tk9971 Privacy Policy

1 Introduction

tk9971 operates an online casino and sports betting platform primarily serving players in the Bangladesh market. In the course of providing these services, tk9971 necessarily collects and processes certain personal data about the individuals who register and interact with the Platform. This Policy sets out, in plain and transparent language, exactly what data we collect, the purposes for which we use it, the third parties with whom we may share it, and the rights you hold in respect of your personal information.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference. In the event of a conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

We review this Policy periodically and update it to reflect changes in our data practices or in applicable law. The "Last Updated" date at the top of this document indicates when the most recent revision was made. Continued use of the Platform following publication of any updated Policy constitutes your acceptance of the revised terms.

2 Personal Data We Collect

tk9971 collects the following categories of personal data. We collect only what is necessary and proportionate to the purposes described in this Policy.

Category	Examples	Purpose
Identity Data	Full name, date of birth, national ID number, passport number	Account registration, KYC verification, age verification
Contact Data	Mobile number, email address, residential address	Account communication, support, transaction notifications
Financial Data	bKash/Nagad/Rocket account reference, transaction amounts, deposit and withdrawal history	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Platform security, fraud detection, service optimisation
Usage Data	Games played, bets placed, wagering history, session duration, pages visited	Responsible gaming monitoring, personalisation, platform improvement
Communications Data	Live chat transcripts, support emails, feedback submissions	Dispute resolution, quality assurance, regulatory audit trail
Verification Documents	Copies of national ID, utility bills, selfie photos submitted for KYC	Identity verification, anti-fraud checks, regulatory compliance

tk9971 does not collect special category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) and does not seek or process such data at any point.

3 How We Collect Your Data

We collect personal data through the following means:

• Direct interactions. Data you provide when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or submit feedback.
• Automated technologies. When you visit the Platform, we automatically collect Technical Data and Usage Data via server logs, session tracking tools, and cookies (see Section 7).
• Third-party sources. We may receive identity verification results and fraud risk signals from our licensed KYC and anti-money laundering service providers. We may also receive payment confirmation data from payment processors such as bKash, Nagad, Rocket, and Upay.

4 How We Use Your Personal Data

tk9971 uses the personal data it collects for the following purposes:

• Account management. To register and maintain your tk9971 account, verify your identity, and manage your account settings and preferences.
• Transaction processing. To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain an accurate financial record for your account.
• Security and fraud prevention. To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities. This includes automated screening of account behaviour and transaction patterns.
• Legal and regulatory compliance. To fulfil obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection requirements, including responding to lawful requests from regulatory authorities.
• Responsible gaming. To monitor player activity for signs of problem gambling and to enforce any self-exclusion, deposit limit, or time-out measures you have activated on your account.
• Customer support. To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform improvement. To analyse usage patterns, identify technical issues, and improve the functionality, performance, and security of the Platform.
• Marketing communications. Where you have opted in to receive promotional communications, we may contact you with relevant offers, bonuses, and platform updates. You may opt out at any time by contacting support.

tk9971 does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human review.

5 Legal Basis for Processing

tk9971 processes your personal data on the following legal bases:

6 Sharing Your Personal Data

tk9971 does not sell your personal data. We may share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors. bKash, Nagad, Rocket, Upay, and any other payment partners integrated with the Platform, solely for the purpose of processing your financial transactions.
• Identity verification providers. Third-party KYC and AML compliance service providers who assist us in verifying your identity and screening for fraud and financial crime risks.
• Game content providers. Software providers whose games are available on the Platform (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt) may receive Technical Data necessary to operate their game content within our platform environment.
• IT and security service providers. Cloud hosting, cybersecurity, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities. Courts, law enforcement agencies, and regulatory bodies where we are legally required to disclose data in response to a valid legal request or court order.
• Business successors. In the event of a merger, acquisition, or sale of all or part of the business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7 Cookies & Tracking Technologies

tk9971 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies. Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies. Remember your preferences such as language settings, display preferences, and last-visited game categories, to improve your experience on return visits.
• Analytics cookies. Collect aggregated, anonymised data about how users navigate the Platform — which pages are visited most, where users encounter errors, and how long sessions last. This data is used solely to improve the Platform.
• Security and fraud detection cookies. Help us identify unusual access patterns, flag potentially fraudulent login attempts, and protect the integrity of your account.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling analytics cookies will not affect your ability to use the Platform.

tk9971 does not use third-party advertising cookies or behavioural profiling technologies for the purpose of delivering targeted advertisements on external websites.

8 Data Security

tk9971 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security practices include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular internal security audits and vulnerability assessments of Platform infrastructure.
• Multi-factor authentication requirements for staff accessing data processing systems.
• Incident response procedures designed to detect, contain, and report data security breaches in a timely manner.

While tk9971 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

9 Data Retention

tk9971 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:

• Active account data. Retained for the duration of your account's active status plus a minimum of five years following account closure, in compliance with AML and financial record-keeping requirements.
• KYC and identity documents. Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records. Retained for a minimum of five years from the date of the transaction.
• Customer support communications. Retained for a minimum of two years from the date of the last communication, or longer if the communication relates to a pending dispute or regulatory inquiry.
• Technical and usage data. Typically retained in identifiable form for up to 12 months, after which it may be anonymised and retained in aggregate form for analytical purposes.
• Marketing consent records. Retained for the duration of consent plus a minimum of three years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with our internal data destruction procedures.

10 Your Privacy Rights

As a user of the tk9971 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team as described in Section 14. We will respond to all legitimate requests within 30 calendar days.

• Right of access. You have the right to request a copy of the personal data we hold about you and information about how it is used.
• Right to rectification. You have the right to request correction of any personal data that is inaccurate or incomplete.
• Right to erasure. You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction. You have the right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability. Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to object. You have the right to object to processing of your personal data where that processing is based on our legitimate interests, including objecting to direct marketing communications at any time.
• Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

The tk9971 Platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from an individual under 18, we will immediately close the account, delete the associated personal data, and return any funds to the originating payment method.

If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected] so that we can take prompt remedial action.

12 Third-Party Links

The tk9971 Platform may contain references to third-party services, such as payment partners (bKash, Nagad, Rocket, Upay). When you interact with those external services, you leave the tk9971 platform environment and are subject to the privacy policies of those third-party providers. tk9971 has no control over the data practices of external services and accepts no responsibility for the content or privacy practices of any third party.

We encourage you to review the privacy policies of any third-party service you use in connection with your tk9971 account, particularly your chosen mobile banking provider.

13 Updates to This Privacy Policy

tk9971 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When we make material changes, we will display a prominent notice on the Platform and, where we hold your email address, send you a notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was published. We encourage you to review this page periodically. Your continued use of the Platform after a Policy update constitutes your acceptance of the revised terms. If you do not agree to any update, you should cease using the Platform and contact support to initiate account closure.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a data protection concern, please contact the tk9971 data support team. Note that all contact details below are provided as plain text and are not clickable links:

• Support Email: [email protected] (plain text — not a link)
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• WhatsApp: +880 1700-000000 (display only, 08:00–22:00 BST)

When submitting a data rights request, please include your registered account username, a clear description of your request, and any information that will help us locate your records efficiently. We aim to acknowledge all requests within 3 business days and resolve them within 30 calendar days.