tujhe bat Privacy Policy — How We Handle Your Personal Data

tujhe bat operates the online betting and casino platform accessible at tujhebat.com (the "Platform"). For the purposes of this Privacy Policy, tujhe bat is the data controller — meaning we determine how and why your personal data is processed.

This Policy applies to all registered players on the tujhe bat Platform and to any visitor who accesses tujhebat.com, whether or not they hold an account. If you have questions about anything in this Policy, you can contact our Data Protection team at privacy@tujhebat.com.

This Privacy Policy should be read alongside the tujhe bat Terms and Conditions, which govern your use of the Platform as a whole. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

tujhe bat collects personal data in several ways — information you provide directly, information generated by your activity on the Platform, and information received from third-party service providers. The table below summarises the main categories.

tujhe bat does not knowingly collect sensitive personal data (such as religious beliefs, health data, or biometric data) except where identity verification requires document photographs as part of the CNIC verification process. We do not store biometric templates derived from document images.

tujhe bat uses your personal data only for specific, clearly defined purposes. We do not use your data for any purpose incompatible with the reasons it was originally collected. The main uses are:

• Account management: Creating, maintaining, and securing your tujhe bat account. Verifying your identity using your CNIC to comply with age verification and anti-money laundering obligations.
• Processing PKR transactions: Handling deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard. Processing withdrawal requests to your registered payment method.
• Providing the Platform: Delivering cricket betting markets, casino games, crash games, and live baccarat. Personalising your account dashboard and game recommendations based on your activity.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of support interactions for quality purposes.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, collusion, and account abuse. Monitoring login patterns for suspicious access.
• Responsible gaming: Monitoring your activity to identify patterns consistent with problem gambling. Enforcing deposit limits, cooling-off periods, and self-exclusion requests you have set.
• Legal compliance: Satisfying our obligations under applicable law, including responding to lawful requests from regulatory authorities and law enforcement.
• Platform improvement: Analysing aggregate, anonymised usage data to improve the tujhe bat Platform, fix bugs, and develop new features.
• Marketing communications: Sending you promotional offers and updates about tujhe bat — only if you have opted in to marketing communications. You can opt out at any time.

tujhe bat processes your personal data on one or more of the following legal bases depending on the specific use:

• Contractual necessity: Processing required to perform our contract with you — your tujhe bat account agreement. This covers account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with laws applicable to tujhe bat, including identity verification obligations, AML record-keeping, and response to lawful authority requests.
• Legitimate interests: Processing necessary for tujhe bat's legitimate business interests where these are not overridden by your rights. This includes fraud prevention, security monitoring, and Platform improvement using anonymised data.
• Consent: Where we rely on your consent — most notably for marketing communications and non-essential analytics cookies — you can withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

tujhe bat shares personal data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose. All third-party processors are bound by contractual data processing agreements that require them to protect your data to at least the same standard as tujhe bat.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT gateway providers, and card-processing partners receive the minimum data necessary to authorise and process your PKR transactions.
• Identity verification providers: Third-party KYC (Know Your Customer) services that help us verify your CNIC and confirm your age. These providers process your identity document data solely for verification and are prohibited from using it for any other purpose.
• Game content suppliers: Providers of slot games, crash games, and live dealer content who host game logic on their servers. These providers receive a session token and anonymised player identifier — they do not receive your name, CNIC, or contact details.
• Fraud detection services: Specialist fraud screening tools that analyse transaction patterns and login behaviour. These services receive pseudonymised data sufficient to detect anomalies.
• Customer support platform: Our support software provider who stores support chat transcripts and email correspondence subject to our data processing agreement.
• Regulatory and law enforcement authorities: When required by a valid legal obligation or lawful court order. tujhe bat will notify you of any such disclosure where permitted by law.

Because all tujhe bat transactions are in Pakistani Rupees, your payment data flows through Pakistani-operated payment systems. Here is specifically what tujhe bat does and does not store in relation to payments:

• We store: Transaction reference numbers, PKR amounts, timestamps, payment method type (e.g. "Easypaisa"), and the last four digits of a card number for display purposes in your transaction history.
• We do not store: Your full card number, card CVV / CVC, Easypaisa or JazzCash PIN, or any payment credential that could be used to initiate a transaction without your active involvement.
• Tokenisation: For repeat deposits via card, a payment token provided by the processor is stored — not the underlying card data. This token can only be used for transactions initiated by you on tujhe bat.

All payment data in transit is protected by TLS 1.3 encryption. tujhe bat's payment infrastructure undergoes regular security assessments. We do not process payment data on systems that also handle general Platform traffic — payment processing operates in an isolated, hardened environment.

tujhe bat retains personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The key retention periods are:

• Active account data: Retained for the lifetime of your tujhe bat account plus five years after account closure to satisfy legal record-keeping obligations.
• Identity verification documents (CNIC): Retained for five years following account closure or the last transaction, in line with AML obligations.
• Transaction and betting records: Retained for five years following each transaction to satisfy financial record-keeping requirements.
• Support communications: Retained for two years from the date of the last interaction.
• Technical and security logs: Retained for 90 days for routine security monitoring; longer where a security incident requires investigation.
• Marketing consent records: Retained for the duration of your consent plus two years to demonstrate compliance if needed.

When data is no longer required, it is securely deleted or anonymised. Anonymised data — where your identity cannot be recovered — may be retained indefinitely for aggregate analytics purposes.

tujhe bat uses cookies and similar tracking technologies on the Platform. The table below explains the categories of cookies we use.

tujhe bat does not use third-party advertising or social media tracking cookies. You can manage your cookie preferences for non-essential cookies in your account settings. Disabling analytics cookies does not affect your ability to use any tujhe bat feature.

As a tujhe bat player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at privacy@tujhebat.com. We will respond within 30 days of receiving a valid, verified request.

tujhe bat takes the security of your personal data seriously. We maintain technical and organisational measures appropriate to the risk of processing, including:

• Encryption: All data in transit is protected by TLS 1.3. Sensitive data at rest — including CNIC data and password hashes — is encrypted using AES-256.
• Access controls: Employee access to personal data is governed by the principle of least privilege — each person can only access the data necessary for their specific role. All access is logged and regularly audited.
• Two-factor authentication: Available for all tujhe bat player accounts. Mandatory for administrative and support staff accounts.
• Regular security testing: The Platform undergoes regular vulnerability assessments and penetration testing by independent security professionals.
• Incident response: tujhe bat maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights, you will be notified promptly.

While tujhe bat takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You also have responsibilities — keep your login credentials private, use a strong unique password, and enable 2FA on your tujhe bat account.

tujhe bat is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the account registration process using CNIC data.

If tujhe bat discovers that an account has been created by a person under 18, the account will be immediately closed, all gaming activity from that account will be voided, and any funds deposited will be returned to the original payment method after deducting any winnings derived from gaming activity. Any data collected from a minor will be deleted promptly.

If you believe a minor has registered on tujhe bat, please contact us immediately at privacy@tujhebat.com so we can investigate and take appropriate action.

tujhe bat may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes — those that significantly affect how we use your personal data — we will notify you via your registered email address at least 14 days before the changes take effect.

The current version of this Privacy Policy is always available at tujhebat.com/privacy-policy. The version number and effective date are shown at the top of this page. We recommend reviewing this Policy periodically to stay informed. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

For any privacy-related query, data rights request, or concern about how tujhe bat handles your personal data, please contact us using the following channels:

• Privacy email: privacy@tujhebat.com — for formal data rights requests, erasure requests, and data access queries
• General support email: support@tujhebat.com — for account-related queries and general privacy questions
• Live Chat: Available 24/7 on tujhe bat for urgent privacy concerns

All data rights requests received by email are acknowledged within 48 hours. A full response — including either fulfilment of the request or a detailed explanation of why we cannot fulfil it — will be provided within 30 days. For complex requests we may extend this to 60 days but will notify you of the extension and the reason within the initial 30-day period.