Privacy Policy — tk99com

1 Data We Collect

tk99com collects personal data from you in the following circumstances: when you register an account, when you use our platform services, when you contact our support team, and when you interact with our website through normal browsing activity. The categories of personal data we collect are set out below.

1.1 Registration and Identity Data

When you create an account on tk99com, we collect the following information: your full legal name, date of birth, residential address, email address, and mobile phone number. This data is essential to establish and manage your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

As part of our KYC process, we may collect scanned copies or photographs of government-issued identity documents such as your national identity card or passport, proof-of-address documents such as utility bills or bank statements, and evidence of your registered payment method (for example, a screenshot showing your bKash or Nagad account is registered in your name).

1.3 Financial and Transaction Data

We collect records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus transactions, wager history, and win/loss records. We do not store full card numbers on our own servers; card payment data is handled directly by our certified payment processors under their respective security standards.

1.4 Technical and Usage Data

When you access tk99com, our servers automatically record certain technical information including your IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, session duration, and clickstream data. This data is collected through server logs and, where applicable, cookies and similar tracking technologies.

1.5 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications including the content of your messages, timestamps, and any attachments you provide. These records are maintained to ensure continuity of service and to resolve disputes.

2 How We Use Your Data

tk99com uses the personal data it collects solely for the purposes described in this Privacy Policy. We do not use personal data for purposes that are incompatible with those originally stated at the time of collection. The primary purposes for which we process your data are as follows:

• Account Management: To create, maintain, and manage your player account, including processing your login credentials, storing your account preferences, and maintaining your transaction history.
• Identity Verification and KYC Compliance: To verify your identity and age in accordance with our legal obligations and to satisfy our anti-money laundering (AML) programme requirements.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance related to your account or any game on the platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other illegal or prohibited conduct on the platform.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour, enforce self-exclusion requests, and apply deposit limits or cooling-off periods as requested by or on behalf of players.
• Legal and Regulatory Compliance: To retain records as required under applicable law, to respond to lawful requests from competent authorities, and to defend the platform's legal interests in disputes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, security, and usability of our platform and game offerings.
• Marketing Communications (opt-in only): To send promotional emails, SMS notifications, or in-platform messages about bonuses, new game releases, and seasonal promotions — only to players who have explicitly consented to receive such communications.

3 Legal Basis for Processing

Every processing activity carried out by tk99com rests on one or more of the following recognised legal bases. We have identified the applicable legal basis for each category of processing and documented it in our internal data processing register.

3.1 Performance of a Contract

The majority of data processing on tk99com is necessary for the performance of the contract between you and the platform — namely, the provision of online casino and sports betting services under the Terms & Conditions you accepted at registration. This legal basis covers account management, payment processing, game participation, and customer support.

3.2 Legal Obligation

Certain processing activities are required by law. These include identity verification and KYC checks, retention of financial transaction records for audit purposes, and co-operation with law enforcement or regulatory authorities presenting a lawful request for information.

3.3 Legitimate Interests

Some processing is carried out on the basis of tk99com's legitimate interests, provided those interests are not overridden by your own rights and interests. This includes fraud detection and prevention, platform security monitoring, and the analysis of anonymised usage data to improve our services.

3.4 Consent

Where processing is not covered by the above legal bases — most notably in the context of marketing communications and non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent, update your preferences in your account settings or contact us at support@tk99com.

4 Data Sharing and Disclosure

tk99com does not sell or rent your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

4.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial data with our payment partners including mobile wallet operators (bKash, Nagad, Rocket, Upay) and card network processors (Visa, Mastercard). These providers are contractually required to process your data solely for the purpose of completing the transaction and to maintain appropriate security standards.

4.2 Game Content Providers

Some technical data such as session identifiers may be shared with our game studio partners — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — to facilitate the delivery of their game content within the tk99com platform. These providers do not receive your name, address, or payment details.

4.3 Identity Verification Services

We use third-party KYC and identity verification service providers to assist with document checking. These providers receive only the data required to perform the verification and are prohibited from retaining it for other purposes.

4.4 Legal and Regulatory Authorities

tk99com will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law or in response to a valid legal process. We will notify affected users of any such disclosure to the extent permitted by law.

4.5 Business Transfers

In the event that tk99com undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

5 Cookies and Tracking Technologies

tk99com uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your browser when you visit a website. The cookies used on our platform fall into the following categories:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the tk99com platform and may prevent you from logging in or completing transactions. Disabling analytics or marketing cookies will not affect your ability to use the core platform features.

We do not use third-party advertising networks that place persistent tracking cookies across unrelated websites. Any analytics data collected is processed in aggregated form and is not linked back to your personal identity.

6 Data Retention

tk99com retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of personal data we hold:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, to satisfy anti-money laundering record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, in line with standard KYC compliance requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for audit, tax, and regulatory purposes.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an ongoing dispute.
• Technical and Usage Logs: Retained for twelve (12) months from the date of collection unless extended for the purposes of a security investigation.
• Marketing Consent Records: Retained for the duration of your marketing opt-in and for one (1) year following withdrawal of consent, as evidence of the consent previously given.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Data that has been anonymised is no longer considered personal data and may be retained for analytical purposes indefinitely.

7 Your Privacy Rights

As a user of tk99com, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to support@tk99com with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 days.

7.1 Right of Access

You have the right to request a copy of all personal data we hold about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. For certain data fields such as your registered name or date of birth, documentary evidence may be required before a correction can be applied.

7.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations as described in Section 6.

7.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interests and we are assessing whether those interests override your own.

7.5 Right to Data Portability

Where we process your data on the basis of your consent or a contract, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

7.6 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, we will cease processing your data for that purpose immediately and will update your marketing preferences accordingly.

8 Data Security Measures

tk99com employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key measures in place include the following:

• TLS/SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) protocols. Our platform enforces HTTPS across all pages and connections.
• Data-at-Rest Encryption: Sensitive personal data stored on our servers — including identity documents and financial records — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within our organisation is strictly limited on a need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific role, and all access is logged and monitored.
• Password Security: Account passwords are stored in hashed form using a strong one-way hashing algorithm. We never store passwords in plain text and cannot retrieve your password — only reset it.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for anomalous activity, intrusion attempts, and potential security incidents. Alerts trigger immediate investigation by our security team.
• Third-Party Security Standards: All third-party service providers who handle personal data on our behalf are contractually required to maintain security standards at least equivalent to those described in this section.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tk99com will notify affected users without undue delay and will take all reasonable steps to contain and remedy the breach.

While we invest significantly in security infrastructure, no digital platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own account credentials and for notifying us immediately at support@tk99com if you suspect any unauthorised access to your account.