TabTouch Privacy Policy — Your Data, Explained Clearly

1. Who We Are

TabTouch is an online gaming platform operated for Pakistani players, offering sports betting, live casino, jackpot slots, Andar Bahar, Ludo, fishing games and related gaming services. All accounts on TabTouch are denominated in Pakistani Rupees (PKR) and all payment transactions are conducted via Pakistani payment methods.

When this Privacy Policy refers to "TabTouch", "we", "us" or "our", it refers to the TabTouch platform and its operating entity. When it refers to "you" or "your", it means you as a registered user or visitor to the TabTouch website.

This Privacy Policy explains what personal data TabTouch collects from Pakistani players and visitors, why we collect it, how we use and store it, who we share it with and what rights you have over it. This Policy applies to all personal data collected through the TabTouch website, mobile browser interface and any associated communications including email and live chat support.

2. Data We Collect

TabTouch collects personal data through several channels — when you register, when you deposit or withdraw funds, when you contact support, and automatically as you use the platform. Here is a full breakdown of what we collect and where it comes from.

2.1 Data You Provide Directly

• Registration data: Name, mobile phone number, date of birth, email address (if provided) and password (stored encrypted — we never see or store your plain-text password).
• Identity verification: CNIC number, CNIC copy/scan and selfie where verification is required. This data is collected only when identity verification is triggered — typically at withdrawal for first-time or large withdrawals.
• Payment data: Your Easypaisa or JazzCash account number, NayaPay or SadaPay wallet details, bank account or IBAN number for IBFT transfers, or the last four digits and billing name of your Visa/Mastercard card. We do not store full card numbers — card data is handled by our payment processor, not TabTouch directly.
• Support communications: The content of messages, emails and live chat conversations you have with TabTouch support. This includes any documents or screenshots you share.
• Responsible gaming declarations: Information you provide when setting limits, requesting self-exclusion or making a responsible gaming declaration.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution and preferred language settings.
• Usage data: Pages visited, time spent on each page, games played, bets placed, session duration, login timestamps and navigation paths through the platform.
• Transaction logs: Full records of deposits, withdrawals, bonus claims, bet placements, game rounds and account balance changes. These are stored permanently for compliance purposes.
• Cookies and tracking: Cookie identifiers and similar tracking data — covered in full in Section 8 below.

3. How We Use Your Data

TabTouch uses personal data only for legitimate purposes directly related to operating the platform and serving Pakistani players. The table below summarises how each category of data is used.

TabTouch does not use your personal data for any purpose not listed in this Policy. We do not build profiles for sale to advertisers or data brokers. We do not use your data to make fully automated decisions that have significant legal effects on you without human review.

4. Legal Basis for Processing Your Data

TabTouch processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to deliver the services you signed up for — running your account, processing deposits and withdrawals, settling bets and providing customer support. Without this processing, TabTouch cannot provide you with the service.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money-laundering checks, identity verification for large transactions and cooperation with law enforcement where legally required.
• Legitimate interests: Processing for purposes such as fraud detection, security monitoring, platform improvement, responsible gaming monitoring and resolving disputes, where these interests do not override your fundamental privacy rights.
• Consent: Processing that relies on your explicit agreement — specifically, sending you marketing and promotional communications via SMS, email or push notification. You can withdraw this consent at any time by updating your notification preferences in your account settings or by contacting support.

5. Who We Share Your Data With

TabTouch does not sell your personal data to any third party. Full stop. We share data only with specific categories of service provider where that sharing is necessary to operate the platform, and only to the extent required for that specific purpose.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer processing partners and card payment acquirers receive the payment data necessary to process your transaction. They operate under their own privacy policies and are bound by contractual data protection obligations with TabTouch.
• Identity verification providers: Where TabTouch uses a third-party KYC (Know Your Customer) service to verify your identity, that provider will receive your CNIC data and selfie for the purpose of verification only. Verification providers are bound by strict contractual obligations and are not permitted to use your data for any other purpose.
• Game providers: Some games on TabTouch are supplied by third-party providers. These providers may receive your player ID and game session data for the purpose of running and logging game rounds. They do not receive your name, mobile number, payment details or other identifying information.
• Fraud prevention and security: Where required, TabTouch may share account data with fraud prevention platforms to verify the legitimacy of transactions and detect multi-account abuse.
• Legal and regulatory authorities: TabTouch will share data with police, financial intelligence units or other competent authorities where legally required to do so — for example, in response to a court order, warrant or anti-money-laundering reporting obligation.

All third parties with whom TabTouch shares personal data are required under contract to process that data only for the specified purpose, to maintain appropriate security and to comply with applicable data protection obligations. TabTouch does not permit any service provider to use your data for their own marketing or business purposes.

6. PKR Payments and Financial Data

Because TabTouch operates entirely in Pakistani Rupees, all financial data — deposits, withdrawals, balance movements — is recorded and retained in PKR without any currency conversion. This is worth explaining separately because it affects how your financial data is handled differently from a platform that converts to or from USD or EUR.

Your transaction history on TabTouch is stored in full and permanently. This is a legal requirement under applicable anti-money-laundering and financial record-keeping rules. You can view your own transaction history in your account dashboard at any time. TabTouch does not delete financial transaction records even if you close your account.

When you use Easypaisa or JazzCash to deposit or withdraw, TabTouch receives a transaction confirmation reference from the payment provider — not your full mobile wallet login credentials or transaction PIN. For bank transfers, TabTouch receives the IBFT transaction reference. For card payments, TabTouch receives a masked card token and the last four digits — never the full card number.

7. Data Retention

TabTouch retains different categories of data for different periods based on the purpose for which they were collected and applicable legal requirements.

When retention periods expire, data is deleted from active systems. Some anonymised aggregate data (for example, aggregate bet volumes across the platform) may be retained indefinitely as statistical records where no individual can be identified from it.

Closing your TabTouch account does not immediately delete your data. We are required to retain transaction records and identification data for the periods above, regardless of account status. Your data will not be used for active account functions after closure, but it will remain in our compliance archive for the required period.

8. Cookies and Tracking Technologies

TabTouch uses cookies and similar tracking technologies on its website. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies help the platform remember you, keep your session active and understand how players use the site so we can improve it.

TabTouch uses the following categories of cookies:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so for essential cookies will affect your ability to use TabTouch normally. A cookie preference panel is available in your account settings once logged in.

TabTouch does not use third-party advertising cookies or tracking pixels for ad targeting purposes. We do not participate in cross-site tracking programmes or allow third-party advertisers to place cookies on TabTouch pages.

9. Your Data Rights

As a TabTouch player, you have the following rights over your personal data. You can exercise any of these rights by contacting TabTouch at support@tabtouch.im with the subject line "Data Rights Request" and your account username.