Your Privacy Matters to tkok — Our Commitment to Data Protection

1 Introduction & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by tkok in connection with the operation of the tkok platform available at tkok.lat. It covers the online casino, sports betting services including cricket betting markets, live dealer tables, slot games, payment processing facilities, customer support services, and any promotional or marketing activities conducted by tkok.

By registering a tkok account, using any part of the platform, or communicating with tkok's support team, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must cease using the tkok platform.

tkok is committed to handling your personal data with integrity, transparency, and in accordance with applicable data protection principles. This policy is reviewed and updated periodically to reflect changes in our data practices or applicable legal requirements. The current version supersedes all prior versions.

2 Data We Collect

tkok collects the following categories of personal data in the course of operating its platform and delivering services to members:

tkok does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond what is strictly required for identity verification purposes.

3 How We Collect Your Data

tkok collects personal data through the following channels:

• Direct submission: Data you actively provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account settings.
• Automated collection: Technical and usage data collected automatically when you access and interact with the tkok platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-party providers: Identity verification data returned by our KYC partners when processing your submitted documents. Payment confirmation data returned by payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard gateway providers) when processing transactions. Fraud prevention signals from third-party fraud detection services.
• Publicly available sources: In certain circumstances — for example, where tkok is required to conduct enhanced due diligence — we may supplement data we hold with information from publicly available sources such as government databases or sanctions lists.

4 Legal Basis for Processing

tkok processes your personal data on one or more of the following legal bases depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account creation, payment processing, game provision, and withdrawal handling. Without this processing, tkok cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) checks, KYC identity verification, age verification, responsible gaming obligations, and fraud prevention.
• Legitimate interests: Processing that tkok carries out for its own legitimate business purposes where those interests are not overridden by your privacy rights. This includes platform security monitoring, fraud detection, service improvement, and anonymised analytics.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications. You may withdraw consent for marketing at any time by contacting [email protected] or updating your account preferences.

Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

5 How We Use Your Data

tkok uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your tkok member account, including login authentication and account recovery.
• Service delivery: Providing access to casino games, sports betting markets, live dealer tables, slot games, and all other features available on the tkok platform.
• Payment processing: Processing deposits and withdrawal requests through your chosen payment method, verifying payment ownership, and maintaining accurate transaction records.
• Identity and age verification: Conducting KYC checks to confirm your identity, verify that you meet the minimum age requirement of 21 years, and comply with applicable AML obligations.
• Responsible gaming: Monitoring your gaming behaviour to identify patterns that may indicate problem gambling, administering deposit limits, loss limits, cooling-off periods, and self-exclusion requests you have activated.
• Customer support: Responding to your queries, resolving account disputes, processing complaints, and communicating important account-related information.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other unlawful conduct on the platform.
• Marketing and promotions: Sending you information about tkok bonuses, promotions, and seasonal offers (such as BPL, Eid, and T20 World Cup promotions) where you have consented to receive such communications.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how members use the platform, identify areas for improvement, and develop new features and services.
• Legal compliance: Fulfilling tkok's obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by applicable regulations.

6 Data Sharing & Third Parties

tkok does not sell your personal data. We share data only with trusted third-party service providers where necessary to operate the platform and deliver services to you. All third-party recipients of tkok member data are contractually required to handle that data securely and in accordance with applicable data protection standards.

The categories of third parties with whom tkok may share your data are as follows:

• KYC and identity verification providers: Third-party services that verify the identity documents and personal details you submit during the account verification process.
• Payment processors: Financial service providers including bKash, Nagad, Rocket, Upay, SureCash, and card payment gateway providers that process your deposit and withdrawal transactions. These providers receive only the data necessary to complete each transaction.
• Game providers: Software studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming whose games are hosted on the tkok platform. Game providers may receive a session token and anonymised user identifier to facilitate game sessions; they do not receive your full personal profile.
• Fraud prevention and security services: Third-party tools that help tkok identify suspicious activity, verify device integrity, and protect the platform from abuse.
• Customer support platforms: Software used to manage support tickets, live chat sessions, and email correspondence with tkok members.
• Regulatory and law enforcement authorities: tkok will disclose personal data to government bodies, regulators, or law enforcement agencies where required by applicable law or a lawful court order. tkok will not volunteer data beyond what is legally required.

7 Cookies & Tracking Technologies

tkok uses cookies and similar tracking technologies to operate the platform, remember your session, and improve your experience. A cookie is a small text file stored on your device by your browser when you visit the tkok website. Cookies do not contain executable code and cannot access other data on your device.

tkok uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that maintain your login state, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without preventing the platform from operating correctly.
• Functional cookies: Remember your preferences such as language settings, display preferences, and last-visited game category to provide a more personalised experience. These are not essential but enhance usability.
• Analytics cookies: Collect anonymised data about how visitors use the tkok platform, including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps tkok improve the platform. Analytics data is aggregated and not linked to individual member profiles.
• Marketing cookies: Used to track the effectiveness of tkok's promotional campaigns and to deliver relevant promotional content to members who have opted in to marketing communications. These cookies are only set with your consent.

8 Data Retention

tkok retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes and enforce agreements. The following retention periods apply to the principal categories of data tkok holds:

When personal data reaches the end of its retention period, tkok will securely delete or anonymise it. Anonymised data — which can no longer be linked to any individual — may be retained indefinitely for statistical and analytical purposes.

9 Your Data Rights

As a tkok member, you have the following rights in relation to your personal data. To exercise any of these rights, contact tkok at [email protected] with the subject line "Data Rights Request" and your registered username. tkok will respond within 30 days of receiving a valid request.

10 Children's Privacy

The tkok platform is strictly intended for adults aged 21 years and above. tkok does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the tkok account registration process, and accounts where age eligibility cannot be confirmed are suspended pending verification.

If tkok becomes aware that it has inadvertently collected personal data from an individual under the age of 21, the relevant account will be closed immediately, all associated data will be deleted as soon as legally permissible, and any deposited funds will be returned to the originating payment method following appropriate verification.

11 Data Security

tkok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and tkok's servers.
• Encryption at rest for sensitive data categories including identity documents, financial data, and verification records stored on tkok's infrastructure.
• Access controls: Personal data is accessible only to tkok personnel and authorised third-party processors who have a legitimate operational need. Access is governed by role-based permission systems and is subject to regular review.
• Multi-factor authentication required for all tkok staff accounts with access to member data.
• Regular security assessments: tkok conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and address potential weaknesses.
• Incident response: tkok maintains a data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected members without undue delay and take immediate steps to contain and remediate the incident.

While tkok takes all reasonable measures to protect your data, no system is entirely immune to security risks. You are responsible for maintaining the security of your own tkok account credentials, including your password and any one-time passcodes sent to your registered mobile number. If you suspect that your account has been compromised, contact tkok support immediately at [email protected].

12 International Transfers

tkok's primary operations and data infrastructure are oriented toward serving the Bangladesh market. In the course of delivering its services, certain personal data may be transferred to and processed by third-party service providers whose servers or operational centres are located outside Bangladesh — for example, international game providers, KYC verification platforms, or cloud infrastructure services.

Where such transfers occur, tkok ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy. Safeguards may include contractual clauses with data recipients requiring equivalent data protection standards, or reliance on recognised international data transfer frameworks where applicable.

13 Changes to This Policy

tkok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we provide. When material changes are made, tkok will notify registered members via on-platform notification or email to the address registered on the account, prior to the changes taking effect.

The "Last Updated" date at the top of this policy indicates when the current version came into effect. Continued use of the tkok platform following notification of a policy update constitutes acceptance of the revised terms. If you do not agree with the revised policy, you must stop using the platform and request account closure by contacting [email protected].

We encourage you to review this page periodically so that you remain informed about how tkok protects your personal information. All historical versions of this policy are available on request.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tkok handles your personal data — including data rights requests, consent withdrawals, or data breach notifications — please contact tkok using the details below:

tkok takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days and aim to provide a full response within 30 days. Where a complaint is complex or requires further investigation, we will keep you informed of progress and provide an estimated resolution timeline.

If you are not satisfied with tkok's response to your complaint, or if you believe tkok is not handling your personal data in accordance with applicable data protection principles, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice.