Privacy Policy for tk399

01 Overview

tk399 ("we", "us", "the Platform") is committed to protecting the personal data of every player who uses tk399.io. This Privacy Policy sets out in clear and plain English what categories of personal data we collect from you, the purposes for which we process that data, the legal bases on which we rely, how long we retain it, who we share it with, and what rights you have in relation to your personal data.

tk399 operates as an online sports betting and casino platform primarily serving players located in Bangladesh. All personal data processing activities described in this Policy are conducted in accordance with internationally recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which are available on tk399.io. Where there is any conflict between this Policy and the Terms & Conditions regarding data matters, this Privacy Policy shall take precedence.

02 Data We Collect

tk399 collects personal data from you directly (data you provide when registering or using the platform), automatically (data generated by your use of the platform), and from third parties (for example, identity verification providers or payment processors). The categories of personal data we collect include the following:

We do not collect special category data (such as biometric data, health data, or political opinions) except where strictly required by applicable law or with your explicit prior consent. We do not collect data from children or persons under 21 years of age; our platform is intended exclusively for adults aged 21 and above.

03 How We Use Your Data

tk399 processes your personal data for the following specific and clearly defined purposes:

• Account Management: To create, maintain, and administer your tk399 player account, including verifying your identity, processing your registration, and managing account settings and preferences.
• Service Delivery: To provide you with access to the tk399 sportsbook, live casino, slot games, fishing games, and all associated platform features as described in our Terms & Conditions.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to maintain accurate records of all financial transactions associated with your account.
• Identity Verification (KYC): To verify your age, identity, and eligibility to use the tk399 platform in accordance with our responsible gaming obligations and compliance requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, identity theft, collusion, and any other prohibited conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: To comply with applicable laws and regulatory obligations, including anti-money laundering (AML) requirements, financial reporting obligations, and responses to lawful requests from government authorities or law enforcement agencies.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain a record of your interactions with our support team for quality assurance purposes.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, conduct A/B testing, and improve the overall performance, usability, and content of the tk399 platform.
• Marketing & Promotions: Where you have provided consent, to send you promotional communications about tk399 offers, bonuses, and seasonal promotions. You may withdraw this consent at any time by contacting [email protected].

tk399 does not use your personal data for any purpose that is incompatible with the purposes stated above. If we intend to process your data for a new purpose, we will update this Privacy Policy and notify you in advance where required.

04 Legal Basis for Processing

tk399 relies on the following legal bases to process your personal data, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and tk399 — including account creation, transaction processing, game access, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing that is required to comply with applicable law, including KYC verification, AML monitoring, and responses to lawful authority requests, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, technical diagnostics, and platform improvement is carried out on the basis of tk399's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Sharing Your Data

tk399 does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share your data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

• Payment Processors: We share transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for the data they handle in their capacity as payment processors.
• KYC & Identity Verification Partners: We share identity documents and verification data with third-party KYC service providers for the purpose of verifying your age and identity. These providers are bound by strict confidentiality obligations and data processing agreements.
• Game Content Providers: Game studios and technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and game result data) to facilitate game delivery. They do not receive your personally identifiable information for marketing or profiling purposes.
• Fraud Prevention & Security Vendors: We may share technical data such as IP addresses and device fingerprints with specialist fraud detection and cybersecurity providers to protect the integrity of the tk399 platform.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of tk399, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets of tk399, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. We will notify you of any such transfer in advance where practicable.

All third-party service providers who process personal data on behalf of tk399 are required to implement appropriate technical and organisational security measures and are permitted to use your data only for the specific purposes for which it was shared.

06 Payment Data

All financial transactions on tk399 are denominated in Bangladeshi Taka (BDT). When you make a deposit or request a withdrawal, tk399 collects the minimum payment information necessary to process the transaction, which may include your mobile wallet number (bKash, Nagad, Rocket, or Upay), bank account details, or payment card information depending on your chosen payment method.

tk399 does not store full payment card numbers on its own servers. Card payment data is handled exclusively by our certified payment processing partners who maintain compliance with applicable payment security standards. For mobile banking transactions via bKash, Nagad, Rocket, and Upay, tk399 records your wallet number and transaction reference for reconciliation and fraud prevention purposes.

Transaction records including deposit amounts, withdrawal amounts, payment method identifiers, and timestamps are retained for a minimum of five years for financial record-keeping and compliance purposes.

07 Cookies & Tracking Technologies

tk399 uses cookies and similar tracking technologies on the tk399.io website to ensure proper platform functionality, maintain your session while logged in, analyse usage patterns, and detect fraudulent activity. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the operation of the tk399 platform. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure consistent platform performance. These cookies cannot be disabled without severely impairing platform functionality.
• Analytical / Performance Cookies: These cookies collect anonymised data about how visitors use the tk399 website, including pages visited, time spent on pages, and error messages encountered. This information is used to improve platform performance and user experience. The data collected by analytical cookies does not identify individual users.
• Functional Cookies: These cookies remember your account preferences, such as language settings, and personalise certain aspects of your tk399 experience. They also support features such as remembering your preferred payment method in the cashier.
• Fraud Detection Cookies: These cookies are used to identify and prevent fraudulent account activity, including the detection of automated bots, multiple account creation, and suspicious login patterns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the tk399 platform. For more information about managing cookies, refer to the help documentation provided by your browser.

08 Data Retention

tk399 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active tk399 account is retained for the duration of the account relationship and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Verification Documents: Identity documents and verification records are retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Transaction Records: Financial transaction records including deposit and withdrawal history are retained for a minimum of five years to comply with financial record-keeping regulations.
• Communications Data: Support correspondence and chat transcripts are retained for a minimum of two years for quality assurance and dispute resolution purposes.
• Technical & Usage Data: Server logs, IP address records, and usage analytics data are typically retained for a period of 12 months, after which they are automatically deleted or anonymised.
• Marketing Consent Records: Records of your marketing consent, including the date and method of consent and any subsequent withdrawal, are retained for the duration of your account relationship and for a minimum of two years following account closure.

When personal data reaches the end of its applicable retention period, it is securely deleted from tk399's systems or irreversibly anonymised so that it can no longer be attributed to any individual. Physical documents containing personal data are destroyed by secure shredding.

09 Data Security

tk399 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and the tk399 servers is encrypted using industry-standard 256-bit SSL/TLS technology. This ensures that your login credentials, payment details, and personal data cannot be intercepted during transmission.
• Encrypted Data Storage: All personal data stored on tk399 servers — including identity documents, financial records, and account information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to authorised tk399 personnel and third-party processors who have a legitimate need to access that data in connection with their designated role. All access is logged and audited.
• Multi-Factor Authentication: Internal access to systems containing personal data requires multi-factor authentication. We also encourage players to enable two-factor authentication on their tk399 accounts for additional security.
• Intrusion Detection & Monitoring: tk399 operates continuous intrusion detection, security monitoring, and anomaly detection systems to identify and respond to potential security incidents in real time.
• Regular Security Audits: Our platform undergoes regular security assessments and penetration testing by qualified independent security specialists to identify and remediate potential vulnerabilities.

While tk399 takes every reasonable precaution to protect your personal data, no internet-based system can be guaranteed to be completely secure. You also play an important role in protecting your account by using a strong, unique password, keeping your login credentials confidential, and logging out of your account on shared devices.

10 Your Data Rights

As a player on the tk399 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity:

• Right of Access: You have the right to request a copy of the personal data that tk399 holds about you, together with information about how that data is used and with whom it is shared.
• Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your tk399 account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is subject to limitations where tk399 is required to retain data for legal, regulatory, or contractual reasons — for example, financial records that must be retained for five years under AML regulations cannot be deleted on request.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to our processing while we consider your objection.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

tk399 aims to respond to all valid data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive.

11 Minors

The tk399 platform is strictly intended for adults aged 21 years and above. tk399 does not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps specifically designed to prevent underage access, and all accounts are subject to KYC verification that confirms the account holder's date of birth.

If tk399 discovers or has reason to believe that an account has been registered by, or is being used by, a person under the age of 21, we will immediately suspend the account, conduct a thorough investigation, and take all necessary steps including permanent account closure and the reporting of the matter to relevant authorities where required by applicable law. Any funds held in such an account may be confiscated pending investigation.

12 Changes to This Privacy Policy

tk399 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The most current version of this Privacy Policy will always be available at tk399.io/privacy-policy, together with the effective date of the most recent revision.

Where changes to this Privacy Policy are material — for example, where we introduce a new purpose for processing your data or change the categories of data we collect — tk399 will notify registered players via email or via an in-platform notification at least 7 days before the changes take effect. Your continued use of the tk399 platform after the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy.

If you do not agree with any material change to this Privacy Policy, you may close your account by contacting [email protected] prior to the effective date of the change. Sections of the Policy governing data that has already been collected will continue to apply to that data following account closure, as required by applicable law.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which tk399 processes your personal data, please contact our support team. All privacy-related communications are handled by our Bangladesh Standard Time (BST, UTC+6) team.

When contacting us regarding a data rights request, please include your registered email address or username and a clear description of your request so that we can verify your identity and respond as efficiently as possible. tk399 does not charge any fee for handling data rights requests submitted in good faith.