Privacy
Policy

Section 1

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is tk98, operating the online gaming platform accessible at tk98.onl and its associated subdomains. As the data controller, tk98 determines the means and purposes of processing your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data tk98 holds about you, you may contact our dedicated privacy support team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.

This Privacy Policy applies to all personal data processed in connection with your use of the tk98 platform, including data collected when you browse the website as a guest, register for an account, make a deposit, place a wager, claim a bonus, contact our support team, or participate in any promotional campaign run by tk98.

Section 2

Data We Collect

tk98 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party service providers (such as payment processors and identity verification services) where necessary. The categories of personal data we collect are set out below.

Section 3

Purpose of Processing

tk98 processes your personal data only where there is a lawful basis for doing so. The primary bases we rely upon are: (a) performance of a contract — where processing is necessary to provide the gaming services you have signed up for; (b) legal obligation — where processing is required by applicable law, such as anti-money-laundering regulations or age verification requirements; (c) legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights; and (d) consent — where you have freely given specific, informed, and unambiguous consent to a particular processing activity.

The specific purposes for which tk98 processes your personal data include:

• Account Registration and Management: To create and maintain your tk98 player account, verify your identity, authenticate your logins, and manage your account preferences and settings.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, and Mastercard, and to process withdrawal requests to your registered payment methods. Financial data is handled in strict compliance with standard payment security protocols.
• Age and Identity Verification (KYC): To verify that you are at least 18 years of age and to confirm your identity in accordance with standard Know Your Customer obligations. This may involve sharing your identity documents with a third-party identity verification provider.
• Game and Betting Services: To operate the casino games and sports betting markets available on the tk98 platform, process your wagers, calculate and credit winnings, and maintain your gaming history.
• Responsible Gaming Monitoring: To detect signs of problematic gambling behaviour, apply responsible gaming tools (such as deposit limits and self-exclusion) at your request, and proactively contact players who exhibit concerning patterns of play.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other forms of platform misuse. Technical and usage data are used to identify unusual patterns that may indicate prohibited activity.
• Customer Support: To respond to your enquiries, resolve complaints, process account closure requests, and provide assistance with deposits, withdrawals, and technical issues via live chat and email.
• Platform Improvement: To analyse aggregate usage data in order to improve the tk98 platform's performance, user experience, game selection, and promotional offering. Analytics data used for this purpose is anonymised or pseudonymised wherever possible.
• Marketing Communications (Consent-Based): To send you information about tk98 promotions, bonuses, seasonal campaigns (e.g., Eid offers, BPL cricket specials), and new game launches — but only where you have actively opted in to receive such communications. You may withdraw your consent and unsubscribe from marketing emails at any time.
• Legal Compliance: To comply with applicable legal and regulatory requirements, respond to lawful requests from competent authorities, and enforce tk98's Terms & Conditions.

Section 4

Data Sharing

tk98 does not sell, rent, or trade your personal data to third-party advertisers, marketing companies, or data brokers. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: When you make a deposit or withdrawal, the relevant transaction data (including your payment account reference and amount) is shared with the applicable payment processor — such as bKash, Nagad, Rocket, Upay, or our crypto payment gateway. These providers operate under their own privacy policies and data protection obligations.
• Identity Verification Partners: To fulfil KYC obligations, we may share your identity documents and personal details with an accredited third-party identity verification service. This provider processes your data solely for the purpose of verifying your identity on tk98's behalf and is contractually prohibited from using it for any other purpose.
• Game Technology Providers: The casino games available on tk98 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive limited technical data (such as a pseudonymous player session token) necessary to operate the game. They do not receive your full name, payment details, or contact information.
• Fraud Prevention and AML Services: We may share transaction data and identity information with specialist fraud prevention and anti-money-laundering screening services where there is a reasonable suspicion of financial crime. This processing is carried out on the basis of legal obligation and legitimate interest.
• Competent Authorities: tk98 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a legally binding order or where disclosure is necessary to protect the rights, property, or safety of tk98, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the tk98 business, personal data held by tk98 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any resulting change to this Privacy Policy.

Section 5

Cookies & Tracking Technologies

The tk98 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytical data that helps us improve the site. This section explains what cookies we use and why.

A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute programs or transmit viruses to your device. They are used widely across the internet to make websites work more efficiently and to provide information to site operators.

Most web browsers allow you to control cookies through the browser settings. You can typically choose to block all cookies, block only third-party cookies, or delete existing cookies from your browser. Please be aware that disabling strictly necessary cookies will prevent the tk98 platform from functioning correctly. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

Section 6

Data Retention

tk98 retains personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The retention periods we apply are set out below. After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised.

• Active Account Data: Identity, contact, and financial data is retained for the full duration of your account's active status, plus a post-closure period as described below.
• Post-Account Closure: Following the closure of your tk98 account (whether initiated by you or by tk98), we retain your personal data for a minimum of five (5) years in order to comply with our legal obligations, including anti-money-laundering record-keeping requirements and the resolution of any outstanding disputes or claims.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Communications Data: Live chat transcripts and email support correspondence are retained for a period of two (2) years from the date of the conversation, after which they are securely deleted.
• Responsible Gaming Records: Self-exclusion requests and associated responsible gaming data are retained for the duration of the exclusion period and for five (5) years thereafter, to prevent re-registration during an active exclusion and to maintain a record in the event of a complaint.
• Technical and Usage Data: Server logs and platform usage analytics are retained for a maximum of twelve (12) months in identifiable form. After this period, data is anonymised and may be retained indefinitely in aggregate statistical form for platform improvement purposes.
• Marketing Consent Records: Records of your marketing consent (or withdrawal thereof) are retained for the duration of your account plus two (2) years, to demonstrate compliance with consent requirements.

Section 7

Your Rights

As a player on the tk98 platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the tk98 privacy team at [email protected]. We will respond to all valid rights requests within a reasonable timeframe, and in any event within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data that tk98 holds about you. This is commonly known as a Subject Access Request (SAR). We will provide the information in a clear, readable format, free of charge, within thirty (30) days.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account information (such as your email address) directly through your account settings, or by contacting support.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal retention obligations — for example, we are required to retain financial transaction records for a minimum period regardless of a deletion request. We will always explain clearly what can and cannot be deleted and why.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Section 8

Data Security

tk98 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. While no online platform can guarantee absolute security, our security programme reflects current industry best practices for online gaming platforms serving the Bangladesh market.

• Encryption in Transit: All data transmitted between your device and the tk98 platform is encrypted using TLS 1.3. This applies to all pages of the site, including the cashier, account settings, and live chat interface.
• Encryption at Rest: Sensitive personal data stored in tk98's databases — including financial information and identity documents — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within the tk98 organisation is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific data categories are granted access, and all access is logged and audited.
• Payment Security: tk98 does not store full payment card numbers on its own servers. Card payment processing is handled by PCI DSS-compliant payment processors. Mobile financial service (MFS) transactions via bKash, Nagad, Rocket, and Upay are processed through their own secure networks.
• Account Security: Player account security is supported by strong password requirements and session management controls. We recommend that you use a unique, strong password for your tk98 account and that you do not share your login credentials with any other person.
• Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, tk98 will notify impacted players without undue delay via their registered email address, and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.