🔒 PERSONAL DATA PROTECTION

TabTouch Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

At tabtouch, privacy is more than a word in a legal document. It is a genuine responsibility we take seriously every day. Find out exactly how your personal data is collected, used, protected, and managed by us.

Effective date: 1 January 2026 Updated: 1 January 2026 Compliant with: Malaysia PDPA 2010
256-bit SSL encryption

All data transmitted between you and tabtouch is automatically protected with industry-grade encryption.

PDPA 2010 Compliant

Tabtouch operates in full compliance with the Personal Data Protection Act 2010 as applicable in Malaysia.

Your Data Controls

You have the full right to access, correct, and request the deletion of your personal data at any time.

No Data Sales

TabTouch has never, and will never, sell members' personal data to any third party for marketing purposes.

Summary for You: TabTouch collects only the personal data necessary to deliver our services. We do not sell your data. You may request access to, correction of, or deletion of your data at any time. All data processing complies with Malaysia's Personal Data Protection Act (PDPA) 2010.

1

Introduction to TabTouch's Privacy Policy

This Privacy Policy ("Policy") describes how TabTouch ("tabtouch", "we", "our platform") collects, uses, stores, discloses, and protects your personal information ("personal data") when you use the tabtouch.biz website, the tabtouch mobile app, or any services we offer (collectively, the "Services").

TabTouch understands that your trust in us is closely tied to how we handle your personal data. As a platform serving hundreds of thousands of Malaysian players — from Malaysia Super League football fans to live casino enthusiasts and esports followers — we receive sensitive personal data every day and take that responsibility very seriously.

This policy applies to all individuals who interact with tabtouch, whether as prospective members, active registered members, or visitors who have not yet created an account. By registering a tabtouch account, you are deemed to have read and agreed to this Privacy Policy. This policy should be read together with Terms & Conditions tabtouch.

tabtouch is a "data controller" under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are responsible for determining the purposes and means of processing your personal data, and we are committed to ensuring that all such processing is lawful, fair, and transparent.

2

Types of Personal Data We Collect

Tabtouch collects only the data genuinely necessary to provide a safe, fair, and responsible betting service. The following are the categories of data we may collect:

2.1 Identity & Contact Data

Data TypeExampleRequired?
Full nameAs shown on your MyKad or PassportMandatory
Phone numberMalaysian number (01x-xxxxxxx)Mandatory
Email addressFor account notifications & promotionsMandatory
Date of birthAge verification 18+Mandatory
Residential addressCurrent Malaysian addressKYC only
Identity card numberMyKad (12 digits) or passportKYC only

2.2 Financial & Transaction Data

To process deposits and withdrawals, tabtouch collects information relating to your chosen payment method. This includes details associated with your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks) account. tabtouch does not store your credit card number, full bank account number, or e-wallet password – sensitive payment data is processed directly by licensed third-party payment providers.

2.3 Betting Activity Data

For risk management, compliance, and responsible gambling purposes, tabtouch records data relating to your betting activity, including: betting history, stake amounts, markets selected (sports, casino, poker, slots), date and time of bets, and bet outcomes.

2.4 Technical & Device Data

The tabtouch platform automatically collects certain technical information when you use our services, including: IP address, web browser type, device model, operating system, and access log data.

3

How Personal Data Is Collected

TabTouch collects your personal data through several different channels, depending on how you interact with our platform:

  • Account registration form: Basic information you provide when registering a new tabtouch account.
  • KYC (Identity Verification) process: Documents you upload for identity verification, including a copy of your MyKad or passport.
  • Payment portal: Transaction information transmitted through our payment providers (Touch 'n Go, DuitNow, FPX, etc.).
  • Platform usage: Data automatically generated when you browse, play, or interact with any part of tabtouch.
  • Customer support communications: Information you share when contacting the tabtouch support team via live chat or email.
  • Cookies and tracking technologies: Data collected through cookies and similar technologies as described in Section 7.
4

How We Use Your Personal Data

TabTouch uses your personal data only for purposes that are lawful, necessary, and directly related to the services we provide. The following are the primary purposes for which your personal data is used:

Purpose of UseLegal BasisObjection Rights?
Account management & maintenanceContract fulfilmentNo (required for the service)
Deposit & withdrawal processingContract fulfilmentNo (required for payment)
Identity verification (KYC)Legal obligationNo (required by law)
Fraud prevention & anti-money launderingLegal obligationNo (required by law)
Responsible gambling monitoringPublic interestRestricted
Customer supportContract fulfilmentNo (required for the service)
Promotional & bonus communicationsYour consentYes (unsubscribe at any time)
Platform analytics & improvementTabtouch's Legitimate InterestsYes

Tabtouch will not use your personal data for any other purpose without first notifying you and — where required — obtaining your consent. If tabtouch wishes to use your data for a new purpose that differs from the original reason it was collected, we will inform you and request fresh consent where necessary.

5

Sharing Personal Data with Third Parties

TabTouch does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of normal business operations, tabtouch may share your data with certain parties in the following circumstances:

5.1 Trusted Service Providers

Tabtouch works with selected third-party service providers to support platform operations, including payment providers (Touch 'n Go, DuitNow, FPX processors), casino software providers, and cybersecurity service providers. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specific, limited purposes.

5.2 Legal Requirements & Compliance

TabTouch may disclose your personal data to relevant authorities such as the Financial Intelligence Unit (FIU), police, or courts where required by Malaysian law, a court order, or valid legal process. In such cases, tabtouch will notify you (to the extent permitted by law) prior to disclosure.

5.3 Protection of tabtouch's Interests

In limited cases, tabtouch may share necessary data with third parties to detect and prevent fraud, money laundering, or platform abuse. Data shared is kept to the minimum required and is subject to strict confidentiality agreements.

Our commitment: TabTouch has never, and will never, share our members' personal data with advertisers, data brokers, or third-party marketing companies for targeted advertising purposes.

6

Data Storage, Security & Retention

6.1 Where Your Data Is Stored

Tabtouch personal data is stored on secure servers hosted in enterprise-grade data centres. All servers employ encryption at rest and encryption in transit. TabTouch utilises cloud infrastructure from providers with internationally recognised security certifications.

6.2 Technical Security Measures

  • 256-bit SSL/TLS Encryption for all communications between the platform and its servers
  • Two-Factor Authentication (2FA) available to all member accounts
  • 24/7 security monitoring against cyber threats and intrusion attempts
  • Regular security audits by an independent cybersecurity firm
  • Strict access controls – only authorised tabtouch employees may access personal data based on their job requirements
  • Data access logs which are recorded and retained for audit purposes

6.3 Data Retention Period

TabTouch retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Generally, active account data is retained for the duration of the active account period plus 7 years following account closure, for Malaysian legal compliance purposes (including financial record-keeping requirements under the Companies Act 2016 and anti-money laundering obligations).

7

TabTouch Cookie Policy

Like most modern websites, tabtouch uses cookies and similar tracking technologies to enhance user experience and ensure the platform's core functions work correctly. Here is an overview of the types of cookies we use:

Cookie TypePurposeDurationDismissible?
Essential Cookies Login sessions, active sessions, CSRF security, language preferences Session / 30 days No – required for core functionality
Functional Cookies Save your preferences (betting limits, odds display, etc.) 1 year Yes – though certain features may be affected
Analytics Cookies Understanding how players use the platform to drive improvements 2 years Yes – via cookie preference settings

You can manage your cookie settings through your web browser at any time. Please note that blocking all cookies may affect certain features of the tabtouch platform, including the ability to stay logged in between sessions.

8

Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data, all of which tabtouch fully respects. The following explains those rights:

Right of Access

You have the right to request a copy of the personal data tabtouch holds about you. We will process such requests within 21 business days.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update your details via the "My Profile" section in your tabtouch account.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. This is subject to any legal record-keeping obligations applicable to tabtouch.

Right to Object

You may object to the processing of your data for direct marketing purposes or for purposes based on tabtouch's legitimate interests at any time.

Right to Data Portability

You have the right to receive the personal data you have provided to tabtouch in a machine-readable format (such as CSV) for transfer to another platform.

Right to Restrict Processing

In certain circumstances (such as when the accuracy of your data is disputed), you may request that tabtouch temporarily restrict the processing of your data.

To exercise any of the above rights, please contact the tabtouch Privacy Officer by email privacy@tabtouch.biz or via live chat within your account. We will acknowledge receipt of your request within 3 business days and complete it within 21 business days, or notify you if additional time is required.

9

Children's Privacy Protection

TabTouch is an online betting platform designed exclusively for adults aged 18 and above. We do not accept registrations from underage individuals and do not knowingly collect personal data from children or minors under the age of 18.

All prospective members are required to confirm they are at least 18 years of age during registration. tabtouch also conducts age verification through the KYC process using valid identification documents. If tabtouch discovers that personal data belonging to someone under the age of 18 has been inadvertently collected, we will promptly delete that data and close the account in question.

If you are a parent or guardian and have reason to believe that your underage child has registered a tabtouch account, please contact us immediately at support@tabtouch.biz and we will take immediate action.

10

Changes to This Privacy Policy

TabTouch reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes to this Policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending notifications to all active members via their registered email address
  • Displaying a clear notice in your tabtouch account the next time you log in
  • For highly material changes, seeking members' re-consent before the changes take effect

Your continued use of tabtouch's services after any changes to the Policy take effect will be deemed as your acceptance of the amended policy. We therefore encourage you to review this page periodically.

11

Contact the TabTouch Privacy Officer

If you have any questions, concerns, or complaints about how tabtouch handles your personal data, or if you wish to exercise any of the rights described in this Policy, please contact us through the following channels:

Privacy Officer Email
privacy@tabtouch.biz
Live Chat (in-account)
24 hours a day, 7 days a week – Bahasa Malaysia & English
Response Time
Verified within 3 business days, resolved within 21 business days
Regulatory Authority
If your complaint cannot be resolved, you may submit it to the Department of Personal Data Protection (JPDP) Malaysia

By continuing to use the tabtouch platform, you confirm that you have read and understood this Privacy Policy. Thank you for trusting tabtouch with your personal data. Your trust is a responsibility we take seriously.


How TabTouch Protects Your Privacy

The concrete steps tabtouch takes every day to keep your personal data safe and secure.

Regular Security Audits

The tabtouch platform undergoes comprehensive security audits by independent cybersecurity firms at least twice a year to identify and address any vulnerabilities.

Internal Access Controls

Only tabtouch employees who genuinely require access to personal data to carry out their duties are permitted to do so — based on the principle of least privilege.

Data Breach Notification

In the event of any data breach that may affect your privacy, tabtouch is committed to notifying you and the relevant authorities within 72 hours.

🔒

Your Data Is Safe with TabTouch

Register with confidence. The tabtouch platform is built with security and privacy as a foundation — not an afterthought. Enjoy Sports Betting, Live Casino, and more with complete peace of mind.

PDPA 2010 Compliant 256-bit SSL No data selling Full control in your hands
Bahasa Melayu