Privacy Policy — tk688

This Privacy Policy ("Policy") is published by tk688 ("the Platform", "we", "us", "our") and applies to all personal data collected from registered players, prospective players, and website visitors through the tk688 website located at https://tk688bd.bid and all associated services, features, mobile interfaces, and customer support channels.

The purpose of this Policy is to explain, in clear and accessible language consistent with the requirements of applicable data protection law, how tk688 handles personal information. This includes the categories of data we collect, the purposes for which that data is processed, the legal basis on which processing rests, the parties with whom data may be shared, and the rights you hold in relation to the data we hold about you.

By registering a tk688 account, by making a deposit, or by continuing to use the platform after the effective date stated at the top of this Policy, you acknowledge that you have read and understood the practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the tk688 platform and contact the support team to arrange account closure and data handling in accordance with your rights as described in Section 9.

This Policy is written in English. In the event of any discrepancy arising from translation into another language, the English text shall prevail in all circumstances.

tk688 collects personal data from you through several channels — directly when you provide it to us, automatically as you interact with the platform, and occasionally from third-party verification services. The table below summarises the principal categories of personal data we collect and the primary context in which each category is obtained.

You are under no statutory obligation to provide personal data to tk688; however, certain categories of data are essential for the operation of your account. Failure to provide identity data will prevent the completion of mandatory verification, which in turn will restrict your ability to make withdrawals. Failure to provide contact data will prevent account creation. Where data provision is optional, we will make this clear at the point of collection.

tk688 uses the personal data we collect for the following specific purposes. We do not use personal data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or establishing a separate lawful basis for doing so.

• Account creation and management — processing your registration, maintaining your account profile, authenticating your identity at login, and managing your account settings and preferences.
• Transaction processing — receiving and crediting deposits made via bKash, Nagad, Rocket, or Upay; processing withdrawal requests to your verified payment account; and maintaining an accurate record of your account balance and transaction history.
• Identity and age verification — verifying that you meet the minimum age requirement of 18 years and confirming the accuracy of the identity information provided during registration, including through the use of third-party KYC verification services where necessary.
• Customer support — responding to your queries, resolving disputes, investigating complaints, and communicating with you regarding your account status or any matter you raise with the support team.
• Fraud prevention and security — detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct that may affect the integrity of the platform or the safety of other players.
• Responsible gaming compliance — monitoring account activity to identify signs of problem gambling, applying player-requested restrictions such as deposit limits and self-exclusion, and fulfilling obligations under our Responsible Gaming policy.
• Platform improvement — analysing aggregated and anonymised usage data to understand how players interact with the platform, identify technical issues, test new features, and improve the overall quality of the tk688 experience.
• Marketing communications — where you have provided consent, sending you information about promotions, bonuses, new game launches, and seasonal offers relevant to your account. You may withdraw marketing consent at any time through your account notification settings or by contacting support.
• Legal and regulatory compliance — retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling obligations under applicable anti-money-laundering and know-your-customer regulations.

Every instance of personal data processing carried out by tk688 rests on one of the following recognised legal bases. Where more than one legal basis may apply to a specific processing activity, the primary basis is identified below.

• Performance of a contract — processing necessary to establish, maintain, and perform the contractual relationship between you and tk688 as set out in the Terms & Conditions. This includes account creation, transaction processing, and customer support.
• Legitimate interests — processing carried out for the legitimate interests of tk688 or of third parties, provided those interests are not overridden by your rights and interests. This includes fraud detection, security monitoring, and platform improvement through aggregated analytics.
• Legal obligation — processing necessary to comply with a legal obligation to which tk688 is subject, including identity verification requirements, record retention obligations, and responses to lawful authority requests.
• Consent — processing based on your freely given, specific, informed, and unambiguous consent. This applies principally to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tk688 does not sell, rent, or trade your personal data. We share personal data only in the specific circumstances described below and only to the extent necessary for the stated purpose.

• Payment processors — we share financial data with payment service providers including bKash, Nagad, Rocket, and Upay as necessary to process your deposit and withdrawal transactions. These providers process your data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification providers — we may share identity data with third-party KYC and age-verification services to confirm that you meet the eligibility requirements for a tk688 account. These providers are contractually bound to use your data solely for the verification purpose.
• Game software providers — game studios such as Pragmatic Play, PG Soft, JILI, Evolution Gaming, and Ezugi receive technical session data (such as a pseudonymous player token and bet amounts) necessary to deliver the game experience. These providers do not receive your name, address, or payment details.
• Technology and infrastructure partners — cloud hosting providers, content delivery networks, and cybersecurity service providers that support the operation of the tk688 platform may process personal data as part of their service delivery. All such providers operate under data processing agreements that restrict their use of your data to the purposes specified by tk688.
• Legal and regulatory authorities — we may disclose personal data to law enforcement agencies, regulators, or courts where we are legally required to do so, where we have a good-faith belief that disclosure is necessary to prevent or investigate fraud or a threat to the safety of any person, or where required to defend tk688's legal rights.
• Business transfers — in the event of a merger, acquisition, restructuring, or sale of all or part of the tk688 business, personal data held by the platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being imposed on the receiving party.

tk688 uses cookies and similar tracking technologies — including pixel tags and local storage — to enable essential platform functionality, improve your experience, and gather aggregated analytics about how the platform is used. The following categories of cookies are used on the tk688 platform:

• Strictly necessary cookies — these cookies are required for the platform to function and cannot be disabled. They include session authentication cookies, load-balancing tokens, and security cookies that protect against cross-site request forgery. No consent is required for these cookies because they are essential to deliver the service you have requested.
• Functional cookies — these cookies remember your preferences and settings such as your preferred game view, notification preferences, and session language. Disabling them may affect the comfort of your experience but will not prevent you from accessing the platform.
• Analytics cookies — these cookies collect anonymised or pseudonymised data about how visitors navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the platform and is not used to build a marketing profile of individual players.
• Marketing cookies — where you have consented, these cookies allow tk688 to deliver promotional content relevant to your interests based on your browsing history within the platform. You may withdraw this consent at any time through your account privacy settings.

tk688 does not use third-party advertising cookies or permit external advertising networks to deploy tracking cookies on the platform. All analytics data collected by tk688 remains within the platform's own data infrastructure and is not shared with advertising technology providers.

tk688 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal obligation to retain records for a defined minimum period. The following retention periods apply to the principal data categories held by tk688:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible for a specific data category, the data is placed under access restrictions that prevent it from being used for any operational purpose pending secure deletion.

You may request the early deletion of your personal data in accordance with your right to erasure as described in Section 9. Requests for erasure will be assessed against any overriding legal obligation to retain the data in question; where such an obligation applies, tk688 will explain the basis for retention to you in writing.

tk688 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are reviewed and updated on a regular basis to account for changes in the threat landscape and advances in security technology.

• Encryption in transit — all data transmitted between your device and the tk688 platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This protects your login credentials, payment information, and personal data from interception during transmission.
• Encryption at rest — sensitive data fields — including passwords (stored as salted hashes), payment account numbers, and identity document references — are encrypted in the database using strong symmetric encryption algorithms.
• Access controls — access to systems containing personal data is restricted to authorised tk688 personnel and service partners on a strict need-to-know basis. All access is logged, and privileged access is subject to multi-factor authentication.
• Intrusion detection — the tk688 platform is monitored continuously by automated intrusion detection systems that generate alerts for anomalous access patterns, brute-force login attempts, and other indicators of a potential security incident.
• Penetration testing — tk688 conducts periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response — in the event of a personal data breach that poses a risk to your rights and freedoms, tk688 will take immediate containment action, assess the scope and impact of the breach, and notify affected individuals and relevant authorities in accordance with applicable legal requirements.

As a data subject, you hold the following rights in relation to the personal data that tk688 holds about you. These rights are not absolute — some are subject to conditions or limitations under applicable law — but tk688 is committed to honouring them fully within those bounds. All rights requests are handled free of charge and within a reasonable timeframe not exceeding 30 days from receipt of the request.

To exercise any of the rights described above, please contact the tk688 support team via live chat or by emailing [email protected] (plain text — not a clickable link), providing sufficient information to identify your account and specifying the right you wish to exercise. We may need to verify your identity before processing the request.

The tk688 platform is strictly intended for adults aged 18 years and above. tk688 does not knowingly collect, store, or process personal data relating to individuals under the age of 18 in any capacity.

Age verification is conducted as part of the standard account registration and KYC process. Where tk688 discovers or has reasonable grounds to believe that a registered account belongs to a person under the age of 18, the account will be suspended immediately, all balances and pending withdrawals will be frozen pending investigation, and the matter will be referred for appropriate follow-up action in accordance with our safeguarding obligations.

tk688 primarily stores and processes personal data on infrastructure located within or serving the Bangladesh region. In the course of providing certain platform functions — including cloud infrastructure, game delivery, and cybersecurity services — personal data may be transferred to and processed in jurisdictions outside Bangladesh.

Where such international transfers occur, tk688 takes appropriate steps to ensure that your personal data continues to receive a level of protection consistent with the standards described in this Policy. These steps may include entering into data processing agreements incorporating contractual safeguards, or relying on the adequacy of data protection standards in the destination jurisdiction as assessed by applicable legal frameworks.

By using the tk688 platform, you acknowledge that your personal data may be transferred internationally in the manner described above for the purposes outlined in this Policy. If you have concerns about a specific international transfer, please contact the support team for further information.

tk688 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or internal data handling practices. When a material change is made to this Policy, the updated version will be published at https://tk688bd.bid/privacy-policy and the effective date at the top of the document will be revised accordingly.

Where a change is significant and affects the way in which we process your personal data in a manner that may materially impact your rights or expectations, tk688 will provide advance notice through one or more of the following channels: a prominent notice on the platform homepage, an in-platform notification upon your next login, or a direct communication to the email address registered on your account.

Your continued use of the tk688 platform following publication of a revised Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should discontinue use of the platform and contact the support team regarding account closure and the handling of any data we hold about you in accordance with Section 9 of this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which tk688 processes your personal data, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days.

If you are not satisfied with the manner in which tk688 has handled your privacy concern or rights request after engaging with the support team, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction. tk688 will cooperate fully with any regulatory enquiry or investigation relating to our data handling practices.