tk099 Privacy Policy — How We Protect Your Personal Data

Who We Are and How to Contact Us

tk099 is the operator of the online casino and cricket betting platform accessible at tk099.io. References to "tk099", "we", "us", or "our" throughout this Privacy Policy refer to the tk099 platform operator and its authorised data processing activities conducted in connection with the operation of the tk099 platform for the Bangladesh market.

tk099 acts as the data controller in respect of the personal data collected from registered users and visitors to the tk099 platform. As data controller, tk099 determines the purposes for which personal data is collected and the means by which it is processed.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to make a data-related request, you can contact the tk099 data support team by email at support@tk099.io or via live chat on the platform, available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by tk099 in connection with:

• Your registration and use of a tk099 user account;
• Your use of any game, betting market, or other feature available through the tk099 platform;
• Any financial transaction you conduct through the tk099 platform, including deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard;
• Any communication you initiate with tk099 support, whether via live chat or email;
• Your visit to the tk099.io website, even if you do not complete a registration.

This Privacy Policy does not apply to third-party websites, platforms, or services that may be referenced or linked on the tk099 platform. tk099 is not responsible for the privacy practices of third-party game studios, payment processors, or any other external party. You should review the privacy policies of any third-party services you interact with independently.

Personal Data We Collect

tk099 collects the following categories of personal data from registered users and platform visitors. The specific data points within each category are described in the data collection summary table above, and the legal basis for processing each category is set out in Section 5.

• Identity Data: Information that confirms who you are, including your full legal name, date of birth, nationality, and copies of government-issued identity documents provided during KYC verification.
• Contact Data: Your registered email address, phone number, and residential location within Bangladesh (city and district level).
• Financial Data: Payment method details including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card identifiers (last four digits of Visa/Mastercard), together with your full transaction history on the tk099 platform in BDT.
• Account Activity Data: A complete record of your interactions with the tk099 platform including login events, games played, bets placed, wagering amounts, bonus claims, and responsible gaming tool usage.
• Technical Data: Device and network identifiers including IP address, device type, browser fingerprint, and session metadata collected automatically when you access the platform.
• Communications Data: The content of any support conversations, complaints, or feedback you submit to tk099.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, and your interaction history with any promotional campaigns sent by tk099.

tk099 does not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than as strictly required for identity document verification), or health data, except where you voluntarily disclose such information in the context of a responsible gaming interaction (for example, if you disclose a gambling-related health concern when applying for self-exclusion). Any such information is handled with additional care and used solely for the responsible gaming purpose for which it was disclosed.

How We Collect Your Personal Data

tk099 collects personal data through the following channels:

• Direct Collection — Registration: When you create a tk099 account, you provide identity data, contact data, and set your account credentials. This is the primary source of your personal data.
• Direct Collection — KYC Verification: When you submit identity documents to complete KYC verification prior to your first withdrawal, tk099 collects the identity data contained in those documents.
• Direct Collection — Transactions: When you make a deposit or request a withdrawal, financial data is collected directly from the transaction process.
• Direct Collection — Support Interactions: When you contact tk099 support via live chat or email, communications data is collected and retained as a record of the interaction.
• Automated Collection — Platform Usage: Technical data and account activity data are collected automatically as you navigate and use the tk099 platform, through server logs, cookies, and session tracking technologies.
• Third-Party Collection — Payment Providers: tk099 receives transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to verify that deposits have been completed and to facilitate withdrawals to your verified payment method.
• Third-Party Collection — KYC Providers: tk099 uses authorised third-party KYC verification service providers to cross-reference identity documents against available databases for the purpose of confirming identity and age.

Legal Basis for Processing

tk099 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing conducted by tk099 is necessary to perform the contract between tk099 and you as a registered user — that is, to provide you with the casino and betting services you have registered to use. This includes processing identity data to create your account, financial data to process transactions, and account activity data to deliver game and betting functionality.
• Legal Obligation: tk099 is obligated to collect and retain certain categories of data to comply with applicable anti-money laundering (AML) requirements, age verification obligations, and financial record-keeping obligations. This data is retained for the legally required period even if your account is closed.
• Legitimate Interests: tk099 processes technical data and account activity data on the basis of its legitimate interest in maintaining platform security, preventing fraud, identifying problem gambling behaviour for responsible gaming intervention, and improving platform performance. tk099 has assessed that these legitimate interests are not overridden by your privacy interests in respect of this processing.
• Consent: Where tk099 sends you promotional communications by email or SMS, this processing is conducted on the basis of your consent, which you provide by opting in during registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

How We Use Your Personal Data

tk099 uses the personal data it collects for the following specific purposes:

• Account Management: To create, verify, maintain, and administer your tk099 user account, including processing login events and managing account settings.
• Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as part of KYC compliance obligations.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your verified payment method.
• Fraud and AML Monitoring: To monitor transactions and account behaviour for patterns indicative of fraud, money laundering, or other financial crime, and to take appropriate action where such patterns are detected.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling and to apply responsible gaming tools (deposit limits, cool-off periods, self-exclusions) where requested or where intervention is warranted.
• Customer Support: To respond to your support queries, investigate complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated usage data to identify performance issues, improve game and feature offerings, and optimise the user experience for Bangladesh-based players.
• Promotional Communications: To send you information about tk099 bonuses, promotions, and offers by email or SMS where you have opted in to receive such communications. You can opt out at any time.

tk099 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Responsible gaming flags and fraud alerts generated by automated systems are reviewed by tk099 staff before any account action is taken.

Sharing Your Personal Data with Third Parties

tk099 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the payment-related data necessary to process your transactions. Each payment provider operates under its own privacy policy and data processing agreements.
• KYC Verification Providers: Authorised third-party identity verification services receive copies of identity documents submitted by you for the purpose of completing age and identity verification checks.
• Game Studios: Third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive the technical session data necessary to deliver their games to you through the tk099 platform. These providers do not receive your financial or identity data.
• Platform Infrastructure Providers: Cloud hosting, server infrastructure, and cybersecurity service providers that support the operation of the tk099 platform may process data on tk099's behalf under strict data processing agreements that prohibit any use of your data for their own purposes.
• Legal and Regulatory Authorities: tk099 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, pursuant to a valid legal order, or in connection with an investigation into suspected criminal activity involving a tk099 account.

Cookies and Tracking Technologies

The tk099 platform uses cookies and similar tracking technologies to support essential platform functionality, maintain session security, and collect anonymised usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are required for the platform to function. They maintain your login session, store your language and currency preferences, and support core security features. These cookies cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: These cookies remember your preferences such as your last selected game category or responsible gaming settings, improving your experience when you return to the platform.
• Analytics Cookies: tk099 uses anonymised analytics data to understand how users navigate the platform, which pages are most visited, and where performance issues occur. This data is aggregated and does not identify individual users.
• Security Cookies: These cookies support fraud detection and platform integrity functions by allowing tk099 to identify unusual access patterns associated with a session.

tk099 does not use third-party advertising cookies or any tracking technology that shares your browsing behaviour with external advertising networks. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent you from accessing your account.

Data Retention

tk099 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for any additional period required by legal or regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active tk099 account is retained for the duration of the account's active status.
• Closed Account Data: Following voluntary account closure or account termination, tk099 retains identity, financial, and transaction data for a minimum period of 5 years to satisfy AML record-keeping and KYC compliance obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of 2 years from the date of the interaction for dispute resolution and quality assurance purposes.
• Technical and Log Data: Server logs and IP address data are retained for a maximum of 12 months unless a specific security incident requires longer retention for investigation purposes.
• Marketing Data: Marketing preference records (opt-in/opt-out status) are retained for the duration of the account plus 1 year to maintain evidence of consent and opt-out compliance.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with a specific individual. Anonymised and aggregated data (which cannot identify any individual) may be retained indefinitely for platform analytics purposes.

Data Security

tk099 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the tk099 platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Personal data stored on tk099 servers is encrypted at rest. Database access is restricted by role-based access controls, ensuring that only authorised personnel can access specific categories of data.
• Access Controls: tk099 staff access to personal data is governed by the principle of least privilege — each staff member can access only the specific data categories required for their operational role.
• Fraud Monitoring Systems: Automated systems continuously monitor account activity and transaction patterns for anomalies indicative of unauthorised access or fraudulent behaviour.
• Security Testing: The tk099 platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

While tk099 applies robust security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials and for notifying tk099 immediately at support@tk099.io if you believe your account has been compromised.

Your Privacy Rights

As a registered user of the tk099 platform, you hold the following privacy rights in respect of the personal data that tk099 processes about you. These rights can be exercised by contacting tk099 support at support@tk099.io or via live chat:

• Right of Access: You have the right to request a copy of the personal data that tk099 holds about you, together with information about how it is being used. tk099 will respond to access requests within 10 business days.
• Right to Rectification: If any personal data that tk099 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity data may require you to provide supporting documentation.
• Right to Erasure: You have the right to request that tk099 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing was based. Note that this right does not apply where tk099 is required to retain data by legal obligation (for example, AML record-keeping requirements).
• Right to Restriction: You have the right to request that tk099 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of data held and a correction is being verified.
• Right to Object: You have the right to object to processing conducted on the basis of tk099's legitimate interests where you believe your privacy interests override those interests. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving promotional emails), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children and Minors

The tk099 platform is strictly intended for adults aged 21 years or older. tk099 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the tk099 registration and withdrawal process, and any account found to be held by a person under the age of 21 will be immediately suspended.

If you are a parent or guardian and believe that a minor in your care has registered a tk099 account or provided personal data to tk099 without your knowledge, please contact support@tk099.io immediately. tk099 will take prompt action to close the account and delete any personal data associated with it, and will return any real-money balance to the payment method used, where this is possible and verifiable.

tk099 treats the protection of minors as a paramount responsibility and cooperates fully with any request from a parent, guardian, or relevant authority relating to the removal of personal data belonging to a minor.

Changes to This Privacy Policy

tk099 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, legal obligations, or platform functionality. When material changes are made to this policy, tk099 will notify registered users by one or more of the following methods:

• A notification displayed on the tk099 platform upon your next login;
• An email to your registered account address summarising the key changes;
• An update to the "Last Updated" date displayed at the top of this policy and on the last-updated information bar above.

The most current version of this Privacy Policy will always be accessible at tk099.io/privacy-policy. Your continued use of the tk099 platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a material change, you should cease using the platform and contact support to request account closure and data deletion.

Contact and Data Requests

For all privacy-related enquiries, data subject rights requests, or concerns about how tk099 handles your personal data, please use the following contact channels. All privacy communications are handled confidentially by tk099's support and compliance teams:

• Email: support@tk099.io — Please include "Privacy Request" in the subject line along with your registered account username to ensure your enquiry is routed to the correct team promptly.
• Live Chat: Available 24/7 on the tk099 platform. For complex data requests, we recommend following up in writing via email to ensure a full written record is maintained.

tk099 aims to acknowledge all privacy-related communications within 2 business hours during Bangladesh Standard Time (BST, UTC+6) business hours, and to provide a substantive response within 10 business days. For data deletion or access requests that require verification of your identity before processing, the timeline begins from the point at which satisfactory identity verification is completed.