tkbaz Privacy
Policy & Data Rights

This Privacy Policy applies to all personal data processed by tkbaz in connection with the operation of its online betting and casino platform at tkbaz.io. It covers data collected from players located in Bangladesh, including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of the country.

This Policy covers data collected through the following channels:

• The tkbaz.io website and all sub-pages thereof.
• Mobile-optimised versions of the tkbaz platform accessed via a web browser.
• Customer support communications submitted by email, live chat, or any other channel provided by tkbaz.
• Payment processing interactions conducted through supported Bangladeshi financial services including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank.
• Promotional communications sent to players who have opted in to receive marketing messages.

This Policy does not apply to third-party websites, game studio platforms, or payment provider portals that may be accessed via links from the tkbaz platform. Those third parties operate under their own independent privacy policies, and tkbaz is not responsible for their data practices.

tkbaz collects personal data across several categories. The specific data points collected depend on the nature of your interaction with the platform.

tkbaz does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health or medical data, biometric data used for identification purposes, or data relating to criminal convictions, unless specifically required by law enforcement or regulatory authorities.

tkbaz collects personal data through the following mechanisms:

• Direct Submission: Data you actively provide when registering an account, updating your profile, submitting KYC documents, making deposits or withdrawal requests, or contacting customer support.
• Automated Technical Collection: Data collected passively as you use the platform, including IP address, device identifiers, browser fingerprint, session timestamps, and page interaction events. This data is collected through server logs and first-party analytics tools.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and local storage objects that help us maintain your login session, remember your preferences, and understand how players navigate the platform. See Section 9 for full details of our cookie practices.
• Payment Provider Data: Confirmation data received from payment providers (bKash, Nagad, Rocket, Upay, bank partners) following successful transaction processing. This is limited to transaction reference numbers, amounts, timestamps, and the account identifier used — we do not receive or store your full payment credentials.
• Third-Party Game Studios: Aggregate game session data provided by our licensed game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) for the purposes of resolving disputes and auditing game fairness. This data does not include additional personal identifiers beyond your account ID.

tkbaz processes your personal data for the following clearly defined purposes:

• Account Operation: Creating and managing your player account, maintaining accurate balance records, processing deposits and withdrawals, and delivering the services you have registered for.
• Identity Verification (KYC): Confirming your identity, verifying that you are 21 years of age or older, and ensuring that payment methods are registered in your own name, as required for responsible and compliant platform operation.
• Fraud Prevention & Platform Security: Detecting and investigating suspicious activity, preventing multi-accounting, identifying compromised accounts, and protecting the integrity of the platform and all players on it.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns for indicators of money laundering or financial crime, maintaining records as required by applicable AML obligations, and cooperating with relevant authorities where legally required.
• Customer Support: Responding to your enquiries, resolving complaints, processing responsible gaming requests (deposit limits, self-exclusion, cooling-off periods), and providing account-related assistance.
• Responsible Gaming: Identifying players who may be showing signs of problem gambling behaviour and offering appropriate intervention tools or support referrals in line with our responsible gaming commitments.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve navigation, optimise game performance, and enhance the overall player experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign messages to players who have opted in to receive such communications. You may opt out at any time by contacting support or using the unsubscribe mechanism in any marketing email.
• Legal Obligations: Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and defending or pursuing legal claims where necessary.

tkbaz relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to perform our contract with you — specifically to operate your account, process transactions, and deliver the betting and gaming services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification requirements, AML transaction monitoring obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where tkbaz's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

tkbaz shares your personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: Your financial transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely to complete deposit and withdrawal instructions. Each provider is subject to their own regulatory obligations and data protection responsibilities.
• Game Studio Partners: Your account identifier and game session data are shared with licensed third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) for the purpose of delivering game content, resolving disputes, and auditing RNG fairness. These studios are contractually prohibited from using your data for any other purpose.
• KYC Verification Services: Where automated identity verification tools are used to cross-check your submitted documents against reference databases, your identity data is processed by the verification service provider under a strict data processing agreement with tkbaz.
• Legal and Regulatory Authorities: tkbaz will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law or valid legal process. We will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and accountants may access limited personal data as strictly necessary to provide their professional services to tkbaz, subject to professional confidentiality obligations.

All third parties who receive personal data from tkbaz are required to maintain the confidentiality and security of that data and are prohibited from using it for any purpose beyond the specific function for which it was shared.

tkbaz retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and purged from backup storage in accordance with our data destruction procedures. Where full deletion is not technically feasible within the retention window, data is anonymised so that it can no longer be linked to any identifiable individual.

tkbaz applies a layered approach to data security, combining technical controls, organisational policies, and regular independent reviews to protect your personal information against unauthorised access, loss, destruction, or disclosure.

Our technical security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• Encryption of sensitive data fields (including payment details and identity document references) within our databases at rest.
• Role-based access controls ensuring that staff members can access only the specific data categories required for their job function — no employee has unrestricted access to the full player dataset.
• Multi-factor authentication required for all administrative access to internal systems.
• Automated intrusion detection systems that monitor for unusual access patterns and trigger alerts for immediate investigation.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.

Our organisational measures include data protection training for all staff who handle personal data, a documented incident response procedure, and a clear policy for reporting and managing data breaches. In the event of a security incident that poses a risk to your personal data, tkbaz will notify affected players without undue delay, providing details of what occurred, what data was involved, and what steps we have taken to address the breach.

tkbaz uses cookies and similar technologies to operate core platform functionality and to understand how players interact with the site. The following cookie categories are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your account preferences across pages, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform features.
• Functional Cookies: These cookies remember your display preferences, language settings, and last-used payment method to provide a more personalised experience on return visits. They are not used for tracking or advertising.
• Analytics Cookies: First-party analytics cookies collect anonymised data about how players navigate the platform — such as which pages receive the most visits, where players drop off in a flow, and which game categories attract the most engagement. This data is used exclusively to improve the platform and is never shared with advertising networks.

tkbaz does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any other technology designed to build advertising profiles linked to your browsing behaviour outside of the tkbaz platform.

Most web browsers allow you to manage cookie preferences through the browser's settings menu. Disabling strictly necessary cookies will impair your ability to use the platform; disabling functional or analytics cookies will not prevent you from betting or playing games but may reduce the personalisation of your experience.

As a tkbaz player, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting our support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data tkbaz holds about you, along with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. Updates to core account data (name, date of birth) may require documentary evidence.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, we are required to retain certain financial records for regulatory compliance periods even after account closure.
• Right to Restriction: In certain circumstances (such as where you contest the accuracy of data, or where processing is unlawful but you prefer restriction over deletion), you may request that we restrict processing of your data while a dispute is resolved.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for your own use or for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing conducted on the basis of legitimate interests (including responsible gaming monitoring and aggregate analytics) at any time. You also have an absolute right to opt out of direct marketing communications at any time without providing a reason.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal date.

tkbaz will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for the delay. There is no charge for submitting a data rights request. We may ask you to verify your identity before processing a request to ensure that we do not disclose personal data to an unauthorised party.

tkbaz implements age verification controls at the point of registration and as part of the KYC process to prevent minors from accessing the platform. All new accounts are required to submit proof of age before deposit and withdrawal functionality is activated. Acceptable proof-of-age documents include a valid National Identity Card (NID), passport, or birth certificate accompanied by a government-issued photo ID.

If tkbaz becomes aware that a registered account belongs to an individual under the age of 21, the account will be suspended immediately, all pending transactions will be cancelled, and the personal data associated with that account will be deleted from our systems as soon as legally permissible. Any net deposits made by the underage player will be returned to the originating payment method.

If you are a parent or guardian and believe that your child has registered an account with tkbaz, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action as a matter of priority.

In order to deliver game content and payment processing services to players in Bangladesh, it may be necessary for some of your personal data to be processed by our technology and service partners whose servers are located outside of Bangladesh. This occurs specifically in the context of:

• Game studio platforms operated by internationally-based providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) whose servers may be located in Malta, Gibraltar, Isle of Man, or other regulated jurisdictions.
• Cloud infrastructure and content delivery network services that store cached data across geographically distributed server nodes to reduce latency for players.
• Third-party KYC verification services that operate reference databases in secure, internationally-recognised data centre facilities.

In all cases where personal data is transferred outside of Bangladesh, tkbaz ensures that appropriate safeguards are in place. These safeguards include contractual data processing agreements with all receiving parties that impose equivalent data protection standards, restrictions on onward transfer, and requirements for prompt breach notification. tkbaz selects technology and service partners that maintain recognised security certifications and that operate within established regulatory frameworks for data protection.

Your personal data will never be transferred to a country or organisation that cannot demonstrate an adequate level of protection for personal information. If you have specific concerns about international data transfers relating to your account, please contact our support team for further information.

tkbaz reviews this Privacy Policy on a regular basis to ensure it remains accurate, complete, and reflective of our current data practices. We reserve the right to update or amend this Policy at any time. When material changes are made — that is, changes that affect the types of data we collect, the purposes for which we use it, or the rights available to you — we will notify registered players by email to the address on file, and by displaying a prominent notice on the tkbaz platform for a minimum of 30 days following publication of the revised Policy.

Minor changes (such as corrections to typographical errors, clarifications of existing practices, or updates to contact information) may be made without individual notification. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision, whether material or minor.

Continued use of the tkbaz platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting our support team. The most current version of this Privacy Policy is always accessible at tkbaz.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way in which tkbaz has handled your personal information, please contact our Data Support team using the details below. All correspondence must be submitted in English.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Support Hours: 24 hours a day, 7 days a week, including public holidays
• Response Time: Within 30 days for data rights requests; within 5 business days for general privacy enquiries
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

If you submit a complaint and are not satisfied with our response, or if we fail to respond within the stated timeframe, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. tkbaz is committed to resolving all privacy-related complaints fairly and transparently, and we treat every data rights request with the same level of care and diligence regardless of its complexity.