Privacy Policy

This Privacy Policy ("Policy") describes how tapkad ("the Platform", "we", "us", "our") collects, processes, stores and protects personal data belonging to individuals ("you", "the User") who access or use the services available at tapkad.cam. tapkad is an English-language online betting and casino information platform designed primarily for Pakistani players.

We are committed to handling your personal data with transparency, integrity and in accordance with applicable data protection principles. This Policy is designed to help you understand exactly what information we hold about you and how it is used — in plain, straightforward English.

This Policy applies to all personal data collected through the tapkad website, support channels, account registration processes and any other interaction you have with the Platform. By registering an account or using the Services, you acknowledge that you have read and understood this Policy.

Throughout this Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that identifies or could reasonably identify a living natural person, either directly (e.g., name, email address) or indirectly (e.g., IP address, device identifier).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, alteration or deletion.
• "Data Controller" means tapkad, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of tapkad under written contractual terms.
• "Consent" means a freely given, specific, informed and unambiguous indication by which you signify agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity, age and address verification process required to confirm the eligibility of a User.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, analytics and personalisation.
• "Services" means all features, functionality, content and support resources made available through the tapkad Platform.

tapkad collects Personal Data across several categories depending on how you interact with the Platform. The table below sets out the primary categories of data we hold:

We do not collect sensitive categories of Personal Data (such as health, biometric or political data) unless strictly required by applicable regulatory obligations and with your explicit prior consent.

tapkad collects your Personal Data through the following channels:

• Direct submission — data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or filling in any forms on the Platform.
• Automated technical collection — data collected automatically as you interact with the Platform, including IP addresses, device identifiers, browser fingerprints and session logs via cookies and similar tracking technologies.
• Payment processors — transaction references and status information received from payment service providers when you make a deposit or request a withdrawal. Payment references to methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited here as contextual examples only and do not imply endorsement of or affiliation with gambling activity.
• Third-party identity verification providers — data returned from KYC and anti-money-laundering (AML) screening services used to verify the identity and eligibility of account holders.
• Publicly available sources — information from public registers, sanctions lists or fraud-prevention databases used for compliance and risk screening purposes.

tapkad processes your Personal Data for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without providing prior notice and, where required, obtaining your consent.

• Account creation and management: To register your account, verify your identity and age, maintain your profile and process your transactions on the Platform.
• Service delivery: To provide access to sports betting markets, casino games, live dealer tables and all other features available on tapkad.
• Financial transactions: To process deposits, withdrawals and refunds accurately and securely, and to maintain complete transaction records as required by applicable regulations.
• Regulatory compliance: To meet legal and regulatory obligations including KYC, AML screening, sanctions checking, age verification and responsible gambling monitoring.
• Fraud and security: To detect, investigate and prevent fraudulent activity, unauthorised account access, money laundering and other unlawful conduct affecting the Platform.
• Responsible gambling: To monitor betting patterns, enforce self-exclusion and deposit or loss limits, and flag potentially problematic gambling behaviour in line with our Responsible Gambling Policy.
• Customer support: To respond to your enquiries, resolve disputes, process complaints and improve the quality of our support services.
• Platform optimisation: To analyse usage patterns and technical performance data so we can improve the Platform's features, stability and user experience.
• Marketing communications: To send you relevant promotional offers, new feature announcements and Platform updates — only where you have provided explicit consent or where a legitimate interest applies, and always with an easy opt-out mechanism.

tapkad processes your Personal Data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — for example, creating your account, processing your bets and handling withdrawals.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, sanctions screening and responsible gambling obligations mandated by our operating licence jurisdiction.
• Legitimate interests: Processing necessary for tapkad's legitimate business interests, such as fraud prevention, platform security and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific and informed consent — for example, processing your data for marketing communications or for certain optional analytics features.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tapkad does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Service providers and Data Processors: Third-party vendors engaged to operate specific components of the Platform — including payment processors, KYC verification providers, cloud hosting services, customer support software and analytics tools — under strict data processing agreements that prohibit them from using your data for any purpose beyond the contracted service.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, regulatory directive or lawful request from a competent authority. tapkad will, where legally permissible, notify you of such requests before disclosure.
• Fraud prevention and AML agencies: Information may be shared with recognised fraud-prevention databases and financial intelligence bodies to detect and prevent money laundering, terrorist financing and other financial crimes.
• Corporate transactions: In the event of a merger, acquisition, restructuring or sale of all or part of tapkad's business assets, your Personal Data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
• With your explicit consent: For any other disclosure not covered above, we will obtain your prior explicit consent before sharing your Personal Data.

All third-party Data Processors are contractually bound to process your Personal Data only on documented instructions from tapkad and to implement appropriate technical and organisational security measures.

tapkad uses cookies and similar tracking technologies — including web beacons, pixel tags and local storage objects — to enhance your experience on the Platform, maintain session state and gather analytics data. The main categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function correctly. These cookies manage your login session, maintain your account state and enable core security features. They cannot be disabled without breaking Platform functionality.
• Performance and analytics cookies: Used to understand how Users interact with the Platform — including which pages are visited most frequently, how long sessions last and where errors occur. This data is aggregated and does not identify individual users.
• Functionality cookies: Store your preferences (such as display settings and language) so the Platform can deliver a personalised experience on return visits.
• Targeting and marketing cookies: Used only where you have provided explicit consent, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Platform. For a complete list of cookies in use and their purposes, please contact us at [email protected].

tapkad retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and contractual obligations. The following general retention principles apply:

• Active accounts: Personal Data associated with an active account is retained for the duration of the account's existence and for a minimum of five (5) years following account closure, unless a longer retention period is required by applicable law or regulatory mandate.
• Transaction records: Financial transaction data and KYC documentation are retained for a minimum of five (5) years from the date of the final transaction or account closure, to satisfy AML and financial record-keeping requirements.
• Support communications: Customer support records, including chat transcripts and email correspondence, are retained for up to three (3) years from the date of the last interaction.
• Marketing data: Data processed on the basis of consent for marketing purposes is retained until consent is withdrawn, after which it is deleted or anonymised within a reasonable period.
• Technical and log data: Server logs, IP address records and session data are retained for up to twelve (12) months for security and fraud-investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders re-identification impossible.

tapkad implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. Our security framework includes:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive Personal Data stored on our servers, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a documented business need can access Personal Data.
• Regular security audits, penetration testing and vulnerability assessments conducted by qualified security professionals.
• Automated monitoring systems that detect and alert on suspicious access patterns or potential data breaches in real time.
• Staff training and internal data protection policies that set clear standards for how Personal Data must be handled by tapkad employees and contractors.

While we apply industry-standard safeguards, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, tapkad will notify affected Users and relevant authorities in accordance with applicable data breach notification obligations.

Subject to applicable data protection law and certain legal limitations, you hold the following rights in relation to your Personal Data held by tapkad. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is being processed.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your Personal Data while a dispute regarding its accuracy or the lawfulness of processing is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format.
• Right to object: You have the right to object to the processing of your Personal Data where it is carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

tapkad will respond to all data rights requests within 30 days of receipt. Where a request is complex or voluminous, this period may be extended by a further 60 days, with prior notice to you. We may ask you to verify your identity before processing any data rights request.

tapkad is strictly an adults-only platform. We do not knowingly collect, process or retain Personal Data from any individual under the age of 18, or under the higher minimum age required by the applicable licence jurisdiction. The Platform employs age verification measures at the point of registration and during the KYC process to prevent minors from accessing gambling services.

If tapkad becomes aware that Personal Data has been collected from a minor without verifiable parental or guardian consent, that data will be deleted immediately and the associated account will be permanently closed. Any funds deposited by a minor will be returned to the source payment method after appropriate identity checks.

If you believe that a minor has registered an account on tapkad, please notify us immediately at [email protected] so we can take prompt remedial action.

The tapkad Platform may, from time to time, contain references to or contextual mentions of third-party services — including payment providers familiar to Pakistani users such as Easypaisa, JazzCash and Raast, or sports organisations such as the Pakistan Super League and ICC. These references are informational only and do not constitute hyperlinks to external sites or endorsements of those organisations.

tapkad does not control the privacy practices of any third-party service provider and accepts no responsibility for the content, privacy policies or data practices of any external entity. Where you interact with third-party payment processors or verification services as part of the account or transaction process, those interactions are governed by the respective third party's own privacy policy.

tapkad reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices or the features of the Platform. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes are significant, we will provide reasonable prior notice via email to your registered address or through a prominent notice on the Platform. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed of how tapkad protects your Personal Data. If you disagree with any material change to this Policy, you may close your account in accordance with the account termination provisions in our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the way tapkad handles your Personal Data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries within 48 hours.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for data breach reports: "Security — Urgent"
• Support Hours: 24 hours a day, 7 days a week
• Language: English (Urdu support available on request)
• Coverage: Serving players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar

We take all privacy concerns seriously. Where you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction where tapkad holds its operating licence.