Privacy Policy — How tk0k Collects, Uses, and Safeguards Your Data
Your privacy matters to us. This Privacy Policy explains in plain, formal English exactly what personal information tk0k collects, why we collect it, how it is used, and the rights you hold over your own data. We are committed to keeping every player's information secure.
Six Core Privacy Commitments
tk0k handles your personal data with the same seriousness it applies to platform security. These six principles underpin every data decision we make.
Data Minimisation
We collect only the personal information that is strictly necessary for account registration, identity verification, payment processing, and responsible gaming compliance. Nothing more.
Encryption by Default
All data transmitted between your device and tk0k's servers is protected with 256-bit SSL/TLS encryption. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
No Data Sales
tk0k will never sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to deliver and improve the tk0k service.
Consent-Based Marketing
Promotional communications are only sent to users who have explicitly opted in. You may withdraw your marketing consent at any time through your account settings or by contacting support.
Your Rights, Respected
You have the right to access, correct, port, or request deletion of your personal data at any time. tk0k will respond to all verified data rights requests within 30 calendar days of receipt.
Regular Security Audits
The tk0k platform undergoes regular independent security assessments. Any vulnerabilities identified are remediated on a priority basis to ensure your data remains protected at all times.
Table of Contents
- 1. Introduction
- 2. Information We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing & Disclosure
- 6. Cookies & Tracking
- 7. Data Retention
- 8. Data Security
- 9. Your Rights
- 10. Children's Privacy
- 11. Third-Party Services
- 12. International Transfers
- 13. Policy Amendments
- 14. Contact & Complaints
This Privacy Policy ("Policy") applies to all personal data processed by tk0k in connection with your use of the tk0k platform at tk0k.io, including all subpages, services, games, and communication channels operated by tk0k. By registering an account or using any tk0k service, you acknowledge that you have read and understood this Policy. This Policy forms part of our Terms & Conditions and should be read alongside them.
1 Introduction
tk0k ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who uses our services. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by tk0k. Please read this Policy carefully to understand our practices regarding your personal data and how we will treat it.
tk0k operates as an online betting and casino platform serving players primarily in Bangladesh. The platform offers cricket betting, live casino games, slot games, and crash game titles. In order to provide these services safely, legally, and responsibly, we are required to collect and process certain categories of personal information relating to our users.
This Policy uses plain, accessible English to describe our data practices in a transparent manner. Where technical or legal terminology is unavoidable, we have included brief explanations. If any aspect of this Policy is unclear to you, you are encouraged to contact us at [email protected] before submitting personal information to the platform.
2 Information We Collect
tk0k collects personal data through several means: directly from you when you register an account or interact with the platform, automatically through technical systems as you use our services, and in limited circumstances from third-party verification and payment partners. The categories of personal data we collect are described below.
We collect only what is necessary. The following table summarises the main categories of personal information that tk0k may collect and process.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, gender, government-issued ID number | Registration form; KYC verification submission |
| Contact Data | Email address, mobile phone number, residential address including city (e.g., Dhaka, Chittagong, Sylhet) | Registration form; profile settings |
| Financial Data | bKash/Nagad/Rocket mobile number, bank account details, transaction history, deposit and withdrawal records | Payment processing; transaction logs |
| Technical Data | IP address, device identifier, browser type and version, operating system, screen resolution, time zone (BST UTC+6) | Automatic collection via server logs and cookies |
| Usage Data | Pages visited, games played, bet history, session duration, click paths, search queries on-platform | Automatic collection via platform analytics |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | Customer support interactions |
| Verification Documents | Copies of National ID (NID), passport, or driving licence; proof of address documents | KYC/AML verification process |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than where required by specific identity verification providers), health data, or data concerning sexual orientation, except where strictly required by applicable law or regulatory obligation.
3 How We Use Your Data
tk0k uses the personal data we collect for specific, explicit, and legitimate purposes. We will not use your data for purposes that are incompatible with those for which it was originally collected without first obtaining your consent or as otherwise permitted by law. The primary purposes for which we process your personal data are as follows:
- Account Management: To create, maintain, and administer your tk0k account, including verifying your identity at registration and at subsequent points as required by our responsible gaming and anti-money-laundering obligations.
- Service Delivery: To provide you with access to all games and betting services available on the tk0k platform, to process your bets and game results, and to credit winnings to your account balance.
- Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and other supported payment methods. Financial data is shared with payment processors solely for the purpose of executing your requested transactions.
- Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our anti-money-laundering (AML) and know-your-customer (KYC) obligations.
- Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to apply self-exclusion periods, deposit limits, and loss limits as requested, and to enforce cooling-off periods in accordance with our Responsible Gaming policy.
- Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
- Customer Support: To respond to your enquiries, process complaints, and provide technical assistance through live chat and email support channels.
- Marketing Communications (with consent): To send you promotional offers, bonus notifications, and news about new games or features at tk0k, where you have provided explicit consent to receive such communications. You may opt out at any time.
- Platform Improvement: To analyse usage patterns, identify technical issues, improve game recommendations, and enhance the overall user experience on the tk0k platform.
- Legal and Regulatory Compliance: To fulfil our obligations under applicable laws and regulations, including responding to lawful requests from law enforcement agencies and regulatory bodies.
4 Legal Basis for Processing
Every instance of personal data processing at tk0k is supported by one or more of the following legal bases. We rely on the most appropriate basis for each specific processing activity and document our legal bases internally for accountability purposes.
- Contractual Necessity: Processing that is necessary to perform the contract between you and tk0k — for example, creating your account, processing deposits, settling bets, and facilitating withdrawals. Without this processing, the services you have requested cannot be delivered.
- Legal Obligation: Processing that is required for tk0k to comply with applicable legal and regulatory requirements, including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
- Legitimate Interests: Processing for purposes that serve tk0k's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, multi-accounting detection, and platform analytics for service improvement.
- Consent: Processing for marketing communications, where we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure that our interests do not override your privacy rights. The outcome of these assessments is documented and available upon written request submitted to [email protected].
5 Data Sharing & Disclosure
tk0k does not sell, rent, or trade your personal data to third parties for commercial gain under any circumstances. We share personal data only where it is necessary, proportionate, and lawful to do so. The categories of third parties with whom data may be shared are set out below.
- Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive transaction-specific financial data for the purpose of processing your deposit and withdrawal requests. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations.
- Identity Verification Providers: Third-party KYC service providers may receive copies of your identity documents and personal details for the purpose of verifying your age and identity. These providers are contractually bound to use your data solely for verification purposes and to maintain appropriate security standards.
- Game Providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive limited technical data (such as your player ID and session token) required to deliver game functionality. These providers do not receive your full personal profile.
- IT Infrastructure and Security Providers: Cloud hosting, content delivery, and cybersecurity service providers who support the operation of the tk0k platform. All such providers are subject to strict data processing agreements and are prohibited from using your data for their own purposes.
- Regulatory and Law Enforcement Authorities: tk0k will disclose personal data to competent authorities where required to do so by law, court order, or regulatory instruction. We will notify you of such disclosure where permitted to do so by law.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of tk0k's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to the terms of this Privacy Policy that results from it.
All third parties who process personal data on behalf of tk0k are required to enter into a formal Data Processing Agreement (DPA). These agreements mandate that third parties implement appropriate technical and organisational security measures and process your data only on documented instructions from tk0k.
6 Cookies & Tracking Technologies
tk0k uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse how users interact with our services. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot be used to access other files on your device.
tk0k uses the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the operation of the tk0k platform. They enable core functions such as user authentication, session management, and security token validation. These cookies cannot be disabled without rendering the platform non-functional.
- Functional Cookies: These cookies remember your preferences and settings, such as your selected language, display preferences, and responsible gaming limit settings. They improve your experience but are not essential to platform operation.
- Analytical Cookies: These cookies collect anonymised data about how visitors use the tk0k platform, including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve platform design and performance.
- Marketing Cookies: Where you have provided consent, these cookies track your interactions with tk0k promotional content to help us deliver more relevant offers and communications. Marketing cookies are only activated following explicit opt-in.
You may control cookie settings through your browser's privacy settings. Please note that disabling certain cookies may impair the functionality of the tk0k platform. For detailed information on managing cookies in your specific browser, refer to your browser provider's official support documentation.
7 Data Retention
tk0k retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML/KYC regulatory obligation |
| Financial & Transaction Data | 7 years from transaction date | Financial record-keeping legal obligation |
| Betting & Gaming History | 5 years from account closure | Responsible gaming monitoring; dispute resolution |
| Customer Support Records | 3 years from last interaction | Legitimate interests; dispute resolution |
| Technical & Log Data | 12 months from collection | Security monitoring; fraud prevention |
| Marketing Consent Records | Duration of consent + 3 years | Proof of consent; legal accountability |
| Self-Exclusion Records | Indefinite (permanent record) | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with tk0k's internal data disposal procedures. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.
8 Data Security
tk0k implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes but is not limited to the following measures:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, ensuring that your personal and financial information cannot be intercepted in transit.
- One-way cryptographic hashing of all user passwords using industry-standard algorithms. tk0k staff cannot view your password under any circumstances.
- Role-based access controls (RBAC) ensuring that tk0k employees can only access personal data that is strictly necessary for the performance of their specific job function.
- Multi-factor authentication (MFA) for all staff accounts with access to production systems containing personal data.
- Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
- Intrusion detection systems (IDS) and real-time monitoring of platform activity to identify and respond to security incidents promptly.
- Encrypted storage of personal data at rest using AES-256 encryption on all primary and backup data stores.
- Strict third-party vendor security assessments before any new data processor is onboarded to the tk0k supply chain.
Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, tk0k will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.
You also have a responsibility to maintain the security of your own account. Do not share your tk0k password with any other person and ensure you use a strong, unique password. If you suspect your account has been compromised, contact our support team immediately at [email protected].
9 Your Rights Over Your Data
As an individual whose personal data is processed by tk0k, you hold the following rights with respect to that data. tk0k is committed to honouring these rights promptly and without imposing undue barriers.
- Right of Access: You have the right to request a copy of all personal data that tk0k holds about you. We will provide this information in a commonly used electronic format within 30 calendar days of receiving your verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (e.g., contact details) can be made directly through your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to our legal data retention obligations, which may require us to retain certain data for defined periods.
- Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or where you have objected to processing based on legitimate interests.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where the processing is based on consent or contractual necessity.
- Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, we will cease processing your data for that purpose immediately. You may also object to processing based on legitimate interests, subject to our assessment of whether our interests override yours.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
To exercise any of the above rights, please submit a written request to [email protected]. We may request verification of your identity before processing your request to ensure the security of your data. All requests will be acknowledged within 5 business days and substantively responded to within 30 calendar days.
10 Children's Privacy
The tk0k platform is an adult gambling service. It is strictly prohibited for individuals under the age of 21 to register or use any service provided by tk0k. We do not knowingly collect, process, or retain personal data belonging to individuals under 21 years of age.
If tk0k becomes aware, through the KYC verification process or any other means, that a registered user is under the age of 21, the account will be immediately suspended, all gameplay and transactions will be reversed where technically possible, and any funds held in the account will be managed in accordance with applicable law.
If you are a parent or guardian and have reason to believe that your child has registered an account or provided personal data to tk0k without your consent, please contact us immediately at [email protected]. We will investigate all such reports as a priority matter and take appropriate remedial action without delay.
11 Third-Party Services
The tk0k platform integrates services from third-party providers to deliver its full range of features. These include game software providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and platform infrastructure services.
While tk0k takes all reasonable steps to ensure that third-party providers operate in accordance with appropriate data protection standards, these providers operate under their own privacy policies in respect of their own data processing activities. tk0k is not responsible for the privacy practices of third-party websites or services that are independent of the tk0k platform.
The tk0k platform does not contain links to external third-party websites. All links within the platform navigate to internal pages only. If you access third-party payment apps (such as the bKash or Nagad mobile application) as part of a deposit or withdrawal transaction, you do so under the terms and privacy policy of that third-party application.
12 International Data Transfers
The primary user base of tk0k is located in Bangladesh, and the platform is designed to serve players in that market. However, some of the third-party service providers we work with — including cloud infrastructure providers and game software suppliers — may process data in jurisdictions outside Bangladesh.
Where personal data is transferred to a third country or international organisation, tk0k ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable.
You may request further information about the specific safeguards applicable to any international data transfer involving your personal data by contacting us at [email protected].
13 Policy Amendments
tk0k reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes to our data processing practices, new services or features introduced on the platform, or recommendations from data protection authorities.
When material changes are made to this Privacy Policy, we will notify registered users via email to the address associated with their tk0k account and will display a prominent notice on the platform for a minimum of 14 calendar days following the update. The date of the most recent revision is displayed at the top of this page.
Your continued use of the tk0k platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the terms of any amended Privacy Policy, you should cease using the platform and contact us to discuss the closure of your account.
We recommend that you review this Privacy Policy periodically to stay informed about how tk0k protects your personal data. Archived versions of previous Privacy Policies are available upon written request submitted to [email protected].
14 Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which tk0k processes your personal data, you are encouraged to contact our support team in the first instance. We are committed to resolving all privacy-related concerns promptly and fairly.
You may reach us by email at [email protected]. Please include "Privacy Policy Query" or "Data Rights Request" in the subject line of your email to ensure your message is directed to the appropriate team. All queries will be acknowledged within 5 business days.
Data Controller: tk0k
Platform: tk0k.io
Privacy Enquiries: [email protected]
Response Time: Within 5 business days for acknowledgement; within 30 calendar days for substantive response.
Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or regulatory body in your jurisdiction. tk0k will cooperate fully with any such authority in the investigation of complaints relating to our data processing practices.
Your Data Is Safe — Now Enjoy the Games
tk0k is Bangladesh's most trusted betting platform. With your privacy fully protected, explore cricket betting, live casino tables, slot games, and more — all with instant bKash, Nagad, and Rocket payments.