tk999 bd Privacy Policy

tk999 bd collects personal data only to the extent necessary to provide our services safely, fairly, and in compliance with applicable anti-money-laundering and responsible gaming obligations. We collect information in three ways: information you provide directly, information generated automatically by your use of the Platform, and information obtained from trusted third-party verification partners.

Information You Provide Directly

When you register an account, make a deposit or withdrawal, contact support, or participate in promotions, you may provide us with the following categories of personal data:

Information Collected Automatically

When you access and use the tk999 bd Platform, our systems automatically record certain technical and behavioural data as a standard feature of operating a secure online gaming environment. This includes:

• IP address and approximate geographic location derived from it (country and city level only).
• Device type, operating system, browser type and version.
• Pages visited within the Platform, session duration, and navigation paths.
• Game activity logs including games played, wagers placed, outcomes, and timestamps — retained for fair play, dispute resolution, and responsible gaming monitoring purposes.
• Login timestamps and frequency of access, used to detect unauthorised account access.
• Cookies and similar tracking technologies as described in the Cookies section of this Policy.

Information from Third Parties

In certain circumstances, tk999 bd receives personal data from third-party sources as part of our fraud prevention, KYC, and payment processing operations. This may include identity verification results from KYC service providers, transaction status data from MFS payment gateways such as bKash and Nagad, and fraud risk signals from our security partners. We only use such third-party data for the purposes of operating a safe and compliant platform and do not combine it with data purchased from marketing data brokers.

tk999 bd does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share your data in the following limited and controlled circumstances:

Service Providers and Technology Partners

We engage carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include:

• KYC and identity verification providers — to confirm your identity and age before processing your first withdrawal.
• Payment gateway operators — including the technical intermediaries that facilitate bKash, Nagad, Rocket, and Upay transactions. These operators receive only the transaction data strictly necessary to process your payment.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe operate their own game servers. When you play a game powered by these studios, your gameplay session data (including wager values and game outcomes) is processed by their systems. Each studio is contractually bound to handle such data securely and to use it solely for game delivery and fair play assurance.
• Platform infrastructure providers — cloud hosting and server providers that physically store Platform data. These providers have no independent right to access or use your personal data.
• Fraud detection and security services — third-party tools that analyse transaction and behavioural patterns to identify and prevent fraud. These services receive pseudonymised or encrypted data inputs wherever technically possible.

Legal and Regulatory Disclosure

tk999 bd may disclose your personal data to law enforcement agencies, government bodies, courts, or other authorised public authorities where we are legally obliged to do so, or where disclosure is necessary to prevent, investigate, or prosecute financial crime, fraud, or other unlawful activity connected to use of the Platform. We will disclose only the minimum data necessary to comply with such requests and will notify affected players where legally permissible to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the tk999 bd business, player personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players by email prior to any such transfer taking effect and will ensure the receiving entity commits to the same or equivalent privacy protections as those set out in this Policy.

tk999 bd takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• Encryption in transit: All data exchanged between your browser or device and the tk999 bd servers is protected by TLS 1.2 or higher, including 256-bit SSL encryption for all financial transactions and account data submissions.
• Encryption at rest: Sensitive personal data fields — including passwords (which are hashed and salted, never stored in plain text), payment references, and identity document metadata — are encrypted in our databases using industry-standard symmetric encryption.
• Access controls: Personal data is accessible only to tk999 bd personnel and authorised service providers who have a legitimate operational need for that access. Access is governed by role-based permissions and all access events are logged for audit purposes.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous access patterns, injection attempts, and other indicators of compromise. Security alerts are reviewed by qualified personnel in real time during Bangladesh Standard Time (BST, UTC+6) business hours and by automated systems at all other times.
• Penetration testing: tk999 bd commissions regular independent security assessments of the Platform's infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data minimisation in transit: We avoid transmitting full personal data sets where partial data is sufficient — for example, payment processors receive only masked card numbers and transaction amounts rather than full cardholder profiles.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that affects your personal data and poses a material risk to your rights, tk999 bd will notify you by email at the address registered to your account within a reasonable timeframe and will outline the steps being taken to contain and remediate the incident.

tk999 bd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. Our retention approach is as follows:

• Active account data: Retained for the full duration of your account's active status. This includes your profile information, login history, and preference settings.
• Transaction records: Financial transaction logs, including deposits, withdrawals, wager records, and bonus redemptions, are retained for a minimum of 5 years from the date of the transaction to satisfy anti-money-laundering record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of submission. Copies held beyond this period are securely destroyed unless an ongoing investigation or regulatory obligation requires extended retention.
• Support correspondence: Records of support interactions are retained for 2 years from the date of the last exchange, after which they are archived in anonymised form for quality assurance purposes only.
• Closed account data: Following the closure of a player account, personal data associated with that account is retained for a period of 5 years before being permanently deleted or fully anonymised. This post-closure period allows us to respond to dispute resolution requests, regulatory enquiries, and legal proceedings that may arise after account closure.
• Marketing consent records: Records of your marketing opt-in or opt-out choices are retained for as long as necessary to demonstrate compliance with your stated preferences and applicable marketing regulations.

When personal data reaches the end of its retention period, tk999 bd disposes of it securely using methods appropriate to the format in which it is held. Electronic data is overwritten or cryptographically erased. Physical documents, where they exist, are shredded. Anonymised or aggregated data derived from personal data may be retained indefinitely for analytical and reporting purposes, as it cannot be used to re-identify any individual.