Tawar Rash Privacy Policy — How We Handle Your Personal Data

01 Who We Are

Tawar Rash is an online gaming platform serving Pakistani players. When this Privacy Policy refers to "Tawar Rash", "we", "us", or "our", it means the operator of the platform at tawarrash.com and the entity responsible for the personal data you share with us when you register, deposit, play, or interact with any part of the Tawar Rash service.

As a platform operated for and by Pakistani players, Tawar Rash takes data protection seriously not because a regulator tells us to, but because trust is the foundation of everything we do. Pakistani players share sensitive personal and financial information when they register and deposit — that information deserves genuine care, not just a policy document nobody reads.

This Privacy Policy applies to all data collected through the Tawar Rash website, mobile browser interface, customer support communications, and promotional programmes including the Refer a Friend scheme. It applies to all registered players and to visitors who use the platform without a registered account.

02 What Personal Data Tawar Rash Collects

Tawar Rash collects personal data in three main ways: data you provide directly, data generated automatically by your use of the platform, and data received from third-party service providers involved in running the platform.

Tawar Rash does not collect sensitive categories of personal data — such as health information, religious beliefs, or political opinions — and has no reason to do so in the context of operating a gaming platform.

03 Why Tawar Rash Collects Your Data

Every piece of data that Tawar Rash collects has a specific purpose. We do not collect data speculatively or "just in case". The primary purposes are:

• Account management: Creating and maintaining your Tawar Rash account, verifying your login credentials, and allowing you to access your balance and game history.
• Identity and age verification (KYC): Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years. This is a fundamental requirement for operating a responsible gaming platform.
• Processing PKR transactions: Handling your deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments, and processing withdrawal requests to your nominated PKR account.
• Fraud prevention and platform security: Detecting duplicate accounts, monitoring for unusual transaction patterns, and protecting the platform and its players from fraud and abuse.
• Responsible gaming: Monitoring playing behaviour to identify signs of problem gambling, enforcing deposit limits and self-exclusion orders, and reaching out to players who may need support.
• Customer support: Responding to your questions, resolving disputes, and maintaining records of communications for quality and compliance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use the platform and improve the game library, interface, and payment experience.
• Legal and regulatory compliance: Meeting any record-keeping, reporting, or information-provision obligations that apply to the operation of Tawar Rash.

04 Legal Bases for Processing Your Data

Tawar Rash processes your personal data under the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to provide the Tawar Rash service to you — account management, game access, and PKR transaction handling — is carried out because it is necessary to fulfil our contract with you as a registered player.
• Legal obligation: Identity verification, record-keeping for financial transactions, and anti-money-laundering checks are carried out because Tawar Rash has legal obligations that require them.
• Legitimate interests: Fraud detection, platform security, abuse prevention, and internal analytics are carried out on the basis of Tawar Rash's legitimate interest in running a secure and well-functioning platform, provided those interests do not override your rights and freedoms.
• Consent: Where Tawar Rash relies on your consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Tawar Rash protects the data of every player, from Karachi to Lahore to Islamabad

Your data is never sold. Tawar Rash does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. The only organisations that receive your data are those that directly support the operation of your Tawar Rash account — payment processors, identity verifiers, and fraud-prevention services.

05 Who Tawar Rash Shares Your Data With

Tawar Rash shares personal data only with third parties that need it to provide services on our behalf or where we are legally required to do so. These include:

• Payment processors: Organisations that process PKR transactions on behalf of Tawar Rash — including the technical infrastructure behind Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments. These processors receive only the financial data needed to execute transactions.
• Identity verification providers: Third-party KYC (Know Your Customer) services that verify the identity and age of new players. These providers receive identity documents and personal details you submit during the verification process.
• Fraud and security services: Specialist services that analyse technical and behavioural signals to detect fraud, duplicate accounts, and abuse of the Tawar Rash platform. These services process technical data such as IP addresses and device fingerprints.
• Customer support tools: Software platforms used to manage and store customer support communications. These tools may process your name, contact details, and the content of support conversations.
• Legal and regulatory authorities: Where Tawar Rash is required by applicable law to disclose information — for example, in response to a lawful order from a Pakistani authority — we will comply with that requirement.

All third-party data processors that handle Tawar Rash player data are bound by data processing agreements requiring them to protect your data, use it only for the specified purpose, and not disclose it to any other party.

06 How Tawar Rash Handles Your Payment Data

Financial data — including JazzCash and Easypaisa account numbers, bank account IBANs, and card details — is among the most sensitive information that Tawar Rash processes. Here is specifically how we handle it:

• Card numbers are never stored in full on Tawar Rash servers. Card payment processing is handled entirely by PCI-DSS compliant payment processors. Tawar Rash stores only a non-sensitive token and the last four digits of the card number for display purposes in your account.
• Mobile wallet account numbers (JazzCash, Easypaisa, NayaPay, SadaPay) are stored in encrypted form and are only accessible by the payment processing systems that need them to execute your deposits and withdrawals.
• Bank IBANs submitted for IBFT withdrawal requests are stored securely and used only to process the withdrawal to which they are attached.
• Transaction history — deposits, withdrawals, and bets — is retained as a record for account management, responsible gaming monitoring, and legal compliance. This history is accessible to you in your Tawar Rash account at any time.

07 Cookies and Tracking Technologies

The Tawar Rash website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device when you visit a website. Cookies allow Tawar Rash to remember your session, understand how you use the platform, and keep you logged in between visits.

Tawar Rash uses the following categories of cookies:

Strictly necessary cookies cannot be disabled because they are essential to operating your account and keeping your session secure. Analytics and preference cookies can be managed through your browser settings. Most modern browsers on Android and iOS allow you to view, delete, and block cookies — your device's browser settings section will have instructions specific to your browser.

Tawar Rash does not use advertising tracking cookies or cross-site tracking technology that follows you around the internet for retargeting purposes. Analytics data collected on the platform is used solely to improve the Tawar Rash experience and is not shared with advertising networks.

08 How Long Tawar Rash Retains Your Data

Tawar Rash retains personal data for as long as it is needed for the purpose for which it was collected, or as long as required by applicable law. The main retention periods that apply to Tawar Rash player data are:

• Account data: Retained for the lifetime of your active Tawar Rash account, and for a period after account closure to meet legal record-keeping obligations and to handle any post-closure disputes or claims.
• Transaction and bet history: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for the period required to meet KYC and anti-money-laundering obligations, typically five years from the closure of your account.
• Customer support communications: Retained for three years from the date of the last communication in a support thread, to allow reference in the event of a future dispute.
• Marketing consent records: Retained for as long as you have an active marketing subscription, and for one year after you withdraw consent, as evidence of your previous consent status.

When data is no longer required and its retention period has expired, Tawar Rash securely deletes or anonymises it so that it can no longer be linked to your identity.

09 How Tawar Rash Keeps Your Data Secure

Data security at Tawar Rash is not a checkbox exercise — it is an operational priority. The following technical and organisational measures are in place to protect your personal data:

• Encryption in transit: All communication between your device and the Tawar Rash platform is encrypted using TLS (Transport Layer Security). The padlock in your browser's address bar confirms this is active.
• Encryption at rest: Sensitive data stored on Tawar Rash servers — including identity documents, financial account numbers, and payment tokens — is encrypted at rest using industry-standard encryption.
• Access controls: Access to personal data within Tawar Rash is restricted on a need-to-know basis. Only staff and systems with a legitimate operational reason can access specific categories of player data.
• Intrusion detection: Tawar Rash operates continuous monitoring systems to detect and respond to suspicious access patterns, unauthorised login attempts, and potential data breaches.
• Third-party security standards: Payment processors and identity verification providers used by Tawar Rash are required to maintain security standards appropriate for the sensitivity of the data they process.

Tawar Rash secures your data with the same seriousness it applies to your PKR balance

In the event of a data breach that poses a risk to your personal data, Tawar Rash will notify affected players as soon as practicable and take immediate steps to contain the breach and assess its scope.

10 Your Rights Over Your Personal Data

As a Tawar Rash player, you have meaningful rights over the personal data we hold about you. These are not theoretical — you can exercise them by contacting the Tawar Rash support team. Here is what each right means in practice:

11 Children's Privacy

Tawar Rash is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration on Tawar Rash requires confirmation of age and is subject to identity verification. If Tawar Rash discovers that a player is under 18, the account will be closed immediately, any deposits will be returned, and the data associated with the underage account will be deleted in line with our obligations.

If you are a parent or guardian and believe your child has registered on Tawar Rash, please contact us at support@tawarrash.com immediately. We will investigate and take action as quickly as possible.

12 Marketing Communications

Tawar Rash may send you promotional communications about new games, bonuses, and platform features — but only if you have opted in to receive them. Marketing communications are always optional. You can update your marketing preferences at any time through your account settings or by unsubscribing using the link included in every marketing message.

Tawar Rash does not send unsolicited bulk marketing messages. We do not sell your contact details to third-party marketing companies. If you receive marketing that you did not opt in to and that claims to be from Tawar Rash, please report it to support@tawarrash.com — it may indicate an attempt to impersonate Tawar Rash.

Important account communications — such as deposit confirmations, withdrawal processing notifications, and responsible gaming alerts — are not marketing and cannot be unsubscribed from while your account is active, as they are essential to the safe operation of your account.

13 Changes to This Privacy Policy

Tawar Rash reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in the services we use, or changes in applicable law. When a material change is made, we will notify registered players by publishing the updated policy on this page with a revised effective date, and — for significant changes — by sending a notification to your registered email address.

We encourage all Tawar Rash players to review this policy from time to time, particularly if you have concerns about how your data is handled. Continued use of the Tawar Rash platform after a policy update constitutes acceptance of the revised terms. If you do not accept a material change to this policy, you may close your account by contacting support.

14 Contact Us About Privacy

If you have a question about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Tawar Rash handles your personal information, please contact our support team. We operate on Pakistan Standard Time and aim to respond to all privacy-related enquiries within five business days.