tkak Privacy Policy

1 Introduction

tkak ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at https://tkak.io (the "Platform"). This Privacy Policy sets out the basis on which personal data we collect from you, or that you provide to us, will be processed by us.

This policy applies to all users of the tkak Platform, including registered players, visitors who browse without registering, and individuals who contact our support team. It covers data collected through the tkak website, mobile-optimised interfaces, and any associated communication channels including email.

We encourage you to read this Privacy Policy carefully alongside our Terms & Conditions and Responsible Gaming policy. Together, these documents govern your relationship with tkak and set out our mutual obligations regarding data, fair play, and player welfare.

2 Data Controller

For the purposes of applicable data protection law, tkak acts as the data controller in respect of the personal data it collects and processes through the Platform. As data controller, tkak determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

You may contact our data protection contact point at any time using the details provided in Section 16 of this policy.

3 Data We Collect

Depending on how you use the tkak Platform, we may collect and process the following categories of personal data:

We do not knowingly collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data beyond responsible gaming self-declarations, or biometric data) unless expressly required for age or identity verification purposes and with your explicit consent.

4 How We Collect Data

We collect personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or completing any form on the Platform.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform. See Section 7 for full details on cookies.
• Third-party sources: In limited circumstances, we may receive data about you from third parties, including payment service providers (such as bKash, Nagad, Rocket, and Upay) confirming transaction status, identity verification service providers confirming document authenticity, and fraud prevention partners flagging high-risk activity patterns.

5 Legal Basis for Processing

tkak processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to register your account, process deposits and withdrawals, settle bets, and provide the services you have signed up for under our Terms & Conditions.
• Legal obligation: Processing necessary for tkak to comply with applicable laws, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and age verification duties.
• Legitimate interests: Processing necessary for tkak's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided these interests are not overridden by your own rights and interests.
• Consent: Processing based on your explicit consent, such as sending promotional communications and placing non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

tkak uses the personal data we collect for the following purposes:

• To create and maintain your tkak Account, verify your identity, and confirm your eligibility to use the Platform (including age verification to enforce the 21+ requirement).
• To process deposits and withdrawals in BDT via your chosen payment method and to maintain accurate financial records of all transactions on your account.
• To settle sports bets, casino game rounds, and other wagering activity, and to resolve any disputes arising from such activity.
• To apply and manage bonus credits, wagering requirements, and promotional offers in accordance with the applicable promotion terms.
• To fulfil our responsible gaming obligations, including monitoring betting patterns for signs of problem gambling and enforcing deposit limits, time-out requests, and self-exclusion orders.
• To prevent, detect, and investigate fraud, money laundering, multi-accounting, prohibited conduct, and other misuse of the Platform.
• To provide customer support and respond to enquiries, complaints, and feedback submitted to our team.
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts) that are necessary for the operation of your account.
• To send promotional communications about tkak bonuses, new games, and seasonal offers — but only where you have provided your consent for such communications and have not subsequently withdrawn that consent.
• To analyse usage patterns and technical performance data to improve the Platform, fix bugs, and develop new features.
• To comply with our legal and regulatory obligations, including responding to lawful requests from competent authorities.

7 Cookies & Tracking Technologies

tkak uses cookies and similar tracking technologies on the Platform to ensure functionality, improve performance, and (with your consent) to personalise your experience. A cookie is a small text file placed on your device by a web server when you visit a website.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit, security cookies that protect your session from hijacking, and cookies that remember your language and currency preferences. These cookies cannot be disabled without impairing core platform functionality.
• Performance cookies: Collect anonymous statistical information about how visitors use the Platform (e.g., which pages are visited most frequently, which games are loaded most often). This data is used to improve the Platform's speed and layout. No personally identifiable information is collected by these cookies.
• Functionality cookies: Remember choices you have made on the Platform (such as responsible gaming limit settings or display preferences) to provide a more personalised experience during subsequent visits.
• Analytics cookies: Used to analyse aggregate traffic patterns and player behaviour. Data collected through analytics cookies is anonymised before processing and is never linked back to individual player accounts.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. tkak does not use third-party advertising or retargeting cookies.

8 Sharing Your Data

tkak does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, solely for the purpose of processing your deposits and withdrawals in BDT.
• Game and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and similar providers, to the extent necessary for them to deliver game content and resolve technical disputes relating to game rounds played on their platforms.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents and screen against sanctions and watchlists as part of our legal compliance obligations.
• Fraud prevention and security providers: Specialist services that analyse transactional and behavioural data to detect patterns consistent with fraud, money laundering, or abuse of promotional offers.
• IT and infrastructure providers: Cloud hosting, database management, and content delivery network (CDN) providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or the lawful request of a competent regulatory authority, tkak may disclose personal data without prior notice to you.

All third-party service providers who process personal data on behalf of tkak are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they provide to us.

9 International Transfers

As an internationally operating platform, tkak may transfer your personal data to, and process it in, countries outside Bangladesh. Where such transfers occur, tkak takes appropriate steps to ensure that your personal data receives an adequate level of protection. These steps may include:

• Transferring data only to countries that have been assessed as providing an adequate level of data protection.
• Implementing standard contractual data protection clauses with third-party recipients of personal data outside Bangladesh.
• Ensuring that any third-party processor outside Bangladesh is bound by contractual obligations consistent with internationally recognised data protection standards.

By using the tkak Platform and submitting your personal data, you acknowledge that your data may be transferred, stored, and processed in locations outside Bangladesh, subject to the safeguards described above.

10 Data Retention

tkak retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Our general data retention approach is as follows:

• Account and identity data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with standard AML and record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, in line with financial record-keeping requirements.
• Betting and gaming history: Retained for the duration of your account and for up to three (3) years following account closure, for dispute resolution and audit purposes.
• Support communications: Retained for up to two (2) years from the date of the final communication, for training, quality assurance, and dispute documentation purposes.
• Technical and usage data: Retained in anonymised or aggregated form for analytical purposes. Raw, identifiable technical logs are retained for up to ninety (90) days before anonymisation or deletion.
• Marketing consent records: Retained for as long as you have an active account and for up to two (2) years following account closure or the withdrawal of consent, whichever is earlier.

When personal data is no longer required and there is no legal basis for continued retention, tkak will securely delete or irreversibly anonymise the data in question.

11 Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by tkak. To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within thirty (30) days.

Please note that some rights are not absolute and may be subject to limitations where tkak has a legal obligation to retain data, a legitimate interest in continuing to process data for security or fraud prevention purposes, or a need to retain data for the establishment, exercise, or defence of legal claims.

12 Security Measures

tkak takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the tkak Platform is encrypted using TLS with 256-bit AES encryption, preventing interception by third parties.
• Data encryption at rest: Sensitive personal data, including identity documents and financial information, is encrypted in our databases using industry-standard encryption algorithms.
• Password hashing: Account passwords are never stored in plain text. They are processed through a strong one-way cryptographic hashing algorithm, meaning even internal staff cannot retrieve your actual password.
• Access controls: Access to personal data within tkak's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion detection and monitoring: Our platform infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns.
• Regular security assessments: tkak conducts periodic security reviews of its platform infrastructure and data handling procedures to identify and address vulnerabilities proactively.

While tkak takes all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage system is 100% secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, tkak will notify affected players promptly and take all necessary steps to contain and remediate the breach.

13 Children & Minors

The tkak Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. If tkak becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor under your care has created a tkak account or submitted personal data to us, please contact our support team at [email protected] immediately. We will investigate and act without delay.

14 Third-Party Links

The tkak Platform may contain references to third-party services, such as payment providers and game studios. While we take care to work only with reputable partners, tkak does not control the privacy practices of third-party websites or services and is not responsible for their privacy policies or data handling practices.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of tkak, particularly your mobile wallet provider (bKash, Nagad, Rocket, or Upay) and any game provider whose titles you access through the Platform.

15 Changes to This Policy

tkak reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When a material change is made, we will update the "Last Updated" date at the top of this document and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the tkak Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

16 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way tkak handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry" or "Data Subject Request"
• Support hours: 24 hours a day, 7 days a week
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days of receipt

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. tkak will cooperate fully with any such investigation.