Privacy Policy — tk368

1. Data We Collect

tk368 collects personal data from players in Bangladesh through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party identity verification and payment processing partners. The categories of personal data we collect are described below.

1.1 Registration and Identity Data

When you create a tk368 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Email address (used as your primary account contact and for correspondence)
• Residential address, including district, division, and postal code within Bangladesh
• Mobile phone number registered in your name
• Username and encrypted password chosen at registration

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may collect scanned or photographed copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (biographical data page)
• Driving licence
• Recent utility bill or bank statement showing your name and address (issued within the last 3 months)

KYC documents are collected to confirm your identity, verify your age, and meet our anti-money laundering (AML) compliance obligations. These documents are stored in encrypted form and accessed only by authorised compliance personnel.

1.3 Financial and Transaction Data

We record data related to every financial transaction conducted through your tk368 account, including:

• Deposit amounts, dates, and payment method identifiers (e.g., the last four digits of a bKash or Nagad number)
• Withdrawal requests, amounts, processing dates, and destination payment method
• Bonus credits, wager records, and cashback calculations
• Account balance history and transaction logs

tk368 does not store your full mobile banking PIN, full card number, or full bank account credentials. Payment authentication is handled directly by the respective payment provider (bKash, Nagad, Rocket, Upay, etc.) through their own secure systems.

1.4 Technical and Usage Data

When you use the tk368 platform, our servers automatically collect certain technical data, including:

• IP address and approximate geographic location derived from it
• Device type, operating system version, and browser type and version
• Pages visited, features used, and time spent on the platform
• Referral URL (the page from which you arrived at tk368, if applicable)
• Session duration and login/logout timestamps

2. How We Use Your Data

The personal data we hold about you is used for specific, lawful purposes. We do not use your data in ways that are inconsistent with the purposes for which it was originally collected. Our primary purposes are as follows:

Purpose	Data Categories Used	Legal Basis
Creating and managing your player account	Registration data, identity data	Contractual necessity
Processing deposits and withdrawals	Financial data, identity data	Contractual necessity
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation (AML compliance)
Fraud detection and prevention	Technical data, financial data, usage data	Legitimate interest
Responsible gaming monitoring	Usage data, financial data	Legitimate interest / Legal obligation
Customer support and dispute resolution	All categories relevant to the query	Contractual necessity
Sending promotional communications (where consented)	Email address, usage preferences	Consent
Platform analytics and improvement	Technical data, usage data (anonymised)	Legitimate interest

2.1 Marketing Communications

tk368 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal offers (such as Eid promotions, BPL special events, and Pohela Boishakh offers), and new game launches. You will only receive direct marketing communications if you have opted in during registration or subsequently updated your communication preferences in your account settings. You may withdraw consent for marketing at any time by updating your account preferences or emailing [email protected] with the subject line "Marketing Opt-Out".

2.2 Automated Decision-Making

tk368 uses automated systems to monitor betting patterns and account activity for the purposes of fraud detection, responsible gaming intervention, and AML compliance. Where an automated system flags your account for review, a human member of the compliance team will review the case before any material action (such as account suspension or withdrawal hold) is taken. You have the right to request human review of any automated decision that materially affects you.

3. Data Sharing & Disclosure

tk368 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only where necessary and with appropriate data protection obligations in place:

3.1 Payment Processors

To process deposits and withdrawals, we share the minimum necessary payment-related data with our payment processing partners, including bKash, Nagad, Rocket, Upay, SureCash, and partner banks (including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank). Each payment partner operates under its own privacy policy and security standards. tk368 is not responsible for data handling practices by these independent payment providers beyond the data we transmit to them.

3.2 Identity Verification Providers

We use trusted third-party KYC and identity verification service providers to validate documents submitted during the account verification process. These providers process your identity documents solely for the purpose of verification and are contractually prohibited from using your data for any other purpose.

3.3 Game Technology Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and wagering data necessary to deliver game services to your account. These providers do not receive your full name, address, payment details, or KYC documents unless specifically required for the delivery of a regulated game service.

3.4 Legal and Regulatory Disclosure

tk368 may disclose your personal data to law enforcement agencies, regulatory authorities, or other official bodies where we are legally required to do so, or where disclosure is necessary to investigate, prevent, or take action against suspected illegal activity, fraud, money laundering, or match-fixing. We will notify you of such disclosure where we are legally permitted to do so.

4. Cookies & Tracking

tk368 uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and analyse platform usage. Below is a summary of the types of cookies we use:

4.1 Strictly Necessary Cookies

These cookies are essential to the operation of the tk368 platform and cannot be disabled. They include session authentication tokens that keep you logged in during a visit, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure platform stability. No personal data collected through strictly necessary cookies is used for marketing purposes.

4.2 Functional Cookies

Functional cookies remember your preferences within the platform, such as your preferred game category, display settings, and notification preferences. These cookies improve the quality of your experience but are not essential to platform operation. You may disable functional cookies through your browser settings, though this may affect certain personalisation features.

4.3 Analytics Cookies

We use first-party analytics tools to collect anonymised data about how players navigate and use the tk368 platform. This data is used to identify areas for improvement, measure the effectiveness of features, and understand aggregate usage patterns. Analytics data is not linked to your individual account profile except where required for fraud investigation.

4.4 Managing Cookies

You can manage, restrict, or delete cookies through your browser's settings menu. The procedure for managing cookies varies by browser. Disabling all cookies may prevent certain platform features from functioning correctly, including your ability to remain logged in across page navigation. For technical assistance with cookie settings, contact [email protected].

5. Data Security & Retention

5.1 Security Measures

tk368 implements a layered set of technical and organisational security measures to protect the personal data we hold:

• SSL/TLS encryption on all data transmitted between your device and our servers
• AES-256 encryption for personal data stored in our databases
• Password hashing using industry-standard one-way cryptographic functions — we never store your password in plain text
• Access controls that restrict employee access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing conducted by independent security professionals
• Intrusion detection systems that monitor for unauthorised access attempts in real time

Despite these measures, no system is completely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, tk368 will notify affected players without undue delay and take immediate steps to contain the breach.

5.2 Data Retention Periods

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data (registration details, transaction history): retained for the duration of your account plus 5 years after closure, to meet AML record-keeping requirements.
• KYC documents: retained for 5 years following account closure, consistent with standard financial compliance obligations.
• Technical/usage logs: retained for 12 months from the date of collection, then deleted or anonymised.
• Marketing communication records: retained for 2 years from the date of last interaction, unless you withdraw consent earlier.
• Support correspondence: retained for 3 years from the date of resolution.

Once a retention period expires and no legal hold applies, personal data is securely deleted or permanently anonymised so that it can no longer be linked to your identity.

6. Your Privacy Rights

As a player on the tk368 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request — [Your Account Username]".

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide a structured summary of your data within 30 days of receiving a verified request. For complex or high-volume requests, this period may be extended by a further 30 days, with notice given to you.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can typically be made directly through your account settings. Changes to identity-critical data (such as your legal name or date of birth) require submission of supporting documentation and are processed by our compliance team within 5 business days.

6.3 Right to Erasure

You may request deletion of your personal data following permanent account closure, subject to our legal obligation to retain certain records for AML compliance purposes. Where a legal retention obligation applies, we will retain only the minimum data required by law and delete all remaining personal data as promptly as possible. We will confirm the outcome of your erasure request within 30 days.

6.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict our processing of your personal data. During a restriction period, we will store your data but not use it for any active processing purpose other than the dispute resolution itself.

6.5 Right to Withdraw Consent

Where our processing of your personal data is based on your consent (for example, direct marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. To withdraw consent, update your account notification preferences or contact [email protected].

6.6 Right to Object

You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. We will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.

7. Third-Party Services

The tk368 platform integrates with third-party services to deliver certain features. Each of these services operates under its own privacy policy, which we encourage you to review:

7.1 Game Providers

Games on tk368 are powered by internationally recognised providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game on tk368, game session data is transmitted to the relevant provider's servers. This data is used solely to deliver the game and record the outcome for settlement purposes. These providers are independently certified for fair play and data security by recognised testing laboratories.

7.2 Payment Gateways

Transactions processed via bKash, Nagad, Rocket, Upay, and partner banks involve data transmission to those providers' payment processing infrastructure. tk368 acts as the merchant in these transactions and is subject to the data handling terms imposed by each payment gateway. We encourage you to review the privacy policies of your chosen payment provider to understand how they handle your financial data.

7.3 Customer Support Tools

tk368 may use third-party ticketing or live chat software to manage customer support communications. Any personal data shared in a support conversation (your account username, email, query details) is processed by the support tool provider under a data processing agreement with tk368. Support conversations are retained for dispute resolution purposes in accordance with the retention periods described in Section 5.2.

8. Policy Updates & Contact

8.1 Updates to This Policy

tk368 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, platform features, or data processing practices. When material changes are made, we will publish the revised policy on this page with an updated effective date and, where required by law or where the changes significantly affect your rights, notify you directly by email. We encourage you to review this page periodically to stay informed about how we protect your data.

8.2 Minor Players

tk368 services are strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that an account belongs to an underage individual, we will close the account immediately and delete all associated personal data, except where retention is required by our legal obligations. 18+ Only

8.3 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tk368 handles your personal data, please contact our Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 5 business days (Bangladesh Standard Time, UTC+6).

Email: [email protected]
Subject Line: Privacy Rights Request — [Your Account Username]
Response Time: Within 5 business days