How tk75 Collects, Uses, and Protects Your Personal Data

1 Introduction

This Privacy Policy ("Policy") sets out how tk75 ("we", "us", "our", or the "Company") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", or the "User") who access or use the tk75 platform, including the website at tk75.io, associated mobile interfaces, customer support channels, and all related digital services (collectively, the "Platform").

By registering an account on tk75, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions, which form the overarching legal agreement governing your use of the tk75 Platform. In the event of any conflict between this Policy and the Terms & Conditions with respect to privacy matters, this Policy shall prevail.

2 Who We Are

tk75 is the data controller responsible for your personal data collected through the Platform. As data controller, we determine the purposes and means of processing your personal data and are accountable for its lawful and secure handling in accordance with applicable data protection principles.

tk75 operates as a registered brand in the online gaming sector, providing casino games, sports betting services, and related entertainment features to eligible adult players. Our platform is specifically designed to serve the Bangladeshi market, and our data practices are calibrated to reflect both international data protection standards and local regulatory expectations applicable to online gaming operators serving Bangladesh.

For any privacy-related enquiries, you may contact our dedicated Data Protection team at: [email protected]

3 Categories of Personal Data We Collect

tk75 collects only the personal data that is strictly necessary for the purposes described in Section 5 of this Policy. The categories of personal data we collect include, but are not limited to, the following:

3.1 Identity Data

Full legal name, date of birth, nationality, and government-issued identification number (e.g., Bangladesh National Identity Card number or passport number). This data is collected primarily for the purposes of age verification, KYC compliance, and fraud prevention.

3.2 Contact Data

Residential address (including district, city, and postal code within Bangladesh or abroad), email address, and mobile telephone number. We use contact data to communicate with you regarding your account, transactions, and promotional offers where you have opted in to receive such communications.

3.3 Financial Data

Payment method details, including bKash account number, Nagad account number, Rocket wallet details, bank account information (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) where applicable. Note that full card numbers are never stored on our servers — card data is tokenised by our PCI-DSS compliant payment processor.

3.4 Transaction Data

Records of all deposits, withdrawals, bets placed, games played, bonus claims, and any other financial transactions conducted on the Platform, including timestamps, amounts in BDT, and associated game or market references.

3.5 Technical Data

Internet Protocol (IP) address, browser type and version, operating system, device identifiers, screen resolution, time zone setting, and referring URL. This data is collected automatically when you access the Platform and is used for security monitoring, fraud detection, and platform optimisation.

3.6 Usage Data

Information about how you interact with the Platform, including pages visited, session duration, game lobby navigation patterns, search queries within the Platform, links clicked, and feature engagement statistics. Usage data helps us understand player behaviour in aggregate to improve the Platform experience.

3.7 Communications Data

Records of your communications with tk75 customer support, including live chat transcripts, email correspondence, and support ticket logs. These records are retained for quality assurance and dispute resolution purposes.

4 How We Collect Your Personal Data

tk75 collects personal data through the following channels and mechanisms:

• Direct submissions: Data you provide when completing the registration form, updating your account profile, submitting KYC documents, contacting customer support, or participating in surveys and promotions.
• Automated technologies: Data collected automatically as you navigate the Platform, including via cookies, web beacons, pixel tags, server logs, and similar tracking technologies (see Section 7).
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you complete a deposit or withdrawal.
• Identity verification providers: Data received from third-party KYC service providers during the identity and age verification process, including verification status and document validation results.
• Fraud prevention services: Device fingerprinting data and behavioural risk scores provided by our fraud detection partners to assist in identifying and preventing account compromise and financial crime.
• Publicly available sources: In limited circumstances, we may supplement your data with information from publicly available sources such as government sanction lists or politically exposed persons (PEP) databases, as required by AML regulations.

5 Purposes of Processing & Legal Basis

The following table sets out the specific purposes for which tk75 processes your personal data, together with the legal basis on which each processing activity relies:

Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

6 Sharing Your Personal Data

tk75 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with the following categories of recipients in the circumstances described below:

6.1 Payment Service Providers

We share financial and identity data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — strictly for the purpose of processing your transactions. Each payment partner operates under their own privacy policy and is independently responsible for compliance with applicable data protection laws in relation to the data they receive.

6.2 KYC and Identity Verification Providers

To fulfil our legal obligations in respect of player verification, we share relevant identity documents and data with accredited third-party KYC verification service providers. These providers act as data processors under contract with tk75 and are prohibited from using your data for any purpose other than the verification service they provide to us.

6.3 Game Technology Providers

Our platform integrates games from third-party providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. When you access a game from one of these providers, limited technical data (such as your session token and game history relevant to that session) may be passed to the provider's servers for the purpose of delivering the game. These providers are contractually bound to handle such data in accordance with applicable data protection standards.

6.4 Regulatory and Law Enforcement Authorities

tk75 may be required by law to disclose your personal data to competent regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction. Such disclosures will be made only to the extent strictly required by law and, where legally permissible, we will notify you of the disclosure request.

6.5 Professional Advisors

We may share personal data with our legal counsel, auditors, and other professional advisors where necessary for the purposes of obtaining professional advice, conducting audits, or managing legal proceedings. All such advisors are bound by confidentiality obligations.

7 Cookies & Tracking Technologies

tk75 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your authenticated session, analyse Platform usage, and support fraud prevention. The types of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies: These cookies remember your preferences (e.g., language settings, preferred game categories, display options) and allow us to provide a more personalised experience on your return visits to tk75.
• Analytical cookies: We use analytical cookies to collect aggregate, anonymised data about how players use the Platform. This data helps us identify usability issues, measure the performance of new features, and prioritise improvements. No individually identifiable data is shared with analytics providers.
• Security cookies: These cookies support our fraud detection systems by assigning a unique device fingerprint to your browser session. They help us identify and block suspicious login attempts, credential stuffing attacks, and multi-accounting behaviour.

Most web browsers allow you to manage cookie preferences through the browser settings menu. You may block or delete cookies at any time; however, doing so may affect the functionality of certain Platform features, including your ability to maintain an authenticated session.

8 Data Retention

tk75 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, as required for AML compliance and audit purposes.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the applicable regulatory reporting obligation, whichever is later.
• Customer support communications: Retained for 2 years from the date of the most recent interaction in a given case, or longer where communications are relevant to ongoing dispute proceedings.
• Technical and usage data: Retained in identifiable form for a maximum of 13 months, after which data is aggregated and anonymised for statistical reporting purposes only.
• Marketing consent records: Retained for the duration of your active consent plus 2 years following withdrawal, to demonstrate compliance with consent obligations.

Where personal data is no longer required, tk75 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

9 Data Security

tk75 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following controls:

• Encryption in transit: All data transmitted between your device and the tk75 Platform is encrypted using industry-standard TLS 1.2 or higher protocols. Our platform is accessible exclusively over HTTPS.
• Encryption at rest: Personal data stored in our databases is encrypted using AES-256 encryption, ensuring that even in the unlikely event of unauthorised database access, the data remains unreadable.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff access is governed by role-based access controls, multi-factor authentication requirements, and comprehensive audit logging.
• Penetration testing: Our Platform and underlying infrastructure undergo regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses.
• Incident response: tk75 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay in accordance with our legal obligations.

10 International Data Transfers

As an internationally operating platform serving players in Bangladesh and other jurisdictions, tk75 may transfer your personal data to servers, processors, and service providers located outside Bangladesh. Such transfers may occur when we engage third-party game providers, KYC verification services, or payment processors whose infrastructure is hosted in other countries.

Where personal data is transferred internationally, tk75 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements incorporating standard data protection clauses, and assessments of the data protection regimes of recipient jurisdictions.

By using the tk75 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh where such transfers are necessary to provide the services described in our Terms & Conditions.

11 Your Data Protection Rights

Subject to applicable law, you hold the following rights with respect to your personal data held by tk75. To exercise any of these rights, please submit a written request to [email protected]. We will respond to all verified requests within 30 calendar days.

Please note that the exercise of certain rights may affect our ability to continue providing you with Platform services. For example, deletion of identity data required for KYC compliance may necessitate account closure.

12 Children and Minors

The tk75 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted to us by or on behalf of a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and you believe that your child or a minor in your care has registered an account or submitted personal data to tk75, please contact us immediately at [email protected] and we will investigate and take appropriate action without delay.

Our Platform incorporates age verification controls as part of the mandatory KYC process, and we employ additional monitoring measures to detect and prevent underage access. However, we also rely on parents and guardians to take reasonable steps to prevent minors from accessing gambling services online.

13 Third-Party Links

The tk75 Platform may, from time to time, contain references to or integrations with third-party services — such as game providers, payment gateways, or customer support tools — that operate under their own privacy policies. This Privacy Policy applies solely to data processed by tk75 and does not extend to any third-party platform or service accessed through or in connection with tk75.

tk75 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform, particularly the privacy policies of payment providers such as bKash, Nagad, and Rocket, which govern how those providers handle your financial data on their own systems.

14 Changes to This Privacy Policy

tk75 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this document and, where practicable, provide notice to registered players via their registered email address or through an in-platform notification.

We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes made to this Policy, you should discontinue use of the Platform and contact us to request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which tk75 handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email: [email protected]

Response time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

Language: All privacy correspondence is handled in English. Our support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays.