tk68 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how tk68 ("tk68", "we", "us", "our") collects, stores, uses, and discloses personal data about you when you access or use the tk68 platform, including its website, mobile interface, games, sportsbook, cashier, and all associated support functions (collectively the "Services").

By creating an account on tk68, by using any of our Services, or by otherwise interacting with our platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the tk68 Services.

tk68 takes the security and confidentiality of your personal data seriously. We implement industry-standard SSL encryption across all data transmissions, maintain strict internal access controls, and only engage third-party processors who are contractually bound to equivalent data protection standards.

This Policy forms part of and should be read alongside the tk68 Terms & Conditions. Defined terms used in this Policy carry the same meaning as in those Terms unless stated otherwise.

tk68 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you use the Services, and — where necessary — from trusted third-party verification partners. The categories of data we collect are outlined below.

tk68 uses personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. Our primary uses are as follows:

tk68 processes your personal data on the following legal grounds depending on the specific purpose:

• Contractual necessity — processing required to perform the player agreement (account creation, payment processing, game delivery).
• Consent — where you have given explicit consent, such as opting in to marketing communications or agreeing to optional data uses.
• Legitimate interests — fraud detection, platform security, and improving our Services, where these interests are not overridden by your data protection rights.
• Legal obligation — KYC/AML compliance, responding to lawful authority requests, and record retention mandated by applicable regulations.

Where we rely on consent, you may withdraw it at any time without affecting the legality of processing conducted prior to withdrawal. To withdraw consent, contact [email protected].

tk68 does not sell or rent personal data. We share data only where strictly necessary with the following categories of recipients, all of whom are bound by contractual data protection obligations:

• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios receive anonymised session tokens necessary to operate their games. They do not receive your full identity or payment data.
• Payment processors — bKash, Nagad, Rocket, Upay, and card network processors receive the minimum financial data required to execute your transactions.
• Identity verification partners — third-party KYC providers who assist with document verification receive identity data solely for that purpose and under strict contractual terms.
• IT and infrastructure providers — cloud hosting, content delivery, and cybersecurity partners who process data on our behalf under data processing agreements.
• Competent authorities — law enforcement, financial intelligence units, or courts where we are legally required to disclose data.

We do not share your data with advertising networks, data brokers, or any unrelated third party for commercial purposes.

We retain personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by law. The general retention periods we apply are:

• Active account data — retained for the lifetime of the account and for five years following account closure.
• Transaction and financial records — retained for a minimum of seven years to comply with anti-money laundering record-keeping requirements.
• KYC verification documents — retained for five years following account closure or the date of the last transaction, whichever is later.
• Support communications — retained for two years from the date of the last interaction.
• Technical and session logs — retained for up to 12 months for security and fraud-prevention purposes, then deleted or anonymised.
• Marketing preferences — retained until you withdraw consent or request deletion.

When data is no longer required, we securely delete or anonymise it so that it can no longer be attributed to any individual.

As a tk68 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your registered account email and the specific right you wish to exercise. We will respond within a reasonable timeframe.

tk68 uses cookies and similar tracking technologies on its platform to deliver a functional and personalised experience. A cookie is a small text file placed on your device when you visit the platform. We use the following categories of cookies:

• Strictly necessary cookies — essential for the platform to operate. These enable login sessions, maintain your account state, and process transactions. They cannot be disabled.
• Performance and analytics cookies — used to understand how players interact with the platform, identify technical issues, and measure game and page performance. Data collected is aggregated and anonymised.
• Functional cookies — remember your preferences such as language settings and display options to personalise your experience.
• Security cookies — detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

By continuing to use the tk68 platform after being presented with this notice, you consent to the use of cookies as described. You may manage or disable non-essential cookies through your browser settings, though this may affect certain platform functions.

tk68 takes technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage of passwords using industry-standard hashing algorithms — tk68 staff cannot view your plain-text password.
• Role-based internal access controls ensuring that staff can only access data necessary for their specific function.
• Regular security assessments and penetration testing of the platform infrastructure.
• Fraud monitoring systems that operate continuously to detect and respond to suspicious activity.
• Contractual data protection requirements imposed on all third-party service providers.

While we apply rigorous security measures, no online platform can guarantee absolute security against all threats. You share responsibility for protecting your account by maintaining a strong, unique password and not sharing your login credentials with any third party.

tk68 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make a material change, we will notify registered players by email to the address on file and/or by displaying a prominent notice on the platform for a reasonable period before the change takes effect.

The date of the most recent revision is always displayed at the top of this document. Your continued use of the tk68 Services after a Policy update constitutes acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how we protect your data.

For any questions or concerns about this Privacy Policy or your personal data, contact our support team. Email (plain text — not a clickable link): [email protected]. Our team operates 24 hours a day, 7 days a week.