tk988 Privacy Policy
At tk988, protecting the personal data of every player in Bangladesh is a core commitment — not an afterthought. This Privacy Policy explains in plain English exactly what data we collect, why we collect it, how we use it, who we may share it with, and what rights you hold over your own information.
Scope of This Policy: This Privacy Policy applies to all personal data collected by tk988 through the website https://tk988.club, any associated mobile-optimised interface, customer support channels, and payment processing interactions. By registering an account or continuing to use the tk988 platform, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please discontinue use of the Platform and contact support to close your account.
Our Privacy Commitments
Before reading the detailed policy sections, here is a plain summary of the six privacy principles that guide how tk988 handles your personal data.
Minimal Data Collection
tk988 collects only the personal data that is strictly necessary to provide, secure, and improve the platform. We do not harvest data for sale to advertising networks or unrelated third parties. Every data point collected has a defined purpose.
Bank-Grade Encryption
All data transmitted between your device and tk988 servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Bangladeshi commercial banks. Sensitive KYC documents are stored in encrypted form with access limited to authorised verification personnel only.
You Control Your Data
Registered tk988 players hold genuine rights over their personal data: access, correction, deletion, and portability. You can review your stored data at any time by contacting our support team, and request corrections or deletion subject to our legal retention obligations.
No Selling of Personal Data
tk988 does not sell, rent, or trade your personal data to advertisers, data brokers, or any unrelated commercial third party. Data shared with third parties is limited strictly to service providers who help us operate the platform — and only under binding confidentiality agreements.
Defined Retention Periods
Personal data is not held indefinitely. tk988 applies structured retention schedules: account data is held for the duration of the account plus a post-closure period required for legal and anti-fraud purposes. KYC documents are retained for a minimum of five years to meet AML compliance obligations.
Dedicated Privacy Support
Privacy-related queries and data subject requests are handled by our dedicated support team. All requests submitted to [email protected] are acknowledged within 24 hours and resolved within 30 days in line with standard data protection practice.
1. Data We Collect
tk988 collects personal data through several channels: account registration, KYC verification, payment processing, customer support interactions, and automatic technical collection via the Platform itself. The table below summarises the categories of data collected, the specific data points within each category, and the primary reason for collection.
tk988 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what appears on a standard government ID), or health data — except where a player voluntarily discloses a gambling-related health concern in a responsible gaming self-exclusion request, in which case that disclosure is used solely to action the exclusion.
2. How We Use Your Data
tk988 processes your personal data only for lawful, specified, and explicit purposes. The legal bases on which we rely are: (a) contractual necessity — processing required to fulfil the Player Account agreement; (b) legal obligation — processing required to comply with applicable anti-money-laundering, age-verification, and financial-crime-prevention laws; (c) legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights; and (d) consent — where we send you optional marketing communications, based on your explicit opt-in preference.
The specific purposes for which tk988 uses your data are as follows:
- Account Creation and Management: To register your Player Account, authenticate your identity on login, maintain your account settings, and communicate essential account notices (e.g., password resets, withdrawal confirmations, security alerts).
- Age and Identity Verification: To confirm that you are at least 18 years of age before permitting real-money betting activity, and to verify your identity as required for withdrawal processing and KYC compliance.
- Payment Processing: To process deposits into and withdrawals from your Player Account via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card). Financial data is shared with payment processors solely for transaction execution.
- Anti-Money-Laundering (AML) Compliance: To monitor transaction patterns and flag or investigate activity that may indicate money laundering, structuring, or other financial crime. tk988 is obligated under applicable law to conduct this monitoring and to report suspicious activity where required.
- Fraud Prevention and Platform Security: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, automated bot activity, and other fraudulent behaviour. Technical data (IP address, device fingerprint, session logs) is used for this purpose.
- Responsible Gaming Monitoring: To identify behavioural patterns associated with problem gambling (e.g., rapidly increasing bet sizes, extended uninterrupted sessions, loss-chasing behaviour) and to proactively offer responsible gaming tools or intervention where appropriate.
- Customer Support: To respond to your queries, investigate complaints, resolve disputes, and maintain a record of interactions for service quality and training purposes.
- Promotional Communications: If you have opted in to marketing communications, tk988 may use your email address and mobile number to send information about promotions, seasonal offers (Eid bonuses, BPL season specials, Pohela Boishakh offers), and relevant platform updates. You may withdraw this consent at any time by updating your communication preferences in account settings or by contacting support.
- Platform Improvement: Anonymised and aggregated behavioural data is used to analyse usage patterns, identify popular features, improve game loading performance, and optimise the user experience for players across Dhaka, Chittagong, Sylhet, Khulna, and all regions of Bangladesh.
- Legal Compliance and Dispute Resolution: To maintain records required for the fulfilment of legal obligations, respond to regulatory or law-enforcement inquiries, and support the resolution of formal disputes or arbitration proceedings.
3. Data Sharing & Disclosure
tk988 does not sell personal data to any third party. Personal data is shared only in the limited circumstances described below, and always subject to strict contractual confidentiality obligations or legal compulsion.
Payment Service Providers: Your financial data (wallet number, transaction reference) is shared with payment processors — including bKash, Nagad, Rocket, Upay, Visa/Mastercard network processors, and Bangladeshi commercial bank partners — solely to execute the deposit or withdrawal transaction you have requested. These providers are bound by their own data protection policies and relevant financial regulations.
Identity Verification Partners: KYC documents and identity data may be shared with third-party identity verification service providers engaged by tk988 to conduct automated or manual document checks. These providers process data solely on tk988's instructions and do not retain it beyond the verification process.
Game Content Providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a pseudonymous player session token is shared with the provider to facilitate the game session. Your full personal identity is not disclosed to game providers.
Technology and Infrastructure Partners: tk988 uses trusted cloud infrastructure, analytics, and security service providers to operate the Platform. These partners may process technical and behavioural data on our behalf under binding data processing agreements.
Legal and Regulatory Disclosure: tk988 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, a valid court order, or where disclosure is necessary to prevent, detect, or investigate financial crime or fraud. In such cases, tk988 will disclose only the minimum data required and, where legally permitted, will notify the affected Player.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of tk988's business, personal data held by tk988 may be transferred to the acquiring entity. Affected Players will be notified via the registered email address prior to any such transfer, and the receiving entity will be required to honour this Privacy Policy.
Third Parties We Work With
International Transfers: Some of tk988's technology and game-provider partners may be located outside Bangladesh. Where personal data is transferred internationally, tk988 ensures appropriate contractual safeguards are in place to protect your data to a standard consistent with this Privacy Policy.
5. Data Retention
tk988 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
- Active Account Data (identity, contact, financial, behavioural): Retained for the full duration of the Player Account, plus a post-closure period of five (5) years to fulfil anti-money-laundering record-keeping requirements and to support any disputes, chargebacks, or legal proceedings that may arise after account closure.
- KYC Documents (NID scans, passport images, proof of address): Retained for a minimum of five (5) years from the date of verification, in accordance with AML compliance obligations. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
- Transaction Records (deposit and withdrawal history, payment method details): Retained for a minimum of five (5) years from the date of each transaction for AML audit and tax-record purposes.
- Customer Support Records (chat logs, email threads, complaint files): Retained for two (2) years from the date of the last interaction, to support service improvement and dispute resolution.
- Technical and Log Data (IP logs, session timestamps, security event logs): Retained for twelve (12) months for security monitoring and fraud-investigation purposes, then deleted or anonymised.
- Marketing Preferences and Opt-In Records: Retained for the duration of the account plus one (1) year post-closure to demonstrate consent compliance.
- Anonymised Analytics Data: Retained indefinitely, as anonymised data contains no personally identifiable information and is used solely for aggregate platform analysis.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically complex due to backup systems, data is isolated from active processing and queued for deletion at the next scheduled backup purge cycle, which occurs no less than quarterly.
6. Data Security
tk988 implements a multi-layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The key security measures in place include:
- 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and tk988's servers is encrypted using industry-standard TLS 1.2 or higher. The tk988 website operates exclusively over HTTPS.
- Data Encryption at Rest: Sensitive personal data — including KYC documents, payment method details, and account credentials — is stored using AES-256 encryption at rest on secured cloud infrastructure.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is controlled through role-based access management, and all data access events are logged and audited.
- Two-Factor Authentication (2FA): tk988 strongly recommends all Players enable 2FA on their accounts. 2FA is mandatory for all internal staff accounts with access to player data systems.
- Intrusion Detection and Monitoring: tk988's infrastructure is monitored 24/7 by automated intrusion-detection systems. Anomalous access patterns trigger alerts and are investigated by our security team.
- Penetration Testing: tk988 conducts regular independent security assessments and penetration tests of its platform to identify and remediate vulnerabilities before they can be exploited.
- Staff Training: All tk988 personnel with access to personal data undergo regular data-protection and security awareness training.
Data Breach Response: In the event of a personal data breach that poses a risk to Players' rights, tk988 will notify affected Players via their registered email address as promptly as circumstances allow, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps taken to mitigate its impact.
All data in transit is encrypted to bank-grade standards.
KYC documents and payment data are encrypted in storage.
Automated intrusion detection runs around the clock on all servers.
7. Your Privacy Rights
As a tk988 player, you hold the following rights over your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". All requests are acknowledged within 24 hours and actioned within 30 days.
-
Right of Access You have the right to request a copy of all personal data tk988 holds about you. We will provide a structured summary of your data — including identity, contact, financial, and behavioural data — in a readable format, free of charge, within 30 days of your verified request.
-
Right to Rectification If any personal data tk988 holds about you is inaccurate or incomplete, you have the right to request correction. For identity data changes (e.g., name or date of birth corrections), additional verification documentation may be required to protect account security.
-
Right to Erasure ("Right to Be Forgotten") You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). This right is subject to our legal retention obligations — for example, AML regulations require us to retain KYC and transaction records for five years, and we cannot delete these records before the mandatory retention period expires.
-
Right to Restrict Processing You may request that tk988 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests and the objection is being assessed.
-
Right to Data Portability Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to request that it be transmitted to another service provider where technically feasible.
-
Right to Object You have the right to object to processing of your personal data carried out on the basis of tk988's legitimate interests. You also have the absolute right to object to processing of your data for direct marketing purposes at any time — upon which tk988 will immediately cease all marketing communications to you.
-
Right to Withdraw Consent Where tk988 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time by updating your preferences in account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Identity Verification for Rights Requests: To protect your account security, tk988 may ask you to verify your identity before actioning a data rights request. This typically involves confirming your registered email address, mobile number, and one piece of account information. This verification step prevents unauthorised data access requests made by third parties.
8. Policy Updates & Contact
Policy Updates
tk988 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. All changes will be published on this page with an updated effective date displayed at the top of the policy.
Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — tk988 will notify registered Players via their registered email address at least 14 days before the changes take effect. For non-material changes (e.g., clarifications, formatting updates, minor corrections), the updated policy will be published without individual notification.
Your continued use of the tk988 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the revised policy, you should discontinue use of the Platform and contact support to arrange account closure.
Contact Our Privacy Team
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the tk988 privacy support team using the details below. All privacy-related enquiries are handled confidentially and with priority.
Email: [email protected]
Subject Line: Privacy Rights Request / Privacy Enquiry
Response Time: Within 24 hours acknowledgement; resolved within 30 days
Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Postal Contact: For formal written data subject requests, please email first to obtain the current mailing address for your region. tk988 recommends email as the fastest and most secure channel for privacy correspondence.
Ready to Play at tk988?
Your data is protected, your privacy is respected, and your gaming experience is safe. Join thousands of players across Dhaka, Chittagong, Sylhet, and Khulna who trust tk988 for cricket betting, live casino, and slots — all secured with SSL encryption.
18+ Only • Play Responsibly • SSL Secured • Fair Play Certified