tkbaj Privacy Policy

1. Who We Are

tkbaj is an online betting and casino platform accessible at tkbaj.io, operated by an internationally licensed entity (the "Operator"). The Operator acts as the data controller in respect of all personal data collected through the tkbaj platform. We are committed to processing personal data in a manner that is transparent, lawful, and proportionate to the purposes for which it was collected.

If you have any questions about this Policy or about how your personal data is handled, you may contact our data support team at any time using the contact details set out in Section 14 of this Policy.

2. Data We Collect

The categories of personal data that tkbaj may collect from you include, but are not limited to, the following:

2.1 Identity and Registration Data

• Full name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21+ age requirement);
• Gender (where voluntarily provided during registration);
• Username chosen at the time of account creation;
• National ID Card number, Passport number, or Driving Licence number (collected during KYC verification).

2.2 Contact Data

• Mobile phone number registered with your account;
• Email address;
• Residential or correspondence address (collected during KYC verification).

2.3 Financial Data

• Mobile banking account identifiers (bKash, Nagad, Rocket, Upay) — specifically the mobile number associated with the payment account, not your PIN or password;
• Card type, last four digits, and expiry date (where payment is made via Visa or Mastercard — full card numbers are not stored by tkbaj);
• Transaction history including deposits, withdrawals, bonus credits, and betting activity;
• Account wallet balance at any given time.

2.4 Technical and Usage Data

• IP address at the time of login or account registration;
• Device type, operating system, and browser version;
• Session duration, pages visited, and features used on the platform;
• Geolocation data derived from your IP address (country and city level only — not precise GPS location);
• Referral source (how you arrived at the tkbaj platform).

2.5 Communication Data

• The content of any messages exchanged with our customer support team via email;
• Feedback, complaints, or dispute correspondence submitted to tkbaj;
• Survey or questionnaire responses where you choose to participate.

2.6 Identity Verification Documents

• Copies of government-issued photo identification documents submitted during the KYC process;
• Proof of address documents such as utility bills or bank statements;
• Screenshots or images of mobile payment account screens demonstrating ownership of a payment method.

3. How We Collect Your Data

tkbaj collects personal data through the following channels:

• Direct collection: Information you provide when you register an account, complete the KYC process, make a deposit or withdrawal request, contact our support team, or participate in promotions;
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, and session activity logs;
• Third-party payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card payment processors when you initiate a financial transaction;
• Identity verification providers: Where tkbaj uses a third-party KYC verification service, that provider may return a verification result and associated data to us;
• Cookies and similar technologies: Behavioural and session data collected via cookies placed on your device when you visit the tkbaj platform (see Section 7 for full cookie details).

4. Why We Use Your Data

The table below sets out the specific purposes for which tkbaj processes your personal data:

tkbaj does not use your personal data for any purpose that is not listed in this Policy or otherwise communicated to you in writing. Where we wish to use your data for a new purpose, we will update this Policy and notify you in advance.

5. Legal Bases for Processing

tkbaj processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing is required to perform the contract between you and tkbaj — that is, to provide the betting and gaming services you have signed up to use;
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and data retention mandates;
• Legitimate interests: Processing is necessary for tkbaj's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the user experience, provided those interests are not overridden by your rights;
• Consent: Where we send optional marketing communications or deploy non-essential cookies, we will seek your explicit consent and you may withdraw that consent at any time.

6. Sharing Your Data with Third Parties

tkbaj does not sell, rent, or trade your personal data. We may share your personal data with carefully selected third parties only in the following circumstances:

6.1 Payment Processors

When you make a deposit or withdrawal, we share the minimum necessary data with the relevant payment processor (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to facilitate the transaction. These providers are bound by their own privacy policies and applicable financial regulations.

6.2 Identity Verification (KYC) Providers

Where tkbaj uses a third-party service to assist with identity document verification, we will share the documents and data you submit for that purpose. These providers are contractually bound to process your data solely for identity verification purposes and to maintain appropriate security standards.

6.3 Game Software Providers

Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive a session token and limited account data necessary to load and authenticate your game session. They do not receive your full profile, payment details, or KYC documents.

6.4 Legal and Regulatory Authorities

tkbaj may disclose your personal data to law enforcement agencies, courts, regulators, or other public authorities where required to do so by law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of tkbaj's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you before your data is transferred and before it becomes subject to a different privacy policy.

7. Cookies and Tracking Technologies

tkbaj uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser. The following categories of cookies are used on the tkbaj platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit. These cookies cannot be disabled without breaking core platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and recently played games to provide a more personalised experience;
• Analytics cookies: Used to collect anonymised data about how users navigate the platform, which pages are visited most, and where errors occur. This data helps us improve the platform experience;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login patterns.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the tkbaj platform.

8. Data Retention

tkbaj retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with our legal and regulatory obligations. The general retention periods we apply are as follows:

• Account and identity data: Retained for a minimum of five (5) years after account closure to comply with anti-money laundering record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years to meet financial regulatory obligations;
• KYC verification documents: Retained for the duration of the account plus five (5) years after closure;
• Customer support correspondence: Retained for three (3) years after the relevant matter is resolved;
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud prevention purposes;
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Once the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

9. Data Security

tkbaj implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive data stored on our systems, including KYC documents and financial records;
• One-way cryptographic hashing of account passwords — tkbaj staff cannot read or recover your password;
• Role-based access controls ensuring that only authorised staff can access personal data, and only to the extent required for their role;
• Regular security audits, penetration testing, and vulnerability scanning of platform infrastructure;
• Two-factor authentication requirements for internal staff accessing administrative systems;
• Documented incident response procedures for managing any potential data breach promptly and appropriately.

Despite these measures, no system is entirely immune from security risks. In the event of a data breach that poses a risk to your rights, tkbaj will notify you and the relevant authorities without undue delay and in accordance with our legal obligations.

10. Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by tkbaj:

• Right of access: You may request a copy of the personal data we hold about you at any time;
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data;
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to restriction: You may request that we temporarily restrict the processing of your personal data in certain circumstances;
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a commonly used, machine-readable format so that you can transfer it to another service;
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, subject to our overriding legal obligations;
• Right to withdraw consent: Where processing is based on your consent (e.g., optional marketing emails), you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team using the details in Section 14. We will respond to all valid data rights requests within a reasonable period, and in any case no later than thirty (30) days of receipt.

11. Children and Minors

The tkbaj platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has created a tkbaj account or submitted personal data to our platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

tkbaj's platform serves players in Bangladesh and is operated by an internationally licensed entity. As a result, your personal data may be stored or processed on servers located outside Bangladesh. Where personal data is transferred internationally, tkbaj takes steps to ensure that an adequate level of data protection is maintained, including through contractual safeguards with third-party processors.

By using the tkbaj platform, you acknowledge and consent to the transfer of your personal data to servers and processing facilities located outside your country of residence, where such transfers are necessary for the operation of the platform and are conducted with appropriate protections in place.

13. Changes to This Policy

tkbaj reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post the updated Policy on this page with a revised "Last Updated" date and, where reasonably practicable, notify registered players by email at least seven (7) days before the changes take effect.

Your continued use of the tkbaj platform after any updated Policy has been posted constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a concern about how your personal data is being handled, please contact the tkbaj data support team using the details below. All enquiries are handled in English by our support team, who operate 24 hours a day, 7 days a week.

Email: [email protected]
Subject Line for Data Requests: Data Privacy Request — [Your Username]
Response Time: Within 30 days of receipt
Operating Hours: 24/7 — BST (UTC+6)