Privacy Policy — tk2223

tk2223 is an online casino and sports betting platform operating at tk2223.app, offering a comprehensive range of gambling and gaming services to registered players in Bangladesh. For the purposes of this Privacy Policy, tk2223 acts as the data controller in respect of all personal data collected through the platform.

As data controller, tk2223 determines the purposes and means by which your personal data is processed. We are committed to processing all personal information lawfully, fairly, and transparently, and to maintaining appropriate technical and organisational security measures to protect it against unauthorised access, loss, or disclosure.

If you have any questions about this Privacy Policy or about how tk2223 handles your personal data, you may contact our dedicated data support team at any time:

• Email: [email protected]
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

tk2223 collects personal data in the following categories. The specific data elements collected will depend on your interactions with the platform and the stage of your account lifecycle.

2.1 Identity & Registration Data

• Full legal name
• Date of birth (used for mandatory 18+ age verification)
• Username and account password (stored in hashed form — never in plain text)
• National Identity Card (NID) number or passport number (collected during KYC verification)
• Scanned copies or photographs of government-issued identity documents

2.2 Contact Data

• Email address
• Mobile phone number (required for bKash, Nagad, Rocket, and Upay transactions)
• Residential address (city, district, postal code)

2.3 Financial & Transaction Data

• Mobile financial service account identifiers (e.g., bKash account number, Nagad number, Rocket number, Upay number)
• Card details for Visa and Mastercard transactions (card number and CVV are not stored by tk2223 — these are handled exclusively by our PCI-DSS compliant payment processors)
• Deposit history, withdrawal history, and current account balance in Bangladeshi Taka (৳)
• Transaction reference numbers and timestamps

2.4 Technical & Device Data

• IP address
• Browser type and version
• Device type (desktop, mobile, tablet) and operating system
• Screen resolution and language settings
• Session duration and session timestamps

2.5 Usage & Behavioural Data

• Pages visited and features accessed within the tk2223 platform
• Game titles played, bet amounts, and outcomes
• Sports betting markets visited and wagers placed
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests made)

2.6 Communications Data

• Content of support chat messages and email correspondence with our customer care team
• Records of any formal complaints submitted
• Feedback and survey responses (where voluntarily provided)

tk2223 collects personal data through the following channels:

3.1 Directly From You

The majority of personal data we hold is provided directly by you at key points in your interaction with the platform, including:

• During the account registration process
• When completing KYC identity verification
• When making a deposit or requesting a withdrawal
• When contacting our customer support team by chat or email
• When responding to a voluntary survey or promotion

3.2 Automatically Through Technology

Certain technical and behavioural data is collected automatically when you access or use the tk2223 platform, using technologies including:

• Cookies: Small text files placed on your device to maintain session state, remember preferences, and support analytics. See Section 7 for full cookie details.
• Server Logs: Our servers automatically record IP address, access timestamps, pages requested, and HTTP response codes for every request made to our infrastructure.
• Fraud Detection Systems: Automated tools monitor gameplay patterns, login activity, and transaction behaviour to identify potentially fraudulent or abusive activity.

3.3 From Third Parties

In limited circumstances, tk2223 may receive personal data about you from trusted third-party sources, including:

• Identity verification providers (e.g., when cross-checking NID data against official databases to confirm your age and identity)
• Payment processors (e.g., transaction status updates from bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateways)
• Fraud prevention agencies and credit reference agencies (where applicable under our risk assessment procedures)

tk2223 processes your personal data only for clearly defined and legitimate purposes. The table below maps each major data category to its primary processing purpose.

Where tk2223 wishes to use your data for a purpose not listed above — for example, to send you a promotional communication — we will either obtain your prior consent or ensure a clear legitimate interest exists and that it does not override your rights.

tk2223 relies on the following legal bases for processing your personal data, in accordance with applicable data protection principles:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) laws, Know Your Customer (KYC) obligations, and age verification mandates.
• Legitimate Interests: Processing carried out in the legitimate business interests of tk2223, such as fraud detection, platform security, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the basis for processing (e.g., for optional marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent can be requested via [email protected].

tk2223 does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

6.1 Payment Service Providers

To process deposits and withdrawals, tk2223 shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and the card processing networks for Visa and Mastercard. These providers operate under their own data protection obligations and are contractually required to use your data solely for payment processing purposes.

6.2 Identity Verification Providers

To fulfil our age verification and KYC obligations, tk2223 may share identity document data with trusted third-party verification services. These providers process data under strict confidentiality agreements and are not permitted to retain or use your data for any purpose beyond verification.

6.3 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as player session tokens) necessary to deliver their games via the tk2223 platform. These providers do not receive your full identity or financial data.

6.4 Legal & Regulatory Authorities

tk2223 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where compelled to do so by law, or where disclosure is necessary to prevent fraud, protect the safety of individuals, or enforce our Terms & Conditions.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of tk2223's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

tk2223 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit our website. The following types of cookies are used:

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies will impair core platform functionality, including the ability to log in and place bets. Disabling analytics cookies will not affect your ability to use the platform.

tk2223 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

• Account & Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in order to satisfy AML record-keeping requirements.
• Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for the duration of your account and for 5 years following closure or the last transaction, whichever is later.
• Support Communications: Retained for up to 3 years from the date of the last communication in a given thread, or longer if a complaint or legal matter remains unresolved.
• Usage & Behavioural Data: Aggregated and anonymised data may be retained indefinitely for platform analytics. Individually identifiable behavioural records are retained for up to 24 months from the date of generation.
• Security & Fraud Logs: Retained for up to 12 months from the date of logging, unless associated with an active investigation, in which case they are retained until that investigation is formally closed.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. If you request account deletion before the end of the retention period, tk2223 will delete all data that is not subject to a mandatory retention obligation and will confirm the scope of any data we are legally required to retain.

tk2223 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security controls include:

• Transport Layer Security: All data in transit between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• At-Rest Encryption: Sensitive data fields stored in our databases — including identity document references and financial identifiers — are encrypted at rest using AES-256.
• Password Hashing: Account passwords are never stored in plain text. We apply a strong one-way cryptographic hashing algorithm with a unique salt per account.
• Access Controls: Access to personal data is restricted to authorised tk2223 personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Intrusion Detection: Automated intrusion detection and anomaly monitoring systems operate continuously across our infrastructure to identify and respond to potential threats in real time.
• Penetration Testing: tk2223 commissions regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While tk2223 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for logging out of your account when using shared or public devices.

As a registered player on the tk2223 platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request".

10.1 Right of Access

You have the right to request a copy of all personal data that tk2223 holds about you, together with information about how it is processed, where it is stored, and with whom it has been shared. We will respond to verified access requests within 30 days.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating a phone number) can typically be made directly through your account settings. For corrections to identity documents or KYC data, please contact support.

10.3 Right to Erasure

You may request that tk2223 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. Erasure requests are subject to our legal retention obligations described in Section 8.

10.4 Right to Restriction

You have the right to request that tk2223 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while a legitimate-interests objection is being assessed.

10.5 Right to Data Portability

Where processing is based on your consent or on a contractual necessity, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to tk2223 and to transmit that data to another controller.

10.6 Right to Object

You have the right to object at any time to the processing of your personal data on the basis of tk2223's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

10.7 Withdrawing Consent

Where tk2223 relies on your consent as the legal basis for processing, you may withdraw that consent at any time by contacting us at [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

The tk2223 platform is strictly for individuals aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification checks are applied at the point of registration and at key transactional stages specifically to prevent minors from accessing or using our services.

If tk2223 discovers or has reasonable grounds to believe that personal data belonging to a person under the age of 18 has been collected — whether through misrepresentation during registration or any other means — we will take the following immediate steps:

• Suspend the associated account pending investigation
• Delete all personal data associated with the minor's account to the extent permitted by law
• Refund any real-money deposits made, at our discretion, in accordance with our Terms & Conditions
• Escalate the matter internally and, where appropriate, to the relevant authorities

If you are a parent or guardian and believe that a minor in your care has registered on the tk2223 platform, please contact us immediately at [email protected] so that we can take prompt action.

tk2223 operates as a platform serving players primarily located in Bangladesh. Some of the third-party service providers we use — including certain game content studios, identity verification providers, and technical infrastructure partners — may be located in or process data in countries outside Bangladesh.

Where personal data is transferred to a third country, tk2223 ensures that appropriate safeguards are in place to protect the security and confidentiality of that data. These safeguards may include:

• Contractual clauses requiring the receiving party to process data to an equivalent standard of protection
• Ensuring the receiving party operates in a jurisdiction recognised as providing an adequate level of data protection
• Applying additional technical controls (such as data minimisation and pseudonymisation) before any cross-border transfer occurs

For specific information about the safeguards applied to any particular international transfer, please contact us at [email protected].

tk2223 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post the revised policy on this page and update the "Last Reviewed" date at the top of the document. Where changes are significant, we may also notify registered players by email or via an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the tk2223 platform after the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or complaints about this Privacy Policy or about how tk2223 handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days during normal operating hours (Bangladesh Standard Time, UTC+6).
• Postal Subject Line: When emailing, please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. tk2223 will cooperate fully with any such authority in the investigation of a complaint.