: Processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card; processing withdrawal requests and maintaining financial records.
• Bet and Game Settlement: Recording bets placed, settling markets, crediting winnings and maintaining a history of your activity on the platform.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, unauthorised account access, multi-accounting and prohibited conduct as defined in our Terms and Conditions.
• Responsible Gaming: Monitoring betting patterns to identify members who may need responsible gaming support, and enforcing deposit limits, cooling-off periods and self-exclusion requests.
• Communications: Sending account-related notifications such as deposit confirmations, withdrawal updates, security alerts and, where opted-in, promotional offers from TabTouch.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the TabTouch platform, fix bugs and develop new features.

TabTouch processes your personal data on the following legal bases:

• Contractual Necessity: Processing your data is necessary to fulfil our contract with you – i.e., to operate your account, process your bets and handle your deposits and withdrawals. Without this processing, we cannot provide the TabTouch service.
• Legal Obligation: Identity verification (KYC), age verification and anti-money laundering checks are carried out to comply with applicable legal requirements.
• Legitimate Interests: Fraud prevention, security monitoring, platform improvement and responsible gaming assessments are carried out on the basis of TabTouch's legitimate interest in maintaining a safe, fair and sustainable platform.
• Consent: Marketing communications are sent only where you have explicitly opted in. You may withdraw this consent at any time.

TabTouch supports six payment methods for Pakistani members: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and Visa/Mastercard. The handling of payment data differs by method.

Mobile Wallets (Easypaisa, JazzCash, NayaPay, SadaPay)

When you deposit or withdraw via a mobile wallet, TabTouch records your registered mobile wallet number for the purpose of processing the transaction and associating it with your account. This number is stored in encrypted form. We do not hold your mobile wallet PIN, password or any other access credentials.

Bank Transfers (IBFT)

For IBFT transactions, TabTouch records your bank name and account number solely for the purpose of processing and verifying the transfer. This information is stored in an encrypted database and is not shared with any party other than the banks involved in processing the transfer.

Visa / Mastercard

Card payments on TabTouch are processed through PCI-DSS compliant payment processors. TabTouch does not store full card numbers, CVV codes or card expiry dates. Only a tokenised reference is retained to associate a card with your account for future transactions where authorised by you.

TabTouch uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse usage patterns. The types of cookies we use are:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and preference cookies that remember your settings. These cannot be disabled without breaking platform functionality.
• Analytics Cookies: Used to understand how members use the platform in aggregate – which pages are visited most, where sessions start and end, and which features are used. This data is anonymised and does not identify individual users.
• Security Cookies: Used to detect fraudulent activity and protect accounts from unauthorised access.

TabTouch does not use advertising cookies or share data with third-party advertising networks. You can manage cookie preferences through your browser settings, although disabling essential cookies will affect platform functionality.

TabTouch does not sell or rent personal data to third parties. Data is shared with external parties only in the following limited and necessary circumstances:

• Payment Processors: Your payment details are shared with the relevant payment processor (e.g., the Easypaisa or JazzCash gateway) solely to complete deposit and withdrawal transactions. These processors operate under their own privacy policies and security standards.
• Identity Verification Services: During KYC checks, identity documents may be processed by a third-party verification service. These services are contracted by TabTouch and operate under data processing agreements that require them to handle your data securely and use it only for verification purposes.
• Legal Obligations: TabTouch may be required to disclose certain member data to law enforcement, regulatory authorities or courts where required by applicable law. We will notify affected members where legally permitted to do so.
• Business Transfers: In the unlikely event of a merger, acquisition or sale of TabTouch, member data may be transferred to the successor organisation. Members will be notified of any such transfer.

TabTouch retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable record-keeping obligations.

• Active Account Data: Retained for the full duration of your active membership on TabTouch.
• Transaction Records: Financial records including deposit and withdrawal history are retained for a minimum of five years after the transaction, in compliance with standard financial record-keeping requirements.
• Identity Documents: CNIC copies and KYC documentation are retained for a minimum of five years after account closure.
• Support Communications: Chat and email records are retained for 24 months to allow review of historical queries and disputes.
• Technical and Usage Data: Anonymised usage data may be retained indefinitely for analytics purposes. Data linked to your specific account is deleted or anonymised within 90 days of account closure.

When your data is no longer required, TabTouch deletes it securely or anonymises it so that it can no longer be linked to you as an individual.

Data security is one of the most important operational priorities at TabTouch. The measures we have in place to protect your personal information include:

• Encryption in Transit: All data exchanged between your device and TabTouch is encrypted using TLS 1.2 or higher. The green padlock in your browser confirms this is active on every page.
• Encryption at Rest: Sensitive data stored in TabTouch databases – including identity documents, payment references and personal details – is encrypted at rest using AES-256.
• Access Controls: Access to member data within TabTouch is restricted on a need-to-know basis. Staff who do not have a legitimate operational reason to access your data cannot do so.
• Password Hashing: Your TabTouch password is stored as a salted cryptographic hash. This means that even TabTouch staff cannot read your actual password, and a database breach would not expose it in readable form.
• Fraud and Intrusion Monitoring: TabTouch operates continuous monitoring systems to detect unusual activity, suspected unauthorised access and potential security breaches.
• Regular Security Reviews: Our technical infrastructure undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.

As a TabTouch member, you have the following rights regarding the personal data we hold about you. You can exercise any of these rights by contacting our support team.

To exercise any of these rights, contact TabTouch support via live chat or at support@tabtouch.ws. We will acknowledge your request within 5 business days and complete it within 30 days.

TabTouch is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted during the registration and identity verification process.

If TabTouch becomes aware that an account has been created by or on behalf of a minor, the account will be immediately suspended, all activity will be reversed where possible, and the account will be permanently closed. Any funds deposited by a minor will be returned to the originating payment method.

If you believe a minor has created a TabTouch account, please contact our support team immediately at support@tabtouch.ws so we can take appropriate action.

TabTouch reviews this Privacy Policy regularly and updates it when our data practices change or when required by applicable law. The date at the top of this page reflects the most recent revision.

When material changes are made to this policy – changes that meaningfully affect how we collect, use or share your data – we will notify active members by email to their registered address and via an in-platform notification visible upon login.

Minor updates such as typographical corrections, clarifications that do not change the substance of the policy, or additions of new but inconsequential data processing activities may be made without prior notification. In all cases, the updated policy will be dated and accessible on this page.

Continued use of TabTouch after notification of a policy update constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data TabTouch holds about you, please get in touch using the contact details below. Our support team handles all privacy-related queries personally and confidentially.