tabt Privacy Policy

1 Introduction

tabt ("we", "us", "the Platform") operates the website at https://tabt.cam, which provides English-language online casino, sports betting, payment-method and player-protection information for adults in Malaysia and other eligible territories. As part of that operation, tabt necessarily collects and processes certain personal information relating to registered users and site visitors.

This Privacy Policy ("Policy") sets out what data we collect, the legal bases on which we process it, with whom we share it, how long we retain it, what security measures we apply, and what rights you hold in respect of your data. This Policy forms part of the overall agreement between you and tabt and should be read alongside the Terms & Conditions.

Users based in Malaysia should note that tabt does not claim to be regulated by any Malaysian government authority. Data processing is conducted in accordance with the applicable laws of the jurisdiction in which tabt holds its operating authorisation. Malaysian users retain obligations under the Personal Data Protection Act 2010 (PDPA) where that legislation applies to their own data-handling activities, though tabt itself operates under its applicable international framework.

2 Definitions

3 Data We Collect

tabt collects personal data across three broad categories depending on how you interact with the Platform:

3.1 Registration and Account Data

• Legal full name, date of birth and residential address.
• Email address and mobile telephone number.
• Username and encrypted password credentials.
• Preferred language and currency settings.

3.2 Identity Verification (KYC) Data

• Government-issued identity document (such as MyKad, passport or equivalent).
• Proof of residential address (utility statement, bank statement or equivalent).
• Source-of-funds documentation where required for high-value or unusual transactions.
• Facial or biometric verification data processed by an authorised third-party provider where two-factor identity checks are applied.

3.3 Transactional and Activity Data

• Deposit and withdrawal records, including amounts in MYR, payment method used (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB or Public Bank), timestamps and reference codes.
• Wagering history, game activity and session duration.
• Bonus and promotion claims and associated wagering-requirement progress.
• Responsible-gambling limit settings and self-exclusion requests.

3.4 Technical and Device Data

• IP address, approximate geolocation derived from IP, browser type and version.
• Device identifiers, operating system and screen resolution.
• Session logs including login timestamps and page-navigation sequences.
• Cookie and similar tracking data as described in Section 8.

3.5 Communication Data

• Content of support enquiries submitted via live chat, email or other contact channels.
• Records of notifications and promotional communications sent to you and your preference settings.

4 Legal Basis for Processing

tabt processes personal data under one or more of the following legal bases:

5 Data Processing Purposes

Personal data collected by tabt is processed for the following purposes:

• Account management: Creating, maintaining, securing and closing user accounts and verifying continued eligibility under the Terms & Conditions.
• KYC and compliance: Verifying user identity, age (21+ requirement) and source of funds as required by applicable licensing conditions and anti-money-laundering obligations.
• Payment processing: Facilitating deposits and withdrawals through supported Malaysian payment channels and maintaining accurate transaction records.
• Fraud prevention: Detecting and investigating suspicious account activity, coordinated bonus abuse, duplicate registrations and potential money-laundering patterns.
• Responsible gambling: Monitoring account activity in support of deposit limits, session controls and self-exclusion obligations, and flagging patterns that may indicate problematic gambling behaviour.
• Customer support: Responding to enquiries, resolving disputes and maintaining records of support interactions for quality and training purposes.
• Service improvement: Analysing aggregated or pseudonymised usage data to improve Platform performance, navigation and content relevance.
• Marketing communications: Sending promotional offers, bonus notifications and relevant updates to users who have consented to receive such communications and have not subsequently opted out.
• Legal and regulatory obligations: Retaining records, responding to lawful authority requests and exercising or defending legal claims.

6 Data Sharing and Third Parties

tabt does not sell, rent or trade your personal data to unrelated commercial third parties. Data is shared only in the following limited circumstances:

• Payment service providers: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and other supported channels, to the extent necessary to process your transactions.
• Identity verification providers: Third-party KYC and document-check services that process your identity documentation under strict contractual data-processing agreements.
• Fraud-prevention and AML services: Screening services that check user details against applicable sanctions lists and fraud-risk databases.
• IT infrastructure and hosting providers: Cloud and server providers that store Platform data, operating under data-processing agreements that bind them to appropriate security standards.
• Legal authorities: Where tabt is required by a court order, regulatory direction or other lawful obligation to disclose personal data, we will do so to the minimum extent required and, where legally permissible, will notify the affected user.
• Business restructuring: In the event of a merger, acquisition or asset sale, personal data held by tabt may be transferred to a successor entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by tabt are required to process personal data solely on documented instructions and to implement appropriate technical and organisational safeguards.

7 User Rights

Subject to the applicable law governing tabt's data-processing operations, you may hold some or all of the following rights in respect of your personal data:

To exercise any of these rights, contact tabt support at the email address in the site footer. We will acknowledge your request within a reasonable timeframe and respond substantively within the period required by applicable law. Verification of identity may be required before a request is actioned.

8 Cookies and Tracking Technologies

tabt uses cookies and similar technologies to support Platform functionality and to understand how users navigate the site. The following categories of cookies may be in use:

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the availability or security of certain Platform features.

9 Data Retention

tabt retains personal data for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. The following general principles apply:

• Active accounts: Personal, transactional and KYC data is retained throughout the period your account is active and for a defined period after closure to meet regulatory record-keeping obligations.
• KYC and compliance records: Identity verification and transaction records may be retained for a minimum of five years following account closure, or longer where required by anti-money-laundering regulation.
• Marketing data: Contact preferences and communication history are retained until you withdraw consent or opt out, after which they are suppressed or deleted within a reasonable period.
• Technical logs: Server and access logs may be retained for a shorter period consistent with security and fraud-investigation purposes, typically up to twelve months.

When personal data is no longer required and no overriding retention obligation applies, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

10 Security Measures

tabt applies a layered approach to data security, combining technical, procedural and organisational controls proportionate to the risk and sensitivity of the data processed. Measures in use include or may include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and tabt's servers.
• Encryption or hashing of authentication credentials at rest.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident-response procedures governing detection, containment, notification and review of any data breach.

Notwithstanding these measures, no system connected to the internet can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for reporting any suspected unauthorised access promptly.

11 International Data Transfers

tabt's servers and operational infrastructure may be located outside Malaysia. By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions whose data-protection laws differ from those applicable in Malaysia.

Where such transfers occur, tabt requires that equivalent safeguards be applied, including contractual clauses between tabt and relevant Data Processors that impose obligations consistent with applicable data-protection standards. transfers to third-party KYC providers, payment processors or fraud-screening services operating in other countries are subject to the same contractual safeguard requirements.

12 Minors and Age Restriction

tabt is strictly an adult platform intended for users aged 21 years and above. tabt does not knowingly collect personal data from individuals under the age of 21. Where tabt becomes aware that an account has been registered by a person below the minimum age, that account will be immediately suspended, all associated data will be reviewed under our KYC and compliance procedures, and the account will be closed.

Parents and guardians who believe a minor may have accessed or registered on tabt are encouraged to contact support immediately using the email address in the site footer.

13 Amendments to This Policy

tabt may update this Privacy Policy periodically to reflect changes in data-processing practices, applicable law or Platform functionality. When material changes are made, the revised Policy will be published at this URL with an updated effective date. Where changes are significant, tabt may also notify registered users via their registered email address.

Continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms. Users who do not agree with any amendment should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14 Contact Us

For questions about this Privacy Policy, to exercise a data right or to raise a data-protection concern, please contact the tabt support team. Our website email is published in the footer of every page: [email protected] (plain text — not a clickable link). Please mark your message with the subject line "Privacy Enquiry" to ensure it reaches the appropriate team.

For matters relating to responsible gambling or self-exclusion, please visit the Responsible Gambling page.