Privacy Policy — tk688

This Privacy Policy is published by tk688 ("we", "us", "our", "the Company"), the operator of the online gaming and sports betting platform accessible at tk-688.my ("the Platform"). This Policy applies to all personal data collected from individuals ("you", "your", "the Player") who visit, register with, or interact with the tk688 Platform in any capacity.

tk688 is committed to handling your personal information with transparency, integrity, and in accordance with recognised data protection principles. We process personal data only to the extent necessary to deliver our services, comply with our legal obligations, prevent fraud, and maintain the security and fairness of the Platform for all registered players in Bangladesh.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By creating an account or continuing to use the tk688 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

tk688 collects personal data across several categories. The specific data points collected depend on your interaction with the Platform — some data is provided directly by you, while other data is collected automatically as you use the service.

tk688 collects personal data through the following means:

• Direct Collection: When you register an account, complete your profile, submit KYC verification documents, make a deposit or withdrawal request, contact customer support, or respond to a promotional communication, you provide data to us directly.
• Automated Collection: As you browse and use the Platform, technical and usage data is collected automatically via server logs, session tracking systems, and analytics tools. This includes your IP address, device identifiers, and in-Platform navigation behaviour.
• Cookies and Similar Technologies: The Platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse aggregate usage patterns. See Section 7 for full details of our cookie practices.
• Third-Party Payment Processors: When you transact via bKash, Nagad, Rocket, Upay, or a linked bank account, our payment processing partners may share transaction confirmation data with us necessary to credit your account and comply with our anti-money laundering obligations.
• Identity Verification Services: tk688 may use third-party identity verification providers to validate the authenticity of documents you submit during KYC. These providers process your identity documents on our behalf under strict data processing agreements.
• Fraud Detection Systems: Automated fraud and risk management systems may collect and analyse behavioural data to identify patterns associated with account abuse, multi-accounting, or prohibited activity.

tk688 uses your personal data for specific, defined purposes. We do not process your data for purposes that are incompatible with those listed here without first obtaining your consent or establishing a separate lawful basis.

• Account Management: To create, maintain, and administer your tk688 player account, including processing login authentication and managing your account preferences.
• Service Delivery: To provide access to the Platform's games, sports betting markets, live dealer services, and all associated features you engage with.
• Payment Processing: To process deposits and withdrawals through your nominated payment method (bKash, Nagad, Rocket, Upay, or linked bank account) and to maintain accurate financial records.
• Identity Verification (KYC): To verify your identity and age as required by our responsible gaming and anti-money laundering obligations. Players in Bangladesh must be 18 years of age or older to register and play.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account compromise, money laundering, multi-accounting, and any other prohibited activity on the Platform.
• Legal Compliance: To fulfil our obligations under applicable laws, including financial record-keeping requirements, anti-money laundering regulations, and any lawful requests from competent authorities.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via live chat, email, and other support channels.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour and to administer self-exclusion, deposit limits, session time reminders, and other responsible gaming tools you may activate.
• Marketing Communications: To send you information about promotions, bonuses, and new features on the tk688 Platform, where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the overall performance, design, and user experience of the tk688 Platform.

tk688 processes your personal data on one or more of the following lawful bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your account and deliver the gaming services you have registered to use. Without this processing, tk688 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, anti-money laundering record-keeping, and responding to lawful authority requests.
• Legitimate Interests: Processing conducted to pursue tk688's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, platform security, and aggregate analytics for service improvement.
• Consent: Where we rely on your consent as the lawful basis — specifically for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tk688 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, and linked banking partners receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers operate their own privacy policies and are subject to their own regulatory obligations in Bangladesh.
• Identity Verification Providers: Third-party KYC and identity verification service providers process your identity documents on our behalf for the sole purpose of verifying your identity and age. They act as data processors under contract with tk688 and are prohibited from using your data for any other purpose.
• Game Technology Providers: Game studios and platform software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and others) may receive anonymised session or transaction data necessary to serve game content and resolve technical disputes. These providers do not receive personally identifiable information beyond what is technically required.
• Fraud and Risk Management Providers: Specialist fraud detection platforms may receive technical and behavioural data to assist in identifying and preventing prohibited activity on the Platform.
• Legal and Regulatory Authorities: tk688 will disclose personal data to competent courts, law enforcement agencies, or regulatory bodies where legally required to do so by applicable law or valid court order.
• Professional Advisors: Legal counsel, accountants, and other professional advisors may access relevant personal data where strictly necessary to provide their professional services to tk688, subject to professional confidentiality obligations.

The tk688 Platform uses cookies and similar technologies (including local storage and session tokens) to support core Platform functionality, maintain your logged-in session, and analyse how players interact with our services. The following categories of cookies are in use on the Platform:

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair core Platform functionality, including the ability to log in and maintain a session.

tk688 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active tk688 account is retained for the full duration of the account's active status, plus a minimum period following account closure as required by applicable obligations.
• Financial Transaction Records: Records of deposits, withdrawals, and betting transactions are retained for a minimum of five years from the date of the transaction, in accordance with standard financial record-keeping requirements applicable to payment service activities.
• KYC Verification Documents: Identity documents submitted during the KYC process are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Communications: Records of live chat conversations and support ticket correspondence are retained for a period of three years from the date of the last interaction.
• Marketing Preferences: Records of your marketing consent or opt-out are retained indefinitely to ensure we honour your communication preferences correctly, even after account closure.
• Anonymised Analytics Data: Aggregate, anonymised usage data that cannot be linked back to an identifiable individual may be retained indefinitely for Platform analysis and improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of personally identifiable information.

tk688 implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the tk688 Platform is encrypted in transit using industry-standard SSL/TLS encryption protocols. The padlock icon visible in your browser confirms this connection is secure.
• Encrypted Data Storage: Sensitive personal data, including financial information and identity documents, is stored in encrypted form in our secure data infrastructure. Encryption keys are managed using strict access controls.
• Password Security: User passwords are never stored in plain text. tk688 uses strong one-way cryptographic hashing algorithms to store password credentials, meaning that even tk688 staff cannot read your password.
• Access Controls: Access to personal data within tk688's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role, and all access is logged and auditable.
• Two-Factor Authentication: tk688 offers SMS-based two-factor authentication for player accounts. We strongly recommend all Bangladesh players activate this feature to add an additional layer of protection to their account.
• Regular Security Assessments: tk688 conducts periodic reviews of its data security practices and infrastructure to identify and address potential vulnerabilities on an ongoing basis.

As a player on the tk688 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address provided in Section 14. We aim to respond to all data rights requests within a reasonable timeframe.