Privacy Policy

tkbit ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using the tkbit Platform — whether via web browser or mobile interface — you acknowledge that you have read and understood this Privacy Policy. This policy applies to all users of the Platform, including visitors who browse without registering and registered account holders. If you do not agree to the terms of this policy, please discontinue use of the Platform immediately.

1Information We Collect

We collect personal data that you provide to us directly, data generated through your use of the Platform, and in some cases data obtained from third-party sources. The categories of personal data we process include:

• Identity Data — Full name, date of birth, username, government-issued ID details provided during KYC verification.
• Contact Data — Email address, phone number, and residential address as provided during registration or account updates.
• Financial Data — Payment method details (e.g., bKash or Nagad mobile number, masked card details), transaction history, deposit and withdrawal records.
• Technical Data — IP address, browser type and version, device identifiers, operating system, time zone setting, and pages visited on the Platform.
• Usage & Gaming Data — Game history, betting patterns, session duration, bonus usage, and responsible gaming tool settings such as deposit limits or self-exclusion status.

2How We Use Your Information

We use personal data only for the purposes set out below. We do not process personal data in ways that are incompatible with the original purpose of collection without your explicit consent:

• To register and maintain your account, including verifying your identity and age in accordance with our 21+ policy.
• To process deposits, withdrawals, and related financial transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• To deliver and personalise gaming and betting services, including recommending relevant games or promotions based on your activity.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) checks and KYC requirements.
• To send you service-related communications, including account notifications, security alerts, and updates to our policies.
• To detect, investigate, and prevent fraudulent transactions, technical issues, or prohibited activities on the Platform.

3Legal Basis for Processing

We process your personal data only when we have a valid legal basis for doing so. The legal bases we rely on are:

• Contract Performance — Processing is necessary to fulfil our contractual obligations to you, including providing access to games, processing payments, and managing your account.
• Legal Obligation — We are required to process certain data to comply with applicable laws, including AML regulations, KYC obligations, and data retention mandates.
• Legitimate Interests — We process data to pursue legitimate interests such as fraud prevention, Platform security, and service improvement, where those interests are not overridden by your rights.
• Consent — Where we rely on your consent (for example, for direct marketing), you have the right to withdraw that consent at any time by contacting our support team.

4Sharing of Your Information

tkbit does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where necessary and subject to appropriate safeguards:

• Payment Processors — bKash, Nagad, Rocket, Upay, and international card networks require transaction data to authorise and process payments.
• Game Providers — Providers such as Pragmatic Play, Evolution Gaming, and Spribe receive session tokens and anonymised game data necessary to deliver their services.
• Regulatory & Law Enforcement — We may disclose personal data to competent authorities where required by law or where necessary to prevent, detect, or prosecute fraud or criminal activity.
• Service Providers — Trusted technical partners (e.g., hosting, analytics, security) who process data strictly on our behalf under data processing agreements.

All third parties who receive personal data from tkbit are contractually bound to maintain confidentiality, implement appropriate security measures, and use the data only for the specified purpose. We do not permit any third party to use your data for their own marketing or commercial purposes.

5Cookies & Tracking Technologies

tkbit uses cookies and similar tracking technologies to enhance your experience on the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Essential Cookies — Required for the Platform to function. They enable core features such as logging in, maintaining your session, and keeping your account secure. These cannot be disabled.
• Analytical Cookies — Help us understand how users interact with the Platform by collecting anonymised data on page visits, session lengths, and feature usage, enabling us to improve our service.
• Preference Cookies — Remember your settings and preferences (such as language selection and display options) so you do not need to re-enter them on subsequent visits.

You can control or delete cookies through your browser settings at any time. Disabling essential cookies may impair your ability to use certain features of the Platform. For detailed information on how to manage cookies, please refer to your browser's help documentation.

6Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The standard retention periods applicable to key categories of data are as follows: account and identity data is retained for the duration of your account plus a minimum of five years after account closure; financial transaction records are retained for a minimum of seven years; technical and usage data is retained for up to two years from the date of collection.

When personal data is no longer required, we ensure it is securely deleted or anonymised in a manner that prevents reconstruction. In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may retain and use such data indefinitely without further notice.

7Data Security

tkbit takes the security of your personal data seriously. We implement a range of technical and organisational security measures designed to protect your data against accidental loss, unauthorised access, alteration, or disclosure. These measures include SSL/TLS encryption for data in transit, access controls and authentication requirements for staff who handle personal data, regular security assessments and vulnerability testing, and secure data storage with restricted physical and logical access.

While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is entirely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any relevant authorities as required by applicable law.

8Your Rights

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected]:

• Right of Access — You may request a copy of the personal data we hold about you, along with information about how and why it is processed.
• Right to Rectification — You may request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure — In certain circumstances, you may request that we delete the personal data we hold about you. This right is subject to legal retention obligations that may override your request.
• Right to Restriction — You may request that we restrict the processing of your personal data in certain circumstances, for example while we investigate a complaint you have raised.
• Right to Data Portability — Where processing is based on consent or contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.

We will respond to all verified rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

9Children's Privacy

The tkbit Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has created an account or submitted personal data to us, please contact our support team immediately at [email protected].

10International Data Transfers

tkbit operates primarily to serve users in Bangladesh. Some of our service providers and technology partners may process data in jurisdictions outside Bangladesh. Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place to protect your personal data, including by entering into data processing agreements with those third parties that require them to apply standards of protection consistent with applicable data protection principles.

11Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or via a prominent notice on the Platform.

Your continued use of the Platform following the posting of any changes constitutes acceptance of those changes. We encourage you to review this Privacy Policy periodically to remain informed about how we protect your information.

12Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and transparently. Our support team is available 24/7 Bangladesh Standard Time (BST, UTC+6).

Email: [email protected] (plain text only — not a clickable link).