Privacy Policy — How tk992 Handles Your Personal Data

Information We Collect

tk992 collects personal data from players and site visitors through several channels: directly through the account registration and KYC verification process, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and fraud prevention services. The categories of personal data we collect are set out below.

Registration and Account Data

When you create a tk992 account, we collect the following information:

• Full legal name as it appears on your official identity document.
• Date of birth, for the purpose of confirming you meet the 18+ age requirement.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postcode where applicable.
• Email address, used for account communications, security alerts, and optional promotional messages.
• Mobile phone number, used for two-factor authentication (2FA) and account security purposes.
• Username and encrypted password — passwords are stored in hashed form and are never readable by tk992 staff.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of identity documents including:

• Bangladeshi National Identity Card (NID) — front and back image.
• Valid passport biographical page.
• Birth certificate (for supplementary age verification where primary documents are unavailable).
• Proof of payment method ownership — for example, a screenshot of your bKash, Nagad, or Rocket account confirming the registered mobile number matches the one on your tk992 account.
• Bank statement or Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank account confirmation for bank transfer verification.

KYC documents are reviewed by authorised tk992 compliance personnel only and are stored in encrypted form. Physical copies are never requested or retained.

Transaction and Financial Data

When you make a deposit or request a withdrawal, we record:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer).
• Transaction reference numbers provided by the payment provider.
• Transaction amounts in Bangladeshi Taka (BDT / ৳).
• Date and time of each transaction (recorded in Bangladesh Standard Time, UTC+6).
• Account balance history and bonus credit/debit records.

tk992 does not store full payment card numbers, bKash PINs, or Nagad PINs. These credentials are entered directly into the respective payment provider's interface and are never transmitted through tk992 systems.

Gameplay and Betting Data

For every game session and bet placed on tk992, we record:

• Game name, Game Provider, bet amount, and outcome.
• Session start and end times.
• Betting market selections for sportsbook bets, including sport, event, market type, odds, and settlement outcome.
• Responsible gaming indicators such as session duration, daily wagering volume, and any self-set limits or exclusions active on the account.

Technical and Usage Data

When you visit or use the tk992 platform, our servers automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, browser type and version.
• Pages visited, time spent on pages, and navigation paths within the platform.
• Referral source (e.g., which URL you came from before visiting tk992.app).
• Error logs and performance metrics used for platform maintenance and debugging.

Data Category	Examples	Collection Method
Registration Data	Name, date of birth, email, phone	Player-provided at sign-up
KYC Documents	NID, passport, payment proof	Player-uploaded on request
Transaction Data	Deposit/withdrawal records, balances	Automatically on each transaction
Gameplay Data	Bets, game sessions, outcomes	Automatically during platform use
Technical Data	IP address, device, browser	Automatically on site visit
Communication Data	Support chat logs, email correspondence	Generated during support interactions

How We Use Your Information

tk992 uses personal data collected from players strictly for the purposes described in this section. We do not use your personal data for purposes that are incompatible with those stated here without providing you with prior notice.

Account Management and Platform Operation

The primary use of your registration and account data is to create and maintain your tk992 account, authenticate your identity each time you log in, process deposits and withdrawals, and provide access to casino games and sportsbook markets. Without this data, tk992 cannot provide its services to you.

Identity Verification and Fraud Prevention

KYC document data is used exclusively to verify that you meet the 18+ age requirement, to confirm the identity behind the account, and to verify ownership of your registered payment methods. This data is also used by our internal compliance team to detect and prevent fraudulent account activity, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.

Payment Processing

Transaction data is used to process deposits credited to your real money balance and to process withdrawal requests to your registered payment method. We share the minimum necessary transaction data with payment providers — bKash, Nagad, Rocket, Upay, and partner banks — to facilitate payment processing. tk992 retains transaction records for audit and dispute resolution purposes.

Responsible Gaming Monitoring

Gameplay and session data is used by tk992's responsible gaming systems to monitor for indicators of problem gambling behaviour. Where our systems detect patterns consistent with harmful gambling — such as extended session durations, rapidly escalating bet sizes, or frequent loss-chasing — our responsible gaming team may make contact with the player to offer support resources. This use of data is in the player's interest and aligned with our duty of care obligations.

Customer Support

When you contact the tk992 support team, the information you provide in your support request — along with your account data and relevant transaction or gameplay records — is used to investigate and resolve your query. Support interaction records are retained to ensure continuity of service and for quality monitoring purposes.

Promotional Communications

With your consent, tk992 may use your email address and phone number to send you promotional communications about bonuses, new games, BPL season promotions, Eid special offers, and other platform news. You may withdraw consent for marketing communications at any time via your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of communications sent before the withdrawal.

Platform Analytics and Improvement

Aggregated and anonymised technical and usage data is used to analyse platform performance, identify popular games and markets, improve the user interface, and guide product development decisions. This analytical data does not identify individual players and is used solely for internal platform improvement purposes.

Sharing and Disclosure of Data

tk992 does not sell your personal data to any third party. We share player data only in the specific, limited circumstances described below.

Game Providers

When you launch a game supplied by a third-party Game Provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your player session token and account identifier are shared with that Game Provider's platform solely for the purpose of facilitating and recording your game session. Game Providers do not receive your full name, address, or payment method details. Their handling of session data is governed by their own published privacy and security policies.

Payment Processors

tk992 shares the minimum necessary personal and transaction data with payment processors — including bKash, Nagad, Rocket, Upay, and our banking partners — to facilitate deposit and withdrawal transactions. The data shared is limited to what each payment processor requires to execute the transaction and comply with its own regulatory obligations.

Identity Verification and KYC Services

Where tk992 uses a third-party KYC or identity verification service to assist with document verification, the relevant identity documents and personal data are shared with that service provider under strict contractual data processing terms. The service provider is prohibited from using your data for any purpose beyond the KYC verification service it is contracted to provide.

Fraud Prevention and AML Compliance

tk992 may share account and transaction data with fraud prevention databases and anti-money-laundering (AML) monitoring services to screen accounts and transactions against known risk indicators. Where a transaction or account is flagged as presenting a high AML risk, tk992 may also be required by law to file a report with relevant financial intelligence authorities. In such cases, tk992 is legally prohibited from notifying the affected player that a report has been filed.

Legal and Regulatory Disclosure

tk992 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, court order, or statutory obligation. We will provide only the minimum data required to satisfy the legal request and will, where permitted by law, notify the affected player before complying with such a request.

Cookies and Tracking Technologies

tk992 uses cookies and similar tracking technologies to operate and improve the platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information. Cookies do not contain executable code and cannot be used to access other data on your device.

Types of Cookies Used by tk992

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens. Without these cookies, core platform functions cannot operate.	Session / up to 24 hours
Functional	Remembering your language preference, last-visited game category, and UI settings such as odds format.	Up to 30 days
Analytics	Tracking anonymised page views, session duration, and navigation paths to help tk992 understand how the platform is used and where improvements can be made.	Up to 12 months
Marketing / Retargeting	Recording that you visited tk992.app so that relevant promotional content may be shown to you on other websites you visit. Only active where you have given consent.	Up to 90 days

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled, as they are essential for the platform to function. You may disable functional, analytics, and marketing cookies at any time by adjusting your browser settings. Please note that disabling functional cookies may affect your experience on the platform, as certain UI preferences will no longer be saved between sessions.

Most modern browsers allow you to view, block, and delete cookies via the browser's privacy or settings menu. Instructions for managing cookies in commonly used browsers are available on the respective browser's official support pages. Clearing cookies will log you out of any active tk992 session and will reset any locally stored preferences.

Data Retention Periods

tk992 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our Terms and Conditions. The table below summarises our standard retention periods by data category.

Data Category	Retention Period	Basis for Retention
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC identity documents	Duration of account + 5 years after closure	AML regulatory obligation
Transaction records	7 years from date of transaction	Financial regulatory obligation
Gameplay and betting logs	3 years from date of session	Dispute resolution, responsible gaming
Support correspondence	3 years from date of last interaction	Service quality, dispute resolution
Marketing consent records	Duration of consent + 2 years	Consent management compliance
Technical/server logs	Up to 12 months	Security monitoring, debugging
Analytics data (anonymised)	Up to 24 months	Platform improvement (anonymised)

When a retention period expires, personal data is securely deleted or permanently anonymised such that it can no longer be attributed to an identifiable individual. Where you have requested deletion of your data before the end of a statutory retention period, tk992 will restrict the use of that data to the minimum necessary to fulfil its legal obligations and will delete it as soon as those obligations no longer require retention.

Data Security Measures

tk992 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect player personal data from unauthorised access, accidental loss, destruction, or disclosure.

Technical Controls

• Transport Layer Security: All data transmitted between player devices and tk992 servers is encrypted using TLS 1.2 or higher. The platform's HTTPS connection is enforced with HSTS (HTTP Strict Transport Security) to prevent protocol downgrade attacks.
• Password Hashing: Player passwords are stored using a strong one-way cryptographic hashing algorithm with per-account salt values. Plain-text passwords are never stored or logged.
• Encryption at Rest: Personal data stored in tk992's databases is encrypted at rest using AES-256 encryption. Backup copies of the database are subject to the same encryption standards.
• Two-Factor Authentication (2FA): All registered players are able to enable 2FA on their account, adding a second layer of authentication protection beyond username and password.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role. All internal data access is logged and audited.
• Intrusion Detection: tk992 operates automated intrusion detection and rate-limiting systems to identify and block suspicious access patterns, including brute-force login attempts and unusual API usage.

Organisational Controls

• All tk992 personnel with access to personal data undergo data protection and security training as part of their onboarding and on an annual refresher basis.
• Third-party service providers who process personal data on behalf of tk992 are required to maintain equivalent or higher security standards, and are subject to contractual data processing agreements.
• Security incident response procedures are in place to ensure that any confirmed or suspected data breach is investigated promptly and, where required, reported to affected players and relevant authorities.

Your Responsibility

While tk992 takes robust measures to protect your data, the security of your account also depends on you. You are responsible for keeping your login credentials confidential, enabling 2FA, using a strong and unique password for your tk992 account, and ensuring that devices you use to access the platform are secured with up-to-date security software. If you believe your account has been compromised, contact [email protected] immediately.

Your Rights Over Your Data

As a player on tk992, you hold a set of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the tk992 support team at [email protected] with the subject line "Data Subject Request" and a description of the right you wish to exercise. Requests will be acknowledged within 48 hours and actioned within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that tk992 holds about you. We will provide this in a structured, commonly used format. Where the volume of data is large, we may provide it in batches.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For standard account information such as address or email, you may update this directly via your account settings panel.
• Right to Erasure: You have the right to request that tk992 delete your personal data. This right is subject to limitations where retention is required by law (for example, AML-related transaction records) or where the data is needed to resolve an open dispute. Where full deletion is not immediately possible, we will restrict the data to the minimum necessary processing.
• Right to Restriction of Processing: You have the right to request that tk992 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where your personal data is processed on the basis of your consent or for the performance of a contract, you have the right to receive that data in a machine-readable format and to request that it be transmitted to another platform where technically feasible.
• Right to Withdraw Marketing Consent: Where tk992 sends you marketing communications on the basis of your consent, you may withdraw that consent at any time without affecting your account status or access to platform services.
• Right to Raise a Complaint: If you believe that tk992 has handled your personal data in a manner that is inconsistent with this Privacy Policy, you have the right to raise a complaint with the tk992 support team. We are committed to investigating all data-related complaints fairly and transparently.

Changes to This Privacy Policy

tk992 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the tk992 homepage and, where reasonably practicable, by sending a notification to the email address associated with your account.

The "Last Updated" date displayed at the top of this page will be revised each time a change is published. The most current version of this Privacy Policy is always accessible at https://tk992.app/privacy-policy and supersedes all prior versions.

Continued use of the tk992 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Privacy Policy, you should stop using the platform and may request account closure in accordance with Section 8 of our Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data tk992 holds about you, please contact the support team at [email protected]. All privacy-related enquiries are handled by staff with specific data protection responsibilities and will be responded to promptly.