Privacy Policy — tkk33

1 Data We Collect

When you register an account, use the tkk33 platform, or contact our support team, we collect certain categories of personal data. The table below summarises the main categories of data tkk33 collects, along with the context in which each category is gathered.

1.1 Data We Do Not Collect

tkk33 does not collect or store full payment card numbers, CVV codes, or banking PINs. Payment card transactions are handled by PCI-DSS compliant payment processors, and tkk33 receives only a tokenised reference to confirm transaction status. We also do not collect biometric data, precise real-time geolocation data, or any data relating to racial or ethnic origin, religious beliefs, or health conditions.

1.2 Data Provided by Third Parties

In some instances, tkk33 may receive personal data about you from third-party sources, including identity verification service providers, fraud detection agencies, and payment processors operating in Bangladesh (such as bKash, Nagad, and Rocket network partners). Data received from these sources is handled with the same level of care as data collected directly from you and is used exclusively for the purposes described in this Privacy Policy.

2 How We Use Your Data

tkk33 uses the personal data we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The following list sets out the primary purposes for which tkk33 processes personal data.

• Account Management: To create, verify, and maintain your tkk33 player account, including identity verification under our KYC procedures.
• Service Delivery: To provide access to casino games, sports betting markets (including cricket BPL, IPL, and T20 World Cup markets), slots, and live dealer tables on the tkk33 platform.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and international card schemes, and to maintain accurate transaction records.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and unauthorised access to player accounts.
• Responsible Gaming: To monitor player behaviour patterns for indicators of problem gambling, to enforce self-exclusion requests, and to apply deposit limits and session controls where requested or required.
• Legal & Regulatory Compliance: To comply with anti-money laundering (AML) obligations, record-keeping requirements, and any applicable legal orders or regulatory directions.
• Customer Support: To respond to queries, complaints, and disputes submitted through our live chat, WhatsApp, or email support channels.
• Platform Improvement: To analyse aggregate usage patterns, test new features, and optimise the platform experience for players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
• Marketing Communications (opt-in only): To send promotional offers, bonus notifications, and seasonal promotions (such as Eid, Pohela Boishakh, and BPL season offers) to players who have explicitly opted in to receive them.

3 Legal Basis for Processing

tkk33 processes personal data only where a valid legal basis exists for doing so. The following table maps each primary processing activity to its corresponding legal basis.

Where tkk33 relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your fundamental rights and freedoms. If you wish to challenge our legitimate interests assessment for any specific processing activity, you may contact us at [email protected].

4 Data Sharing & Third Parties

tkk33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

4.1 Service Providers

tkk33 engages trusted third-party service providers to assist in operating the platform. These providers are given access only to the data they need to perform their specific function and are contractually required to handle that data in accordance with strict confidentiality and security obligations. Categories of service providers include:

• Payment Processors: Partners facilitating bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard transactions.
• Identity Verification Providers: Third-party KYC platforms that assist with document verification and identity screening.
• Fraud & AML Screening: Services that screen transactions and account activity against international watchlists and risk indicators.
• Game Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games within the tkk33 platform environment.
• Analytics Providers: Platforms that help tkk33 measure aggregate usage patterns and platform performance — data shared for analytics purposes is anonymised or pseudonymised wherever possible.
• Customer Support Infrastructure: Tools that power our live chat, ticketing, and WhatsApp support capabilities.

4.2 Legal Disclosures

tkk33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, court direction, or applicable legal obligation. In such cases, tkk33 will disclose only the minimum data required to satisfy the legal request and will notify the affected player where legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of tkk33's assets, player personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with reasonable advance notice.

5 Cookies & Tracking Technologies

The tkk33 platform uses cookies and similar technologies to operate correctly, maintain your login session, and gather aggregate performance data. This section explains what cookies we use and how you can control them.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preferences, and keep your account secure during each visit. These cookies cannot be disabled — without them, core platform features do not work.
• Functional Cookies: These cookies remember choices you make on the platform, such as your preferred game lobby view, notification settings, and last-used deposit method. They improve your experience but are not strictly required for the platform to operate.
• Analytics Cookies: tkk33 uses server-side and privacy-respecting client-side analytics to understand how players navigate the platform in aggregate — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. Individual player data is not exported from these systems.
• Security Cookies: Short-lived session tokens and CSRF protection cookies that prevent unauthorised cross-site request forgery attacks and protect your account from session hijacking.

5.2 What We Do Not Use

tkk33 does not place third-party advertising cookies, retargeting pixels, or social media tracking scripts on the platform. We do not participate in cross-site tracking networks or share cookie-derived user profiles with advertising platforms.

5.3 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict specific categories of cookies. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your tkk33 account and using core platform features. Guidance on managing cookies is available in your browser's help documentation.

6 Data Retention

tkk33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following guidelines govern our standard retention periods.

• Active Account Data: Retained for the full duration of your account being active on the tkk33 platform.
• Transaction Records: Financial transaction data, including deposits, withdrawals, and bet history, is retained for a minimum of five years following the date of the transaction, in accordance with standard AML record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for a minimum of five years following account closure or the date of the last verified transaction.
• Support Communications: Records of customer support interactions are retained for three years following the date of the interaction, or longer if the interaction relates to an unresolved dispute or legal matter.
• Marketing Consent Records: Records of your opt-in consent and any subsequent opt-out requests are retained for the life of your account and for three years following closure, for compliance audit purposes.
• Technical & Usage Data: Server logs and session data are retained in a pseudonymised form for up to 13 months, after which they are deleted or fully anonymised.

When data is no longer required and no legal obligation exists to retain it, tkk33 either deletes the data securely or anonymises it so that it can no longer be linked to any individual player.

7 Your Privacy Rights

As a player registered on the tkk33 platform, you hold the following rights with respect to the personal data we process about you. To exercise any of these rights, contact the tkk33 privacy team at [email protected]. We will respond to all verifiable requests within 30 calendar days.

7.1 How to Submit a Privacy Request

All privacy rights requests should be submitted by email to [email protected] with the subject line "Privacy Request — [Your Request Type]". To verify your identity, we may ask you to confirm details associated with your registered account before processing the request. We will acknowledge receipt within 3 business days and issue a full response within 30 calendar days of verification.

8 Data Security Measures

tkk33 implements a layered set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. No platform can guarantee absolute security, but we take the following concrete steps to protect the data we hold.

8.1 Technical Measures

• TLS 1.3 Encryption: All data in transit between your device and tkk33 servers is protected by TLS 1.3 encryption, preventing interception by third parties.
• Database Encryption at Rest: Sensitive data fields — including identity document references, financial account numbers, and KYC records — are encrypted at the database level using AES-256 encryption.
• Password Hashing: Player passwords are never stored in plain text. They are hashed using a modern adaptive hashing algorithm (bcrypt) with per-user salting, ensuring that a database breach does not expose readable passwords.
• Two-Factor Authentication (2FA): tkk33 offers 2FA as an optional but strongly recommended security layer for all player accounts, providing protection against credential stuffing and brute-force attacks.
• Firewall & Intrusion Detection: Platform infrastructure is protected by enterprise-grade firewalls, web application firewalls (WAF), and real-time intrusion detection and alerting systems.
• Regular Security Audits: tkk33 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure.

8.2 Organisational Measures

• Access to player personal data is restricted on a strict need-to-know basis. Only authorised personnel with a defined business requirement may access identifiable player records.
• All staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• tkk33 maintains an internal data breach response procedure. In the event of a confirmed data breach that poses a risk to affected players, we will notify impacted players promptly via their registered email address.