Your Privacy,
Our Commitment

1. Overview & Scope

This Privacy Policy ("Policy") applies to tbc368, the online casino and sports betting platform operated at tbc368.pro. It describes the personal data we collect from players and visitors, the purposes for which that data is processed, how we protect it, and your rights regarding your information.

By registering an account, accessing our website, or using any tbc368 service — including Buffalo King, Dragon Tiger, Cockfighting, Jackpot Slots, live dealer games, and PKR sports betting — you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform.

2. Information We Collect

We collect personal information in two main ways: data you provide directly, and data collected automatically during your use of the platform.

Information You Provide:

• Registration Data: Full name, date of birth, email address, mobile number, and residential address when you create a tbc368 account.
• Identity Verification (KYC): Government-issued ID (e.g., CNIC, passport), proof of address, and selfie verification required for withdrawal processing and regulatory compliance.
• Payment Information: Details associated with your chosen deposit or withdrawal method, such as Easypaisa account numbers, JazzCash wallet identifiers, bank account details (HBL, UBL, MCB, Meezan Bank, Bank Alfalah), or card-holder names for Visa/Mastercard transactions. Full card or account numbers are not stored by tbc368 — these are processed by our payment gateway partners.
• Support Communications: Messages, complaints, and feedback you send to our customer support team.

Information Collected Automatically:

• Device & Technical Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, games played, session duration, bet history, deposit and withdrawal logs, and navigation patterns within the platform.
• Cookies & Local Storage: Session tokens, preference data, and analytics identifiers (see Section 8 for full cookie details).
• Geolocation: Approximate country and city-level location derived from your IP address, used for fraud detection and regulatory compliance.

3. How We Use Your Information

tbc368 uses your personal data for the following defined purposes:

Purpose	Data Used
Account creation & management	Registration data, contact details
Identity verification (KYC/AML)	ID documents, date of birth, address
Payment processing in PKR	Payment method data, transaction history
Fraud detection & security	IP address, device data, usage patterns
Responsible gaming & self-exclusion	Gameplay data, deposit limits, exclusion status
Customer support	Support communications, account data
Marketing (opt-in only)	Email address, mobile number, game preferences
Platform analytics & improvement	Anonymised usage data, session data
Legal & regulatory compliance	All applicable data as required by law

4. Legal Basis for Processing

tbc368 processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements and age verification obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving the quality of our services, where these interests are not outweighed by your privacy rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

tbc368 does not sell, rent, or trade your personal data. We may share data with the following categories of recipients under strictly controlled conditions:

• Payment Service Providers: Easypaisa, JazzCash, SadaPay, Raast, and partner banking institutions require transaction data to process your PKR deposits and withdrawals. These providers operate under their own privacy frameworks.
• KYC & Identity Verification Partners: Third-party services that verify your identity documents. Only the minimum data required for verification is transmitted.
• Technology & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under data processing agreements.
• Regulatory & Law Enforcement Authorities: Where we are legally required to disclose data by applicable law, court order, or government request, we will comply while endeavouring to notify you where permitted.
• Fraud Prevention Services: Industry-shared fraud databases and risk scoring providers, used to protect the platform and all players from financial crime.

All third-party recipients of your data are contractually bound to use it only for the specified purpose and to maintain appropriate security standards.

6. Data Retention

We retain your personal data for as long as your tbc368 account remains active, plus an additional period required for legal and regulatory compliance purposes. Specific retention windows include:

• Account & KYC records: Retained for a minimum of five (5) years following account closure, in line with AML obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or request deletion.
• Technical logs: Typically retained for ninety (90) days before automated deletion.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to your identity.

7. Security Measures

tbc368 employs a multi-layered security framework to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• Transport Layer Security (TLS/SSL) encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases.
• Bcrypt password hashing — plain-text passwords are never stored.
• Two-factor authentication (2FA) availability for player accounts.
• Regular penetration testing and security audits by independent third parties.
• Strict internal access controls — employee access to player data is granted on a need-to-know basis only.
• 24/7 automated monitoring for suspicious activity and potential data breaches.

8. Cookies & Tracking

tbc368 uses cookies and similar tracking technologies to operate the platform efficiently and securely. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function. These handle session authentication, security tokens, and load balancing. They cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players interact with our platform — which games are most popular, average session length, and navigation flows. Data is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language setting, display options, and notification choices to improve your experience on return visits.

tbc368 does not use third-party advertising cookies or cross-site tracking technologies. You can control cookie settings through your browser. Note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

9. Your Privacy Rights

As a tbc368 player, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at the details in Section 14:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances (subject to legal retention obligations).
• Right to Restriction: Request that we limit how we use your data while a dispute or investigation is ongoing.
• Right to Object: Object to the processing of your data for direct marketing or for purposes based on legitimate interests.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw any previously given consent for marketing or optional processing at any time.

We aim to respond to all privacy-related requests within 30 days. Complex requests may take longer, in which case we will keep you informed of the timeline.

10. Children's Privacy – 18+ Only

tbc368's services are strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has registered an account, we will immediately close that account, void any associated gameplay, and securely delete all data related to that individual.

If you are a parent or guardian and believe your child may have accessed tbc368, please contact us immediately at [email protected] so we can take appropriate action.

11. International Data Transfers

tbc368 may store and process your data on servers located outside Pakistan. Where international transfers occur, we ensure that appropriate safeguards are in place — including contractual data protection clauses with recipients — so that your data receives a level of protection consistent with this Policy regardless of where it is processed.

12. Third-Party Services

The tbc368 platform integrates with third-party services for payment processing (Easypaisa, JazzCash, Raast, HBL, Visa, Mastercard, and crypto processors for USDT TRC20/BEP20), identity verification, and analytics. These third-party services have their own privacy policies governing how they handle data shared with them.

tbc368 is not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policies of any external service you interact with through our platform.

13. Changes to This Policy

tbc368 may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will:

• Update the effective date at the top of this page.
• Send a notification email to your registered address (for significant changes).
• Display a prominent banner on the platform for a minimum of 14 days following any material revision.

We encourage you to review this Policy periodically. Continued use of tbc368 after changes are posted constitutes your acceptance of the updated Policy.

14. Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the tbc368 Data Support team:

Email: [email protected]

This is a plain-text email address — not a clickable link. Our team handles all data-related enquiries and aims to respond within 2–5 business days. Players across Pakistan — whether based in Karachi, Lahore, Islamabad, Peshawar, or Quetta — can reach us via this channel.

For responsible gaming concerns, please also visit our dedicated Responsible Gaming page, where you will find self-exclusion tools, deposit limit options, and guidance on where to seek further support.