Privacy Policy

1 Introduction

This Privacy Policy applies to all personal data processed by tk688 in connection with the operation of the online casino and sports betting platform available at tk688-bd.co (the "Platform"). It applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts tk688 via any support channel.

By registering an Account or using any service on the tk688 Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy is incorporated into and forms part of the tk688 Terms and Conditions, which are available at /terms-conditions.

tk688 is committed to handling your personal data responsibly and transparently. We process personal data only for legitimate, specified purposes and retain it only for as long as is necessary for those purposes or as required by applicable law.

2 Data Controller

For the purposes of this Privacy Policy, tk688 acts as the data controller with respect to the personal data of its registered players and site visitors. As data controller, tk688 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is conducted lawfully and fairly.

All enquiries, requests, and complaints relating to the processing of your personal data should be directed to the tk688 Data Protection contact at:

3 Personal Data We Collect

tk688 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration Data

When you create a tk688 Account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (for age verification purposes)
• Residential address in Bangladesh (district and division)
• Mobile phone number
• Email address
• Username and password (password stored in hashed, non-reversible form)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering requirements and to verify player age and identity, we may collect:

• Copies of government-issued photo identification (National ID Card, Passport, or Driving Licence)
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Selfie photograph for identity matching purposes
• Proof of payment method ownership (screenshot of bKash or Nagad account registered in the player's name)

3.3 Financial and Transaction Data

In connection with deposits and withdrawals, we collect:

• Payment method details (mobile wallet number for bKash, Nagad, Rocket, or Upay; card details for Visa or Mastercard — card numbers are tokenised and not stored in full)
• Deposit and withdrawal amounts and timestamps
• Transaction reference numbers
• Account balance history

3.4 Gaming and Betting Activity Data

• Games played, bet amounts, wins, and losses
• Sports betting selections, odds accepted, and bet outcomes
• Session duration and login timestamps
• Bonus and promotion usage history

3.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited on the Platform and time spent on each page
• Referral URL (the page you visited immediately before arriving at tk688)

3.6 Communications Data

• The content of messages sent to tk688 support via email or live chat
• Records of any complaints or disputes raised
• Your stated communication preferences (e.g., whether you have opted in to receive promotional emails)

4 How We Collect Your Data

tk688 collects your personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit, contact support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, and server logs when you browse or use the Platform. See Section 8 for full details on our cookie practices.
• From third parties — from KYC verification providers who confirm your identity against government records; from payment processors who confirm transaction status; from fraud prevention services that flag suspicious activity patterns.

tk688 does not purchase personal data lists from data brokers. All personal data we hold has been collected either directly from you or from a regulated third-party service provider operating in connection with the Platform.

5 How We Use Your Personal Data

The table below sets out the primary purposes for which tk688 uses your personal data and the legal basis for each use:

tk688 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis for the new processing activity.

6 Legal Basis for Processing

tk688 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Performance of contract: Processing that is necessary for tk688 to fulfil its obligations to you as a registered player, including operating your Account, processing transactions, and providing access to Games.
• Legal obligation: Processing that is required by applicable law, including anti-money laundering regulations, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing that is necessary for tk688's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing and promotional communications. You may withdraw your consent at any time by contacting [email protected] or updating your account communication preferences.

7 Sharing Your Personal Data

tk688 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Payment Processors

We share transaction-related data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card networks (Visa, Mastercard) to process your deposits and withdrawals. These providers act as independent data controllers for the payment leg of each transaction and are subject to their own privacy policies.

7.2 KYC and Identity Verification Providers

We share identity documents and personal details with regulated third-party KYC verification services to confirm your age and identity. These providers are contractually bound to process your data solely for the purpose of identity verification and are prohibited from using it for any other purpose.

7.3 Fraud Prevention and Security Services

We share device data, IP addresses, and transaction patterns with fraud detection and cybersecurity providers to protect the integrity of the Platform and all player accounts. This processing is carried out on the basis of our legitimate interest in maintaining a secure platform.

7.4 Game Software Providers

Certain Games on the tk688 Platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive minimal technical data (such as session tokens) required to deliver game content and confirm bet outcomes. They do not receive your full personal profile.

7.5 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. tk688 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the Platform effectively, remember your preferences, and gather anonymised analytics data to help us improve the user experience.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You may disable non-essential cookies by adjusting your browser settings. Please note that disabling essential cookies will prevent you from logging in to your tk688 Account and using core Platform features. Instructions for managing cookies in common browsers are available in each browser's help documentation.

9 Data Retention

tk688 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of the Account plus a minimum of 5 years following permanent Account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or Account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming and betting activity logs: Retained for a minimum of 3 years from the date of each gaming session or bet.
• Customer support communications: Retained for 2 years from the date of the last communication, unless related to an ongoing dispute or investigation.
• Analytics and technical data: Aggregated or anonymised after 12 months; raw logs deleted after 24 months.
• Marketing consent records: Retained for the duration of your consent, plus 12 months following withdrawal of consent.

Where retention beyond the standard periods is required for an ongoing legal proceeding, regulatory investigation, or dispute resolution process, tk688 will retain the relevant data until that matter is fully resolved.

10 Data Security

tk688 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the tk688 Platform is encrypted using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. tk688 staff cannot read or retrieve your password in plain text.
• Access controls: Access to personal data is restricted to authorised tk688 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Payment tokenisation: Card payment details are tokenised by our payment processor partners. tk688 does not store full card numbers on its own servers.
• Regular security audits: The Platform undergoes periodic security assessments and penetration testing by independent security professionals.
• Incident response: tk688 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

While tk688 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your Account login credentials confidential and for notifying tk688 immediately if you suspect any unauthorised access to your Account.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by tk688:

• Right of access: You have the right to request a copy of the personal data tk688 holds about you (a "Subject Access Request"). We will provide a response within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update most registration details directly from your Account settings panel.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. Note that we may be unable to comply with erasure requests where we are required by law to retain the data (e.g., financial records subject to anti-money laundering retention requirements).
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing on the basis of legitimate interests.
• Right to data portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of tk688's legitimate interests, including profiling for responsible gaming monitoring purposes. tk688 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact tk688 at [email protected]. We may need to verify your identity before processing your request to ensure that we do not disclose personal data to an unauthorised person.

12 Children's Privacy

The tk688 Platform is strictly for adults aged 18 and above. tk688 does not knowingly collect, process, or store personal data relating to persons under the age of 18. If we become aware that personal data has been collected from a person under 18, we will delete that data immediately and permanently close the associated Account.

Parents and guardians who believe that a minor may have registered an Account on the tk688 Platform are encouraged to contact us immediately at [email protected] so that we can take prompt action. tk688 cooperates fully with all requests from parents, guardians, and relevant authorities in connection with underage access.

13 Third-Party Links

The tk688 Platform may contain links to the websites or services of third-party game providers, payment processors, or sports data providers. These third-party sites operate independently of tk688 and are governed by their own privacy policies. tk688 is not responsible for the privacy practices of any third-party website and encourages you to review the privacy policy of any external site you visit.

The inclusion of a link to a third-party site on the tk688 Platform does not constitute an endorsement of that site or its privacy practices by tk688.

14 Amendments to This Policy

tk688 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. Material changes will be communicated to registered players via the email address on file at least 7 days before the updated Policy takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the tk688 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how tk688 processes your personal data, please contact us using the details below. Our support team is available around the clock, every day of the year, including Bangladesh public holidays.

When submitting a data rights request, please include your full name, Account username, and a clear description of your request. For Subject Access Requests, we will ask you to verify your identity before releasing any personal data.