tk0k Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how tk0k ("we", "us", "our") collects, processes, stores, and protects personal data relating to users ("you", "your") of the tk0k platform, accessible at tk0k.org. This Policy forms part of the overall agreement between you and tk0k and should be read alongside the Terms & Conditions. By registering an account or using the platform, you acknowledge that you have read and understood this Policy.

tk0k takes data privacy seriously. We collect only the personal data that is necessary to provide and operate the platform, to comply with our legal obligations, and to deliver a safe and fair gaming experience. We do not collect personal data beyond what is required for these purposes, and we do not use or share it in ways that are inconsistent with this Policy or that users would not reasonably expect.

When you register an account and use the tk0k platform, we may collect the following categories of personal data:

• Identity data: full name, date of birth, gender, and copies of identity documents provided during KYC verification.
• Contact data: email address, phone number, and correspondence address (where provided).
• Financial data: transaction records, deposit and withdrawal history, payment method details (excluding full card numbers, which are handled by our payment partners), and account balances.
• Technical data: IP address, browser type and version, device type, operating system, session duration, pages visited, and referring URLs.
• Behavioural and gaming data: game history, bet amounts, win/loss records, session frequency, and responsible gaming tool usage.

In certain circumstances, we may also collect data from third-party sources such as payment processors, identity verification services, and fraud prevention agencies, where this is necessary to fulfil our legal obligations or to protect the security of the platform. All such third-party data sources are contractually required to have obtained appropriate permissions before sharing data with tk0k.

tk0k uses the personal data we collect for the following specific purposes:

• Account creation and management: to register your account, verify your identity, and maintain your profile and preferences on the platform.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• Legal and regulatory compliance: to perform KYC checks, anti-money laundering screening, age verification, and to respond to lawful requests from regulatory or law enforcement authorities.
• Platform improvement and personalisation: to analyse usage patterns, diagnose technical issues, improve game offerings, and where consent has been given, to personalise promotional content.
• Responsible gaming: to monitor gameplay patterns for signs of problem gambling, to apply responsible gaming tools requested by users, and to enforce platform-wide responsible gaming policies.
• Customer support: to respond to your enquiries, complaints, and support requests in a timely and accurate manner, and to maintain records of communications for quality and compliance purposes.

tk0k processes personal data on the following legal bases, depending on the purpose for which the data is used:

• Contractual necessity: processing that is required to fulfil the contract between you and tk0k, including account management, payment processing, and service delivery.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC, anti-money laundering requirements, and responses to lawful authority requests.
• Legitimate interests: processing for fraud prevention, security monitoring, and platform improvement where these interests are not overridden by your data protection rights.
• Consent: processing for marketing and personalisation purposes, where you have given your explicit consent. You may withdraw consent at any time by contacting [email protected].

tk0k does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances, and only with parties who are contractually bound to handle it securely and in accordance with applicable data protection law:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other payment processors receive the minimum data necessary to process your transactions. They do not receive your full gaming history or any data beyond what is needed for the payment itself.
• Identity and fraud verification services: third-party KYC and identity verification providers receive identity data to the extent required to perform age and identity checks on behalf of tk0k.
• Game studio providers: game platform providers such as Evolution Gaming, Pragmatic Play, and others may receive session and wagering data as part of the technical operation of their games within our platform. This data is governed by each studio's data processing agreement with tk0k.
• Regulatory and law enforcement authorities: tk0k will disclose personal data to competent authorities where required to do so by applicable law or lawful order, without prior notice to you where such notice is prohibited or not required.

In all cases where data is shared with third parties, tk0k uses contractual safeguards to ensure that the receiving party handles data with an equivalent level of care and security. tk0k remains the data controller in all such arrangements and takes responsibility for the compliance of its service providers with applicable data protection requirements.

The tk0k platform uses cookies and similar tracking technologies to operate correctly and to improve the user experience. A cookie is a small data file placed on your device when you visit the platform. Cookies do not contain executable code and cannot access other files on your device or retrieve any personal data beyond what you have provided to tk0k.

tk0k uses three categories of cookies:

• Essential cookies: these are strictly necessary for the platform to function. They maintain your login session, remember your language preference, and enable security features. These cookies cannot be disabled without affecting the platform's ability to operate.
• Analytics cookies: these help us understand how users interact with the platform — which pages are most visited, where users spend the most time, and where technical errors occur. This data is aggregated and anonymised. We use this information solely to improve the platform.
• Preference cookies: these remember your settings and personalisation choices so that your experience is consistent across sessions. You may disable these via your browser settings without affecting core platform functionality.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling analytics or preference cookies will not prevent you from using the platform but may affect certain personalised features. Most modern mobile browsers (Chrome for Android, Safari for iOS) include built-in cookie management options in their privacy settings menus.

tk0k retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. For active account holders, personal and financial data is retained for the duration of the account relationship and for a minimum period of 5 years following account closure, in order to comply with anti-money laundering record-keeping requirements and to resolve any disputes that may arise.

Technical and analytics data (such as IP logs and session data) is retained for a shorter period, typically 12 months from collection, unless a specific security investigation requires it to be retained for longer. Data that is no longer required for any legitimate purpose is deleted or anonymised in accordance with our internal data governance procedures. You may request information about our data retention practices or request deletion of your data by contacting [email protected].

tk0k implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption on all data transmissions between your device and our servers, encrypted storage of sensitive account data, strict access controls that limit employee access to personal data on a need-to-know basis, regular security assessments and penetration testing of the platform infrastructure, and multi-factor authentication options for account access.

While tk0k takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tk0k will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. If you have reason to believe that your account has been compromised, you must contact [email protected] immediately.

Subject to applicable law, you have the following rights in relation to your personal data held by tk0k. To exercise any of these rights, please contact us at [email protected] with your account details and a clear description of your request. We will respond within 30 days of receipt.

• Right of access: you have the right to request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to rectification: you have the right to request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to erasure: in certain circumstances, you have the right to request that we delete your personal data. This right may be limited where retention is required by law or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

tk0k will not charge a fee for responding to data rights requests in the ordinary course. However, where a request is manifestly unfounded, excessive, or repetitive, tk0k reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

The tk0k platform is strictly intended for adults aged 21 and above. tk0k does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been provided by or collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the tk0k platform or has provided personal data to us, please contact [email protected] immediately so that we can take appropriate action. Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gaming platforms.

tk0k reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify registered users by email or via an in-platform notification at least 7 days before the updated Policy takes effect. The updated Policy will be published at tk0k.org/privacy-policy with a revised "last updated" date.

Your continued use of the tk0k platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting [email protected]. We encourage you to review this Policy periodically to remain informed about how we protect your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which tk0k handles your personal data, please contact our support team. We are committed to addressing all data privacy enquiries promptly and transparently. Our dedicated support team is available to assist players across Bangladesh — whether you are based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in the country.

You can reach our privacy support team by email at [email protected]. Please include your registered account username and a clear description of your query or complaint so that we can respond as efficiently as possible. We aim to acknowledge all privacy-related correspondence within 2 business days and to provide a substantive response within 14 business days of receipt.