Privacy Policy

01 Information We Collect

tk1010 collects personal data in order to provide, operate, and continuously improve our online casino and sports betting services for players across Bangladesh. The categories of personal data we collect depend on how you interact with the tk1010 platform and are described in detail below.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (including district, division, and postal code), email address, and mobile number at the time of account creation.
• Identity verification documents: Copies or images of government-issued identification such as your National Identity Card (NID), passport, or driving licence, submitted during KYC verification.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction reference numbers submitted when making deposits or requesting withdrawals.
• Support communications: Messages, emails, and chat records exchanged with the tk1010 customer support team, including any documents or screenshots you attach.
• Responsible gaming declarations: Any self-exclusion requests, deposit limit settings, or cooling-off period applications you submit through your account settings or via support.

Information collected automatically:

• Device and browser data: IP address, browser type and version, operating system, device model, screen resolution, and language preferences.
• Usage data: Pages visited, features accessed, games played, bets placed, session duration, referring URL, and click-path data within the platform.
• Location data: Approximate geographic location derived from your IP address, used to ensure you are accessing the platform from a permitted region.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 4 of this Policy.

The following table summarises the primary categories of personal data collected and the legal basis for processing each category:

02 How We Use Your Data

tk1010 uses the personal data collected from registered players and platform visitors for the following purposes. We process data only where a lawful basis exists for doing so, and we do not use your data in ways that are incompatible with the purposes for which it was originally collected.

• Account creation and management: To register your account, verify your identity, manage your preferences, and provide access to all betting and gaming features available on the tk1010 platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banking institutions; to verify that payment methods belong to the registered account holder; and to maintain accurate transaction records.
• Regulatory and legal compliance: To fulfil Know Your Customer (KYC) obligations, conduct anti-money laundering (AML) checks, respond to lawful data requests from authorities, and retain records as required by applicable law.
• Fraud prevention and platform security: To detect and investigate suspicious account activity, prevent unauthorised access, identify duplicate accounts, and protect the integrity of the tk1010 platform and its player community.
• Customer support: To respond to your enquiries, resolve complaints, process responsible gaming requests, and maintain a record of communications for quality assurance purposes.
• Personalisation: To tailor the tk1010 experience to your preferences, including displaying relevant betting markets, game recommendations, and personalised promotional offers where you have given consent to receive them.
• Platform analytics and improvement: To analyse aggregated usage patterns, identify technical issues, measure feature performance, and inform decisions about new product development and user experience improvements.
• Marketing communications: Where you have provided consent, to send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, sporting events (including BPL, IPL, T20 World Cup matches), and seasonal promotions such as Eid and Pohela Boishakh offers. You may withdraw consent at any time.

tk1010 does not use automated decision-making or profiling processes that produce legal or similarly significant effects for individual players without human review. Responsible gaming monitoring tools may flag accounts for manual review, but any restriction on an account is carried out by a human team member following that review.

03 Data Sharing and Disclosure

tk1010 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil the specific purpose for which it is shared.

• Payment service providers: Personal and financial data is shared with payment processors including bKash, Nagad, Rocket, Upay, and partner banking institutions solely to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently responsible for the data they handle in connection with payment authentication.
• Identity verification partners: Where tk1010 uses a third-party KYC or identity verification service to validate documents submitted during account registration, your identity data is shared with that service provider under a data processing agreement that restricts its use to verification purposes only.
• Game and software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive limited technical data (such as a pseudonymised player session ID) to enable fair play, RNG certification audits, and game-level dispute resolution. These providers do not receive your full identity or payment data.
• Analytics and technology providers: tk1010 uses third-party analytics tools to collect and process aggregated, anonymised usage data. These providers receive technical and usage data only, not personally identifiable information.
• Legal and regulatory authorities: tk1010 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity.
• Business transfers: In the event that tk1010 is involved in a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply following it.

04 Cookies and Tracking Technologies

tk1010 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) on its platform to support essential functionality, improve security, analyse usage, and — where you have consented — deliver a personalised experience. A cookie is a small text file placed on your device by your web browser when you visit a website. It allows the website to recognise your device on subsequent visits.

tk1010 uses the following categories of cookies:

You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling functional or analytics cookies may affect certain features of the tk1010 platform. Instructions for managing cookies in popular browsers are available through the browser's own Help documentation. Disabling strictly necessary cookies will prevent you from logging in or using the platform.

05 Data Retention

tk1010 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. We apply the following general retention periods:

• Active account data: Retained for the duration of your account's existence on the tk1010 platform, plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC and identity documents: Copies of identity documents submitted for verification are retained for five years following account closure, or longer if required by a specific legal obligation or ongoing investigation.
• Customer support records: Communications with the tk1010 support team are retained for three years from the date of the most recent communication in a given case, to support quality assurance and dispute resolution.
• Marketing consent records: Records of your marketing consent status and preference history are retained for the duration of your account and for two years following account closure.
• Analytics and technical logs: Aggregated and anonymised analytics data may be retained indefinitely. Raw technical logs containing IP addresses and session identifiers are deleted or anonymised within 12 months of collection.

When personal data is no longer required and no legal obligation mandates its retention, tk1010 will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data — which can no longer be linked to an identifiable individual — may be retained and used for research and analytics purposes without time limit.

06 Data Security Measures

tk1010 implements a multi-layered approach to data security to protect your personal information from unauthorised access, accidental loss, alteration, or disclosure. Our security measures are reviewed and updated on a regular basis in line with industry best practice.

• Encryption in transit: All data transmitted between your device and the tk1010 platform is encrypted using TLS (Transport Layer Security) with a minimum 256-bit key length. Our SSL certificate is current, valid, and maintained continuously.
• Encryption at rest: Sensitive personal data stored on tk1010 servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. tk1010 employees and contractors are granted the minimum level of data access required to perform their specific role. All internal access is logged and subject to audit.
• Password security: Account passwords are stored as salted cryptographic hashes and are never stored or transmitted in plaintext. tk1010 strongly recommends that players use a unique, complex password and enable two-step verification (2SV) on their account.
• Fraud and anomaly detection: tk1010 operates automated systems that monitor account activity for indicators of unauthorised access, suspicious betting patterns, and potential payment fraud. Flagged activity is reviewed by our security team.
• Vendor security standards: Third-party service providers who process data on behalf of tk1010 are contractually required to maintain security standards at least equivalent to our own, and are subject to periodic security assessments.

07 Your Privacy Rights

As a registered player on the tk1010 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond in writing within 10 business days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data that tk1010 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most basic account details directly through your account settings page.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing and no overriding legitimate interest applies. Note that certain data must be retained for legal compliance reasons and cannot be erased on request.
• Right to restrict processing: You have the right to request that tk1010 temporarily suspends the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual obligation, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though tk1010 may demonstrate compelling grounds that override your objection in certain cases.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

tk1010 will not charge a fee for handling most privacy rights requests. However, if a request is manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on it, with written explanation.

08 Third-Party Links and Services

The tk1010 platform may, from time to time, reference or integrate with third-party services — such as game studios, payment gateways, and analytics tools — whose own privacy policies govern the personal data they handle in connection with those services. This Privacy Policy applies only to data processed directly by tk1010 and does not extend to third-party services or their data practices.

tk1010 is not responsible for the privacy practices, content, or data handling of any third-party service, even where that service is integrated into or accessible through the tk1010 platform. Players are encouraged to review the privacy policies of any third-party service they interact with, including payment providers such as bKash, Nagad, and Rocket, whose own privacy notices govern the data you share with those providers directly.

Game studios whose titles are hosted on the tk1010 casino platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — operate under their own data processing agreements with tk1010. The game content rendered in your browser may involve data exchange with those studios' servers for the purpose of game delivery and fairness certification. This data exchange is covered by our vendor agreements and does not involve the sharing of your full identity or payment data.

09 Children's Privacy

The tk1010 platform is strictly intended for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18. Registration on the platform requires users to confirm their date of birth, and all accounts are subject to age verification as part of the KYC process.

If tk1010 becomes aware that personal data has been collected from a person under the age of 18, that account will be suspended immediately, all associated data will be securely deleted without delay (subject to any mandatory retention obligations under anti-money laundering law), and the matter may be referred to relevant authorities where appropriate.

10 Updates to This Policy

tk1010 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent revision is always displayed at the top of this page.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — tk1010 will provide advance notice via email to your registered address or via an in-platform notification prior to the changes taking effect. For minor or clarifying changes, updating the effective date on this page constitutes sufficient notice.

Your continued use of the tk1010 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated version. If you do not agree to the revised Policy, you should cease using the platform and contact our support team to arrange account closure.

We recommend that all registered players review this Privacy Policy periodically — particularly before making any significant changes to their account settings or payment methods — to stay informed about how their data is being used.

11 Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a potential data protection concern, please contact the tk1010 privacy team using the details below. All enquiries are treated confidentially and will receive a written response within 10 business days.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" as appropriate.
• Platform: You can also submit privacy-related requests through the secure message function in your registered tk1010 account.
• Response time: Standard requests are handled within 10 business days. Complex requests (such as Subject Access Requests involving large volumes of data) may take up to 30 calendar days, in which case we will inform you of the extended timeline within the initial 10-day window.