Privacy Policy — tk688

1Introduction

tk688 ("we", "us", "our") operates the online gaming platform accessible at tk688-bd.biz (the "Platform"). In the course of providing our services — which include cricket betting, live casino games, slots, Teen Patti, Andar Bahar, crash games, and related account and payment services — we collect and process personal data about our registered players and visitors to the Platform.

This Privacy Policy ("Policy") sets out in full detail what personal data we collect, the purposes for which we process it, the legal bases on which we rely, how long we retain it, who we may share it with, and the rights available to you as a data subject. This Policy applies to all users of the tk688 Platform, regardless of the device or method used to access it. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

2Data Controller

For the purposes of this Privacy Policy, tk688 acts as the data controller in respect of the personal data of its registered players and Platform visitors. As data controller, tk688 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled, or wish to exercise any of your data rights described in this Policy, please contact our Data Protection team using the details provided in Section 16 of this Policy.

3Personal Data We Collect

tk688 collects the following categories of personal data from players and Platform visitors. We collect only what is necessary for the purposes described in this Policy.

3.1 Registration and Identity Data

• Full legal name
• Date of birth
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Username chosen at registration

3.2 Verification and KYC Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or equivalent)
• Proof of payment method ownership (screenshots, statements)
• Any additional documentation requested as part of our Know Your Customer (KYC) or source-of-funds verification processes

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method details (mobile wallet identifiers for bKash, Nagad, Rocket, Upay; masked card numbers for Visa and Mastercard)
• Account balance history
• Bonus credits and wagering activity records

3.4 Gaming and Betting Activity Data

• Bet history including markets, stakes, odds, and outcomes
• Casino game sessions, game types played, session durations, and results
• Responsible gaming tool settings (deposit limits, time limits, self-exclusion status)

3.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Pages visited on the Platform, time spent, click-through paths
• Session identifiers and login timestamps
• Referring URL (the page from which you arrived at the Platform)

3.6 Communications Data

• Content of messages sent to our customer support team via any channel
• Records of any complaints submitted and their resolution
• Email correspondence and live chat transcripts
• Marketing preference records and consent history

4How We Collect Your Data

We collect personal data through several channels and methods:

4.1 Directly from You

The majority of the personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, respond to a survey, or interact with any feature of the Platform that requires you to submit information.

4.2 Automatically Through Platform Use

When you access and use the tk688 Platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and similar technologies. This data includes your IP address, device identifiers, browser type, and navigation behaviour within the Platform. Please refer to Section 8 for full details on our use of cookies and tracking technologies.

4.3 From Third-Party Sources

In certain circumstances, tk688 may receive personal data about you from third-party sources, including:

• Payment processors: Transaction confirmation and fraud signal data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners
• Identity verification providers: Results of automated KYC checks conducted via third-party identity verification services
• Fraud prevention agencies: Risk scores and flagging data from industry-standard fraud prevention and anti-money laundering (AML) databases
• Game providers: Session and outcome data generated by third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) whose games are hosted on the Platform

5How We Use Your Personal Data

tk688 uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Creating and managing your player account	Registration data, identity data
Processing deposits and withdrawals	Financial data, identity data, KYC data
Verifying your identity (KYC/AML compliance)	KYC data, identity data, financial data
Enabling gameplay and recording betting history	Gaming and betting activity data
Responsible gaming monitoring and intervention	Gaming data, registration data, communications data
Fraud prevention and security monitoring	Technical data, financial data, identity data
Customer support and complaint resolution	Communications data, registration data, transaction data
Sending service notifications and account alerts	Registration data, communications preferences
Sending marketing communications (with consent)	Registration data, gaming data, marketing preferences
Platform analytics and service improvement	Technical data, usage data, gaming data (aggregated)
Legal and regulatory compliance	All categories as required by applicable obligations

6Legal Basis for Processing

tk688 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and manage your account, process transactions, and deliver gaming services as agreed when you registered.
• Legal obligation: Processing required to comply with applicable AML regulations, KYC obligations, responsible gaming requirements, and any other legal duties to which tk688 is subject.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, abuse detection, customer support, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7Sharing Your Personal Data

tk688 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, but only to the extent necessary for the purposes described in this Policy:

7.1 Payment Service Providers

To process your deposits and withdrawals, tk688 shares relevant transaction and identity data with payment processors including bKash, Nagad, Rocket, Upay, and card processing partners for Visa and Mastercard. These providers are contractually required to use your data only to process the specific transaction and for fraud prevention purposes.

7.2 Identity Verification and KYC Providers

To fulfil our KYC obligations, tk688 may share identity documents and personal data with accredited third-party identity verification services. These providers process your data on our behalf and under strict data processing agreements.

7.3 Game Technology Providers

Third-party game studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) whose games are available on the Platform may receive session-level data necessary for game operation, fairness auditing, and dispute resolution. These providers do not receive your full identity or financial profile.

7.4 Fraud Prevention and AML Agencies

Where required for fraud detection, anti-money laundering screening, or responsible gaming monitoring, tk688 may share data with recognised industry fraud prevention and AML databases. Information shared for these purposes may be retained by those agencies and used to assist other operators in preventing financial crime.

7.5 Legal and Regulatory Authorities

tk688 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in connection with legal proceedings. Such disclosures will be made only to the extent required and will be documented appropriately.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of tk688's business, player data may be transferred to the acquiring entity as part of that transaction, subject to the same data protection commitments described in this Policy.

8Cookies and Tracking Technologies

tk688 uses cookies and similar technologies (including web beacons, pixel tags, and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit the Platform.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and last visited game category) to improve your experience.
• Analytics cookies: Collect anonymised data about how users interact with the Platform, helping us identify areas for improvement. No personally identifiable information is stored in analytics cookies.
• Security cookies: Help detect and prevent fraudulent activity, bot access, and account takeover attempts.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse non-essential cookies, delete existing cookies, or be notified before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the tk688 Platform, and some features may not work as intended without session or functional cookies enabled.

9Data Retention

tk688 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in line with standard AML record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction.
• KYC documentation: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Gaming and betting history: Retained for a minimum of three years from the date of each session or bet.
• Customer support records: Retained for three years from the date of the final communication in a support thread.
• Marketing preference data: Retained until you withdraw consent or for two years of inactivity, whichever comes first.
• Technical and usage logs: Typically retained for 12 months from the date of collection, except where retention is required for security investigations.

When data is no longer required, tk688 will securely delete or anonymise it in a manner that prevents reconstruction of any personal information.

10Data Security

tk688 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tk688 Platform
• Encryption of sensitive data at rest within our database infrastructure
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role
• Regular security audits and penetration testing of Platform systems
• Multi-factor authentication requirements for staff accessing administrative systems
• Intrusion detection systems and real-time security monitoring
• Staff training on data protection obligations and secure data handling procedures

While tk688 maintains robust security practices, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tk688 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

11Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by tk688. To exercise any of these rights, please contact us using the details in Section 16.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit how we process your data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will assess whether our interests are overridden by your rights and inform you of the outcome.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

tk688 aims to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

12Children's Privacy

The tk688 Platform is strictly intended for individuals aged 18 years and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to tk688, please contact our support team immediately. Upon confirmation, we will take prompt steps to delete the relevant data and close any account that was opened by or on behalf of a minor.

tk688 employs age verification measures during the registration process and reserves the right to request documentary proof of age at any point. Any account confirmed to belong to a person under 18 will be closed and all associated funds handled in accordance with our Terms and Conditions.

13Third-Party Links and Services

The tk688 Platform may contain links to third-party websites, game provider interfaces, or payment portals that are operated independently of tk688. This Privacy Policy applies only to the tk688 Platform and does not extend to any third-party sites or services. When you click through to a third-party service, that party's own privacy policy will govern the collection and use of your data. tk688 accepts no responsibility for the privacy practices of third-party operators and encourages you to review their privacy policies before submitting any personal information.

14Marketing Communications

Where you have given your consent at registration or at a later date, tk688 may send you marketing communications about promotions, new games, seasonal offers (such as those tied to the BPL cricket season, Eid, or Pohela Boishakh), and other tk688 news. Marketing messages may be delivered via email or SMS.

You may opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from tk688
• Contacting our support team at support at tk688-bd.biz and requesting removal from marketing lists
• Updating your communication preferences in your account settings

Please allow up to 5 business days for opt-out requests to take effect across all channels. Note that even if you opt out of marketing communications, tk688 will continue to send you essential service notifications (such as deposit confirmations, withdrawal updates, and security alerts) that are necessary for the operation of your account.

15Changes to This Privacy Policy

tk688 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes, we will notify registered players by email or via an in-platform notification, and the updated Policy will be posted on this page with a revised effective date at the top of the document.

Your continued use of the tk688 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you may request closure of your account in accordance with our Terms and Conditions.

16Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how tk688 has handled your personal data, please contact us using the details below. Our support team is available around the clock, every day of the year, on Bangladesh Standard Time (BST, UTC+6).

• Email: support at tk688-bd.biz
• Phone / WhatsApp: +880 1700 000 688
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)