Your Privacy Matters at tkbk

1. Introduction

This Privacy Policy ("Policy") describes how tkbk ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal data relating to registered account holders, visitors to the tkbk website at tkbk.onl, and any other individuals who interact with our services ("you", "your", "the User").

tkbk is committed to protecting the privacy and security of all personal information entrusted to us. We operate in accordance with recognised data protection principles, and this Policy is designed to give you a complete and transparent picture of our data practices so that you can make informed decisions about the information you share with us.

By accessing the tkbk platform, registering an account, making a deposit, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue your use of the platform and contact our support team to request account closure.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, verify your identity, make deposits or withdrawals, contact our support team, or participate in promotions, you provide us with personal data that we collect and store. This includes:

• Identity data: Full legal name, date of birth, and national identification number or passport number as provided during KYC verification
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postal code)
• Account credentials: Username and hashed password (we do not store passwords in plain text)
• Financial data: Deposit and withdrawal transaction history, preferred payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and registered mobile banking account identifiers
• Verification documents: Copies of government-issued ID, proof of address documents, and payment method ownership confirmations submitted during KYC
• Communications: The content of messages you send to our support team via live chat or email, including any attachments you provide

2.2 Information Collected Automatically

When you access and use the tkbk platform, certain technical data is collected automatically by our systems. This data helps us operate the platform securely, detect fraud, and improve the user experience. Automatically collected data includes:

• Device data: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and unique device identifiers
• Network data: IP address, approximate geographic location derived from IP address, internet service provider, and connection type
• Usage data: Pages visited, features used, games played, bets placed, session duration, click patterns, and navigation paths through the platform
• Log data: Server access logs, error logs, and security event logs associated with your account and device
• Cookie data: Information stored in or retrieved from cookies and similar tracking technologies as described in Section 7 of this Policy

2.3 Information from Third Parties

We may receive personal data about you from third-party sources in limited circumstances, including:

• KYC and identity verification service providers who confirm the validity of identification documents you submit
• Payment processors (bKash, Nagad, Rocket, Upay) who confirm transaction details associated with your registered mobile banking account
• Fraud prevention and risk management partners who provide signals about potentially suspicious activity linked to an email address, IP address, or device fingerprint

3. How We Use Your Data

tkbk uses the personal data we collect for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated tools are used in fraud detection or responsible gaming monitoring, all consequential decisions (such as account suspension) are reviewed by a member of our compliance or support team before action is taken.

4. Legal Basis for Processing

tkbk processes your personal data on one or more of the following legal bases depending on the nature of the processing activity:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as an account holder — including account management, bet settlement, and payment processing.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements, including age verification, anti-money laundering (AML) obligations, and record-keeping requirements.
• Legitimate interests: Processing serves the legitimate business interests of tkbk, such as fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the basis for processing (for example, to send you promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can withdraw marketing consent by contacting [email protected] or by using the unsubscribe mechanism in any marketing email we send.

5. Data Sharing and Disclosure

tkbk does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share your personal data only in the following limited and controlled circumstances:

5.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf in order to deliver the tkbk service. These providers are contractually required to handle your data securely, to use it only for the specific services they provide to tkbk, and to maintain appropriate technical and organisational security measures. Current categories of service providers include:

• KYC and identity verification platforms
• Payment processing partners (bKash, Nagad, Rocket, Upay, and card processing networks)
• Fraud detection and risk management providers
• Cloud hosting and server infrastructure providers
• Customer support platform providers (live chat and ticketing systems)
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — limited to session data required for game delivery and fairness auditing

5.2 Legal and Regulatory Disclosures

tkbk may disclose personal data to law enforcement authorities, regulatory bodies, or other governmental agencies where we are legally required or compelled to do so by a valid legal process such as a court order, subpoena, or statutory demand. We will, where permitted by law, notify you of such a disclosure request before complying.

5.3 Business Transfers

In the event that tkbk undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, personal data held by tkbk may be transferred as part of that transaction. In such circumstances, we will notify affected users before their personal data is transferred and becomes subject to a different privacy policy.

6. Payment Data

Given that the tkbk platform facilitates real-money transactions, the handling of payment data warrants specific explanation. When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the following data handling principles apply:

• Sensitive payment credentials (such as full card numbers, CVV codes, and mobile banking PINs) are never transmitted to or stored on tkbk's servers. This data is handled exclusively by our certified payment gateway partners using their own secure processing environments.
• tkbk retains a limited record of each transaction for account management and audit purposes. This record includes the transaction date and time, the amount in BDT, the payment method type, a partial identifier of the payment account (e.g., the last four digits of a card or the first and last digits of a bKash number), and the transaction outcome (success, pending, failed).
• Transaction records are retained for a minimum of five years to satisfy standard financial record-keeping obligations.
• All payment method accounts used on the tkbk platform must be registered in your own name. If a mismatch is detected between your tkbk account identity and the registered name on a payment method, the transaction will be held for review and your account may be temporarily suspended pending clarification.

7. Cookies and Tracking Technologies

tkbk uses cookies and similar technologies (such as web beacons and local storage) on the tkbk.onl website. These technologies allow us to recognise your device, maintain your login session, remember your preferences, and collect aggregated analytics data about how the platform is used.

7.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable core features such as account login session management, security token storage, and the display of your account balance. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These remember your preferences such as language settings, preferred interface layout, and notification settings. They improve your experience but are not essential to platform operation.
• Analytics cookies: We use anonymised analytics data to understand how users navigate the platform, which features are most used, and where technical issues arise. This data is aggregated and does not identify you personally.
• Security cookies: These help us detect and prevent fraudulent activity by identifying unusual device or behaviour patterns that may indicate unauthorised access attempts.

7.2 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the tkbk platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate. Detailed browser instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

tkbk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with tkbk, plus a minimum of five years following account closure to satisfy AML and financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last communication in each support thread.
• Marketing consent records: Retained for as long as you hold an active account, and for up to two years following account closure as evidence of the consent obtained.
• Analytics data (aggregated/anonymised): Retained indefinitely as it cannot be linked back to any individual user.
• Self-exclusion records: Retained for a minimum of seven years following the end of the self-exclusion period to prevent re-registration during the exclusion window.

When personal data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

9. Your Rights

As a user of the tkbk platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within a reasonable timeframe and in any event within 30 days.

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being used and to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. This right is subject to our legal obligation to retain certain data (e.g., transaction records and KYC documents) for the periods described in Section 8.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection is being evaluated.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to us.
• Right to object: You have the right to object at any time to the processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

10. Data Security

tkbk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
• Encrypted password storage using industry-standard hashing algorithms — your password is never stored in a readable format
• Two-factor authentication (2FA) available on all accounts via OTP sent to your registered mobile number
• Role-based access controls ensuring that tkbk staff can access only the personal data necessary for their specific job functions
• Regular security audits and penetration testing conducted by independent security specialists
• Intrusion detection systems that monitor for and alert on unusual access patterns in real time
• Secure data centres with physical access controls, environmental monitoring, and redundant infrastructure

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights or interests, tkbk will notify affected users promptly and will take all reasonable steps to contain and remediate the breach.

You can strengthen the security of your own account by choosing a strong, unique password, enabling 2FA, and never sharing your login credentials with any third party. If you believe your account has been compromised, contact our support team immediately at [email protected].

11. Children's Privacy

The tkbk platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps specifically designed to prevent underage individuals from creating accounts.

If you believe that a person under the age of 21 has registered an account on the tkbk platform or has provided us with personal data, please contact us immediately at [email protected]. Upon confirmation, we will take prompt steps to close the account, delete the associated personal data, and return any funds deposited to the payment method used.

12. Policy Updates and Contact

12.1 Updates to This Policy

tkbk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material, we will notify registered account holders via email or via a prominent notice on the tkbk platform at least 14 days before the changes take effect. The updated Policy will be posted at tkbk.onl/privacy-policy with a revised effective date. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised Policy.

12.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tkbk handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data protection team and will receive a response within two business days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live chat: Available 24/7 via the tkbk platform
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

12.3 Governing Language

This Privacy Policy is written in English. In the event of any discrepancy between the English version and any translated version, the English version shall prevail in all respects.