Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is published by tk688 ("we", "us", "our", "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data provided by users ("you", "your", "the Player") of the tk688 website at tk688-bd.lat and all associated mobile-optimised pages, account dashboards, payment interfaces, and customer support channels (collectively, "the Services").

This Policy is incorporated into and forms part of the tk688 Terms & Conditions. By registering an account, making a deposit, or using any Service, you acknowledge that you have read this Policy and consent to the data practices it describes. If you do not agree, you must discontinue use of the Services immediately.

This Policy applies to all personal data we collect from players based in Bangladesh and any other jurisdiction from which the Services are accessed. References to "personal data" mean any information that can identify you directly or indirectly as an individual.

2 Data We Collect

2.1 Registration Data

When you create a tk688 account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 18 or older)
• Residential address, including division, district, and postal code
• Mobile phone number (used for OTP authentication and account alerts)
• Email address (used for account communications and password recovery)
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with responsible gambling standards and anti-money-laundering best practices, we may request the following documents at the time of account verification or before processing a withdrawal:

• Copy of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• Proof of payment method ownership (screenshot of bKash, Nagad, or Rocket account showing your registered mobile number)

KYC documents are handled with the highest level of confidentiality and are accessible only to authorised compliance personnel. They are stored in an encrypted document management system separate from your general account record.

2.3 Transaction Data

Every deposit, withdrawal, bonus credit, and wager placed on tk688 is recorded and associated with your account. This includes the payment method used, the transaction amount in BDT, the date and time stamp (Bangladesh Standard Time, UTC+6), and the transaction reference number issued by the payment provider.

2.4 Technical and Device Data

When you access tk688, our servers automatically record certain technical information, including:

• IP address and approximate geographic location (city-level)
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Pages visited within the platform, session duration, and click-path data
• Referral source (the URL from which you navigated to tk688, if applicable)

2.5 Communications Data

If you contact tk688 through live chat, email, or any other support channel, we retain a record of the correspondence, including the content of your messages, the date and time, and the resolution outcome. These records are used for quality assurance, staff training, and dispute resolution purposes.

2.6 Responsible Gaming Data

If you set deposit limits, loss limits, session reminders, or request a self-exclusion through your account settings, we record these preferences and the dates on which they were applied or modified. This data is used solely to enforce your responsible gaming choices and is treated with the same level of confidentiality as your financial data.

3 How We Use Your Data

tk688 uses the personal data it collects for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Any profiling conducted for fraud detection or responsible gaming purposes is subject to oversight by qualified staff.

4 Legal Basis for Processing

tk688 processes your personal data on the following legal bases:

• Contractual necessity: Processing is required to perform the contract between you and tk688 — specifically, to operate your account, process transactions, and provide the gambling services you have requested.
• Legal obligation: Certain processing activities — particularly KYC verification and anti-money-laundering record-keeping — are required by applicable law and responsible gambling best practices.
• Legitimate interests: tk688 processes technical and behavioural data to prevent fraud, secure the platform, and improve its services. These interests are balanced against your rights and do not override them.
• Consent: Where we process data for optional purposes — such as sending promotional emails or SMS notifications — we do so only on the basis of your explicit, freely given consent. You may withdraw this consent at any time.

5 Data Sharing & Disclosure

5.1 Service Providers

tk688 shares personal data with a limited set of third-party service providers who assist in delivering the Services. Each provider is bound by a data processing agreement that restricts their use of your data to the specific purpose for which it was shared. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to process your deposits and withdrawals
• Identity verification providers: Third-party KYC platforms that validate the authenticity of identity documents you submit
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others — who supply and host the games you play on tk688
• Cloud and hosting providers: Infrastructure providers who store platform data in secure, access-controlled data centres
• Customer support platforms: Live chat and ticketing tools used to manage support interactions

5.2 Legal Disclosures

tk688 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised third parties when required to do so by applicable law, court order, or legitimate legal process. In such cases, tk688 will disclose only the minimum data required to satisfy the legal request and will, where legally permitted, notify you of the disclosure.

5.3 Business Transfers

In the event that tk688 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to the privacy practices that apply to your data prior to the transfer taking effect.

5.4 No Sale of Data

tk688 does not sell, rent, lease, or otherwise trade your personal data to third parties for their own marketing or commercial purposes. This commitment is absolute and applies regardless of the form in which data might be monetised by others in the industry.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect analytical information about how you use the site.

6.2 Cookies Used by tk688

tk688 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as preferred language, game lobby layout, and odds display format. These improve your experience but are not essential.
• Analytical cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data helps tk688 improve the platform experience.
• Security cookies: Used to detect suspicious login attempts, unusual transaction patterns, and potential bot activity. These are essential for platform security and cannot be disabled.

6.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or settings menu. Please note that disabling functional or analytical cookies may reduce the quality of your experience on tk688 but will not prevent you from accessing the core Services.

7 Data Retention

tk688 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following retention periods apply:

• Active account data (registration details, transaction history, game history): Retained for the duration of the account's active status plus a minimum of five years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of account closure or the date of the last transaction, whichever is later.
• Customer support records: Retained for three years from the date of the interaction, unless the record relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Technical and device data: Retained in anonymised or aggregated form for up to two years for analytical purposes. Non-anonymised technical logs are retained for 12 months and then deleted.
• Marketing consent records: Retained for the duration of the consent plus one year after withdrawal, as evidence of the consent given.

When the applicable retention period expires, your data is either securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

8 Data Security

tk688 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tk688 servers
• Encryption at rest for all databases containing personal and financial data
• Role-based access controls that limit staff access to data on a strict need-to-know basis
• Multi-factor authentication required for all internal administrative access to production systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated intrusion detection and real-time security monitoring across all platform infrastructure
• Secure backup procedures with geographically distributed copies stored in encrypted form

While tk688 takes every reasonable precaution to safeguard your data, no internet-based platform can guarantee absolute security. You play an important role in account security by keeping your login credentials confidential and using a strong, unique password for your tk688 account.

9 Your Rights

As a tk688 account holder, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of all personal data tk688 holds about you. We will provide this within 14 business days of receiving a valid request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through your account dashboard.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request that we delete your personal data. This right is subject to overriding legal retention obligations described in Section 7.
• Right to restriction: You may request that we temporarily suspend the processing of your data while a correction or erasure request is being evaluated.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including any profiling conducted for fraud prevention or responsible gaming purposes. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your notification preferences in the account dashboard or by contacting support.

To exercise any of the above rights, please contact the tk688 data team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and a brief description of your request so we can verify your identity and respond efficiently.

10 Children's Privacy

tk688 is strictly an adult-only platform. The Services are not directed at, and must not be used by, any person under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age.

If we become aware that an account has been registered by a person under 18, we will immediately suspend the account, void any bets placed, freeze any balance pending investigation, and permanently close the account in accordance with our Terms & Conditions. Any funds deposited by an underage account holder will be reviewed on a case-by-case basis in line with our responsible gaming obligations.

If you have reason to believe that a person under 18 has registered or is using a tk688 account, please contact us immediately at [email protected].

11 Third-Party Services & Links

The tk688 platform integrates with several third-party game studios and payment providers whose software and services operate within our platform. While these providers are contractually bound to handle any data they process on behalf of tk688 in accordance with this Policy, each provider also operates under its own privacy framework for their broader business activities.

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi process certain game session data (such as bet amounts, game round IDs, and outcome records) as a technical requirement of providing their games. This data is used for game integrity verification and customer dispute resolution only.

Payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard process transaction data in accordance with their own privacy policies and applicable financial regulations. tk688 has no control over how these providers handle data within their own systems and encourages you to review their respective privacy policies.

12 Marketing Communications

12.1 Opt-In Basis

tk688 sends promotional communications — including bonus offers, tournament announcements, and seasonal promotions related to events such as BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

12.2 Communication Channels

With your consent, tk688 may contact you via email, SMS to your registered mobile number, or in-platform notifications. Each channel can be managed independently through the notification preferences section of your account dashboard.

12.3 Opting Out

You may opt out of marketing communications at any time by updating your preferences in your account dashboard, by clicking the unsubscribe link in any promotional email, or by contacting our support team at [email protected]. Opt-out requests for email communications are processed within two business days. SMS opt-out requests are processed within one business day.

Please note that opting out of marketing communications does not affect transactional communications — you will continue to receive account security alerts, deposit confirmations, withdrawal notifications, and other service-related messages regardless of your marketing preferences.

13 International Data Transfers

tk688's primary server infrastructure is hosted in data centres serving the Asia-Pacific region to ensure low-latency performance for players in Bangladesh. However, certain service providers — particularly game studios and KYC verification platforms — may process data in servers located outside Bangladesh.

Where data is transferred internationally, tk688 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to apply equivalent data protection standards to those described in this Policy. No international transfer of your personal data is made to jurisdictions that do not offer an adequate level of protection without these contractual safeguards in place.

14 Changes to This Privacy Policy

tk688 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the Services we offer. When we make material changes, we will update the "Last Updated" date at the top of this page and post a prominent notice on the platform. For significant changes affecting how we use your personal data, we will also send a notification to your registered email address at least seven days before the change takes effect.

Your continued use of the platform after an updated Policy has been published constitutes your acceptance of the revised terms. If you do not agree with a revised Policy, you must discontinue use of the Services and may request account closure in accordance with our Terms & Conditions.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the tk688 data team using the details below:

Please include your registered email address and a clear description of your enquiry or request in all correspondence so we can verify your identity promptly and respond accurately. The email address above is a plain-text contact detail — it is not a clickable link.