Privacy Policy — tk688

1.1 This Privacy Policy ("Policy") describes how tk688 ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your") who visit, register on, or otherwise interact with the tk688 platform, available at https://tk688bd.vip and all associated pages and services (collectively, the "Platform").

1.2 tk688 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. We believe in full transparency: we only collect data that is necessary for the legitimate operation of the Platform and we never use your information in ways that have not been disclosed to you in this Policy.

1.3 By accessing or using the tk688 Platform — including registering an account, making a deposit, placing a bet, or contacting support — you acknowledge that you have read, understood, and accepted the data practices described in this Policy. If you do not agree with any part of this Policy, you should cease using the Platform immediately.

1.4 This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

2.1 tk688 collects two broad categories of personal data: information you provide directly to us, and information generated automatically when you use the Platform.

2.2 Information you provide directly:

• Registration data: Full legal name, date of birth, gender, residential address (including district — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), email address, and mobile phone number.
• Identity verification (KYC) documents: Government-issued photo ID (National ID card, passport, or driving licence), proof of address (utility bill, bank statement dated within 90 days), and proof of payment method ownership where required.
• Financial data: Payment method details (bKash account number, Nagad account number, Rocket number, Upay number, bank account details, Visa/Mastercard card details). Full card numbers are processed exclusively by PCI DSS-compliant third-party payment processors and are never stored on tk688 servers.
• Account preferences: Language preferences, responsible gaming limit settings, notification preferences, and bonus opt-in selections.
• Communications data: Content of any messages you send to our support team via live chat, email, or WhatsApp, including records of complaints or disputes.
• Promotional data: Survey responses, competition entries, and feedback submitted via on-Platform forms.

2.3 Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, device identifiers, and screen resolution.
• Usage data: Pages visited, game sessions played, bets placed, time spent on Platform, clickstream data, and session duration.
• Geolocation data: Approximate location derived from IP address, used to apply jurisdictional access controls and detect suspicious login activity.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 7 of this Policy.
• Transaction logs: Detailed records of all deposits, withdrawals, bets placed, game rounds played, and bonus transactions associated with your account.

3.1 tk688 collects your personal data through the following channels:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or submit any form on the Platform.
• Automated technologies: As you navigate and interact with the Platform, our servers automatically log technical and usage data. Cookies and similar tracking technologies are used to recognise your device and maintain your session state.
• Third-party payment processors: When you initiate a payment transaction, our payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard) may return transaction confirmation data to tk688 for reconciliation and fraud prevention purposes.
• Identity verification providers: Where we use third-party KYC or age-verification services to verify the documents you submit, those providers may return a verification result and associated data to tk688.
• Publicly available sources: In limited circumstances related to fraud prevention and AML compliance, we may consult publicly available information (such as sanctions lists) to verify the information you have provided.

4.1 tk688 uses the personal data it collects for the following purposes:

4.2 tk688 will not use your personal data for any purpose not listed above without first obtaining your explicit consent, unless required to do so by law.

5.1 tk688 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract between you and tk688 — specifically to operate your account, process transactions, and deliver the services you have requested. Without this processing, tk688 cannot provide you with the Platform.
• Legal obligation: tk688 is required to collect and retain certain data (including identity verification documents and transaction records) to comply with applicable anti-money laundering, counter-terrorism financing, and responsible gaming obligations.
• Legitimate interests: tk688 processes certain data — including technical logs, fraud detection signals, and usage analytics — on the basis of its legitimate interest in operating a secure, fair, and commercially viable platform, provided that this interest is not overridden by your privacy rights.
• Consent: Where tk688 sends you direct marketing communications or deploys non-essential cookies, we do so on the basis of your explicit prior consent. You may withdraw this consent at any time by contacting support@tk688bd.vip.

6.1 tk688 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your data with the following categories of recipients only where necessary and only for the purposes stated in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals. These providers are contractually bound to process your data only for payment purposes and in accordance with their own regulatory obligations.
• Identity verification providers: Third-party KYC and age-verification services engaged by tk688 to verify documents submitted by players during the verification process.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Play'n GO may receive anonymised session tokens or game-round identifiers necessary to deliver their games through the Platform. These providers do not receive your name, payment details, or contact information.
• IT infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on tk688's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where tk688 is required to disclose personal data by law, court order, or lawful authority request (including in relation to AML or fraud investigations), we will comply with such requests. Where permissible, we will notify you of any such disclosure.
• Professional advisers: Legal counsel, auditors, and accountants, where necessary and subject to confidentiality obligations.

6.2 In the event of a merger, acquisition, or sale of all or substantially all of tk688's assets, your personal data may be transferred to the acquiring entity. In such circumstances, you will be notified in advance and given the opportunity to request deletion of your data prior to the transfer.

7.1 tk688 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) on the Platform. This section explains what these technologies are and how we use them.

7.2 What are cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time, so you do not have to re-enter information every time you return.

7.3 tk688 uses the following categories of cookies:

7.4 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more detail on the specific cookies used, please contact support@tk688bd.vip.

8.1 tk688 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account data (registration information, KYC documents): Retained for the duration of your active account relationship with tk688, plus a minimum of 5 years following account closure, to meet AML and financial record-keeping obligations.
• Transaction records (deposits, withdrawals, bets, game rounds): Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the last interaction, for quality assurance, dispute resolution, and legal purposes.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, as evidence of the consent previously given.
• Technical logs (IP addresses, session logs): Retained for 12 months from the date of generation, unless extended retention is required for an active investigation.
• Self-exclusion records: Retained indefinitely to prevent the re-registration of excluded individuals, even following account closure.

8.2 Following expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9.1 tk688 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and tk688 servers is encrypted using industry-standard SSL/TLS protocols. Connections to the Platform are enforced over HTTPS.
• At-rest encryption: Sensitive data stored on tk688 servers — including KYC documents and financial records — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data is restricted to authorised tk688 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• PCI DSS compliance: Payment card data is processed exclusively through PCI DSS-compliant payment processors. tk688 does not store full card numbers, CVV codes, or PINs on its own servers.
• Penetration testing and security audits: The tk688 Platform undergoes regular security assessments and vulnerability testing to identify and remediate security risks.
• Incident response: tk688 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law, within a reasonable timeframe.

9.2 While tk688 takes every reasonable precaution to safeguard your data, no system connected to the internet can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at support@tk688bd.vip if you suspect any unauthorised access to your account.

10.1 Subject to applicable law and certain limitations, you have the following rights in relation to the personal data tk688 holds about you:

• Right of access: You may request a copy of the personal data we hold about you. We will respond to verified access requests within a reasonable timeframe, and in any event within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to our legal obligation to retain certain data for AML, fraud prevention, and financial record-keeping purposes as described in Section 8.
• Right to restrict processing: In certain circumstances, you may request that we limit the ways in which we use your personal data, for example while you dispute the accuracy of the data we hold.
• Right to data portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format, where processing is based on your consent or contractual necessity.
• Right to object: You may object to processing of your personal data where that processing is based on tk688's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the rights listed above, please contact our support team at support@tk688bd.vip with the subject line "Data Rights Request". We may require you to verify your identity before processing your request.

11.1 The tk688 Platform is strictly intended for individuals aged 18 years and above. 18+ tk688 does not knowingly collect personal data from individuals under the age of 18.

11.2 During account registration, all users are required to confirm that they are aged 18 or over. Where tk688 has reasonable grounds to believe that a registered user is under 18, the account will be suspended immediately and any funds held in the account will be returned. We reserve the right to request proof of age at any stage of the account lifecycle.

11.3 If you are a parent or guardian and you believe that your child has registered an account on tk688 or provided us with personal data without your knowledge or consent, please contact us immediately at support@tk688bd.vip. We will investigate and, where confirmed, delete all data associated with the minor's account without undue delay.

12.1 The tk688 Platform may contain links to or integrations with third-party websites, services, or applications — for example, links to payment provider portals or game studio resources. This Privacy Policy applies solely to the tk688 Platform and does not extend to any third-party sites or services.

12.2 tk688 is not responsible for the privacy practices or content of any third-party site or service you may access via a link from the Platform. We strongly encourage you to review the privacy policy of any third-party site before providing personal data to that site.

13.1 tk688 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this Policy will always be available on this page, with the "Last Updated" date revised accordingly.

13.2 Where changes to this Policy are material — meaning they significantly affect how we collect or use your personal data — tk688 will notify registered users via a prominent notice on the Platform or by email to the address associated with your account, at least 7 days before the changes take effect.

13.3 Your continued use of the tk688 Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

14.1 If you have any questions, concerns, or requests in relation to this Privacy Policy or tk688's data practices, please contact us using the following details:

• Email: support@tk688bd.vip (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform (00:00–24:00 BST)
• WhatsApp: +880 17XX XXX XXX
• Support Hours: Bangladesh Standard Time (BST, UTC+6), around the clock

14.2 When submitting a data rights request, please use the subject line "Data Rights Request" so that your query is routed to the appropriate team member promptly. For responsible gaming-related data requests (e.g., self-exclusion records), please use the subject line "Responsible Gaming — Data Request".