Privacy Policy — tk688

This Privacy Policy (hereinafter referred to as "the Policy") describes the practices of tk688 (hereinafter referred to as "tk688", "we", "us", or "our") regarding the collection, use, storage, and disclosure of personal data belonging to individuals (hereinafter referred to as "you", "the Player", or "the Member") who access or use the tk688 online gaming platform at https://tk688-bd.win.

tk688 is committed to handling all personal data with the highest standards of care, transparency, and security. We recognise that privacy is a fundamental right and we design our data practices accordingly. This Policy is intended to give you a clear and honest account of how your information is treated at every stage of your relationship with tk688 — from the moment you first visit our website through to the closure of your account.

This Policy applies to all personal data collected through the tk688 website, mobile-optimised site, customer support channels, and any other services or touchpoints operated by tk688. It does not apply to third-party websites or services that may be linked from or integrated with the tk688 platform; those parties maintain their own independent privacy policies.

tk688 collects personal data in a number of categories depending on how you interact with the platform. The following table summarises the main categories of data we collect and the specific data points within each category:

tk688 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond what is strictly required for identity verification purposes. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] so we can take corrective action.

tk688 collects personal data through the following methods:

• Direct collection: Data you provide voluntarily when registering an account, completing your profile, submitting KYC documentation, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data collected automatically when you browse or use the tk688 platform, including IP address, device identifiers, browser data, and session behaviour, gathered through server logs, cookies, and similar tracking technologies. See Section 7 for full details on our cookie usage.
• Payment providers: Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banks. This data is limited to what is necessary to process and verify your transactions.
• Identity verification services: Where tk688 engages a third-party KYC or fraud-prevention service to assist with identity verification, we may receive verification outcomes and supporting data from those providers.
• Publicly available sources: In limited circumstances relevant to fraud prevention or AML compliance, tk688 may cross-reference your registration data against publicly available records or sanctions databases.

tk688 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your tk688 account, including processing deposits, withdrawals, and bonus claims.
• Identity and age verification: To verify that you are who you say you are, that you are aged 18 or above, and that you are not subject to any self-exclusion or account restriction. tk688 operates a strict 18+ age verification policy.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi banking channels.
• Regulatory compliance: To fulfil our anti-money laundering (AML) obligations, conduct required know-your-customer (KYC) checks, and respond to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and to apply responsible gaming tools such as deposit limits, session reminders, cooling-off periods, and self-exclusion where requested or where we have a duty of care obligation.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, cheating, collusion, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Customer support: To respond to your enquiries, process complaints, and provide assistance through our 24/7 English-language support team.
• Platform improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the overall performance and user experience of the tk688 platform.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and seasonal promotions related to events such as BPL season, Eid, Pohela Boishakh, and Bangladesh Victory Day. You may withdraw marketing consent at any time.

tk688 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and tk688, including account registration, deposit and withdrawal processing, and the provision of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML/KYC obligations and responses to lawful authority requests.
• Legitimate interests: Processing carried out to pursue the legitimate interests of tk688, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tk688 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We may, however, share your personal data with the following categories of recipients where necessary for the operation of our platform or compliance with our legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banks (including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank) receive only the minimum data required to process your transactions.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session and gaming activity data for the purpose of game delivery, RNG certification audits, and dispute resolution. These providers operate under strict data processing agreements with tk688.
• Identity verification and AML service providers: Third-party KYC and fraud-prevention service providers may process your identity documents and registration data on tk688's behalf. They act as data processors and are contractually bound to process data only on our instructions.
• Regulatory and law enforcement authorities: tk688 will disclose personal data to competent authorities where required to do so by law, court order, or binding regulatory instruction, including in connection with AML investigations or law enforcement requests. Where permissible, tk688 will notify you of such disclosure.
• Professional advisers: Legal counsel, auditors, and accountants engaged by tk688 may have access to personal data on a strictly confidential, need-to-know basis for the purpose of obtaining professional advice.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tk688's business, personal data held by tk688 may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new entity prior to the transfer taking effect.

tk688 uses cookies and similar tracking technologies to operate and improve the platform, personalise your experience, and gather analytics data about how the site is used. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies cannot execute code or deliver viruses — they are data files only.

The following categories of cookies are used on the tk688 platform:

• Strictly necessary cookies: Essential for the operation of the tk688 platform. These include session management cookies that keep you logged in during an active session and security cookies that help detect and prevent fraudulent activity. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional cookies: Enable the platform to remember your preferences such as your chosen language, your account settings, and your responsible gaming tool configurations. Disabling these cookies may result in certain preferences being reset on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the tk688 platform, including which pages are most visited, how long sessions last, and where users navigate from. This data helps us identify areas for improvement. No individual user is identified through analytics cookies.
• Marketing cookies: Used to track the effectiveness of any promotional campaigns you may have interacted with before visiting the tk688 platform. These are only activated where you have provided marketing consent.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that blocking strictly necessary cookies will impair the functionality of the tk688 platform and may prevent you from logging in or completing transactions. For full browser-specific cookie management instructions, refer to your browser's help documentation.

tk688 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

When personal data is no longer required and its retention period has expired, tk688 will securely delete or anonymise the data so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

tk688 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Key security measures include:

• 256-bit SSL/TLS encryption: All data in transit between your browser or mobile device and the tk688 servers is encrypted using industry-standard TLS protocols, ensuring that your personal and financial data cannot be intercepted by third parties.
• Password hashing: Passwords are never stored in plain text. tk688 uses industry-standard one-way cryptographic hashing algorithms to store password credentials, ensuring that even in the event of an internal data exposure, passwords remain protected.
• Access control: Access to personal data held by tk688 is restricted to authorised personnel who require that data to perform their specific job functions. All internal data access is logged and auditable.
• Server security: tk688's platform servers are hosted in secure, access-controlled data centre environments with physical security, redundant power supplies, and network-level intrusion detection systems.
• Regular security assessments: tk688 conducts periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses in our technical infrastructure before they can be exploited.

While tk688 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You also play a role in keeping your account secure: use a strong, unique password for your tk688 account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.

As a data subject, you have the following rights in relation to your personal data held by tk688. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 days.

• Right of access: You have the right to request a copy of all personal data that tk688 holds about you, along with information about how and why it is being processed.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You have the right to request that tk688 delete your personal data, subject to our legal obligations to retain certain data for regulatory and financial recordkeeping purposes. Where erasure is not possible in full, we will inform you of which data must be retained and why.
• Right to restriction of processing: In certain circumstances — for example, while you contest the accuracy of your data or while an objection to processing is being assessed — you may request that we restrict our processing of your data to storage only.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where it is based on legitimate interests. tk688 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Rights related to automated decision-making: tk688 does not carry out fully automated decision-making that produces legal or similarly significant effects on Players. Where automated tools are used as part of fraud detection or AML monitoring, human review is always available.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tk688 employs age verification procedures during the registration process and during KYC checks to prevent underage access. Where we discover or have reasonable grounds to suspect that a user is under the age of 18, the account will be immediately suspended, all gaming activity will be reversed to the extent possible, and any deposited funds will be returned to the original payment source following verification.

If you are a parent or guardian and you believe that a minor in your household has registered an account with tk688, please contact our support team at [email protected] immediately. We will investigate the matter as a priority and take all necessary action to close the account and prevent further access. tk688 recommends that parents and guardians use appropriate parental control software to restrict minors' access to online gambling websites.

The tk688 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While tk688 takes care to work with reputable partners, we have no control over the privacy practices of third-party websites or services and this Privacy Policy does not apply to any third-party platform or service that you access independently of the tk688 platform.

We encourage you to review the privacy policies of any third-party services you interact with, particularly your chosen payment provider, before sharing personal data with them. tk688 accepts no responsibility for the content, privacy practices, or data handling of any third-party platform.

tk688 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our services. The date of the most recent update is shown at the top of this document.

Where changes to this Policy are material — meaning they significantly alter your rights or our obligations — tk688 will notify registered Players by email to their registered address prior to the changes taking effect. For minor or administrative updates, the revised Policy will be published on this page and the "Last updated" date will be refreshed.

Your continued use of the tk688 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and contact the support team to arrange account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please contact the tk688 data support team using the details below. All privacy-related enquiries are handled by our dedicated support team and will be responded to in English within the timeframes stated.

For responsible gaming concerns, self-exclusion requests, or reports of suspected underage access, please also contact the support team and mark your message as urgent. These matters are treated as highest priority and actioned within 24 hours of receipt.