tkck Privacy Policy

1 Data We Collect

tkck collects personal data that is necessary to operate the Platform, verify your identity, process your transactions, and comply with applicable legal obligations. We collect only what we genuinely need — we do not gather data speculatively or for purposes unrelated to running a safe, fair, and compliant betting and casino service for players in Bangladesh.

The categories of personal data we collect are described below.

Data You Provide Directly

When you register an account, interact with support, or use the Services, you may provide:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact Data: Email address, mobile phone number (including your bKash or Nagad registered number), and city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Identity Verification Documents: Scanned copies or photographs of your National ID Card, Passport, or Driving Licence submitted during the KYC process.
• Payment Data: Mobile Financial Service (MFS) account identifiers (bKash, Nagad, Rocket, Upay wallet numbers), bank account details for Bank Transfer withdrawals, and card information (Visa, Mastercard) where applicable. Full card numbers are never stored by tkck — card processing is handled exclusively by our certified payment partners.
• Communications Data: Records of live chat conversations, support emails, and any other correspondence you send to tkck through any channel.

Data We Collect Automatically

When you visit tkck.app and use our Services, we automatically collect certain technical data:

• Device & Browser Data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, search queries within the Platform, and deposit/withdrawal history.
• Location Data: General geographic location inferred from your IP address, used to confirm Bangladesh residency and enforce geographic access controls. tkck does not collect precise GPS-level location data.
• Session & Cookie Data: Session tokens, authentication cookies, and preference cookies as described in the Cookies section of this policy.

Data From Third Parties

In certain circumstances, tkck may receive personal data about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposit and withdrawal completion.
• Identity Verification Services: Results from third-party KYC and age-verification providers where we use automated document checking tools.
• Fraud Detection Partners: Risk scores and flagging information from fraud prevention and anti-money-laundering (AML) screening services.

Data We Do Not Collect

tkck does not collect your social media profile data, purchase history from other websites, biometric data (fingerprints, facial geometry), or any sensitive personal data beyond what is required for mandatory identity and age verification. We do not track your browsing activity on other websites.

2 How We Use Your Data

tkck uses the personal data it collects for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The table below summarises our key processing activities and the lawful basis for each.

Promotional Communications

If you have opted in to receive marketing communications during registration or at any subsequent point, tkck may send you promotional emails or SMS messages about new games, seasonal offers (such as BPL and IPL betting promotions, Eid campaigns, or Pohela Boishakh offers), and platform updates. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting support at [email protected] or by using the unsubscribe link in any marketing email. Withdrawing marketing consent does not affect your ability to use the Platform or receive transactional communications about your account.

Automated Decision-Making

tkck uses automated systems for fraud detection, AML screening, and responsible gaming monitoring. These systems may flag accounts for review or apply automatic restrictions (such as temporary deposit holds or account suspension) based on data patterns. Where an automated decision significantly affects you, you have the right to request human review of that decision by contacting support at [email protected]. tkck does not use fully automated profiling for credit-related decisions.

3 Data Sharing & Third Parties

tkck does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose.

Service Providers (Data Processors)

tkck engages trusted third-party service providers who process personal data on our behalf, under strict contractual data processing agreements that bind them to the same standards of confidentiality and security that apply to tkck itself. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) — solely to process your transactions.
• KYC & Identity Verification Providers: Third-party age verification and document authentication services — solely to fulfil our KYC obligations.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studio partners — limited technical session data is passed to enable game play; these providers operate under their own regulatory frameworks and data protection commitments.
• Fraud Prevention & AML Services: Specialist third-party screening tools that help tkck identify suspicious account activity and comply with anti-money-laundering obligations.
• Cloud Infrastructure & Hosting: Our Platform infrastructure runs on secure cloud services with data centres subject to industry-standard physical and logical security controls.
• Customer Support Tooling: Live chat and helpdesk software providers that facilitate the support channel between players and the tkck support team.

Legal Disclosure

tkck may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, court order, or regulatory directive. In such cases, tkck will disclose only the minimum data necessary to comply with the legal obligation and will notify affected players where permitted by law.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of tkck's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change in how your data is processed, with a reasonable opportunity to close your account if you do not consent to the new terms.

4 Cookies & Tracking

tkck uses cookies and similar technologies (collectively "cookies") on tkck.app to enable core site functionality, maintain your session security, and gather anonymised analytics that help us improve the Platform. This section explains what types of cookies we use and how you can manage them.

Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, authenticate you when you navigate between pages, preserve your account preferences, and protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core site functionality.
• Analytics Cookies: tkck uses privacy-respecting first-party analytics to understand how players use the Platform — which pages are visited most, where users navigate from, and how long sessions last. This data is aggregated and anonymised; it is not linked to your personal identity.
• Functional Cookies: These cookies remember your preferences such as language settings, selected game categories, and responsible gaming reminder intervals, so you do not need to re-enter them on each visit.

Cookies We Do Not Use

tkck does not use third-party advertising cookies, retargeting pixels, cross-site tracking technologies, social media tracking buttons, or any cookies that share your data with external advertising platforms.

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary cookies will impair your ability to use tkck.app — in particular, you will not be able to remain logged in or complete transactions. Blocking analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

5 Data Retention

tkck retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When data is no longer needed for any legitimate purpose, it is securely deleted or irreversibly anonymised.

Retention Periods

• Active Account Data: Retained for the duration of your account registration plus a minimum of five (5) years following account closure, in compliance with standard financial record-keeping obligations applicable to online payment services operating in Bangladesh.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, in line with anti-money-laundering (AML) record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and bet history records are retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Chat logs and email correspondence are retained for two (2) years from the date of the interaction, or longer where the subject matter relates to an unresolved dispute or legal matter.
• Marketing Consent Records: Records of your opt-in and opt-out preferences are retained for the life of your account plus two (2) years, to demonstrate compliance with consent-based processing obligations.
• Analytics Data: Anonymised and aggregated analytics data is retained indefinitely as it cannot be linked to any individual.

Following the expiry of the applicable retention period, tkck will securely delete, anonymise, or archive personal data in a manner that prevents re-identification. Deletion requests submitted by users will be processed in accordance with the Your Privacy Rights section, subject to any overriding legal retention obligations.

6 Data Security

tkck implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. No online platform can guarantee absolute security, but tkck takes its data protection obligations seriously and continuously reviews and updates its security practices.

Technical Security Measures

• Transport Layer Security (TLS/SSL): All data in transit between your browser and tkck.app is encrypted using industry-standard 256-bit TLS encryption.
• Password Hashing: Account passwords are stored as salted cryptographic hashes — they are never stored in plain text and cannot be recovered even by tkck staff.
• Access Controls: Access to production systems and personal data is restricted to authorised tkck personnel on a strict need-to-know basis, with multi-factor authentication required for all administrative access.
• Intrusion Detection: tkck's infrastructure is monitored continuously for anomalous activity, intrusion attempts, and data exfiltration signals.
• Regular Security Audits: tkck engages independent security specialists to conduct periodic vulnerability assessments and penetration testing of its Platform.

Organisational Security Measures

• All tkck staff with access to personal data receive regular data protection and security training.
• Third-party service providers are vetted for data security compliance before engagement and are subject to contractual data processing agreements.
• tkck maintains an incident response plan to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable legal obligations.

Your Responsibility

The security of your tkck account also depends on you. You are responsible for keeping your password confidential, not sharing your login credentials with anyone, and logging out of your account on shared or public devices. If you believe your account has been compromised, contact tkck support immediately at [email protected] or via live chat at tkck.app.

7 Your Privacy Rights

As a tkck player, you have a number of rights in relation to the personal data we hold about you. tkck is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

Identity Verification for Rights Requests

To protect your data, tkck will verify your identity before processing any privacy rights request. We may ask you to confirm details such as your registered email address, mobile number, or the last four digits of your registered payment method. We will not charge a fee for responding to rights requests unless a request is manifestly unfounded or excessive.

Minors' Privacy

tkck does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered an account on tkck.app, please contact support at [email protected] immediately. Upon confirmation, any account belonging to a person under 18 will be closed and associated personal data will be deleted, subject to any mandatory legal retention obligations relating to the circumstances of account creation.

8 Contact & Policy Updates

Contacting tkck About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the tkck privacy team using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 at tkck.app — Bangladesh Standard Time (BST, UTC+6)
• Response Time: Email queries are answered within 2–12 hours; formal privacy rights requests within 30 calendar days.

When contacting us about a privacy matter, please include "Privacy Policy" or "Privacy Rights Request" in the subject line of your email so that your message is routed to the appropriate team promptly.

Policy Updates

tkck reviews and updates this Privacy Policy periodically to reflect changes in the Platform, applicable law, or our data processing practices. When we make material changes, we will notify registered players by email to the address on file and by displaying a prominent notice on tkck.app for a period of not less than 14 days before the changes take effect.

The "Last updated" date at the top of this page indicates when this version of the Privacy Policy was published. We encourage you to review this page periodically. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

For questions about previous versions of this policy or changes from a prior version, please contact support at [email protected] and we will provide the relevant historical version on request.