tk00 Privacy Policy — How We Handle Your Data

1 Information We Collect

tk00 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you browse and use the site, and from third-party payment and identity verification providers. The specific categories of data we collect are described below.

1.1 Registration and Identity Data

When you create a tk00 account, we collect the following information:

• Full legal name;
• Date of birth (to verify you are aged 18 or above);
• Mobile phone number (used as your primary account identifier);
• Email address (used for account notifications and support correspondence);
• Preferred payment method details (bKash number, Nagad number, Rocket number, or Upay number registered in your name);
• Self-selected username and encrypted password.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request the following documents at any stage of your relationship with tk00:

• A scanned copy or clear photograph of a government-issued photo identification document (National Identity Card, passport, or driving licence);
• A selfie or live photograph for identity confirmation against the submitted ID document;
• Proof of ownership of your registered payment account (for example, a screenshot of your bKash or Nagad profile screen showing your name and number);
• Proof of residential address where required for enhanced verification.

1.3 Transaction and Financial Data

We record details of all financial transactions conducted through your tk00 account, including:

• Deposit amounts, timestamps, and payment method references;
• Withdrawal requests, amounts, processing status, and confirmation references;
• Betting and wagering records, including game type, stake, outcome, and timestamp;
• Bonus claims and associated wagering activity.

This data is retained for regulatory compliance, fraud prevention, and dispute resolution purposes.

1.4 Technical and Usage Data

When you access the tk00 platform, our systems automatically collect certain technical data about your device and browsing behaviour:

• IP address and approximate geographic location (country and city level);
• Device type, operating system, and browser version;
• Pages visited, features accessed, session duration, and click-stream data;
• Referral source (how you arrived at the tk00 site);
• Cookie identifiers and session tokens (see Section 4 for full cookie details).

1.5 Communications Data

When you contact tk00 customer support, we retain records of those communications, including the content of messages sent via email, live chat, or any other contact channel, along with the date, time, and resolution outcome. This data is used to improve our support quality and to maintain an accurate account history.

2 How We Use Your Information

tk00 uses the personal data it collects for the specific, legitimate purposes listed below. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, identity data	Contractual necessity
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method details	Contractual necessity
Fraud detection and anti-money laundering	Transaction data, technical data, KYC data	Legal obligation, legitimate interest
Responsible gaming monitoring	Betting records, session data, account history	Legal obligation, legitimate interest
Customer support and dispute resolution	Communications data, account history	Contractual necessity, legitimate interest
Platform security and abuse prevention	Technical data, usage data, IP address	Legitimate interest
Service improvement and analytics	Usage data, technical data (anonymised)	Legitimate interest
Promotional communications (opt-in only)	Contact details, betting preferences	Consent

2.1 Responsible Gaming Use of Data

tk00 uses betting history, session frequency data, and deposit patterns specifically to identify players who may be exhibiting signs of problem gambling. Where our systems flag a pattern of concern, we may proactively reach out to offer responsible gaming support resources, apply temporary account restrictions, or suggest the use of deposit limits or self-exclusion tools. This processing is conducted in the player's best interest and forms a core part of our duty of care obligations.

2.2 Marketing Communications

tk00 will only send promotional emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive them during registration or at a later point via your account settings. You may withdraw consent for marketing communications at any time by contacting [email protected] or updating your notification preferences in your account dashboard. Withdrawal of marketing consent does not affect any other aspect of your account.

3 Sharing and Disclosure of Data

tk00 does not sell, rent, or exchange your personal data with third parties for their own commercial or marketing purposes. Data is shared with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, tk00 must share relevant transaction details with your chosen payment provider (bKash, Nagad, Rocket, or Upay). The data shared is limited to transaction amount, reference number, and account identifiers. Each payment provider operates under its own privacy policy and data processing terms, which we encourage you to review directly with the respective provider.

3.2 Game Content Providers

Third-party game studios and live casino providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical data (such as a hashed player identifier and session token) to enable game delivery and to maintain fair play certification records. These providers are contractually prohibited from using that data for any purpose beyond game delivery and certification compliance.

3.3 Identity Verification Partners

Where tk00 uses a third-party KYC verification service to process identity documents, that provider will receive the relevant identity data solely for the purpose of verification. All KYC partners are required to maintain equivalent data security standards to those applied by tk00 itself.

3.4 Legal and Regulatory Disclosure

tk00 may be required to disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, disclosure will be limited to the minimum information required to satisfy the legal obligation.

3.5 Business Transfers

In the event that tk00's business operations are acquired by, merged with, or transferred to another entity, your personal data may form part of the transferred assets. In such an event, you will be notified in advance, and the successor entity will be required to honour the commitments made in this Privacy Policy or obtain fresh consent where required.

4 Cookies and Tracking Technologies

tk00 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, maintain your login session, and analyse how the platform is used. This section explains what cookies we use and why.

4.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain your session state. Cookies themselves do not contain executable code and cannot access other data on your device.

4.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain login session, load balancing, security tokens, CSRF protection	Session
Functional	Remember language preference, display settings, responsible gaming tool states	Up to 12 months
Analytics	Understand how players navigate the platform (page views, session duration, feature usage) using anonymised data	Up to 24 months
Performance	Monitor platform speed and error rates to support ongoing technical improvements	Up to 12 months

4.3 Managing Cookies

You can configure your browser to refuse some or all cookies, or to alert you when a cookie is being set. Please note that disabling strictly necessary cookies will prevent you from logging in or using key platform features. Instructions for managing cookies are available in your browser's help documentation. tk00 does not currently respond to "Do Not Track" browser signals, as there is no universally accepted standard for interpreting such signals.

5 Data Retention and Storage

tk00 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention principles apply:

5.1 Active Account Data

While your tk00 account remains active, we retain all registration data, KYC documents, transaction records, and communications data in full. This data is necessary to operate your account, process transactions, and fulfil our legal obligations on an ongoing basis.

5.2 Post-Closure Retention

Following account closure — whether initiated by you or by tk00 — we retain certain categories of data for defined periods:

• Transaction and financial records: retained for a minimum of 5 years following account closure to satisfy anti-money laundering record-keeping obligations;
• KYC and identity documents: retained for a minimum of 5 years following account closure;
• Communications and support records: retained for 3 years following account closure;
• Technical and usage logs: retained for up to 12 months following account closure, after which they are anonymised or deleted;
• Self-exclusion records: retained for the full duration of the self-exclusion period plus 5 years thereafter, to prevent re-registration in violation of the exclusion.

5.3 Storage Location

tk00 stores personal data on secured servers. Data is protected through a combination of physical, technical, and administrative security controls. Where data is processed by third-party service providers, those providers are required by contract to maintain equivalent security standards and to store data only in jurisdictions with adequate data protection frameworks.

5.4 Anonymisation

Where personal data is no longer required for its original purpose but may have analytical value, tk00 applies irreversible anonymisation techniques to remove all identifying information before retaining the resulting anonymised dataset. Anonymised data is not personal data and is therefore not subject to the retention limits described above.

6 Security Measures We Apply

tk00 takes the security of your personal data seriously. We implement a layered approach to data security, combining technical controls, organisational procedures, and contractual obligations with third-party partners.

6.1 Technical Controls

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers;
• Encrypted storage for all sensitive personal data and payment method details at rest;
• Hashed and salted passwords — tk00 never stores your password in plain text;
• Firewall and intrusion detection systems to monitor for and block unauthorised access attempts;
• Regular security patching and vulnerability assessments of all platform components;
• Two-factor authentication (2FA) availability for player accounts as an additional access control layer.

6.2 Organisational Controls

Access to personal data within tk00 is governed by the principle of least privilege — staff members can access only the data they need to perform their specific role. All personnel with access to personal data are required to complete data protection training and are bound by confidentiality obligations. Access rights are reviewed regularly and revoked promptly upon change of role or termination of employment.

6.3 Data Breach Procedures

In the event of a personal data breach that poses a risk to affected players, tk00 will notify impacted users within 72 hours of becoming aware of the breach, providing details of what data was affected, what steps tk00 has taken in response, and what actions players should take to protect themselves. Notification will be sent to the email address or mobile number registered to the affected account.

7 Your Privacy Rights

As a user of the tk00 platform, you have a number of rights in relation to your personal data. These rights can be exercised at any time by contacting [email protected]. tk00 will respond to all privacy rights requests within 10 business days of receipt.

7.1 Right to Access

You have the right to request a copy of the personal data that tk00 holds about you. Upon receipt of a verified access request, we will provide a structured summary of your data in a readable format. This includes your registration details, KYC status, transaction history, and any notes held on your account.

7.2 Right to Rectification

If you believe that any personal data tk00 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine data corrections (such as updating a contact number), you may be able to make changes directly within your account settings. For corrections to identity-verified data, you may be required to submit supporting documentation.

7.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to the processing and there is no overriding legitimate interest to continue. Please note that tk00 may be unable to fulfil an erasure request where retention is required by law — for example, transaction records subject to anti-money laundering retention obligations cannot be deleted on request during the mandatory retention period.

7.4 Right to Restrict Processing

You have the right to request that tk00 restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or where you have contested the lawfulness of processing. Where processing is restricted, your data will be stored but not used for any active purpose until the restriction is lifted.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, tk00 will cease all marketing processing immediately. This will not affect the delivery of essential account communications such as transaction confirmations, security alerts, or support responses.

7.6 Right to Data Portability

Where processing is based on your consent or on a contract with you, and where the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted directly to another service provider where technically feasible.

8 Contact and Policy Updates

8.1 Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or tk00's data practices, please contact our data protection team at [email protected]. Please include "Privacy Policy Query" in the subject line of your message. We aim to respond to all privacy-related correspondence within 2 business days.

8.2 Updates to This Policy

tk00 reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, applicable laws, or the services we offer. When we make material changes, we will notify active account holders via email or in-platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this page and in the header of this document will be revised on each update. Continued use of the tk00 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

8.3 Children's Privacy

tk00 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by or on behalf of a person under 18, that account will be closed immediately and all associated data will be deleted in accordance with our KYC and account closure procedures. If you believe a minor has registered a tk00 account, please contact [email protected] immediately.