tkpk Privacy Policy

1 Who We Are

tkpk operates the online gaming and sports betting platform accessible at tkpk.cam (the "Platform"). For the purposes of this Privacy Policy, tkpk acts as the data controller in respect of all personal data collected from users of the Platform.

Our primary data protection contact is our support team, reachable at [email protected]. All privacy-related queries, data subject access requests, correction requests, and deletion requests should be directed to this address with the subject line "Privacy Request — [Your Username]".

This Privacy Policy applies to all individuals who access or use the Platform, including registered account holders, visitors who browse without registering, and any individual who contacts us through our support channels.

2 Personal Data We Collect

tkpk collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where voluntarily disclosed by you in the context of a responsible gaming request (for example, disclosing a gambling addiction when requesting self-exclusion). Any such information is treated with the highest level of confidentiality and used solely to fulfil your welfare request.

3 How We Collect Your Data

tkpk collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing identity verification, depositing or withdrawing funds, updating your profile, or contacting our support team.
• Automated technical collection: Data gathered automatically when you visit or use the Platform, including IP addresses, device identifiers, browser fingerprints, and session logs. This data is collected via server logs and first-party cookies.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal. tkpk does not store full mobile money PINs or bank account passwords.
• Identity verification providers: Where third-party KYC (Know Your Customer) services are used to verify identity documents, we receive a verification outcome and a reference identifier, not a full copy of your documents stored on our servers.
• Fraud prevention and security services: Risk scoring and device fingerprinting data provided by our fraud detection partners to protect against account takeover and money laundering.

4 How We Use Your Personal Data

tkpk processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your tkpk account, including processing logins, updating preferences, and managing account security settings.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banking institutions, and to maintain accurate financial records.
• Identity verification and AML compliance: To verify your age (18+), confirm your identity, and fulfil our anti-money-laundering and counter-financing-of-terrorism obligations. This may include screening your name against regulatory watchlists.
• Platform operation and improvement: To monitor Platform performance, diagnose technical issues, conduct A/B testing, and improve the user experience based on anonymised usage analytics.
• Fraud prevention and security: To detect, investigate, and prevent unauthorised access, fraudulent transactions, multi-accounting, and other prohibited activities described in the Terms & Conditions.
• Responsible gaming: To identify patterns of play that may indicate problem gambling and to administer self-exclusion, deposit limit, and reality-check features when requested or triggered automatically.
• Customer support: To respond to your enquiries, complaints, and data subject requests in a timely and effective manner.
• Marketing communications: To send you promotional offers, bonus notifications, and news about the Platform — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].

5 Legal Basis for Processing

tkpk processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and tkpk — including account creation, payment processing, bet settlement, and account management.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing conducted for tkpk's legitimate business interests, including fraud prevention, platform security, and analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing for which you have given explicit, freely-given, and informed consent — primarily marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third-Party Disclosure

tkpk does not sell, rent, or trade your personal data. Data is shared with third parties only in the following strictly limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process your financial transactions. Data shared is limited to what is necessary to execute and record the transaction.
• Identity verification and KYC providers: Third-party services used to verify your identity documents and age. These providers are contractually bound to use your data solely for the verification purpose.
• Game software providers: Certified third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a pseudonymous player identifier and session token to operate game sessions. They do not receive your full identity or financial data.
• Fraud prevention and security services: Risk management and anti-fraud platforms that help tkpk identify and prevent account abuse, money laundering, and unauthorised access.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, tkpk may disclose personal data to law enforcement or government authorities. tkpk will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tkpk's business, your personal data may be transferred to the successor entity, subject to the same protections described in this Policy.

All third-party service providers who receive personal data from tkpk are subject to data processing agreements that require them to maintain confidentiality, implement appropriate security measures, and use the data only for the specified purpose.

7 Data Retention

tkpk retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

Where you request deletion of your personal data, tkpk will assess the request against applicable legal retention obligations. Data that must be retained by law cannot be deleted upon request, but will be restricted from active processing until the retention period expires.

8 Cookies & Tracking Technologies

tkpk uses the following types of cookies and similar technologies on the Platform:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking Platform functionality.
• Preference cookies: Store your language preferences, display settings, and other personalisation choices between sessions.
• Analytics cookies: First-party anonymised analytics data used to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data cannot be used to identify individual users.
• Security cookies: Device fingerprinting and risk-scoring tokens used to detect suspicious login behaviour and prevent account takeover.

tkpk does not deploy third-party advertising cookies, retargeting pixels, or social media tracking widgets on the Platform. You may manage cookie preferences through your browser settings; however, disabling essential cookies will prevent you from logging in or using core Platform features.

9 Data Security

tkpk implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Encryption at rest: Databases containing personal and financial data are encrypted at rest using AES-256 encryption.
• Credential security: Passwords are stored as bcrypt-hashed values with per-user salts. Plaintext passwords are never stored or logged.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access undergo mandatory privacy training and are bound by confidentiality obligations.
• Penetration testing: tkpk conducts regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security breach that poses a risk to your rights, tkpk will notify affected users within 72 hours of becoming aware of the incident, as far as is practicable.

While tkpk takes extensive precautions, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10 Your Data Rights

Subject to applicable legal constraints and our regulatory retention obligations, you have the following rights in respect of your personal data held by tkpk:

• Right of access: You may request a copy of all personal data tkpk holds about you, including the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. Minor details such as contact information can be updated directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that tkpk restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to tkpk, for the purpose of transferring it to another service provider.
• Right to object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, where you believe your rights outweigh tkpk's interests.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". tkpk will respond within 30 calendar days of receipt. We may request proof of identity before actioning any request to protect against fraudulent data access attempts.

11 Children's Privacy

The tkpk Platform is strictly intended for adults aged 18 years and above. tkpk does not knowingly collect, process, or store personal data relating to persons under the age of 18. Age verification is a mandatory step in the account registration and KYC process.

If tkpk becomes aware that personal data has been collected from a person under the age of 18, the associated account will be immediately and permanently closed, all data will be securely deleted to the extent permitted by law, and all funds associated with the account will be handled in accordance with our Terms & Conditions. If you are aware of a minor using the Platform, please report it immediately to [email protected].

12 Third-Party Links

The tkpk Platform may contain references to third-party game providers and payment partners. Where the Platform interfaces with third-party services (for example, a game launched in an embedded window from a certified provider), the privacy practices of that third party are governed by their own privacy policy, not this one.

tkpk does not control and is not responsible for the data practices of third-party service providers beyond the contractual obligations imposed by our data processing agreements. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

13 Amendments to This Policy

tkpk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable law. Where a material change is made, we will notify registered users by email to their registered address and/or by a prominent notice on the Platform prior to the change taking effect.

The date at the top of this Policy ("Effective Date") will be updated to reflect the date of the most recent revision. Continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you must discontinue use of the Platform and request account closure.

14 Contact & Complaints

For all privacy-related queries, data subject access requests, and complaints regarding tkpk's handling of your personal data, please contact us at:

• Email: [email protected] (plain text — not a clickable link)
• Subject line format: "Privacy Request — [Your Account Username]"
• Response time: Within 30 calendar days for data subject requests; within 5 business days for general privacy queries
• Support hours: 24 hours a day, 7 days a week

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through any applicable consumer protection or data protection mechanism available in your jurisdiction. tkpk is committed to resolving all privacy concerns fairly and transparently, and we treat every complaint as an opportunity to improve our data protection practices.