tk1k Privacy Policy

tk1k collects personal data in the following categories, depending on how you interact with the Platform:

1.1 Registration Data

• Full name as it appears on your national identity card (NID) or passport.
• Date of birth (used to verify that you are 21 years of age or older).
• Bangladeshi mobile phone number (used as your primary account identifier and for transaction verification via bKash, Nagad, Rocket, or Upay).
• Email address (optional, used for account notifications and password recovery).

1.2 Identity Verification (KYC) Data

• A copy of your national identity card (NID), passport, or other government-issued photo identification document.
• A selfie or live photograph taken at the time of verification, used to confirm that the identity document belongs to the person registering the account.
• Proof of payment method ownership, such as a screenshot of your bKash or Nagad wallet showing your registered mobile number, where requested.

1.3 Technical and Usage Data

• Device information including IP address, browser type and version, operating system, screen resolution, and device identifier. This data is collected automatically when you visit the Platform and is used to detect fraud, prevent multi-accounting, and ensure the Platform displays correctly on your device.
• Session activity data including pages visited, games played, bets placed, session start and end times, and in-game actions. This data is used to detect problem gambling patterns, enforce responsible gaming tools, investigate disputes, and improve the Platform experience.

The table below summarises the primary purposes for which tk1k processes your personal data and the corresponding legal basis for each processing activity:

tk1k processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract performance: processing is necessary to register your account, operate your account, and deliver the services you have requested, including the placement of bets and the processing of deposits and withdrawals.
• Legal obligation: processing is required to comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any other legal or regulatory obligations applicable to tk1k's operations.
• Legitimate interest: processing is necessary for our legitimate interests in operating a secure platform, preventing fraud, detecting prohibited conduct, and improving our services, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: where we process your personal data for marketing communications or optional features, we do so on the basis of your freely given, specific, and informed consent. You may withdraw your consent at any time by contacting our support team.

tk1k does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors (bKash, Nagad, Rocket, Upay): we share the minimum transaction data required to process your deposit or withdrawal request. Payment processors receive only the data they need to complete the transaction and are bound by their own privacy and data security obligations.
• Game and technology providers (e.g., Pragmatic Play, Evolution Gaming, Spribe): game providers may receive a pseudonymous player identifier to enable game session management, bet settlement, and responsible gaming enforcement. They do not receive your full name, NID, or payment details.
• Fraud prevention and identity verification partners: where required to perform KYC checks or to investigate suspected fraudulent activity, we may share identity documents and verification data with specialist third-party service providers under strict data processing agreements.
• Law enforcement and regulatory authorities: where we are required by applicable law, court order, or regulatory direction to disclose personal data, we will do so. We will notify you of such a requirement unless we are legally prohibited from doing so.

All third parties with whom we share personal data are required to process that data only for the purposes for which it was shared, to maintain appropriate security standards, and to comply with all applicable data protection obligations. tk1k does not permit third-party recipients to use your personal data for their own marketing purposes.

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, tk1k processes the mobile wallet number associated with the transaction and the transaction amount. tk1k does not store your full mobile wallet PIN, password, or any authentication credentials associated with your mobile wallet account. Wallet credentials remain entirely within the secure systems of the respective payment provider.

Transaction records (amount, date, time, wallet number, and reference code) are retained by tk1k for a minimum of five years following the date of the transaction. This retention period is required to meet anti-money laundering record-keeping obligations and to resolve any disputes relating to deposits, withdrawals, or bonus calculations that may arise after the transaction date.

The tk1k Platform uses cookies and similar client-side storage technologies to operate certain features, maintain your session, and understand how players use the Platform. The following types of cookies are used:

• Essential cookies: these cookies are strictly necessary for the Platform to function. They maintain your login session, store your language and currency preferences, and ensure that security tokens function correctly. Essential cookies cannot be disabled without causing the Platform to malfunction.
• Analytics cookies: these cookies collect anonymised or pseudonymised information about how players navigate the Platform, which games are most popular, and where technical errors occur. This data is used to improve the Platform and is not linked back to your identity.
• Fraud prevention cookies: these cookies store a device fingerprint that helps us identify unusual login patterns, detect multiple accounts operating from the same device, and flag potentially fraudulent activity for review by our security team.

You may manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent you from logging in to or using the Platform. tk1k does not use third-party advertising cookies and does not permit third-party advertisers to place cookies on the Platform.

tk1k retains your personal data for as long as your account is active and for such further period as is required by applicable law or necessary for our legitimate interests. The following retention periods apply:

• Account and registration data: retained for the duration of the account and for a minimum of five years following account closure, in compliance with AML and KYC record-keeping requirements.
• Transaction records: retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• Technical and usage logs: retained for up to 12 months from the date of collection, unless a longer retention period is required for the investigation of a specific security incident or dispute.

As a user of the tk1k Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]:

• Right of access: you have the right to request a copy of the personal data that tk1k holds about you, together with information about how it is processed and shared.
• Right of rectification: if any personal data that tk1k holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right of erasure: in certain circumstances, you have the right to request that tk1k delete your personal data. This right is subject to our legal obligations to retain certain records and may not apply where retention is required by law.
• Right to restrict processing: you have the right to request that tk1k restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

tk1k will respond to all privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We may ask you to verify your identity before processing a data rights request.

tk1k implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls that limit staff access to personal data on a need-to-know basis, regular security audits and penetration testing of Platform infrastructure, and automated monitoring systems that detect and alert on suspicious access patterns in real time.

Despite these measures, no internet transmission or electronic storage system is completely secure. If you have reason to believe that your account has been compromised, you must contact our support team immediately at [email protected] and change your account password without delay.

tk1k does not knowingly collect personal data from any person under the age of 21. The Platform is strictly intended for adults aged 21 and above. If we discover that personal data has been collected from a person under the age of 21, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that a minor has registered an account on tk1k, please contact us at [email protected] so that we can take immediate action.

tk1k reserves the right to update or modify this Privacy Policy at any time. When we make material changes to this Policy, we will update the effective date at the top of this page. Where required by applicable law or where material changes significantly affect your rights, we will provide additional notice to registered players via account notification or email.

Your continued use of the Platform after any revision to this Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request account closure by contacting our support team.

If you have any questions or concerns about this Privacy Policy, wish to exercise your privacy rights, or want to report a suspected data breach or misuse of your personal data, please contact the tk1k data team. Our support team is available 24 hours a day, 7 days a week.

Email: [email protected]