Privacy Policy for tk688

This Privacy Policy ("Policy") sets out how tk688 ("tk688", "we", "us", or "our"), operator of the online casino and sports betting platform accessible at tk688bd.onl, collects, processes, stores, and protects the personal data of its users ("you", "your", or "the User").

tk688 is committed to handling all personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We understand that privacy is important to our players in Bangladesh, and we have designed our data practices to be proportionate, purposeful, and secure.

By creating an account with tk688, accessing the Platform, or continuing to use our services after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to our data practices as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

For the purposes of this Policy, tk688 acts as the data controller in respect of the personal data collected through the tk688bd.onl platform. As the data controller, tk688 determines the purposes for which and the means by which personal data is processed.

Where tk688 engages third-party service providers — such as payment processors, identity verification providers, or game technology suppliers — to process personal data on our behalf, those providers act as data processors under written agreements that obligate them to process data only on tk688's instructions and to maintain appropriate security standards.

If you have any questions about this Policy or wish to exercise any of your data rights described in Section 10, you may contact the tk688 data team using the contact information provided in Section 13 of this Policy.

tk688 collects personal data from you through a number of channels and at different stages of your relationship with the Platform. The categories of data we collect are described below.

3.1 Registration and Account Data

When you register an account with tk688, we collect the following information: full name, date of birth, mobile phone number, email address, residential address, and your preferred account currency (Bangladeshi Taka, BDT). This data is required to create and maintain your account and to verify that you meet our minimum age requirement of 18 years.

3.2 Identity Verification Data

To comply with our know-your-customer (KYC) and anti-money-laundering (AML) obligations, tk688 may require you to provide a copy of a government-issued identity document, such as your National Identity Card (NID), passport, or driving licence. We may also request a recent utility bill or bank statement as proof of address. These documents are processed securely and retained only for as long as required by applicable legal and regulatory obligations.

3.3 Financial and Transaction Data

When you make a deposit or withdrawal, we collect data relating to the transaction, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank card), transaction amount in BDT, transaction timestamp, and a transaction reference number. We do not store full payment card numbers on our servers; card data is tokenised and processed by our certified payment processing partners.

3.4 Usage and Behavioural Data

We collect data about how you interact with the tk688 Platform, including the games you play (cricket betting, slots, live dealer, fishing games), bet amounts, session duration, login timestamps, and pages visited. This data is used to personalise your experience, detect unusual account activity, and fulfil our responsible gaming monitoring obligations.

3.5 Technical and Device Data

When you access the tk688 platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop or mobile), referring URL, and time-zone setting. This data is collected for security monitoring, fraud prevention, and aggregate analytics purposes.

3.6 Communications Data

If you contact tk688's customer support team, we retain records of that correspondence — including the content of your messages, the date and time of contact, and the resolution outcome — to enable us to provide consistent service and to maintain an audit trail of customer interactions.

3.7 Summary Table of Data Categories

tk688 uses the personal data we collect for the following purposes. In each case, the purpose is tied to a legitimate, necessary operational or legal reason.

• Account creation and management: To register your account, verify your identity, maintain your account balance, and provide you with access to all Platform features.
• Processing transactions: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card payment providers, and to maintain an accurate record of all financial transactions on your account.
• Legal and regulatory compliance: To meet our KYC, AML, and responsible gaming obligations, including age verification, suspicious transaction reporting, and responding to lawful requests from competent authorities.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other misuse of the Platform.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour and to enforce self-imposed or Platform-imposed player protection measures.
• Customer support: To respond to your queries, complaints, and requests, and to maintain records of our support interactions.
• Service personalisation: To tailor the content, promotions, and game recommendations displayed to you based on your activity on the Platform, where you have not opted out of such personalisation.
• Marketing communications: To send you information about promotions, bonuses, and new features at tk688, subject to your marketing preferences. You may opt out at any time as described in Section 10.
• Platform improvement and analytics: To analyse aggregate usage patterns and improve the design, functionality, and performance of the tk688 Platform.

tk688 processes your personal data on the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and tk688 — including account management, payment processing, and game provision — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering legislation, age verification requirements, and tax reporting obligations, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of tk688's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and certain personalisation features is carried out on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tk688 does not sell or rent your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary.

6.1 Payment Service Providers

To process deposits and withdrawals, tk688 shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card network operators (Visa/Mastercard). These providers receive only the data required to complete the specific transaction and are bound by their own data protection and financial services regulations.

6.2 Identity Verification Partners

To meet our KYC obligations, we may share identity document data with certified third-party verification service providers. These providers process verification data solely on our behalf and under strict data processing agreements.

6.3 Game Technology Providers

tk688 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive your player ID and session data in order to deliver the game to your device. They do not receive your full registration or financial data.

6.4 Law Enforcement and Regulatory Authorities

tk688 may disclose personal data to competent law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of tk688, its users, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of tk688's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer via the email address registered on your account and will ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.

tk688 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

• Account data: Retained for the duration of your account relationship with tk688, plus a minimum of five (5) years following account closure, to meet anti-money-laundering and audit requirements.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification, in line with applicable KYC legislation.
• Transaction records: Retained for a minimum of seven (7) years to support financial reporting and tax obligations.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless the matter is the subject of ongoing legal proceedings.
• Usage and behavioural data: Retained in identifiable form for two (2) years from collection, after which it may be retained in anonymised, aggregate form indefinitely for analytics purposes.
• Marketing consent records: Retained for the duration of your consent and for two (2) years following withdrawal, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request account closure, we will commence the deletion process in accordance with these retention schedules.

tk688 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the Platform. The cookies we use fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing Platform functionality.
• Preference cookies: These cookies remember your settings and preferences — such as your chosen language or display settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: We use first-party analytics cookies to understand how visitors navigate the Platform in aggregate. This data is used to improve page layouts, identify underperforming features, and optimise the overall user experience. We do not use third-party analytics services that share your data with advertising networks.
• Security cookies: These cookies support our fraud detection and bot-prevention measures by helping us identify unusual patterns of access to the Platform.

tk688 does not use advertising cookies, retargeting cookies, or third-party cookies that track your activity across other websites. You may control cookie settings through your browser, though disabling strictly necessary cookies will affect your ability to use the Platform.

tk688 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for stored personal data, including identity documents and financial records.
• Role-based access controls ensuring that internal staff can access personal data only to the extent required by their specific job function.
• Regular security audits and penetration testing of Platform infrastructure conducted by qualified independent security professionals.
• Multi-factor authentication for internal systems access by tk688 staff.
• Automated anomaly detection to identify and respond to unusual login patterns or transaction behaviour in real time.

Notwithstanding these measures, no method of data transmission or storage over the internet is completely impenetrable. In the unlikely event of a data breach that poses a risk to your rights and freedoms, tk688 will notify affected users without undue delay and will take immediate remedial action.

As a tk688 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 13. We will respond to all valid requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data tk688 holds about you, along with information about how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: You may request that tk688 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing was unlawful. This right is subject to our legal obligation to retain certain data as described in Section 7.
• Right to restrict processing: You may request that tk688 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

The tk688 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, solicit, or process personal data from any person under the age of 18. Age verification checks are conducted during the account registration process and at subsequent points as described in our Terms & Conditions.

If tk688 becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account with tk688, please notify us immediately using the contact details in Section 13.

tk688 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify you by displaying a prominent notice on the Platform or by sending a communication to your registered contact details, with at least seven (7) days' notice before the revised Policy takes effect.

The "Last updated" date shown at the top of this page indicates when the Policy was most recently revised. We encourage you to review this page periodically to stay informed about how tk688 is protecting your data. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the tk688 data team. Our English-language support team is available 24 hours a day, seven days a week.

For questions about responsible gaming tools or self-exclusion, please visit our Responsible Gaming page. For general questions about how the Platform works, our FAQ page is a good starting point.