tk688 Privacy Policy

1Introduction

tk688 ("we", "us", "our", "the Platform") operates the online gambling website accessible at tk-688.vip, offering sports betting, live casino games, slots, and related entertainment services primarily to players in Bangladesh. In the course of providing these services, we collect and process certain personal data about the individuals who use our platform ("you", "the Player", "the User").

This Privacy Policy sets out in clear terms what data we collect, the purposes for which it is collected, how long we retain it, who we may share it with, and the rights available to you in relation to your personal data. We have written this Policy in plain, accessible English to ensure you can make informed decisions about your data at every stage of your relationship with tk688.

This Policy should be read alongside the tk688 Terms & Conditions, available at /terms-conditions, and the Responsible Gaming Policy at /responsible-gaming. Where those documents address data-related matters, they are supplementary to and consistent with this Policy.

2Data Controller

For the purposes of applicable data protection law, the data controller in respect of personal data collected through the tk688 platform is the legal entity operating under the tk688 brand. All data-related enquiries, access requests, and complaints should be directed to the tk688 Data Privacy team using the contact details set out in Section 15 of this Policy.

Where tk688 engages third-party service providers — including payment processors, game software providers, and fraud prevention agencies — those providers may act as independent data controllers or joint controllers in respect of data they process for their own purposes, subject to their own privacy policies. In all cases where tk688 appoints a third-party processor, we do so only under a written data processing agreement that obligates that processor to implement appropriate technical and organisational security measures.

3Data We Collect

The categories of personal data that tk688 collects and processes in connection with the operation of the platform are set out in the table below. Not all categories are collected from every Player — the specific data collected depends on the services you use and the interactions you have with the platform .

4How We Collect Data

tk688 collects personal data through the following channels:

Direct Collection

The majority of personal data we hold is provided directly by you. This occurs when you:

• Create and register a tk688 Account, including providing your name, date of birth, and contact details.
• Complete the KYC verification process by uploading identity and address documentation.
• Make a deposit or request a withdrawal, thereby providing financial account references.
• Contact the tk688 support team via email or live chat, generating correspondence records.
• Activate responsible gaming tools such as deposit limits or self-exclusion requests.
• Respond to promotional surveys, competitions, or feedback requests.

Automated Collection

When you access and use the tk688 platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, session duration, and navigation patterns within the platform. Please refer to Section 8 of this Policy for full details of our cookie practices.

Third-Party Sources

In limited circumstances, tk688 may receive personal data about you from third-party sources, including:

• Identity verification and fraud prevention agencies used as part of the KYC process.
• Anti-Money Laundering (AML) screening databases, where we are legally required to cross-reference your identity against relevant watchlists.
• Payment processors, where transaction confirmation or dispute information is shared with us.
• Analytics providers that aggregate anonymised usage data to help us improve platform performance.

5How We Use Your Data

tk688 uses the personal data it collects for the following purposes:

Account Management & Service Delivery

Your identity, contact, and financial data are used to create and manage your Account, process your deposits and withdrawals, personalise your experience on the platform, and provide customer support when you contact us. This use is essential to the performance of our contract with you as a registered Player.

Identity Verification & KYC Compliance

We process your identity documentation and date of birth to verify that you are aged 18 or above, to confirm your identity before processing withdrawals, and to fulfil our obligations under applicable anti-money laundering requirements. This processing is mandatory — you cannot withdraw funds from tk688 without completing KYC verification.

Fraud Prevention & Security

Technical data — including IP addresses, device fingerprints, and login patterns — is analysed to detect and prevent fraudulent Account activity, unauthorised access, bonus abuse, multi-Account violations, and other security threats. This processing protects both the platform and honest Players from bad actors.

Responsible Gaming

Where you activate responsible gaming tools — deposit limits, cooling-off periods, or self-exclusion — we process your Account Activity Data and Responsible Gaming Data to enforce those restrictions reliably and to flag any patterns of play that may indicate problematic gambling behaviour warranting proactive intervention by our responsible gaming team.

Marketing & Promotions

Where you have given your consent or where we have a legitimate interest in doing so, we may use your contact information to send you promotional offers, bonus notifications, and platform updates. You may withdraw consent for marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Legal & Regulatory Compliance

We are required by law to retain certain records — including transaction histories and KYC documentation — for defined periods. We process your data to the extent necessary to comply with these mandatory retention obligations and to respond to lawful requests from competent authorities.

Platform Improvement & Analytics

Aggregated and anonymised usage data is analysed to understand how Players interact with the platform, identify areas for improvement, optimise game loading performance, and develop new features. Where data used for analytics purposes has been genuinely anonymised such that it cannot be used to identify any individual, it falls outside the scope of this Privacy Policy.

6Legal Basis for Processing

For each category of personal data processing described in Section 5, tk688 relies on one or more of the following legal bases:

Where we rely on legitimate interest as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms in relation to the data in question.

7Data Sharing & Disclosure

tk688 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers

We share financial transaction data with the payment processors required to execute your deposits and withdrawals — including the operators of bKash, Nagad, Rocket, and Upay mobile banking channels, as well as Visa and Mastercard card networks. These providers receive only the data necessary to complete and verify each transaction.

Identity Verification & Fraud Prevention Agencies

Your identity documentation and personal details may be shared with third-party KYC verification providers and AML screening databases as part of our mandatory compliance procedures. These providers are bound by strict data processing agreements and may not use your data for any purpose beyond the verification service they are contracted to provide.

Game Software Providers

When you play games powered by third-party providers — including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming — certain session and Account identifiers are shared with those providers to facilitate game delivery, record game history, and resolve technical disputes. Game providers do not receive your full identity data or financial details.

Legal & Regulatory Authorities

tk688 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or other binding legal process. Where we are legally permitted to notify you of such a disclosure, we will do so promptly.

Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring affecting the tk688 platform, Player data may be transferred to the acquiring or successor entity as part of that transaction. We will provide reasonable advance notice of any such transfer and the opportunity to request Account closure before the transfer takes effect.

8Cookies & Tracking Technologies

tk688 uses cookies and similar technologies — including session tokens, local storage objects, and analytics pixels — to operate the platform efficiently, personalise your experience, and gather aggregated usage analytics. A summary of the cookie categories we use is set out below.

Strictly Necessary cookies are deployed without requiring your prior consent as they are essential to the secure operation of the platform. All other cookie categories are set only where you have given consent, either at first session or through your Account settings. You may withdraw cookie consent at any time by adjusting your browser settings to block or delete cookies, though doing so may affect the functionality of certain platform features.

9Data Retention

tk688 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. The standard retention periods applied to each data category are as follows:

Where data is retained beyond the period of active platform use solely to satisfy a legal obligation, that data is stored in restricted-access archival systems and is not used for any operational purpose during the retention period.

10Data Security

tk688 applies a layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The technical and organisational measures we maintain include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the tk688 platform is encrypted in transit using industry-standard TLS protocols, preventing interception by third parties.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms. tk688 staff cannot read your password — only a hash comparison is performed at login.
• Access Controls: Personal data is accessible only to tk688 personnel and authorised processors who require it to perform a specific operational function. Access is governed by role-based permissions and subject to regular audit.
• Database Encryption at Rest: Sensitive data fields — including identity document images and financial account references — are encrypted within the database storage layer, providing an additional layer of protection in the event of a storage breach.
• Intrusion Detection & Monitoring: The tk688 infrastructure is monitored continuously for anomalous access patterns, unauthorised login attempts, and other indicators of compromise. Alerts trigger immediate investigation by our security team.
• Data Breach Response: In the event of a personal data breach that presents a risk to your rights and freedoms, tk688 will notify affected Players and relevant authorities within the timeframe required by applicable law, providing details of the nature of the breach, the data affected, and the steps taken to mitigate harm.

11Your Rights

Subject to applicable data protection law and certain legal exemptions, you have the following rights in relation to the personal data that tk688 holds about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. Requests will be responded to within 30 days of receipt.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, correction may require re-submission of supporting documentation.
• Right to Erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies — you have the right to request deletion of your personal data. This right is subject to any overriding legal retention obligation.
• Right to Restriction of Processing: You may request that we restrict the active processing of your data in specific circumstances, such as where you contest its accuracy while we conduct a verification review.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interest — including profiling for marketing purposes. Where you object to marketing processing, we will cease that processing immediately upon receiving your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit your request in writing to the tk688 Data Privacy team at [email protected]. Include your full registered name, Account username, and a description of the right you wish to exercise. We may be required to verify your identity before processing a data rights request.

12Children's Privacy

The tk688 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. If we become aware — through our KYC verification process or any other means — that a Player is under the age of 18, we will immediately suspend that Account, delete or restrict any personal data collected in connection with it to the extent permitted by applicable law, and refund no funds to the underage Player in accordance with our Terms & Conditions.

If you believe that a person under 18 has registered an Account on the tk688 platform, please notify us immediately at [email protected] so that we can take prompt corrective action. We encourage parents and guardians in Bangladesh to make use of available parental control software to restrict minors' access to online gambling platforms.

13Third-Party Links

The tk688 platform may contain references to third-party game providers and payment partners. While tk688 takes care to work only with reputable partners, we do not control and are not responsible for the privacy practices of third-party entities. This Privacy Policy applies only to data collected directly by the tk688 platform. We encourage you to review the privacy policies of any third-party service providers — including bKash, Nagad, Rocket, Upay, Pragmatic Play, and Evolution Gaming — whose services you use in connection with your tk688 Account.

14Policy Amendments

tk688 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When a material amendment is made, we will update the "Last Updated" date at the top of this Policy and, where practicable, notify registered Players via their registered contact details prior to the amendment taking effect.

It is your responsibility to review this Privacy Policy periodically to stay informed of how we handle your personal data. Continued use of the tk688 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you may request Account closure by contacting [email protected].

15Contact Us

For all data privacy enquiries — including subject access requests, data correction requests, consent withdrawals, and general questions about this Policy — please contact the tk688 Data Privacy team using the details below. All enquiries are handled in English and are responded to within 30 days of receipt.