Last updated 6 September 2026
Privacy policy
Who this covers
This policy applies to three things T4BL runs:
- The player app — the web app at player.t4bl.com and the native iOS and Android builds T4BL provides to a club’s members. Members use it to join waitlists, see their seat, request chips, follow their balance, order food and drink, and talk to a club’s hospitality staff.
- The staff console — the web app a club’s floor, cage, dealer, hospitality, service and admin staff use to run the room.
- This website — t4bl.com.
A club that invites you is a separate organisation running its own poker room. T4BL is the software the club uses. The club decides who it admits, what stakes it runs, what credit it extends and how it settles with you. The records described below are kept on the club’s behalf and the club is responsible for how it runs its room. Where this policy says “we”, it means T4BL as the platform.
What we collect
Account and identity. Your phone number, which is your account identifier. A display name (2–50 characters) that is fixed once set. Optionally an email address and a Telegram handle; these are contact details only and are never verified. Optionally a profile photo. A transaction PIN, stored only as a one-way hash and never kept on your device. An opaque, rotating QR pass token that contains no personal data. Your playing hours per event.
Sign-in. One-time codes are sent to your phone by WhatsApp and stored only as keyed hashes. A code is valid for five minutes; you can ask for a new one every sixty seconds, up to five times an hour; five failed attempts lock sign-in for fifteen minutes. You are signed in on one device at a time — a new sign-in retires the previous device, and we keep the record of which device is current.
Membership and play. Which clubs you belong to and how you were added (an admin invitation, a walk-in registration at the room, or the limited self-registration path). An invited number exists as an unverified member until you claim it in the app. Membership has two tiers: a contact tier when you are invited, and a financial tier created the first time you are seated, deposit or buy in. Around play we store your table, seat, session times, waitlist entries, call-time, buy-ins and chip requests. If you connect with other members, we store those mutual connections and your presence-sharing setting (at the venue, queued, playing).
Money records. Your balance with each club is derived from an append-only ledger: cash deposited at the cage, buy-ins, chips returned when you leave a table, cashouts, and any rakeback or commission deal the club has recorded for you. Debts run along the club’s sponsor chain (player, agent, handler, club) as pairwise accounts, and credit limits are recorded per event and per relationship. Entries are never edited or deleted; a correction is a new entry.
Service and hospitality. Messages in your chat thread with a club’s hospitality staff (the thread is append-only). Food and drink orders — items, table, seat and status — and any rating you leave, including an optional note.
Device and notifications. Push tokens for your devices (up to five per member), which notifications you have opted into, and a consent history for your contact channels.
Location. Only if you turn arrival detection on, and then only a yes/no answer to “is this phone at the club?”. Coordinates are never sent or stored. See Location.
Staff data. For club staff: phone number, name, role, a hashed PIN, sign-in history and the actions taken in the console. Staff records are stored with the club’s data; the club is the employer.
Website data. Nothing. This website sets no cookies, runs no analytics, and serves its fonts from its own servers.
Audit trail. Every action that changes state — seating you, issuing chips, approving a cashout, editing a setting — writes an immutable audit entry recording who did it, in what role, what changed and the before and after values. Every scan of your QR pass produces a receipt you can see in the app, showing which role scanned it and when. IP addresses are not collected.
How we use it
- To sign you in and keep your account on one device.
- To run the room: seat you, manage waitlists, offer seats, issue chips and record what you are owed.
- To keep the club’s books accurate and auditable, so that every balance can be traced to its entries.
- To deliver food, drink and hospitality service to your seat.
- To send the notifications the service depends on, and the optional ones you ask for.
- To let a club’s staff identify you at the door and at the table.
- To respond to your requests, including account deletion.
We do not use your data for advertising, profiling for marketing, or sale to anyone.
Who can see it
Club staff, by role. Floor staff see the seating map, waitlists and who is at which table. Cage staff see balances, buy-ins, chip requests and cashouts. Dealers see the tables of the event they are working. Hospitality staff see only the members they have a chat or service thread with. Service staff see food and drink orders. Club admins see the club’s configuration, staff, reports and money records. Access is enforced on the server, not just hidden in the interface.
Other members. People at your table can see your display name, your seat and, if you have set one, your profile photo. Members you have connected with can see the presence you choose to share. Members of another club cannot find you by name if you set yourself club-private.
The platform. T4BL operates the servers that hold this data on the clubs’ behalf. Platform-level access is limited to operating and supporting the service.
Sharing and service providers
Two providers process your data on our behalf. Push notifications additionally travel through the platform push service of your device (Apple or Google) to reach it. There are no others: no analytics, advertising or data brokers.
| Provider | What it does |
|---|---|
| Google Firebase | Authentication, database, server functions, file storage, push notifications and hosting. |
| Kapso, via Meta’s WhatsApp platform | Delivers one-time sign-in codes and, where a club has enabled it and you have opted in, WhatsApp messages. |
Beyond these, we share your data only with the club or clubs you are a member of, as described above, or where the law requires it.
Notifications
Part of the service. Seat offers, seat-offer timeouts, call time, chip and money movements, chat replies and service updates are how the room works. They are sent by push and cannot be switched off while you hold an account.
Optional. New-table alerts, club announcements and connection invitations are off unless you turn them on, and can be turned off again at any time.
WhatsApp. A club may also send seat offers, invitations and announcements by WhatsApp, but only if the club has enabled WhatsApp and you have opted in. Nothing else is sent by WhatsApp except your one-time sign-in codes.
Push tokens are removed when you sign out and when you delete your account. There are no marketing broadcasts today.
Location
Arrival detection is off by default. If you turn it on, your phone compares its own position with the club’s venue on the device and keeps a single answer — at the club or not — to prepare your seat, queue and pass. Neither your coordinates nor that answer are sent to us or stored by us.
The camera is used only to scan a staff sale code when you buy chips. Face ID, Touch ID or your device’s biometric check may be used to confirm a chip purchase; the check happens on your device and we receive only the result.
Security
- PINs are stored as bcrypt hashes. Sign-in codes are stored as keyed hashes. Neither is recoverable from what we hold.
- Sign-in codes expire after five minutes and are rate-limited; repeated failures lock the account temporarily.
- Staff PINs lock after five failed attempts, and the console locks after fifteen minutes idle.
- Every role’s access is checked on the server for every request.
- Money records are append-only at the database layer; nothing edits or deletes a ledger entry.
- Each club’s data is isolated from every other club’s.
- Your QR pass is an opaque token; a club admin can rotate it for you at any time.
Retention
Records are kept while your account exists and while the club’s books need them. Money records are part of the club’s permanent accounts and are retained so that balances between members and the club continue to reconcile. You can remove your personal details at any time by deleting your account from the app, as described below.
Your choices and rights
Consent history. Your choices about contact channels (email, Telegram, WhatsApp) and optional notifications are recorded, and you can see that history in the app.
Club-private. You can hide yourself from name search by clubs other than the ones you already belong to.
Profile. You can edit your email, Telegram handle and photo from the Profile screen, and ask a club admin to rotate your QR pass. Your display name is fixed once set. Phone number changes are made by a club admin, not from the app.
Deleting your account. Open Profile in the app and choose delete. Deletion is immediate and cannot be undone. What happens:
- Your display name, email, Telegram handle, phone number, device and session records and QR token are removed or replaced with “[deleted]”.
- Scan receipts, connections, push tokens and signature images are deleted.
- Audit entries that named you are anonymised.
- Your phone number becomes free to register again as a new account.
What is kept:
- Financial amounts and the account’s internal identifier, so the club’s books still balance.
- A one-way hash of the phone number, used only to keep records consistent.
Known limitation: profile photos are not yet removed when an account is deleted. If you want a photo removed, delete it from your profile before deleting the account.
Children and eligibility
Membership is offered by clubs to adults who are eligible to play under the rules that apply to that club and its location. The service is not directed at children. A club is responsible for who it admits to its room and for checking eligibility before it does.
Changes
When this policy changes in a way that matters, the date at the top is updated and the app or website will point you to the new version. Continuing to use the service after a change means the new version applies.
Contact
For account questions and deletion, use the Profile screen in the app — deletion is handled there directly. For anything about a specific club’s room, its staff or your balance, contact the club.
Contact details for privacy and legal requests will be published here.
See also our terms of service.