Privacy Policy — tk677

1. Information We Collect

1.1 Information You Provide Directly

When you register an account, use the cashier, contact our support team, or participate in promotions on the tk677 platform, you provide us with personal information that we collect and store. This includes, but is not limited to:

• Registration data: Full legal name, date of birth, gender, nationality, residential address (including city, district, and postal code), email address, and Bangladeshi mobile number.
• Identity verification (KYC) documents: Copies of your Bangladeshi National ID card (front and back), passport, or other government-issued identification document, and — where required — utility bills, bank statements, or mobile wallet transaction records.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa or Mastercard) associated with deposit and withdrawal transactions. Full card numbers are not stored on tk677 servers; payment processing is handled by our PCI-compliant payment partners.
• Support communications: The content of any messages, emails, or chat transcripts you exchange with the tk677 support team, including any attachments or screenshots you provide.
• Promotional participation: Responses to surveys, competition entries, bonus opt-in requests, and any other promotional interactions you initiate on the platform.

1.2 Information Collected Automatically

When you access and use the tk677 platform, certain technical information is collected automatically by our servers and analytics systems. This data is used to maintain platform security, improve performance, and detect fraudulent or prohibited activity. Automatically collected data includes:

• Device and connection data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bet history, session duration, click patterns, search queries entered within the platform, and navigation paths through the site.
• Transaction data: Deposit and withdrawal amounts, transaction timestamps, payment method identifiers, and transaction reference numbers generated by payment processors.
• Location data: Approximate geographic location derived from your IP address. tk677 does not collect GPS-level precise location data unless you explicitly grant such permission through your device.

1.3 Information from Third Parties

In certain circumstances, tk677 may receive personal information about you from third-party sources. This occurs in the following contexts:

• Payment processors: Our payment partners (including mobile wallet providers such as bKash, Nagad, and Rocket) may share transaction confirmation data and account holder name data to facilitate deposit and withdrawal processing.
• Identity verification services: We may use third-party KYC verification providers to cross-reference the identity documents you submit against publicly available records or identity databases.
• Fraud prevention partners: Specialist fraud detection services may share risk scores, device fingerprinting data, and flagged account information with tk677 to protect the platform and its player community.

2. How We Use Your Data

2.1 Core Platform Operations

The primary purpose for which tk677 processes your personal data is to operate the platform and deliver the services you have contracted for when registering an account. Specifically, this includes:

• Creating, maintaining, and administering your player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Verifying your identity and age (18+) in accordance with our KYC procedures.
• Settling sports bets, casino game rounds, and all other wagering transactions.
• Providing customer support and responding to your enquiries and dispute submissions.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, password reset emails, and account security alerts.

2.2 Legal and Regulatory Compliance

tk677 is required to process certain personal data to fulfil its legal and regulatory obligations. This includes maintaining records of all financial transactions for anti-money laundering (AML) purposes, conducting identity verification as required under KYC obligations, and retaining account records for the periods mandated by applicable regulatory frameworks. Where we are legally required to disclose personal data — for example, in response to a lawful authority request — we will do so, and we will notify you where we are legally permitted to do so.

2.3 Responsible Gaming

tk677 uses your gaming behaviour data — including session duration, deposit frequency, bet sizes, and win/loss patterns — to monitor for indicators of problem gambling. Where our systems identify patterns that may suggest a player is experiencing difficulties with gambling, we may take proactive steps including displaying responsible gaming messages, applying temporary deposit restrictions, or contacting the player directly. This processing is carried out in the player's legitimate interest and is an integral part of our commitment to responsible gaming.

2.4 Fraud Prevention and Security

We process personal data, device data, and usage data to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities on the tk677 platform. This processing is necessary to protect the legitimate interests of tk677 and of the broader player community. Where fraud is confirmed, relevant data may be retained for an extended period to support any resulting investigation, legal proceedings, or regulatory reporting.

2.5 Marketing Communications

With your explicit consent at the point of registration or at a later date, tk677 may send you marketing communications about promotions, bonuses, new game releases, and seasonal offers relevant to the Bangladesh market — including BPL cricket betting promotions, Eid specials, and Pohela Boishakh offers. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the platform.

The table below summarises the legal basis on which tk677 processes each category of personal data:

3. Data Sharing & Disclosure

3.1 Trusted Service Partners

tk677 shares personal data with a limited number of trusted third-party service providers who process data on our behalf under strict contractual obligations. These partners are permitted to use your data only for the specific purposes for which it has been shared and are required to implement appropriate technical and organisational security measures. Categories of service partners include:

• Payment processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment gateways (Visa, Mastercard) to process financial transactions.
• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents submitted during account verification.
• Game providers: Casino game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may process session-level data to deliver and settle game outcomes.
• Analytics providers: Web analytics platforms used to measure platform performance, page load times, and user engagement — data is shared in anonymised or pseudonymised form wherever possible.
• Cloud infrastructure providers: Hosting and data storage providers who maintain the servers on which the tk677 platform and player data reside.

3.2 Legal Disclosures

tk677 may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or lawful regulatory instruction. We do not make such disclosures voluntarily or beyond the minimum extent required by the relevant legal obligation. Where we are legally permitted to notify you of such a disclosure, we will do so promptly.

3.3 No Sale of Personal Data

tk677 does not, and will never, sell, rent, auction, or otherwise trade your personal information to third-party marketers, data brokers, advertising networks, or any other commercial entity for their own independent purposes. This commitment applies without exception to all categories of personal data collected through the tk677 platform.

3.4 Business Transfers

In the event that the tk677 platform or its operating entity is subject to a merger, acquisition, asset sale, or corporate restructuring, player personal data held at that time may form part of the transferred assets. In such an event, we will notify affected players via email or a prominent notice on the platform in advance of any transfer, and the acquiring entity will be required to continue honouring the terms of this Privacy Policy or to seek fresh consent for any material changes to data processing.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device by a web server when you visit a website. They are widely used to make websites function efficiently, to remember user preferences, and to provide analytical information to site operators. tk677 uses cookies and similar tracking technologies (including local storage objects and session tokens) to deliver and improve the platform experience.

4.2 Categories of Cookies We Use

• Essential session cookies: These cookies are strictly necessary for the tk677 platform to function. They maintain your login session, remember your active game state, and facilitate secure payment flows. The platform cannot operate without these cookies and they cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the tk677 platform — which pages are visited most, how long sessions last, and where players encounter errors. This data is used solely to improve platform performance and user experience.
• Preference cookies: These cookies remember your platform settings such as language preference, notification settings, and display options so that you do not need to reconfigure them on each visit.
• Security cookies: These cookies help tk677 detect and prevent fraudulent activity, including CSRF (cross-site request forgery) attacks and session hijacking attempts. They are classified as essential and cannot be disabled.

4.3 Managing Cookies

You may disable non-essential cookies at any time through your browser's settings menu. The exact steps for managing cookies vary by browser — consult your browser's help documentation for specific instructions. Please note that disabling certain cookies may affect the functionality of the tk677 platform, including your ability to maintain an active login session or access personalised features. Essential and security cookies cannot be disabled without preventing the platform from functioning correctly.

4.4 Third-Party Tracking

tk677 does not permit third-party advertising networks or social media platforms to place tracking cookies on the tk677 platform. Any third-party scripts present on the platform (such as those from analytics or game providers) are governed by the privacy policies of those respective providers and are limited in scope to the purpose for which they have been integrated.

5. Data Security

5.1 Technical Safeguards

tk677 implements a comprehensive set of technical security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include: TLS/SSL encryption for all data in transit; AES-256 encryption for sensitive data fields stored in our databases; strict access controls limiting personal data access to authorised personnel only; multi-factor authentication requirements for all administrative system access; and regular independent security audits of our platform infrastructure.

5.2 Organisational Safeguards

In addition to technical controls, tk677 maintains robust organisational security practices. All employees and contractors with access to personal data are required to complete data protection training and are bound by confidentiality obligations. Access to personal data is granted on a strict need-to-know basis and is reviewed regularly. tk677 maintains an internal data breach response procedure to ensure that any confirmed breach is addressed promptly and that affected players are notified without undue delay where required.

5.3 Your Responsibility

While tk677 takes all reasonable steps to secure your personal data on our side, the security of your account also depends on actions you take. You are responsible for keeping your tk677 login credentials confidential, for logging out of your account on shared devices, and for notifying us immediately at [email protected] if you suspect unauthorised access to your account. tk677 cannot be held responsible for data breaches that result from your failure to maintain adequate security of your own credentials.

6. Data Retention

6.1 Active Account Data

For as long as your tk677 account remains open and active, we retain all personal data associated with your account, including registration information, KYC documentation, transaction history, bet records, and support communications. This data is necessary to operate your account, process ongoing transactions, and maintain the security and integrity of the platform.

6.2 Post-Closure Retention

Following the closure of a player account — whether initiated by the player or by tk677 — personal data is retained for a minimum period of five (5) years from the date of account closure. This retention period reflects the timeframe required by anti-money laundering regulations and financial record-keeping obligations. After the applicable retention period has elapsed and there are no outstanding legal, regulatory, or dispute-related reasons to retain the data, it is securely and permanently deleted from all tk677 systems.

6.3 Data Subject to Regulatory Hold

Where a player account is involved in an active investigation — whether internal, regulatory, or law enforcement — the relevant data will be retained beyond the standard retention period for as long as the investigation remains active. tk677 will not delete data that is the subject of a regulatory or legal hold, regardless of any player request to the contrary, until the matter is fully resolved.

6.4 Marketing Data

If you have given consent for marketing communications and subsequently withdraw that consent, your contact details will be removed from our active marketing lists within 10 business days of the withdrawal request. A record of your consent history and its withdrawal will be retained for a period of three (3) years as evidence of our compliance with consent obligations.

7. Your Rights

As a user of the tk677 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 2 business days and provide a substantive response within 14 business days. In some cases, we may need to verify your identity before processing a data rights request.

7.1 Right of Access

You have the right to request a copy of the personal data that tk677 holds about you. We will provide this information in a clear, structured format. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections such as name spelling or contact number updates can also be made directly through your account settings panel without needing to submit a formal request.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. This right is subject to overriding legal and regulatory obligations — in particular, we cannot delete financial transaction records or KYC documents that we are legally required to retain. Where erasure is not possible in full, we will inform you of what data must be retained and why.

7.4 Right to Restrict Processing

In certain circumstances, you may request that tk677 restrict the processing of your personal data — for example, while the accuracy of that data is being contested, or while a data erasure request is under review. During any restriction period, we will continue to store the relevant data but will not actively process it beyond what is necessary to maintain the restriction itself.

7.5 Right to Withdraw Consent

Where tk677 processes your personal data on the basis of your consent — specifically in the context of marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal. You can manage your marketing preferences directly in your account settings or by writing to [email protected].

8. Policy Updates & Contact

8.1 Changes to This Policy

tk677 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify registered players by email or via an in-platform notification. Continued use of the tk677 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

8.2 How to Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how tk677 handles your personal data, please contact our support team in writing at [email protected]. We take all privacy enquiries seriously and aim to provide a substantive response within 14 business days. If you are not satisfied with our response, you have the right to escalate your complaint through the appropriate regulatory channel available in your jurisdiction.

8.3 Related Policies

This Privacy Policy should be read alongside the tk677 Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to the security and responsible handling of your account and personal data.