TikkaBuzz Privacy Policy – How We Protect Your Data in Pakistan

TikkaBuzz ("we," "us," "the Platform") is an online betting and gaming platform operated for players based in Pakistan. When this Privacy Policy refers to "TikkaBuzz," it means the entity responsible for operating the platform and for determining how your personal data is collected and used.

This Privacy Policy applies to all personal data collected through the TikkaBuzz website, mobile interface and any related services — including sports betting, live casino, crash games, poker, virtual sports and customer support interactions. It covers data collected from registered players, from visitors who browse without registering and from individuals who contact our support team.

By creating a TikkaBuzz account or by continuing to use the platform after this policy has been updated, you confirm that you have read and understood how your personal data will be handled. If you have questions that this policy does not answer clearly, contact us at support@tikkabuzz.com before proceeding.

TikkaBuzz collects personal data in three main ways: information you provide directly, information generated automatically as you use the platform, and information provided by third-party services such as payment processors and KYC verification providers.

Information You Provide Directly:

• Full name as it appears on your CNIC
• Date of birth and CNIC number (for age verification)
• Residential address in Pakistan
• Mobile phone number
• Email address
• Password (stored as a one-way encrypted hash — never readable by TikkaBuzz staff)
• Payment details: Easypaisa/JazzCash phone number, NayaPay/SadaPay account, bank account number (IBAN) or card details (stored via tokenisation — full card numbers are never stored on TikkaBuzz servers)
• Identity documents submitted for KYC verification (CNIC copy, utility bill, bank statement)
• Support communications — messages, emails and live chat transcripts

Information Collected Automatically:

Information from Third Parties: TikkaBuzz receives confirmation data from payment providers (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks) confirming that a transaction has been authenticated. We receive identity verification results from KYC providers — a pass/fail outcome and, where required, the underlying document data for our records. We do not receive social media profile data unless you contact us through a social channel.

TikkaBuzz does not collect data speculatively. Every category of data collected has a specific, documented purpose. The main ways we use your personal information are described below.

• Account Management: Creating and maintaining your account, verifying your identity, updating your account details and processing account closure requests.
• Processing Transactions: Handling deposits, crediting winnings to your wallet, processing withdrawal requests and maintaining accurate PKR account balances.
• KYC and Anti-Money-Laundering Compliance: Verifying that accounts belong to real individuals aged 18 or over, and that funds flowing through the platform are not connected to illegal activity. This is a legal obligation TikkaBuzz cannot opt out of.
• Fraud Prevention and Platform Security: Detecting suspicious login activity, identifying multi-account patterns, flagging unusual betting behaviour and protecting the platform against external security threats.
• Responsible Gaming: Monitoring session lengths, deposit frequency and betting patterns to identify early signs of problem gambling, and providing tools that help players stay in control. See the Responsible Gaming page for details.
• Customer Support: Responding to your queries, resolving disputes, processing complaints and following up on unresolved issues.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players navigate TikkaBuzz, which features they use most and where the experience can be improved. This analysis does not identify individual players.
• Marketing Communications (Opt-In Only): Sending promotional emails, SMS notifications and in-platform messages about new games, offers, promotions and VIP events — but only where you have given explicit consent to receive such communications.

TikkaBuzz processes your personal data only when there is a valid legal basis for doing so. The relevant legal bases are:

• Contract Performance: Processing your data is necessary to fulfil the agreement you entered into when you created a TikkaBuzz account. This covers account management, transaction processing, bet settlement and support interactions.
• Legal Obligation: Certain processing is required by applicable law — specifically KYC verification, anti-money-laundering record-keeping and responding to lawful requests from regulatory authorities. TikkaBuzz cannot provide services without complying with these obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring and aggregated analytics is carried out on the basis of TikkaBuzz's legitimate interest in operating a secure and responsible platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Marketing communications are only sent where you have given explicit, informed consent. You can withdraw this consent at any time without affecting your ability to use TikkaBuzz.

TikkaBuzz does not sell your personal data. We share data only where it is necessary to operate the platform, comply with legal obligations or protect against fraud. The categories of recipients are listed below.

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT network operators and Visa/Mastercard issuing banks receive the transaction data necessary to process your deposits and withdrawals. This is limited to the information required by the payment network — typically your account identifier and the transaction amount.
• KYC Verification Providers: TikkaBuzz uses third-party identity verification services to confirm that CNIC documents are genuine and that players meet age requirements. These providers receive your name, date of birth and document images for this purpose only.
• Game Content Providers: Live casino studios and slot game providers receive a session token identifying you as an authenticated TikkaBuzz player — this is necessary for games to run. These providers do not receive your full personal profile.
• Cloud Infrastructure Providers: TikkaBuzz stores platform data on secure cloud infrastructure. These providers act purely as data processors under contractual obligations and have no independent right to use your data.
• Regulatory and Law Enforcement Authorities: TikkaBuzz will disclose data in response to lawful requests from government authorities, courts or regulatory bodies where required by applicable law. We will notify you of any such disclosure where legally permitted to do so.
• Fraud Prevention Networks: Anonymised risk signals may be shared with industry fraud prevention networks to help identify multi-accounting and fraudulent payment patterns. No personally identifying information is shared in this context.

TikkaBuzz retains personal data for the shortest period necessary to fulfil the purpose for which it was collected, balanced against our legal obligations to maintain certain records for defined periods. The main retention periods are as follows:

At the end of any applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players are processed within 30 days, with any legally required data retained in a restricted-access archive until the minimum retention period expires, after which it is also deleted.

TikkaBuzz takes data security seriously and has implemented a layered set of technical and organisational measures to protect your personal information against unauthorised access, loss, alteration or disclosure.

Technical Measures:

• All data in transit between your device and TikkaBuzz servers is encrypted using TLS 1.3 with 256-bit AES cipher suites — the current industry standard for financial-grade encryption.
• Passwords are stored as salted hashes using bcrypt — meaning that even TikkaBuzz staff cannot read your password, and a breach of our database would not expose it in usable form.
• Payment card data is tokenised through our payment processor — we never store raw card numbers on TikkaBuzz infrastructure.
• Server infrastructure is protected by firewalls, intrusion detection systems and regular penetration testing.
• Two-factor authentication is available for all accounts and is required for withdrawal requests above Rs 10,000.

Organisational Measures:

• Access to personal data is restricted to employees and contractors who need it to do their job, under a formal access control policy reviewed quarterly.
• All staff with access to personal data receive privacy and security training as part of onboarding and annually thereafter.
• Third-party data processors are subject to written data processing agreements that bind them to the same security standards.
• TikkaBuzz maintains an incident response plan covering data breach detection, containment, assessment and notification procedures. In the event of a breach affecting player data, affected individuals are notified promptly.

TikkaBuzz uses cookies and similar technologies to make the platform work properly, to remember your preferences and to understand how players use the site. A cookie is a small text file stored on your device by your browser. The cookies TikkaBuzz uses fall into four categories:

You can manage cookie preferences through your browser settings. Blocking all cookies will prevent TikkaBuzz from functioning correctly — essential cookies are a technical requirement of the platform. For a list of specific cookies in use and their individual retention periods, contact support@tikkabuzz.com.

As a TikkaBuzz player, you have specific rights over your personal data. TikkaBuzz takes these rights seriously and will respond to any request within 7 business days — or within 30 days for complex requests involving large volumes of data. There is no charge for exercising these rights.

To exercise any of these rights, email support@tikkabuzz.com with the subject line "Data Rights Request" and a description of what you are asking for. We may ask you to verify your identity before processing the request. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority.

TikkaBuzz reviews this Privacy Policy periodically and updates it when necessary to reflect changes in data practices, legal requirements or platform features. The "Last Updated" date at the top of this page shows when the current version was published. For material changes — those that significantly affect how your data is used — TikkaBuzz will send a direct notification to your registered email address at least 14 days before the change takes effect.

For all privacy-related enquiries, data rights requests or complaints about how TikkaBuzz handles personal data, contact us using the details below. We aim to respond to all privacy queries within 48 hours and to complete data rights requests within 7 business days.

This policy is governed by the applicable laws of the jurisdiction in which TikkaBuzz is licensed. It is designed to meet internationally recognised privacy standards. Where Pakistani law imposes specific privacy obligations, those obligations are reflected in how TikkaBuzz operates — including data localisation requirements and the rights of Pakistani citizens over their personal information.