tk998 Privacy Policy — How We Collect, Use and Safeguard Your Data

Introduction

This Privacy Policy (hereinafter "Policy") sets out the basis on which tk998 collects, processes, stores and discloses personal data provided by users of the tk998 platform, accessible at https://tk998.io, including all associated game interfaces, sportsbook services, payment facilities, mobile-optimised pages and customer support channels (collectively, the "Platform").

tk998 is committed to maintaining the privacy and security of all personal data entrusted to it by its registered players across Bangladesh — including users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and Cox's Bazar. This Policy is designed to meet the highest standards of transparency regarding how that data is handled from the moment you first visit the Platform to the point at which your account relationship with tk998 concludes.

By registering an account on the tk998 Platform or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read, understood and agreed to the data practices described herein. If you do not agree to this Policy, you should discontinue use of the Platform and contact our support team to close your account.

Who We Are

tk998 operates as an internationally licensed offshore online gaming and sports betting platform. The Platform is the data controller responsible for personal data collected from players who access its services. For all data-related enquiries, including access requests, correction requests and deletion requests, please refer to the contact details provided in Section 14 of this Policy.

tk998 targets adult players in the Bangladesh market, providing entertainment services including live casino games, slot games, crash games, sports betting — with a particular focus on cricket markets covering the BPL, IPL, T20 World Cup and Bangladesh Tigers internationals — and a range of speciality game formats. All services are made available exclusively to players aged 21 years or older.

Data We Collect

tk998 collects personal data across several categories. The table below summarises the primary data types, their purpose and the context in which they are gathered.

3.1 Sensitive Data

tk998 does not intentionally collect special category sensitive data (such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data) except where strictly required by law for identity verification purposes. Where such data is inadvertently disclosed during KYC document submission, it is handled with the highest level of access restriction and is not processed for any purpose beyond identity verification.

How We Collect Data

4.1 Directly from You

The majority of personal data tk998 holds is provided directly by the player during the account registration process, during KYC verification, when making deposits or requesting withdrawals, when contacting our customer support team, and when updating account preferences or responsible gaming settings.

4.2 Automatically Through Platform Use

When you access the tk998 Platform, our systems automatically collect certain technical and usage data, including your IP address, device identifiers, browser type and version, pages visited, time spent on each page, game sessions accessed and betting activity. This data is collected through server logs, first-party cookies and tracking pixels embedded in the Platform interface.

4.3 From Third-Party Service Providers

tk998 may receive personal data about you from third-party partners in certain circumstances, including identity verification results from KYC service providers, fraud risk scores from payment security partners, and account validation data from payment processors such as bKash, Nagad and Rocket where you have initiated a transaction through their platforms to fund your tk998 account.

How We Use Your Data

tk998 uses collected personal data for the following defined purposes only:

• Account management: Creating, maintaining and administering your tk998 player account, including login authentication and account preference management.
• Identity and age verification: Verifying that you meet the minimum age requirement of 21 years and that the identity information provided during registration is accurate and authentic.
• Payment processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported bank channels; reconciling transactions; and investigating payment disputes.
• Customer support: Responding to support queries, resolving disputes, processing complaints, and maintaining records of customer interactions for quality assurance purposes.
• Fraud and security monitoring: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, multi-accounting and other prohibited conduct as defined in the tk998 Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour and enforcing player-requested deposit limits, session time limits and self-exclusion arrangements.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) obligations, maintaining transaction records as required by applicable offshore gaming regulations, and cooperating with lawful requests from relevant authorities.
• Platform improvement: Analysing aggregated usage data to improve the performance, design and feature set of the tk998 Platform.
• Direct marketing (with consent): Sending promotional communications about tk998 bonuses, new game releases and seasonal offers where you have provided explicit consent to receive such communications.

Legal Basis for Processing

tk998 processes personal data under the following legal bases:

6.1 Contractual Necessity

The primary legal basis for processing the majority of your personal data is contractual necessity. Processing your identity data, contact data and financial data is required in order for tk998 to fulfil its obligations under the account agreement with you — including enabling you to deposit funds, place bets and receive winnings. Without this processing, the core platform services cannot be delivered.

6.2 Legal Obligation

Certain data processing is required to satisfy tk998's legal obligations under the offshore gaming licence under which the Platform operates, including KYC identity verification, AML transaction monitoring and the retention of financial records for the statutory minimum period.

6.3 Legitimate Interests

tk998 processes usage data, technical data and communication data on the basis of its legitimate interests in operating a secure, fraud-resistant and legally compliant gaming platform. This includes fraud detection, security monitoring, and the investigation of prohibited conduct. tk998's legitimate interests in these activities do not override the fundamental privacy rights of individual players.

6.4 Consent

Direct marketing communications are sent only on the basis of your explicit consent, which is captured during account registration or through subsequent account preference updates. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

tk998 does not sell, rent or trade personal player data. Data is shared with third parties only in the following strictly defined circumstances:

7.1 Payment Service Providers

To process your deposits and withdrawals, tk998 shares necessary financial data — such as mobile wallet numbers and transaction amounts — with the relevant payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank and BRAC Bank. These providers process your data under their own privacy policies and are bound by their respective service agreements with tk998.

7.2 Identity Verification Partners

tk998 uses accredited third-party KYC service providers to verify the identity and age of registered players. These providers receive only the identity documents and data points required to complete a specific verification check and are contractually prohibited from using that data for any other purpose.

7.3 Game Studios and Software Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi operate game engines that are integrated into the tk998 Platform. These providers may receive anonymised session data required to deliver fair, functioning game rounds. No personally identifiable data beyond an anonymised player session token is shared with game studios.

7.4 Legal and Regulatory Disclosure

tk998 will disclose personal data to competent authorities, law enforcement agencies or regulatory bodies where it is legally required to do so — for example, in response to a lawful court order, anti-money laundering investigation or fraud inquiry. tk998 will not disclose data beyond what is strictly required to satisfy the specific legal demand.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of the tk998 business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any change to the data controller relationship with adequate advance notice.

Data Retention

tk998 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

• Active account data: Retained for the full duration of your registered account relationship with tk998, plus a minimum of 5 years following account closure to satisfy AML and financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Transaction records: Retained for a minimum of 5 years in accordance with applicable offshore gaming and financial compliance requirements.
• Customer support communications: Retained for 3 years following the resolution of the relevant support interaction, after which they are securely deleted unless required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your account relationship and for 2 years following withdrawal of consent, to provide an audit trail of your marketing preferences.
• Technical and usage logs: Retained for 12 months on a rolling basis for security monitoring and platform improvement purposes, then deleted.

Upon expiry of the applicable retention period, personal data is securely destroyed using industry-standard data deletion procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

Security Measures

tk998 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, loss, alteration and disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tk998 Platform, covering login sessions, payment transactions and personal data submissions.
• Server-side data encryption for personally identifiable information stored in our databases, ensuring that raw data is not accessible even in the event of an infrastructure breach.
• Access control policies that restrict internal access to personal player data to only those members of the tk998 team whose role requires it, enforced through role-based access control (RBAC) systems.
• Two-factor authentication (2FA) available to all players and mandatory for all internal staff with access to player account data.
• Real-time fraud and intrusion detection systems that monitor platform activity 24/7 and flag suspicious patterns for immediate review by the security team.
• Regular security audits and penetration testing conducted by independent third-party cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• Secure data centre infrastructure with physical access controls, redundant systems and disaster recovery protocols to ensure data availability and integrity.

Cookies & Tracking

10.1 What Are Cookies?

Cookies are small text files stored on your device by a website when you visit it. tk998 uses first-party cookies — cookies set directly by the tk998 domain — to deliver essential platform functionality and to improve your experience. We do not use third-party advertising cookies or cross-site tracking technologies.

10.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during an active session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without disrupting core platform functionality.
• Functional cookies: Store your preferences such as language settings, game display preferences and responsible gaming tool configurations so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymised data about how players navigate and interact with the Platform, helping tk998 identify areas for improvement. No personally identifiable information is collected through analytics cookies.

10.3 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent certain core features of the tk998 Platform from functioning correctly, including the ability to maintain an authenticated login session. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

Your Privacy Rights

As a registered tk998 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the tk998 support team at the email address provided in Section 14. All verified requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.

• Right of access: You may request a full summary of the personal data tk998 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated. For account name corrections, identity document re-submission may be required.
• Right to erasure: You may request the deletion of your personal data once your account is closed and all applicable statutory retention periods have been satisfied. Data that must be retained to fulfil legal obligations cannot be deleted prior to the expiry of those obligations.
• Right to restrict processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being investigated — you may request that tk998 restrict processing of your personal data beyond essential account and security functions.
• Right to data portability: You may request a copy of the personal data you have provided to tk998 in a structured, machine-readable format, which you may then transfer to another service provider of your choosing.
• Right to withdraw consent: Where processing is based on your consent — specifically for direct marketing communications — you may withdraw that consent at any time by updating your account notification settings or contacting support. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your individual privacy rights outweigh those interests. tk998 will assess each objection on its merits and respond within the standard 30-day window.

Children & Minors

The tk998 Platform is strictly intended for adults aged 21 years or older. tk998 does not knowingly collect personal data from any individual under the age of 21. Age verification checks are conducted during the account registration process and at the point of first withdrawal. If tk998 discovers or is notified that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all collected data will be securely deleted, any funds in the account will be handled in accordance with applicable legal requirements, and the matter will be escalated to the compliance team.

Parents and guardians who believe a minor has registered on the tk998 Platform are urged to contact our support team immediately at the email address provided in Section 14. We will treat such reports as a priority and act on them without delay. tk998 is committed to the strictest standards of underage access prevention and takes all reports of potential underage gambling with the utmost seriousness.

Changes to This Policy

tk998 reserves the right to revise and update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform services. When material changes are made to this Policy, we will notify registered players via email to the address associated with their account and/or via a prominent notice displayed upon their next login to the Platform.

The revised Policy will take effect 7 days after the notification date, unless the change is necessitated by an immediate legal or regulatory requirement, in which case it may take effect without advance notice. The "Last Updated" date at the top of this Policy will be revised to reflect the date on which the latest version became effective. We encourage you to review this Policy periodically to stay informed of how your data is being protected.

Your continued use of the tk998 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the changes described therein. If you do not accept the revised Policy, you should discontinue use of the Platform and contact our support team to close your account and arrange deletion of your data in accordance with Section 11.

Contact & Data Requests

For all privacy-related enquiries, data access requests, correction requests, deletion requests, consent withdrawals, or formal complaints relating to this Privacy Policy, please contact the tk998 Data Protection team through the following channel:

• Email: [email protected]
• Response time: All verified data requests are acknowledged within 5 business days and fulfilled within 30 calendar days of receipt.
• Support hours: Available 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Verification requirement: All data requests must be submitted from the email address registered on your tk998 account. We may request additional identity verification before processing any request that could expose sensitive account information.

tk998 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response within 30 days, you retain the right to escalate the matter to the appropriate regulatory authority in your jurisdiction.